{"report_id":"beceafad-c30f-41e1-8307-e1fa85c63f59","version":6,"status":"done","tags":[],"date":"2026-03-12T16:45:50Z","url":{"schema":"https","addr":"claim-paradex.trade/","fqdn":"claim-paradex.trade","domain":"claim-paradex.trade","tld":"trade"},"ip":{"addr":"172.67.171.72","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"claim-paradex.trade/","fqdn":"claim-paradex.trade","domain":"claim-paradex.trade","tld":"trade"},"title":"Portfolio | Paradex","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T22:46:45.121255Z","times_seen":17925805,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"claim-paradex.trade/","fqdn":"claim-paradex.trade","domain":"claim-paradex.trade","tld":"trade"},"ip":{"addr":"172.67.171.72","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-16T16:45:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"claim-paradex.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"claim-paradex.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"claim-paradex.trade","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"privy.paradex.trade","ip":{"addr":"104.18.24.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-12-25","domain_rank":0,"first_seen":"2025-11-24T08:00:07.051723Z","last_seen":"2026-01-14T15:03:19.339221Z","alert_count":0,"request_count":1,"received_data":1885,"sent_data":515,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"claim-paradex.trade","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":18,"request_count":6,"received_data":5758307,"sent_data":3106,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7598e4ce80020a6e405891bf32a550d","sha1":"e4569e745537c17e4f847da0a88e90aad95243af","sha256":"6b59e3f544fa04cc564de4e1078c121f3c949dcf8694fd7f79a3b5ed23b9b4eb","sha512":"b6749b75a5c7e0889435caf9dcac70fec0e100fcd03ea65c78de7caa850febe97be032d455bc425606933235101f4fdd6a91e0fca9b9d192726288e51d52ff09","ssdeep":"","tlshash":"95d023e55975c83061dc024621b7d79c65703551b711d14483dccc3f7e11dd304b196c","size":217,"data":"","first_seen":"2026-03-12T16:45:58.767272Z","last_seen":"2026-03-12T16:45:58.767272Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-paradex.trade/","fqdn":"claim-paradex.trade","domain":"claim-paradex.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5409ca3e511f7208e78d7220498eff54","sha1":"12481bb56a6328fced7ddd1018f9bc15b619f43d","sha256":"6635fa720e9bd2376c1d28272e0d25bbfd007182388532b2b003acac52cae78f","sha512":"1d4f307a926d015014321bbc97ed22966e36f4ef054693db643846a249549ea54dbd05f3b5e145a3cb6479504cd359e271e3c7c6b3f51e4942ace7e375ce4b51","ssdeep":"","tlshash":"ee11c0b57b2a5534c5c9818b317eeba93d3260617a029084c36ccc399d18e8714efdbe","size":902,"data":"","first_seen":"2026-03-12T16:45:58.768247Z","last_seen":"2026-03-12T16:45:58.768247Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-paradex.trade/","fqdn":"claim-paradex.trade","domain":"claim-paradex.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"59a13eef9e5e0ec7844e58e8b47d54a0","sha1":"0fb2b2059a878b87f8524284d448dd46a4351953","sha256":"c890c150b008d069bfddb86ee2c2e3fe979515939053b4c53fd6853b68e4fe35","sha512":"7fcdb614d30b1141e9a1e134a98e2888007f786f866c24e6383106d3e003f094e72901aa295e7d3450fccf5a249b25b436401a5b9439205da6b0eec8d72cfc80","ssdeep":"","tlshash":"33f0beaf336126ca23ae6ad20796c01d1e72e4ab3002163c575a36ca0cb6f52521b07e","size":494,"data":"","first_seen":"2025-08-01T04:17:54.874483Z","last_seen":"2026-08-16T20:39:49.933006Z","times_seen":3253,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-paradex.trade/l7fekhw2.php","fqdn":"claim-paradex.trade","domain":"claim-paradex.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"feafedd12f7a4b2630acaed29c7712d2","sha1":"a6ec52d71e9c6b5b981e46758f15e22bd07af0aa","sha256":"5db9a08038b0afbcdffbfd4c630a6309b794f05e7b9b5645621da0810591de28","sha512":"21521be3677b1dfa15e4874e05266a8e71664f58c0931f3d074eea6b0c4ca2e87fa21e83e4f3214f862ab5f3c5f9f74a1f081534f33040717ab23c04c01128fd","ssdeep":"3072:vI2Hr7i/uJsut2+d0nTMP7wIgeHI6cR0L6xGR/dUI3o9T29LWt0e4dJ2qLXV8rN2:pL+MfYOa4p","tlshash":"6a543195db9380dccd59128fc0b3b845d8045d62ce6c78a7de1edd826a1af6680c72bf","size":283062,"data":"","first_seen":"2026-03-12T16:45:58.765443Z","last_seen":"2026-03-12T16:45:58.765443Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-paradex.trade/","fqdn":"claim-paradex.trade","domain":"claim-paradex.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d74b8b18d2f65b21487b2b3dedc7d623","sha1":"bada30dd2630f2399eb921a8faa8505bdf96ddb4","sha256":"e02856d24424b18a9a3323fed284e40ef1454befeddbde58ea69843101fe1f3b","sha512":"0935ef82bed9977845b08e0de84ecd9f0f42f096e1c1e29eaa362e970e667012eec7eea7059d6ba8285c92a8461434619d0238452da5ebe736aa90fb75d9bce6","ssdeep":"49152:y7OwPEZJsTtQwW2QUSvhjG+EyY4bfO3xrQanJfCpszVt3w:5","tlshash":"10f523022c565ab68f88536170fb6d0765940e13589ce0cee7a5f9c1387dfa381eb92f","size":3422317,"data":"","first_seen":"2026-03-12T16:45:58.770207Z","last_seen":"2026-03-12T16:45:58.770207Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-paradex.trade/","fqdn":"claim-paradex.trade","domain":"claim-paradex.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3433c9d3e9b7e8e5b34ed72e309db572","sha1":"d53d7df082088749c1df6b08330ee9b9e4076932","sha256":"1d96fa9904e3743570bccd5be90e83fd91975299f374093cc6f723673d582dd1","sha512":"ffd0e047331871f21738643968b7eb7fa045ee0e45346a9ea986c4b8a3e745dd310542c6b2734f6d244408bba6548ec66f5cd7662c69485b5e59e3b9432cdff2","ssdeep":"","tlshash":"06f04245bd825a24d35670ddc41f978cc53690dd91491c4cbb64ece1de94c2cdfc6534","size":585,"data":"","first_seen":"2025-08-01T04:16:24.219641Z","last_seen":"2026-08-16T20:39:49.943648Z","times_seen":3509,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-paradex.trade/","fqdn":"claim-paradex.trade","domain":"claim-paradex.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f278e1582a6b32d6a9a05328bba73b0f","sha1":"02780b645a044990e49787663d3dba06626b1e3d","sha256":"07317dc90130ec69ed8e07a8362168074f9067473354101f361449cff37110aa","sha512":"08463b63ba1654bf203117d8f0c0a2ce4b5d92914ffba7c8ac3d942ff1a812c86cc61d9e840e5f3422c2b22d1b71b1a06b9a6d40d4e4259b32fd8cd40cc8357f","ssdeep":"","tlshash":"55319948a43216904242e8f1c676abeeabe774080574446d349cbec7eff8447e521678","size":1529,"data":"","first_seen":"2025-08-01T04:16:24.221852Z","last_seen":"2026-08-16T20:39:49.945583Z","times_seen":3468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-paradex.trade/","fqdn":"claim-paradex.trade","domain":"claim-paradex.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8de04e3dc63af7585af0e827672eb149","sha1":"02ee5e4b4e73e430d629744c4b7a3e38c36ed06d","sha256":"123e2a4c9c65ad62ea2b0992b1f80073e18a341a810f9ba40d1c4cdc31f1e759","sha512":"a42fcbfd4fc45305b75c0093524abafcf73f7d10f3bbe8cf573f3ea87803f672ae7fd293a116e7c24aeb0ef9fb24b9ea32e48200a56243187d5b550407631184","ssdeep":"","tlshash":"a911cce0aa6c599781c2095034894b02b13cb020203d9fd0bf75f0ce7c7c7ec96d262a","size":1000,"data":"","first_seen":"2025-12-20T20:03:49.143914Z","last_seen":"2026-06-07T00:08:21.702938Z","times_seen":1701,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-paradex.trade/","fqdn":"claim-paradex.trade","domain":"claim-paradex.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"79c9573bdaad74c25984a9f8945b78b9","sha1":"e9237f7d4a560f7ac0cdd6df53fd3e947d6e5908","sha256":"09689783b02ba79604a4407586f9fd6d944a414218c2a5d346d8f87c01494e5c","sha512":"879eca84840e044182a698aa13c84981f607dca732ca2188b30cce7d1efa08523406cf0d94f95c5aa8141395fe36ad43901fc023f53dce2d7e3895b9e2eaf6d8","ssdeep":"384:McIHH6RRDOjhkd3GGhGnWKckTBmVC4+674dexiIwWPT9Jn0IA+cALubfg3aKhwMi:McsjhYGGhGn7csMVxm+TRA+cALubfig9","tlshash":"27137ae9291694d41f4912efd4f3a001e114aea7cdadb15ac52edcc0762ef2681cb27f","size":42265,"data":"","first_seen":"2026-03-12T16:31:20.20153Z","last_seen":"2026-03-12T16:47:52.880738Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-paradex.trade/","fqdn":"claim-paradex.trade","domain":"claim-paradex.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0e1ee9f442371606d9a13b41a0dbeaff","sha1":"a05c25c8ad9127fe7d45319ce13e8b4a485d2e01","sha256":"713285cbc0cb910dfd2e7a86c604d191a27789ae50964ab1c674507ff4a20c45","sha512":"1dbac9fa1e0b338e780a3600f1a3da140a6c83a961a1d0c6c80fe3dc5a9041c346c471d264a07ccc87457cdccc2a28b768d02283512ba9cee0fc2e2b7124e42d","ssdeep":"","tlshash":"0221fedeb2826488526794d742cd8dceb8e617a919008c20452ef299225c3e8fb6ad54","size":1177,"data":"","first_seen":"2025-08-01T04:16:24.218288Z","last_seen":"2026-08-16T20:39:49.932423Z","times_seen":3361,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-paradex.trade/","fqdn":"claim-paradex.trade","domain":"claim-paradex.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1e21743cd2ee2004cd56bfc5c29e3609","sha1":"bf516634ffbcfd3186b71dafc0ecdcc47894c439","sha256":"0e428980439e794b176e0ee3cd84e4878510b1d52c1efc1c00f4af9729a17029","sha512":"4264e5ce5b4f3acb24046582388132a5915398c9266c18c6349d75fb94bd74bac990dc6ebd12e1e118a3a24752a3e4badae2faabd69b9827d1f223a0750da4c2","ssdeep":"48:atoyTqSsM+c69M+c69M+c69M+c60778KK7NaaM//M+A:atlDNDNDNDl778KKw//M+A","tlshash":"25913f32165427da63ce8fd45a85751d01d2c89a383e60bdff3279eded3a683c031612","size":4506,"data":"","first_seen":"2025-08-01T04:16:24.215618Z","last_seen":"2026-08-16T20:39:49.939399Z","times_seen":3424,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-paradex.trade/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"claim-paradex.trade","domain":"claim-paradex.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f30ddf0348d41fb3b2b6542d8584d7f2","sha1":"78da0619d2d857c20d32bede7648e0ae04c36e61","sha256":"1dbdb31db963f529ca0f2627abe3e57ffec0e2a133aae33b02aa8112bc80fdc4","sha512":"e27ce1aa12acc573baf1d19cea0ca20ec2626ebb7946df9cf522377dbe537261bd4b747345da3c5098ce4b93b5748b3d60013ffc5d790cd4389aa404b804d0bf","ssdeep":"768:QAIHQ1HfSyPNJ5hRJlFYC5JPO0Z2OHod0h:QUVKyPvPO0Z2OId2","tlshash":"2cd2b68b35ca726ae3b66063715b76cfa37ebc69300ca901c510c7f8b57438858f7969","size":28642,"data":"","first_seen":"2026-03-12T16:45:58.7618Z","last_seen":"2026-03-12T17:20:10.811266Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-paradex.trade/","fqdn":"claim-paradex.trade","domain":"claim-paradex.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2380d391cf784bce2f77e0e16fa2268b","sha1":"2b88cb08e3d7f56772d46fe1a10d84774e8728d5","sha256":"e65fcff70fe965f3d1878fe515a7ebcd265dfe61b15461521450c882e8d081d7","sha512":"0f3264af3a045928be20d2ee1ef3af905571d07e3fc25eaeda22199baca89b8c9bff94d90d81124ff45b16c5e40df291c2f49d9464ba901d2d961f6fd1196f1f","ssdeep":"","tlshash":"e6411b1e00aa0aa31ba3054333ce846d0956c2cedcc73534d3b27f8134c67832a93bea","size":2254,"data":"","first_seen":"2025-08-01T04:17:54.882582Z","last_seen":"2026-08-16T20:39:49.946706Z","times_seen":3293,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-paradex.trade/1c5a27c8-266e-4829-8091-e175c312d760","fqdn":"claim-paradex.trade","domain":"claim-paradex.trade","tld":"trade"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c2e1c4937b7b154eb1a64f48ce6c3f8","sha1":"e2325f92735aa030dee3853154ce463f8bd7ece5","sha256":"88503c0e5a325dd88250cbc9a2a1350a1dc3fbc7d52a0a5c4d1ffa7bdab98f2b","sha512":"b6647a9b512ab1cd13c0ceaacc65c973fa29175a12504d15e8c52b55d9546b07747bb177670dc6c141a71313f57c91e8cdfbed3bd64c27541c9f29fd01f1b8bf","ssdeep":"49152:R7OwPEZJsTtawW2QUSvhjG+EyY4bfO3xrQanJfCpszVtLn:5","tlshash":"5df523422c46aab58f48536170fb6d0765940e1354acf0dee7a4f9c1386dfa280ebd6f","size":3424784,"data":"","first_seen":"2026-03-12T16:45:58.775843Z","last_seen":"2026-03-12T16:45:58.775843Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"privy.paradex.trade/apps/cm5h8vtey01lfsomb9ir5h102/embedded-wallets?caid=2d4c673b-bb1c-4312-9415-666a1d30f730","fqdn":"privy.paradex.trade","domain":"paradex.trade","tld":"trade"},"ip":{"addr":"104.18.24.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"moz-nullprincipal:{a2f45553-6621-44c2-a6c3-9b609a381424}?https://claim-paradex.trade","date":"2026-03-12T16:45:26.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privy.paradex.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 14:30:54 GMT","end":"Mon, 01 Jun 2026 14:30:53 GMT"},"fingerprint":{"sha1":"89:CE:98:93:43:E4:CB:8E:9C:62:B0:6C:AF:78:13:85:28:A3:E3:2B","sha256":"E8:7E:9F:AA:0D:DC:64:87:02:2F:3B:1A:F2:74:12:73:CD:42:3D:A2:7B:B5:19:0E:58:F9:F2:3D:94:59:BC:D3"}}},"request":{"raw":"GET /apps/cm5h8vtey01lfsomb9ir5h102/embedded-wallets?caid=2d4c673b-bb1c-4312-9415-666a1d30f730 HTTP/1.1\r\nHost: privy.paradex.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-paradex.trade/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 16:45:26 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-security-policy: default-src 'none'; base-uri 'none'; frame-ancestors 'self' https://app.paradex.trade https://paradex.trade https://privy.paradex.trade https://auth.privy.io; child-src 'none'; frame-src 'none'; connect-src 'self' https://auth.privy.io *.infura.io *.blastapi.io *.quiknode.pro *.rpc.privy.systems www.googleapis.com https://api.apple-cloudkit.com/database/1/; script-src 'self' 'unsafe-inline' https://auth.privy.io 'nonce-NGQ1ZjY1NTItNzFkYS00ODZiLTlmNDctMGE1NDYyMTVmOWMx'; style-src 'self' 'nonce-NGQ1ZjY1NTItNzFkYS00ODZiLTlmNDctMGE1NDYyMTVmOWMx'; font-src 'self'; img-src 'self'; manifest-src 'self'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub3ed0be16dcee00054d67fd118ef8a00d\u0026dd-evp-origin=content-security-policy\u0026ddsource=csp-report\u0026ddtags=env%3Aprod%2Cversion%3A0.0.3;\r\nreferrer-policy: strict-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-matched-path: /apps/[app_id]/embedded-wallets\r\nx-robots-tag: noindex, nofollow\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::slkm4-1773333926127-b5f0083033fe\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=hH.tTdg9swR3W8sOXrexYUevXaXwB8n2KG2g2cjiXJ4-1773333926-1.0.1.1-eUIvecisZe09priNLeXUjVGWoZXZj38cAsR0ZQJMxQDYhF.ucF3uP2mQR2oDUmruj6Qnk_Tx0qALx86HCJLXiEMRN4H3wcMNweZao_Z_oZc; path=/; expires=Thu, 12-Mar-26 17:15:26 GMT; domain=.privy.paradex.trade; HttpOnly; Secure; SameSite=None\n_cfuvid=zdYdtdGwKV94LHRiVcan5rBeAS2JF4OzeqWAj56fsrI-1773333926282-0.0.1.1-604800000; path=/; domain=.privy.paradex.trade; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9db444edf8962efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T22:46:45.121255Z","times_seen":17925805,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":51,"dns":36,"connect":1,"send":0,"wait":210,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-paradex.trade/cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js?","fqdn":"claim-paradex.trade","domain":"claim-paradex.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-paradex.trade/","date":"2026-03-12T16:45:26.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-paradex.trade","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 07:13:44 GMT","end":"Wed, 03 Jun 2026 07:13:43 GMT"},"fingerprint":{"sha1":"80:6D:39:9E:C1:6E:D0:51:84:87:01:15:51:A3:20:8A:B5:97:03:B6","sha256":"AF:2F:82:F0:FD:C4:1B:2C:B9:95:FA:AD:C7:84:A3:FD:32:8F:A1:0F:6C:EE:41:2F:13:17:7C:36:F0:9D:8E:F7"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js? HTTP/1.1\r\nHost: claim-paradex.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sid=e5fdad3c-b27e-49c4-a598-b833b306f35a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 16:45:26 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9db444edaba1fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28642,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (28642), with no line terminators","md5":"f30ddf0348d41fb3b2b6542d8584d7f2","sha1":"78da0619d2d857c20d32bede7648e0ae04c36e61","sha256":"1dbdb31db963f529ca0f2627abe3e57ffec0e2a133aae33b02aa8112bc80fdc4","sha512":"e27ce1aa12acc573baf1d19cea0ca20ec2626ebb7946df9cf522377dbe537261bd4b747345da3c5098ce4b93b5748b3d60013ffc5d790cd4389aa404b804d0bf","ssdeep":"768:QAIHQ1HfSyPNJ5hRJlFYC5JPO0Z2OHod0h:QUVKyPvPO0Z2OId2","tlshash":"2cd2b68b35ca726ae3b66063715b76cfa37ebc69300ca901c510c7f8b57438858f7969","first_seen":"2026-03-12T16:45:58.7618Z","last_seen":"2026-03-12T17:20:10.811266Z","times_seen":4,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"claim-paradex.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"claim-paradex.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"claim-paradex.trade","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-paradex.trade/l7fekhw2.php?m=2955556","fqdn":"claim-paradex.trade","domain":"claim-paradex.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-paradex.trade/","date":"2026-03-12T16:45:26.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-paradex.trade","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 07:13:44 GMT","end":"Wed, 03 Jun 2026 07:13:43 GMT"},"fingerprint":{"sha1":"80:6D:39:9E:C1:6E:D0:51:84:87:01:15:51:A3:20:8A:B5:97:03:B6","sha256":"AF:2F:82:F0:FD:C4:1B:2C:B9:95:FA:AD:C7:84:A3:FD:32:8F:A1:0F:6C:EE:41:2F:13:17:7C:36:F0:9D:8E:F7"}}},"request":{"raw":"GET /l7fekhw2.php?m=2955556 HTTP/1.1\r\nHost: claim-paradex.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-paradex.trade/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sid=e5fdad3c-b27e-49c4-a598-b833b306f35a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 16:45:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncache-control: public, max-age=300\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WiB2d4bgVEs5wlAj9EOXmkWUOroHY7iKW5HFh8QcoStGa6eClOg%2Bg2GWuTjN4Q%2B7yu981SXeYi7rZ%2FJnUf7nGIlDlS66dPRry38zeUGoG34LnBU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db444edbbb6fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3424784,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"19f68d1e4223bf30615453a87843bf13","sha1":"628027b0d6151607ff6ede55bebe1524a97d6a4d","sha256":"714eaf1bda049aa5e8f0bc974651976ac5a7c7a38dd03571e0ffea764d0f65dc","sha512":"3cc081adc2dddd7963a163564112e2256b6fabb817bf8d8b1b3c8af377efc0ec8bd8b08661f44133d0f5903335505d4a9cb312aae306dd4198507dad2fafe14a","ssdeep":"24576:RV8/8Yae0PgGswPpBroS7InwbjtsJshJuEbdokS:R7OwPEZJsTS","tlshash":"fb2523012d97ea698f4c5a76b0fb6d0369009f5384cc60dfda62e8c01678b7681ddb6f","first_seen":"2026-03-12T16:45:58.762946Z","last_seen":"2026-03-12T16:45:58.762946Z","times_seen":1,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":117,"receive":181,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"claim-paradex.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"claim-paradex.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"claim-paradex.trade","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-paradex.trade/cdn-cgi/challenge-platform/h/g/jsd/oneshot/ea2d291c0fdc/0.58633424944571:1773332795:4Y3200VcJfMzC3uCJ4Wj7ctYrJrh6-aBX5SghWMX8zU/9db444e429274651","fqdn":"claim-paradex.trade","domain":"claim-paradex.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claim-paradex.trade/","date":"2026-03-12T16:45:26.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-paradex.trade","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 07:13:44 GMT","end":"Wed, 03 Jun 2026 07:13:43 GMT"},"fingerprint":{"sha1":"80:6D:39:9E:C1:6E:D0:51:84:87:01:15:51:A3:20:8A:B5:97:03:B6","sha256":"AF:2F:82:F0:FD:C4:1B:2C:B9:95:FA:AD:C7:84:A3:FD:32:8F:A1:0F:6C:EE:41:2F:13:17:7C:36:F0:9D:8E:F7"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/ea2d291c0fdc/0.58633424944571:1773332795:4Y3200VcJfMzC3uCJ4Wj7ctYrJrh6-aBX5SghWMX8zU/9db444e429274651 HTTP/1.1\r\nHost: claim-paradex.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12152\r\nOrigin: https://claim-paradex.trade\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-paradex.trade/\r\nCookie: sid=e5fdad3c-b27e-49c4-a598-b833b306f35a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12152,"data":"BbDNJo8vP4h++eW9DikPWr+rflrarjNlQdNPerCNpWPmW9Qm2r3NBWNE9rXrxxrefxvrSkP1Xr4aH8Z$icD8pAiuDrzIIrr4wrB2bCzrXS57glBsS4C5rXFvuURyvmlrloXbM7lMlpejImJNre6Ss8oi8rpi7OIJ-DJgyNdPfZfz5s3eUDneiDnZr4oi7mAgQzrr6xis1-OZ5p1AE6zNrt2drANPGjxWrs9c4hGhtVaTlrbzxJdxyraNr+6drM+Xi7RnJ4Rkr3IRFu3zoyrrIxXSNdorrmKKdXor6DN8mVXDoiHqJDFNrG6CNaowwk6MaMaobjdrwukDxfyKrrelflUb6PZdwZd+ZdrQPZrOCU9drDxPdztoSjld8uajbYl$GiHJZuJ6CMMbbx3p6DH9b6eDo2db9VM8Z8ENNPPjd6nsErPj6wJPGGsz5dSGfAGPWq1fqTdqONJ5uRvd8UwwN8rG$SPZDlZ19sRWeTDb$GsAbnZPYwvUc6Ubw61RVlE29+t9vN8o9dI8wocxBjtmDrrFhadsq9noKueZwfvWoZG6$G1rekSnjS9t9xXkeR$AQw6jHS$1Ye1n6sE1Ps4csRrhx39d0TngE6h0thhphnnUnJU9+gx2dB6WxP-jA9$8lQ4cDO2Y+tRPR9jRemhWb6sCXUfpI-NHqpNOVWEKnRxSFMHgmbmOZIiP22zgM7deNPtYR$r7kqcp+jsrRc5AU-uw5z8rYVpIPUccP4hGE8Wz9UauNDBp2aRCJZZsECj$GMSH3$kw5P8wr8VioCeCi5UeZdN2obyCKkRzrM5Z4rFhvhknepBr8cpACCI+0Ug84j4vd-vdxjl0Zke6wkylZaoF5k8N-B4f2Hj4ddFMovCIPWp5mlDu2d$7u2XMoz5PrmwiIPl4rj5lDd5MGAviPb4r-ilIj$NCDsdP10jGjlfJWt4vDkhEMbCMldlgJG$i9zvTNC8wpZklwwICN8Wbr2wa5Gj43ZW66CFI8oyw8ikIW5ebhZC8fFFrtE9dXt6XSrKe2ivreTW2te$8RmiW2GeZAr9wZD6UBI7FWw1yWXZIvUrFTkDX2XlIb2En669b+zwu4f5X8wrlXDTYW18wXIMDy9j6hvTZvxyDfXNZAa8ZrCTZdIkPEjCWwCdCvMDw5UhW4Imiy0MbvCQMw34ISD-5sw1ebOSv6WIBPjD-jzMlS5VxkW$GW8DlIf21$8+bG5PhrIj-XQRUs8R56X8R7NrarP2GSlwzfvGkN2O500O8sMZU4DSQ8hx9d1Ju6UB3kwUPf55WV$74r9FC9rs5-F2H$P-umhrOWf5748PPXPI25wClxl+pGv1XGsue5eJwwXnqHP+Oebzf6IkgrPXgmKHumPlXdkeXjJg2k-uIrPM01j4W9At4MlYnDjXdhIFqhj4DehP5SSASrp$YeDMrHvDi58haN0vlxrkhP1rkAFgKn0bB7OEyWvi2QkDeyP+OCV$$EnQjCjWcEVMvcy2Xwc7xAojMxfNWoFt08sp6$X2rf9JonbYagu7hFbwwUgHCuy$H4BARJOTy$7khYUYKNI4GNrdNin6Wv8sNk8xNkrrKyhHOawUVPZi8mvp86kdSN9rK+h8rBkfrY8TPvbN8XpbSWtHFrEUWl+jm1ubNxktNrB0bPDjo2NyKsjfjddTX8fe98WlkRkxPB22R6xevkN5-Z+q+NVBXg+fjR4AZbDdXiG86Cke$fCi4Ui2lDID08riheohu6WdI343kpw+JbJNxw$oTG-pnJZxomDa5lIb9lTupem4IxqGkQPuQyJxrlmsPizrmr6r+rZJ5$fb85MPGiX8Z1UXil$ii7isecA61nBi8dy5sPWj9xiDrP1QBDIw75OC0j1KEPUiT03WzSporwoZD5x5NPpKFf27d+obPX2IfN3uIr8B5XzaX7dNoUpo0rzNdBPSyGozlNZUiMJSCRZd-dOzzruP29kDdy9$DcUc+QMrikFPthzKcXsvwsZuzEpNODovxlFpG3kSbmqw1FIKBquZVsdPDxa4ofN6iyNgClJ7ufxuI9re9ChshoNwywGwZZtJIwlvEUN1E-wPFvZmjsFhMp-m7GDQ8CrfsFNwxkCZ4A9BZ-d4R8Ca63BQN$wkz4sf+s1fWClV+lzc0lJ3wNCRiEcp6z9djACozs$idrIRT0ua1xwS1jI+lIbflHN0t95w7xQH3r68IRK7TiQcTfrnVm62oUUqAwqo2GrozjIu7FmCaulOdfPlM-hozUVPExv2-tt0m85YAcp3mWrkG3VxFIjSdCmHJbNG68Kxdjo+Z0qTXNplSdiOuphh-lZi9+hxMI+je4jXw-0i+Q0r3TWKC0Z90uhSSXrqzwUlMDjd2HfcQCk4661bdkc$rmBeRcfsvoomlDPUxqJiGu2oKROG$IvTwe+BqjNls7TuCcA7clQRixouWWDStRIkWNjy8wBRW85hgXWX$a1GfE$z2llsNZFhFI3Drd6qSWfqdsV54ZkjjglGAI+iUGkxa-VuTZlJ-eTqVJrNm3w46W7XuHZhGz41DNjowl130$rXEgiNPKhFJTDNKTb8pzPRkc5GrUG-dbkN0EyA+zrevM6Q4kR7Jbdldjmgo4ZR65IK2AzTBXcS2ekjxGrPIwBt1K2rBDTlphDbrtCB+VHu4EZD98d4SQINWwzTM-PkNnJRB1KqlwVh5cpP7Vks4zZkM428uS9tCDV8VI+qTSapZMN-bPXF$wn4ruPh5PVWPtuUDhiYzI0Tyl$aTXuzYdlrs7o18ovbqN-joIw4CGlrk+m3eprr$g9Pc+Qcko$+6obiCVBabJ8xuR4bp4WTwVawkoJTJ78rslItiBNUmjaiP1S9rK66N+lIe7FJiuE6-2bm7eKJg10$VpmIm2jdo$4jRHxMoztQ8$le-D-dgPr52SekwVzeM1SazqNASNUvCUBm51e2WdN0PEWtZPvdYUhhu300bud9$gBjps4vM56i$9H0Cf+gH6ag4snxDoMod5mfTe48C6ehTjN2Frlhud9d1Pbjn2v2sBq0fQ-ZpvZJI6YXkg+79123Gv3WH9EZAyv4C8JuwD4YTQ17q5Dbyo5$7dIBThTgxg3Kj-obPIW4Ttu514la-1wou-SQGkNytIyTd$ct++8v4RSFIm$jkVtzBbdNr$3CCRUncTaCxTnXCdbxYqEWolsxG502BDcoBv2DZeoFD4xJdywcSMGVI4hl23F7zlim1O+UwYdc8$Tn2lTCRks0x8RVi5x$xY4iEuJEdaZlvVnwolusraJ7NuBoufMXHbdwUewW4XWp8xGwVvs-ISnpDTtRIfwTg2jBOF8-dtNkldYOz$wqhWeFftgh99FgUPDz4MF$+FIaghqur1i68kDE1m9fj49Qifg7EjUja-QkI$TH649vorwkKiN1+58rky56kkCmk8Z8jeXsD$1g$D9PlTG7cVTocfCVo9GATFq5l0cOu9s+jn$fu8o5wZ8WoKsx1nGjcfu48W5OCWP3otzQuaP6kwq$kbUQ0hk6dVP9U1cDrCK9MDr5MlRP9AwdqIqEP6TJ5-h-ekckVDJIdfsQMrsrJ+5eUETe$iw2CoN1eeKJ97GEMu5Ik$1rsEM-rOq61-N4zrwN4Mq58veWrQqhuzcSuCexuxCWdZhCzl03svx3s0lDPt9oj7r5rKTQ$JUcdCA9hbMS9PNbJMu9ckRkpbXx$rBaUZJNp9swCek$URBfM0G18sK6qRDyKpdqcGVi1CrgU9zl15codPNtoKqqMJGbKBPKU5lewbeG$+sns25nRUqM0gCR5IA5cxAOG4uS9CPxq$1hR6w$R3k7pXchsd48A4BDIA9DM9J5rwkIuKlopKchU6p-q1JBGW$GP29bMkeeDTdGDRkDcar7I7pau7irjWCxlwGNkx02l6Xjs+I7NVh-jZUo1bGHA-80qeBY1cR313ob8ORgRKdYqTzSG01vd5G1P$V4U$UIo5PW8os29sUhcoAxh20mJMzEPwM2skIscZhGVaTW1AAtU0BfrIV84kshAJKbG+MnRR$K5usPs5ht1eV+s0e4jow8wdJMRs9hcSBydbw5rEV+U$dIhd8yJOk4MyX1q6xDr7DPoP1eThU$cS5XlWM9jU$-ThUcwbK6$ioXicd-u5PXDICJcA$QI0RIdV998rXbKrXx5QR6NjXj4DMDhpK-JQs5PIpllxl8AWuERlMWwbGQ5fVjp6KsBwr88j9Pk+Tjhz9blWM-jfdWw8AQ0V8R9DIg8JAlsNkVRbPVTW5ekxd5IQBowxlPrrB5lhTbCVes$kM8T4PeoljWAXr0RhBDjEIJRZhvR88g$i$JkIAWG-lZjRT-ieo3D2I1VhBepyCzpxINUElbjZjqImTQClpQpAGF5Dk8loNXq-eXs8rKcSo8$HJrhq5wjnxaJAA+D10$UiJl$MIvoKTuwbezTSzEhdu5h0kKp0Col2qnR9NgDz0Cp5DIly8s9oKn45zbTRBwqo4Tz6qURgUzJaTZRl0-Cy8ecCuljaJjDrndB5eeBrDChfk4rUDZd8MkPYUKd6PdJZJkVYBGIqTrDrm2jWMA8WofpYDOsOsZ+o5Ep3KXAJB8sFDV5FI5V$JBeiN4hpdxwX9+PWKBPRkbC4I64txmo1xADN2FsNmTiTAwcn930ScTJEj92Z8bl4McB0A2J$18Ve9Sx8Blic1-KMkEKlxEXwn1PFKlJEN9pcoFo$4iCrlxPZ8Q5v+rXc0WPOc9+8qI01BZj$pCJIGpU3kUo1ApqFNAK+6dBEiz4RA5Mz9lsXD6VEKz41dZB0AKp+TrRCe+1brvoqR6NCUEP-e0j4lFTvkiu3wOkPP9Xgi5Vv94+-98zokgzSkA9nCftvs+G7KYc7nTAsjZckjKUNzwF5Mgs5Xwu4MTX7I5Mp5s5KA44sA+U7nzCtJhzqeiM7lbrWUw8dJz0x5eke+gwxe0hz5kUoNeBodIrZ8dm8kAIhzc$Pr$93zt1KXjqGk8XBUkPs2IoVGiJnxyrIPoGG$krE4qCessh6PWMW6GofnUCP1fVoebt8Bfencu4ot0G9+0pYDIuaIrqGnSibm25d9olCJ+6F1Ms3$GF2toX0KEcSnuKTCJCiuEI0NlhEsPtOXXZ5Mu1eiMMVR4e5Zxw1r7co2swfTxXPoEJIAxeI8uwWZNuhKIGi2l6SI79fZDUC1-AgCPx8n75sP7$lhoo-UaG3RDepkU97ZHU0Zo43Z7XqJcnDAyjeugcMDjDm6FNx0UAuxW6DZxAPn0pBsKkXV9r4PAD2+eJMkrI9UZjll1M1j-ZIlZNT6yFBe4ROzBhi4FN$NBJrn+kIhGpZm6iC5WP1B0GpiTA+ceercrRDPlJJBVchBeI+r143R3Ga$-l1mbwW1HKpp1n4s3CUwSiZBEieqEGg$7UsDIMzGrRnA4ICmxsUZxiUJN6sRfRoeotZ8WTX8ckKIx5kmBBOAl0MK8I323n-eGthwgxxuYVRjxd3FfCI6W9i9PpDG0oupJRFqANjVzIhqom6l-$uk4N1cHnoh3rHrQJ5B8uChNXZlKCF5-N4jn1oBwVgsGD4i3DrXQoB6yrIB3DFGCIDZjJfV5l3B0UKAn6ts9RfqFVUCTth48CFtCo08gKymXmZfb$xMK2D6Kk5iwlZwPo7+xMz9TAyjs$F9nuyM1wsxOk$5X4nz6Ba1gTEIUpiK369B4PUd9WB1ZlwIf+fU$BZe5nQCI9jGc5CIsK5VYBzs5X8D$oEPEjyPwVu$JVFFUokw5xwM7Wuctkr65MiX5M+UcA-n9r5C-xfGXXrTi8oGKrRvp2reh+W9gU9OlhzxSKyC+po8X8NRXk7Dvf-jCPjGt6847d$xaB-pElMBr-UnunDdIzqm22hB2ZiZS6S60CJ6Il4e4rwV4+QchXl3NGZJI2e+yTOkgdOAzVawguqDFJ8Rl+5qz$M5ekCsCs4uIUcw8ZOGXJqIniIxef484MRtc4QTs9Wj5pZZI02hTnYJI1A9ZMX$ehvD$2C$u$4iNAyA4Bq29WJDIMbVcUAAaIsBS$JVa+nCwDb$RJ+jJoaJZDZlW48PqAkGwMjNMNPZsK7TvOhDH4J++UVebo-S+s7P8VYDlJSjpn7obl4pQnyGatouYTZ6Dno2+DUNPoG9o5wvjr0ilmPTQ$0iGqkv9vmSwemOe3MDU6lMh6+j7tNnSZi6j20K0xNFv+nwgmgni1CSeUEpUAZZCsKr8a6c4hNODPAZz9BBtiB4W66ZQ3F6NTQOZ+3dZSBF72AGzoKofSAAlAFUE948eR30J2ZUMRcaX0cSj6DUwZFnyq++tGE8equz1d0CleefG6W$G1ACFB6fqTQ5ETBdNJcXSnqUZI0x-M-8WXlW68b93DcsBiztoCI3fPPZtcv2gnhiI4J69aJ2S2BinBf8DUI5uIbsO0fIe-aGzwTWlZ5cFX2MxkXwaphI9+raUtFfbpFUmXOFJsIcM$ixO+BGm5le4f+rHZdBi2lMPlcV+RuXZeac7tus5haw2UE1WMuUboZvb1-rEmkk8eB+V+ChwSqO-lyuht2XJt2fuFI-WevegXFOmweloP7NC88Fgz7luthOUuv4ovvFnVR8mvk-kO3xk3n1lqSGEkzIxR+l0P+hynJcWOUuqZWSVvBzE-wkQZza0xjtNHJZF5M43ZxGj6lrz42URN8wzwwz75TBeqgnQm7tZe-CJvw4xMxq71UIBzmwnZu3mWr2JXlB7tpRauqWAWwqaA4MJcCwDMlCaN0l4abDSCBptJyIDqS0lO0uRYh5YDzBa8kkEPoRtDCPX4S3+-WAVfnfk7VoIFIw1vyi3ot+7vfWsnR2jzjuG3wO1uDXNQ4O4kz2tIxmURTdwUQFKvOZZF-RZG88MV98V+EOolSwHuC5slnXmUIKR+wU8-1-eF3rsf6l+efy2pDCc4-NpXORdteUMjH3NZisiUj-V+WQdFxIniQGTm1u1uFCq-e-2eKXw8VU4HP6GoKR1v8zQ3iGo1R2K0i1XeQN5WZFz2ylGwJnH6jAPmRkwnYp7+wb8SyRMzgzsSdByMq$ohyw45l69alFpuaB4hbftoCq7NTxB-PXVj6txuDD8OZZtnPrlSP17S4cllhTnSz3sis8n3nF5G35cuHveR-0dFI-+im7Ru-jpaUg60hDRI6wJFvVlPZ3C6xd2fU8Wyb7g5ig4YiHn-83CPtO-PWCFtw8l+ClvNRNxbFRqneYohmtwhR47V3Xr6+3VUMeJ+07iUpp7sCdoOqGRB5rwkJsb$NsT$jWjrT9PdCMgFKqWtahdPv76tU3XnG8ecgix9uDw8uBSqxcn$xM7jwh2K75V6WEJWREysREP96ZwAR7X0VC37Zr7IM0EK9WwSsowf8lpWGn-8ERMppvlAAdnIaiaiAG3OJcaJRUI55uIKfvofVAP-h3eCfW$NeGeCAwk68761ZDxBEIinaQggtQrjC+eeuv7YOT7EEzDFM0oH4pxr7D$ghuHBdI0DI8EzQbSWAZQ6i2zpbkuE5u176C+g03wrfilXItodunv1ZixpPezQyrJAIpZgTWayN1wCp2dGS0rbe64Db9lhEhFRPXdwwF8vARzNlbZ7r7BNW8EPI3pW-puU$Pz3ik9EvxorTIWMqf5SXmNovki3GbzNcD1WAeJjRc0CRPoIws382vPf6++owqtIn2pThsg8ANQr0l2ujThsZE4uGMmep5XEg8RZ-nzEIWjTrlkjTKJz5NV5kPg8CNOE4rivG+PuDQ8Xkwd8HlcZZkZ47N6qthefZUjx8vwIdz9eedECZsPNzv93xRlKkxluNvCh2j+ob8oeWtudz+rtNArZGG8lg6PMG5HD5rMwPoNWr5F95d5ofvDODloldRvdOdeDGJTjqUhwldwfDCXjoMPbXZ+4v9halKqTSddCd$3+94IeN9UDzrYPNXoD6xP65YwBxXANfe9SAZFd-Z0PlfjZhDR1rHTBNINsN5GW8QjZz+jwhurkrZk+ZGBxflnCHylb4ZumN1IkxG++kE7x48lPqu2ENW4ZvNsroZBEIfk9dB2kKGXxBPXkUZGvI75$Ps7Id$D09BfzUh+5NWvsJQuIjwxsdJllODb5T8OP$WpkBbz+lW5PrZ-xXv9iR1sojCVZkd$WDzeTCdKHPNdod-Gh5jBvVZy5-6xzsvNZoQ4fDKZOZdxkbKbPPDKEMRP1bpZGZCDyl-oDyNWbO5PwM0IDlb2z8sdZki5i3UIjN5QW5d7IP8dz5UCddhDtjj4Njlg8X9z+vtDlhC6+KXNhy81iIixkhWikbZtKXv84UDHkCbNnK9qU-dNKmWZr$WfU5qUTCIWeRfB5XjCeSCGs0sI9uAxkMvkosr0lDz9Ptj13sdkDYM+vpl85tsdPNEeiE4+MNKlR2ZcZXf4h8SCM5DW+4vEXEGavg96dk72de0P+QS8PkmsjDzrr2odUwkH43S8UqSKD12dV4zqeJZjojyZDpjhm8yNzNmruW1lu4M+e6j7rlDjdMUl6jthvwumdbuRJfMiPfymrDFmeD+aZtrkEwvMF5xeMroXoJWF3IIp4Pw2hs0tj9z04b8cK2U9DARCT5KDvC1Uebovj4PfNgo0UQD3vhWweCHCP5O+4nD0iT82U$s7DwWa+cPfbrvUa93ohwJVGyCDe5dZKrTxjjI8IrJrCEhDkv5ytddrlZPSkr5ZQuVNVoPve$rlEzhTR4l$bfZldf8t$r1bk7u4NkxuUdd3wMI2$rTDvZwkkDS7IDjk878zrqWcM92R4osvk52Nzpex1CNzU+94eioIlP+rZQY4Fl9ElKe3zfCcsdNpozN8RN88CiDrrbtxw4Cxi2i1nMm8qUBg0U89PDjN6wVZ2+Zc02JfwaDjSEmQzrFkaRFNlpbMxfWyO0ZlmTFDg4bZql1AlB18Q18A7VkjdJIx251cv0nNOzDSN8NmWgD$Zgr2didDNN7IQPSoAPz+j2C70NNPZhCB4rrr2pZXsMWlX8i-cEdcMketlcZil3ternDcl87ixmyx01MvNJ5sPvNHoeUJbiVP9bYi5sAd3v$5rZh38RSuHnXDf9Rj40h8XA8ko+jgrHTHaAjF+hIrcBrdRNAdC2lVqI8vGnNylBpVBaeP3N1-jNMcBZ10Rikbwg+v44zdb3rkxcvJFHREjw8KsgZmsmGeSK58CCvDGmI14hPtGVTYb7kPtpir92CCg13sIII-hPRcZ5Yv9pzMkhvUCCtWoSeHJcz471laR6snGREer5bdCce+OX9cENNYDXZo6GHIDsoKkd9DB+CXrv5eilXEb1lWkh75HiPS5dVvGZj$lnzMDGOP1-GeixDNESIWI4X2P2D$vQNdwzh5bM483rwvl-G9abikJ980U4MP-IPhbPFC5rGZk4I4ruez8sNgZmkhwRthwrMNJk42ePoyxMdcrIWC6+yj-jukgDzkdf-Rh5ieqWmV4-G2H$ZF1q82x+ghmzrZ87qoZS9vdG+Uk8TdzDl7Xsp2l4omsuZskGfvlUrP-sxUgNiNhju3xRkDQG2IXvkM+Ms8KrYNuH+Sq+KM84Rwvkgjahz9OPpSMovjjR$WxCq6Nt7BXuhMz1YWZQSHpXGZrW88q+QMRr3IgBal5C6UDvUmfVBQZcs8RowCbtVpG8UUnSMvNkJ2khJtq0Um9emzUhGkuqMilGBshoUXbCiA7G7ysp7xQEmqqr9vnX-WrB5T8ASlT-djdB72TChQ-Ijd-V4p1pCASmteyv3UINas7Qmtl6r85hD0kgQ6Nw-Olh+KtrnsU7cTaYBlrD5hSzrd8uxhZsudOQTnd7drmcgIUTQWPk-ar6YJAs7QJlSPNjK+5s8DbF+mdjyuk0Us7QPvoYXV47KUZFvF+kdap4Nu48oyV7T5vh8ZAFriZ-vQ5CFxA19H3+QwJ1D3$9Pn8z+S+VpoDrdfmsNj-8jImVDZ9Y20jfif5fDZtorlXjIyiTID+2UcKAS+49dDHrRDRINXxe-lMDFd0o2OsZoVruYB4A0K0W5oHmz2PM5$Z+jfZH0BMDSobJMjuNOywdFvw-k0bhoobjvKKomIYjsvy5uqPPuDJpjdGb8wpBPw1S-QBP2Xn4o7A0DR7z7VsD96PAiJ50-vRW8JIxeh8FjwPKZJ96x9ah$rgvOTAeIbomQ4jpvG2OZjA$48F+l18dZD+f0Jxh9j+4-w1qnGdB$jOYpXuCRXGdBExeok66qrHN$qc4pG71XWFd0blTf3GtmASPjxbjVwzGmsp7X-SdSxx7stS-Rt1Atsuxz+dS0d0A1FsFrQGnXfd8I808pDV9pXSAeXd32fbHPUQG6K8GVs7QkDYrrw+isqUJebdAQ3xzuZRJNuDwPQfuK+owrWN74HmASj5uWIdZqW5OZo+m9rq682PEZJ2VXjTd2Nr-v1jJNQkvIMiBP+jDGt5PtoCryI1T3PwiqM3ASZ7-Jr$q+NdWtZhI2YoMhzoTC-NXwr0AtD4KvIO5mImsZp5-K0JddZv2Q-HJlKO8mDQkouzV8mueD7Xg9PlAI2yMvC-DPDhY1ohel+IA5H9G00KAjwgrOSC6kW8PFj116DQAoQfGft70UJbex679X1IIa3GH+i651OvVcdmKs8NWOkJ598duonjGpDBz+eIuZRkc++s0OJpR856gDjr3Tdf6H9m6cQO+ovr1mZP8s+Q6ftQu4PV$ushuRv5Xf1mJuI99QBrzkI0+EiP6mDXfKBA0t7ocFmu46QTD$xJwxqGcQv1tuTtcuesEQHfNcGVJO2h68RDs5tvX6o02F5cvGE3dX$P0KFRN8s5uCpiaNFF2QQ4-cSWrA9vDWCSsnxd62iGpshu8fntGzlOssDHcFrCj8bZBu$sIjhf6y0mmt0OIhuq79XrBqOAVsurF7bHd6tcFJFFuWPTHd6Fruz6ecWPT3C8mNw8JZBAQ-8f8FN0hKlBIPQHv+Zk02F+j76EcAN2Bde6Gchfb5CDZuu9J5bAh8tud2gwwaSeSEg6hDdau+JwcaP73df+b0Bv-j0QO5amweM06Uj8EVKO9MlwK6juwogfNUt9uwa0BPooxwUmwu$F-+PKBmd6+RAfICUP6nCzjoVu+CU4UeNz3f4rRe3Jjfvszv2nKzoufc4G2U3w+kc-IdBXeFUfNnkc-IWj5eFUd5n+c5J9BM19qX86vc8IZB865iSS6+PSJxUAEns4jmHG7oktoeZ2-ftIua6vx707Z4EZautISQc1tJW+6nA2asW1sVfd6tsT+khBwsZSSm+sRe6zxks2z3f66V9kix6fmFvu+Eu$6Kx-stJPUZuutfotesx23TiTA98uxp0K2wUjfTgI1tSscBfx2-l+wFrMbVuADhbozPaUoT$zisJUz7JIvn18NPdt8P0rm9TT$$4i2ThFN$N3D79ITm4Ddrwkjd8b4wtK0ywgUXTIWi5uT8pdyr5YeHx6JQAhz7b-80g9lBRjTCtTJRQJAemyRkKZcNd8gwoi9Vkz-TpItxG1P7hqD5r9rrrpzZEBDZ6uZrrj2jt6Nz2MbIRsg5HSA9BH2fhihpN9l69JCr7lRC6dwkoEvkMtN-h4gHlr9j4jiGqwrrPSWrXhJhbNllhkAWJQMlPqxJdDASkNcMZ5KhuUsDibBlBwNuzFl2XVdJ+jFjIEvr6WMW8Z8QRrrIDDDyrrPwDmmASkjfItwwktNiNX5hBVTPkriIGASRexVZE33-mYAza6ZjPr-3-DM$G-jcRr8mM$zaZdz8gxNW-$$CF8NrDr4rmmbVzqFYGZUIrEXtr8Z8ph2gRHpXECj4MRKJ8R3Rr0paFFBcOxPrN7GiP1PzR+rsiEm$WedZ4qawwkyNAM3G8Gesger5NrjamPac4r0HOdJr8SMaVYIJZxZCBadMZr3ETr9lrN5XMT$RhB8vZGRIo5nk-Hzl9l0seyp75yZwkGZI4JKFZoWCRQBC30rfBIlzRbNQRoXAXd7CcdEbIWut-K67Pt8hWEygq6oMrI05+324OMG+dfFlgP3BZGEn+M4P0NFNFykPCk9trfrlr8-trI$6l5x5Y3SWGr8NjzPdrRrllzPrqikUcdMDxDx4eP5ScKzqUxDsPIP0pIlKGi4ddrRBr484rvhV-$rlSXb8Kbadq8Hc-ulZ4bradbkcu3tjCx+PwkrrWK$cWjDD2TbHKzeCcgvR31XFYAKZicYE6Xzk3MzfeCoo8nlckrrJQfeNrr"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 16:45:26 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\ncf-chl-out-s: TjQp+M5gnHz5W2Kk2T4rRA==$oAzP+i/eISdurnRTha7pUA==\r\nset-cookie: cf_clearance=FLRRXFS0GPYDHhSK87WtB4xSq9nueBcqSzs9V...okc-1773333926-1.2.1.1-H7_2zMaSO4bUBktxP_123yxKFa2h0M34Qpiam9tO8ZzKOpm43DlexED4SrbXPMJ1wKskuN7L35gyYJkW35xY2fqRUvtY2jksogmoVmDuTvKJn43ma.DNSoeEvmD1FzUosdgwzgOFkwG4eEv0EA5N4a4qU6PNjNhVwAwwUBJJKEFjhBlp6nsTfH2h5_4zhvxQujidJdM_qTvrKaC6su8Mb3vdFBxwKNAhPrzicxO_89s; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=claim-paradex.trade; Expires=Fri, 12 Mar 2027 16:45:26 GMT\r\ntiming-allow-origin: https://claim-paradex.trade\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9db444ee7dbdfb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T22:46:45.121255Z","times_seen":17925805,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"claim-paradex.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"claim-paradex.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"claim-paradex.trade","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-paradex.trade/","fqdn":"claim-paradex.trade","domain":"claim-paradex.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-12T16:45:24.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-paradex.trade","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 07:13:44 GMT","end":"Wed, 03 Jun 2026 07:13:43 GMT"},"fingerprint":{"sha1":"80:6D:39:9E:C1:6E:D0:51:84:87:01:15:51:A3:20:8A:B5:97:03:B6","sha256":"AF:2F:82:F0:FD:C4:1B:2C:B9:95:FA:AD:C7:84:A3:FD:32:8F:A1:0F:6C:EE:41:2F:13:17:7C:36:F0:9D:8E:F7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claim-paradex.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 16:45:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0\r\npragma: no-cache\r\nexpires: 0\r\nsurrogate-control: no-store\r\nset-cookie: sid=e5fdad3c-b27e-49c4-a598-b833b306f35a; expires=Sat, 11 Apr 2026 16:45:24 GMT; Max-Age=2592000; path=/\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7O24DlhwV%2B1TgIhBXYRS7T9BulusCww8h68iBVX3%2F6mve2LzrjVrRwY%2B%2Fm8uB9xLPCXdT4yGrLGavbo3NEyBKqdtK9ePLPkEUbMVTAOnnPhziqw%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9db444e429274651-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1988280,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (1576)","md5":"367dfa0a7e285f2ac7e188ffac206f5a","sha1":"ee0126a5e6eab2b83e877b072be52540eb6e3618","sha256":"9e5bb0c0f9aab7c236091808b8d0d805910b28a469fbc06e606bd9dd6b698737","sha512":"4ab320fdc67b19c765aa8770566a39f34ff750b723f8c38d88c1b1c74c9b413bd400725a4b1ff7218d7a2dd09da59a552a0fc2f013be9a7030e39b12c5545493","ssdeep":"12288:vopzPYLlpFiF5x9FWXtEN7h0nE/tw/o7BGINbEYA1brvHVwe6AGP1UEEHwPL1ukB:2Qcx9Vxh0ytwOBGOMVpvGPuuoAwB2JV","tlshash":"e425e00508130503750b59a833de2a61fd3ce0579288e6b87efd77178fcaa6925fa36d","first_seen":"2026-03-12T16:45:58.764437Z","last_seen":"2026-03-12T17:30:18.669186Z","times_seen":4,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":67,"dns":42,"connect":8,"send":0,"wait":269,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"claim-paradex.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"claim-paradex.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"claim-paradex.trade","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-paradex.trade/l7fekhw2.php","fqdn":"claim-paradex.trade","domain":"claim-paradex.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-paradex.trade/","date":"2026-03-12T16:45:24.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-paradex.trade","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 07:13:44 GMT","end":"Wed, 03 Jun 2026 07:13:43 GMT"},"fingerprint":{"sha1":"80:6D:39:9E:C1:6E:D0:51:84:87:01:15:51:A3:20:8A:B5:97:03:B6","sha256":"AF:2F:82:F0:FD:C4:1B:2C:B9:95:FA:AD:C7:84:A3:FD:32:8F:A1:0F:6C:EE:41:2F:13:17:7C:36:F0:9D:8E:F7"}}},"request":{"raw":"GET /l7fekhw2.php HTTP/1.1\r\nHost: claim-paradex.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-paradex.trade/\r\nCookie: sid=e5fdad3c-b27e-49c4-a598-b833b306f35a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 16:45:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncache-control: public, max-age=3600\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ds7kgoLNQZKEfDe7MnsdVrC%2BDB8%2B3j0XPaI7S4D0iKCXNmPRPR1Qca%2BGuFSZkMSM3norZUP7pZuwxMozCwetSllTdt6UKjtHwIIgItUHlGcmbto%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db444e6c8f7fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":284002,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48386), with no line terminators","md5":"feafedd12f7a4b2630acaed29c7712d2","sha1":"a6ec52d71e9c6b5b981e46758f15e22bd07af0aa","sha256":"5db9a08038b0afbcdffbfd4c630a6309b794f05e7b9b5645621da0810591de28","sha512":"21521be3677b1dfa15e4874e05266a8e71664f58c0931f3d074eea6b0c4ca2e87fa21e83e4f3214f862ab5f3c5f9f74a1f081534f33040717ab23c04c01128fd","ssdeep":"3072:vI2Hr7i/uJsut2+d0nTMP7wIgeHI6cR0L6xGR/dUI3o9T29LWt0e4dJ2qLXV8rN2:pL+MfYOa4p","tlshash":"6a543195db9380dccd59128fc0b3b845d8045d62ce6c78a7de1edd826a1af6680c72bf","first_seen":"2026-03-12T16:45:58.765443Z","last_seen":"2026-03-12T16:45:58.765443Z","times_seen":1,"resource_available":true,"data":null}},"time_used":735,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":717,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"claim-paradex.trade","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"claim-paradex.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"claim-paradex.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-paradex.trade/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"claim-paradex.trade","domain":"claim-paradex.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-paradex.trade/","date":"2026-03-12T16:45:25.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-paradex.trade","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 07:13:44 GMT","end":"Wed, 03 Jun 2026 07:13:43 GMT"},"fingerprint":{"sha1":"80:6D:39:9E:C1:6E:D0:51:84:87:01:15:51:A3:20:8A:B5:97:03:B6","sha256":"AF:2F:82:F0:FD:C4:1B:2C:B9:95:FA:AD:C7:84:A3:FD:32:8F:A1:0F:6C:EE:41:2F:13:17:7C:36:F0:9D:8E:F7"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: claim-paradex.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sid=e5fdad3c-b27e-49c4-a598-b833b306f35a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Thu, 12 Mar 2026 16:45:25 GMT\r\ncontent-length: 0\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9db444ed4a9dfb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28642,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T22:46:45.121255Z","times_seen":17925805,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"claim-paradex.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"claim-paradex.trade","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"claim-paradex.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}
