{"report_id":"c01efe60-a73c-444f-a772-c99f547b3826","version":6,"status":"done","tags":[],"date":"2026-02-15T05:23:19Z","url":{"schema":"http","addr":"claim.esprsesso.foundation","fqdn":"claim.esprsesso.foundation","domain":"esprsesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.20.168","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"claim.esprsesso.foundation/","fqdn":"claim.esprsesso.foundation","domain":"esprsesso.foundation","tld":"foundation"},"title":"Espresso Claim Portal","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"claim.esprsesso.foundation","fqdn":"claim.esprsesso.foundation","domain":"esprsesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.20.168","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-22T05:23:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"claim.esprsesso.foundation","ip":{"addr":"104.21.20.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-14","domain_rank":0,"first_seen":"2026-02-15T05:23:19.872418Z","last_seen":"2026-02-15T05:23:19.872418Z","alert_count":0,"request_count":7,"received_data":4256563,"sent_data":3156,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"claim.esprsesso.foundation/light_4nmi4sn.php","fqdn":"claim.esprsesso.foundation","domain":"esprsesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.20.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"87fe1f90529d7160263ae30d18e6f3bc","sha1":"f0c1c081f09651538b756322e57db84d72417b18","sha256":"c44d565693670c0afff6306a3333e7dfea12364de4c8005fc3ce3a2fa985a041","sha512":"ce06d2e6e501b80d448c8ca3106455bf278859f658ae9d2259383c023e5addd0ed4bc4851806f5b4b4025d614d08ac22f57f8795152a425bca71b5fe10b70769","ssdeep":"1536:mFtSJ4wKV+/WGbDmejRc45mUHeP2DdXqps4jq5Aheayw4r/BEudGAfL844SDTAC:mFtSJ4duWGb964kuv5pa6/B1H//","tlshash":"f5644098db9380dd8ea9128fc0b3f905d4454d26895cb4a7ee1edec23616f63818727f","size":322783,"data":"","first_seen":"2026-02-15T05:23:24.369396Z","last_seen":"2026-02-15T05:25:54.648623Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esprsesso.foundation/","fqdn":"claim.esprsesso.foundation","domain":"esprsesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.20.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"28689dec66fe04ffb38b6b49839baf55","sha1":"3f6bde08cd1eda20ebf1d484e843ab867331f8f5","sha256":"f6708cdde58a0df35744381ea5f512b8d8727ec281ab4c94de601f8d279f12a0","sha512":"18180696b397528560717e72fad736b972072a9378a711a0571ba265538bdb1e15526648ebe2d473053eec828708448ffbc85897160e321039d6f66634b8c9c5","ssdeep":"384:a2a0OXXEtiRyxUEUcnKTzrVfC00piZ5RgcXD3KVocpNc2VTdD0YLPCR/6KqsOVal:ahX0qfcuhIcDc3c2VxYRK9clzyQ","tlshash":"130395e0661be4d84e1611eed037e801e028196bcebcf193e92dddc2752df22859727b","size":41030,"data":"","first_seen":"2026-02-15T05:23:24.370311Z","last_seen":"2026-02-15T05:25:54.650162Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"claim.esprsesso.foundation/assets/bg.mov","fqdn":"claim.esprsesso.foundation","domain":"esprsesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.20.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://claim.esprsesso.foundation/","date":"2026-02-15T05:22:56.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esprsesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 10:01:11 GMT","end":"Fri, 15 May 2026 10:58:22 GMT"},"fingerprint":{"sha1":"76:B8:B1:14:A3:6D:AF:58:DC:85:49:16:9B:9D:C5:B3:5D:38:8E:85","sha256":"57:67:02:77:0C:C3:DA:3B:41:50:9F:F5:D6:85:A7:12:DD:52:6C:00:0F:AC:B7:FB:63:5A:8A:57:2F:1A:E4:D0"}}},"request":{"raw":"GET /assets/bg.mov HTTP/1.1\r\nHost: claim.esprsesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 05:22:56 GMT\r\ncontent-type: video/quicktime\r\ncontent-length: 204305901\r\nlast-modified: Sat, 14 Feb 2026 10:50:55 GMT\r\npriority: u=4,i=?0\r\netag: \"6990538f-c2d75ed\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-range: bytes 0-204305900/204305901\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=98OmGggTTjxlwvLw4Xq9UyERO9pRN%2Bn6MbLLt7TiSnY%2B1XFvgN4SDuUq7Uwx5PzprdmPgt%2BfBi0F3wso99D08qmawk%2FB4b82AcbSV2SvS73zjfkg%2BEDDR03S\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ce25ed0ae29b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106671,"size_decoded":0,"mime_type":"video/quicktime","magic":"ISO Media, Apple QuickTime movie, Apple QuickTime (.MOV/QT)","md5":"4cadd466c6c6a0614740fbf9e7232459","sha1":"ce496c2a8defad18d2dc3d8545e88bde45db6688","sha256":"bfc4377316853fd8d52431d795f67c0ccc94738ca057df8158cbf270fd33cbe8","sha512":"a6f290fc9ade4e39811a7cb077b5578e93b5da82085b726c27d59223016e25b7a894e5df73fd73df6b9ecbd56a79b8edc4f76a3ad17c3bc70b705de25badf3b1","ssdeep":"3072:AKc8CFKPNSMsNFFwIm4mSvgvQSQS5Dh07D6:d8FK1SrNDmzSvpev","tlshash":"04a312bf513736ad6c2a12ec47154272fa0a0681fdad6f975f30b68f8c1d04a50bd88b","first_seen":"2026-02-15T05:23:24.361077Z","last_seen":"2026-02-15T05:23:24.361077Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esprsesso.foundation/light_4nmi4sn.php?m=2951888","fqdn":"claim.esprsesso.foundation","domain":"esprsesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.20.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim.esprsesso.foundation/","date":"2026-02-15T05:22:56.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esprsesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 10:01:11 GMT","end":"Fri, 15 May 2026 10:58:22 GMT"},"fingerprint":{"sha1":"76:B8:B1:14:A3:6D:AF:58:DC:85:49:16:9B:9D:C5:B3:5D:38:8E:85","sha256":"57:67:02:77:0C:C3:DA:3B:41:50:9F:F5:D6:85:A7:12:DD:52:6C:00:0F:AC:B7:FB:63:5A:8A:57:2F:1A:E4:D0"}}},"request":{"raw":"GET /light_4nmi4sn.php?m=2951888 HTTP/1.1\r\nHost: claim.esprsesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 05:22:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncache-control: public, max-age=300\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JBA3etDtQir9H%2FNkPhMGBU2pZvvmeAmTUSC%2FQeub2Pzqak2JQLg2pki2GEoMLGD4kU3l0h%2By%2FCrFuWGDB3SSg%2FGEch3gvyYpWLfIL5qiPWul0G31LuGKdLFN\"}]}\r\ncf-ray: 9ce25ed0ce2bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3418449,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5ce711c0fb881067bea2b8c6d58f97a5","sha1":"5ffd855f0c61b2785554699ff92383aff323d495","sha256":"331774e30e1a9b47cddb935d5ab8bfd94790ea7fe66fdeb9c7c2e75ab3b0a77e","sha512":"8e345bf2ee92daaea5a82025a8bea52ce3a764f7c1b7fd1718b0c9f6ff6393d96e2eca5fadbb078089311aba636a5ee4c1741f9c19f51bab087df49c21377837","ssdeep":"24576:XV8/8Yae0PgGswPpBroS7InwbjtsJshJuEbd16yW:X7OwPEZJs36H","tlshash":"0f2523105d67ee6e4f0cbea8747f6f0369414f87c08da8db6572eac404ac67502ddb4a","first_seen":"2026-02-15T05:23:24.362375Z","last_seen":"2026-02-15T05:25:54.638442Z","times_seen":2,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":208,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esprsesso.foundation/assets/bg.mov","fqdn":"claim.esprsesso.foundation","domain":"esprsesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.20.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://claim.esprsesso.foundation/","date":"2026-02-15T05:22:56.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esprsesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 10:01:11 GMT","end":"Fri, 15 May 2026 10:58:22 GMT"},"fingerprint":{"sha1":"76:B8:B1:14:A3:6D:AF:58:DC:85:49:16:9B:9D:C5:B3:5D:38:8E:85","sha256":"57:67:02:77:0C:C3:DA:3B:41:50:9F:F5:D6:85:A7:12:DD:52:6C:00:0F:AC:B7:FB:63:5A:8A:57:2F:1A:E4:D0"}}},"request":{"raw":"GET /assets/bg.mov HTTP/1.1\r\nHost: claim.esprsesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=204242944-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 05:22:56 GMT\r\ncontent-type: video/quicktime\r\ncontent-length: 62957\r\nlast-modified: Sat, 14 Feb 2026 10:50:55 GMT\r\npriority: u=4,i=?0\r\netag: \"6990538f-c2d75ed\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-range: bytes 204242944-204305900/204305901\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aZe4J6OA2fyfSWakGjv%2Fk0ztI8Grz2fLhgVynjaRDVw5n%2B%2BvbTHW0WSrXJQSPuACwiBgaLXx3K0HGfuEvwK3NYVg5qKwU4zKaRJ6eH3MiJAotr2i3TQNIsc0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ce25ed12e31b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62957,"size_decoded":0,"mime_type":"video/quicktime","magic":"data","md5":"8a4f9eaafa7b2f8c4a8cbe8936ca82a1","sha1":"20b3d36be9c971363449d0c5edd3577f4e2292f0","sha256":"10e33415cea50d7ede89efb9ce084fc6bba3fac4b9bcf23e06679f8ecea8d05f","sha512":"39edbe4ebe41ff67f4ff0373fecd0efa04af20ef5077e4b60c8b41ed4b20f94b833bd2cb439d8a39f3000e2f567e4a9e942c796c9595153b09c37ec05c8800b8","ssdeep":"768:LD8PI1vvfQsh/o7/OX/sa6q/s9jJvvsIcDg3GjrqCVBT:LiI1vo7mka6qknzV3kh9","tlshash":"8e53ad593394fd00c9023cf09ee5cbb02b5ae605af5c2582f6eb977c1ecb0a52d1665e","first_seen":"2026-01-14T18:19:12.875032Z","last_seen":"2026-02-17T06:52:45.118911Z","times_seen":4,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":30,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esprsesso.foundation/assets/bg.mov","fqdn":"claim.esprsesso.foundation","domain":"esprsesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.20.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://claim.esprsesso.foundation/","date":"2026-02-15T05:22:56.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esprsesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 10:01:11 GMT","end":"Fri, 15 May 2026 10:58:22 GMT"},"fingerprint":{"sha1":"76:B8:B1:14:A3:6D:AF:58:DC:85:49:16:9B:9D:C5:B3:5D:38:8E:85","sha256":"57:67:02:77:0C:C3:DA:3B:41:50:9F:F5:D6:85:A7:12:DD:52:6C:00:0F:AC:B7:FB:63:5A:8A:57:2F:1A:E4:D0"}}},"request":{"raw":"GET /assets/bg.mov HTTP/1.1\r\nHost: claim.esprsesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=98304-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 05:22:56 GMT\r\ncontent-type: video/quicktime\r\ncontent-length: 204207597\r\nlast-modified: Sat, 14 Feb 2026 10:50:55 GMT\r\npriority: u=4,i=?0\r\netag: \"6990538f-c2d75ed\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-range: bytes 98304-204305900/204305901\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bFMvJT0fKUyaBx9rZXSeM5PE8%2FYpBPJOnEItMtAcsdJwdIohcjkgSjEe2mjeuF8brlV4xJKGUNh9y7jM1wo6rNBPN6qY8x1ZHrcIxX3UrfOKOBYSrWUs%2Brh%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ce25ed20e56b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105464,"size_decoded":0,"mime_type":"video/quicktime","magic":"data","md5":"cd5ffdbfe413ab2337d33df61e917109","sha1":"e11e1276682bff829a1f931cb94fe35e4b4f4fce","sha256":"d92d4aea8875bbc7457256bd47ad743431181536f28827cc609bec6665e91b79","sha512":"72b3f2ef34959f4fa6ddfc63319b5c605985f7f19d0de98f97244e6d66d0f32a2b26dddab3dc50e1aa742aa5f676deaf6402b881735e9ccacae54051177692cf","ssdeep":"3072:Y7DuQIl9TDer3Aj0lX3sO2tEGwcb8VKNb:dQofeDh3MtEh7Kx","tlshash":"f8a312a578e1a51e1919347111f097c3bd89b69b2fc626328f6c3db80c25c498dbcb2f","first_seen":"2026-02-15T05:23:24.364612Z","last_seen":"2026-02-15T05:23:24.364612Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esprsesso.foundation/","fqdn":"claim.esprsesso.foundation","domain":"esprsesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.20.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-15T05:22:55.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esprsesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 10:01:11 GMT","end":"Fri, 15 May 2026 10:58:22 GMT"},"fingerprint":{"sha1":"76:B8:B1:14:A3:6D:AF:58:DC:85:49:16:9B:9D:C5:B3:5D:38:8E:85","sha256":"57:67:02:77:0C:C3:DA:3B:41:50:9F:F5:D6:85:A7:12:DD:52:6C:00:0F:AC:B7:FB:63:5A:8A:57:2F:1A:E4:D0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claim.esprsesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 15 Feb 2026 05:22:55 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 14 Feb 2026 10:50:56 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XB3qC%2FuFEbd5%2FS9Nii2E8oYMpgPZj0bJNOmmhAHsUld6vCg%2FeMamekdt1Ct2XA9krAel4Ie43Mq2Sx9l94ayVwfVTnMp4kAxx5kTFmqW9tCjiJ1WZ9utHGU4\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9ce25ecb18c4b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33181,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14936)","md5":"81389852d62290a62ce7443df15da634","sha1":"5b5f773ef6f1944b10a4a06d1a078fb5399d8178","sha256":"038dd079c14bce992132bce3900f0cbb37c4c1c456eb382c822389d259f58db9","sha512":"ef4c73e2ae6ae8e705f35202de5ee0dd2a051388a4ebb91cd8ebd3566352dd4cefde28ed8ba0b7e6d6929bb6146d61c19113c55e9eb156d8163109168d8669f5","ssdeep":"384:UYLRukqaRoZMjiiPGp2qrGOuZu78TrIlQTwOEcKWg3fMW3b7Z2miKr46DhespT7s:iRMjinIWpuZXrIwU3fMYJ2NspvboEFs","tlshash":"07e20bd3425f61a148093faa8ae779099505f0e28f5387c9f1fc19d8e757aac8cc61dc","first_seen":"2026-02-15T05:23:24.365776Z","last_seen":"2026-02-17T06:52:45.103109Z","times_seen":3,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":19,"dns":2,"connect":1,"send":0,"wait":45,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esprsesso.foundation/light_4nmi4sn.php","fqdn":"claim.esprsesso.foundation","domain":"esprsesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.20.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esprsesso.foundation/","date":"2026-02-15T05:22:56.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esprsesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 10:01:11 GMT","end":"Fri, 15 May 2026 10:58:22 GMT"},"fingerprint":{"sha1":"76:B8:B1:14:A3:6D:AF:58:DC:85:49:16:9B:9D:C5:B3:5D:38:8E:85","sha256":"57:67:02:77:0C:C3:DA:3B:41:50:9F:F5:D6:85:A7:12:DD:52:6C:00:0F:AC:B7:FB:63:5A:8A:57:2F:1A:E4:D0"}}},"request":{"raw":"GET /light_4nmi4sn.php HTTP/1.1\r\nHost: claim.esprsesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 05:22:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncache-control: public, max-age=3600\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=imSn3hVav9QWgLtCIMDk1jNVNQSvZBY2jAnW9xlbWy3bPMiapUjUYExd3G4mj%2Fp3V2DJCioc9F0R%2B74bgVBtsVKj5nSsGJkN0vg7NlfdT%2Bc7A%2FpOOoGCpNfE\"}]}\r\ncf-ray: 9ce25eccadedb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":323935,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44352), with no line terminators","md5":"a5b2a8d57442174a2e1e4c9b9651a588","sha1":"87a3f3622bbe4ab00a8abee4a5226d66cb9c2e5e","sha256":"7c72496dfe8aa05a22c143cf0cef407250159acd08a615c6bd6162d7a42cea46","sha512":"e6437c8e9414fed8c80bcc0fcc64f4bb87070f913b690d6da53e1757f029dff45e1a1f229be0363b2d2c1e41761660392bfade74adb52ec4c197044209fb9c6e","ssdeep":"1536:mFtSJEQCV+/WGbDmejRc45mUHeP2DdXqps4jq5Aheayw4ecBEudGd7UMiYcDTAC:mFtSJEBuWGb964kuv5pajcB/9//","tlshash":"dd741e85db77b39c8aa8318ec0b2f501d3c58d22c95c64a79d1ede832615f6e818727f","first_seen":"2026-02-15T05:23:24.367279Z","last_seen":"2026-02-15T05:23:24.367279Z","times_seen":1,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esprsesso.foundation/assets/css/app.css","fqdn":"claim.esprsesso.foundation","domain":"esprsesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.20.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim.esprsesso.foundation/","date":"2026-02-15T05:22:56.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esprsesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 10:01:11 GMT","end":"Fri, 15 May 2026 10:58:22 GMT"},"fingerprint":{"sha1":"76:B8:B1:14:A3:6D:AF:58:DC:85:49:16:9B:9D:C5:B3:5D:38:8E:85","sha256":"57:67:02:77:0C:C3:DA:3B:41:50:9F:F5:D6:85:A7:12:DD:52:6C:00:0F:AC:B7:FB:63:5A:8A:57:2F:1A:E4:D0"}}},"request":{"raw":"GET /assets/css/app.css HTTP/1.1\r\nHost: claim.esprsesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 05:22:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 14 Feb 2026 10:50:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69905390-30fc4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gxe%2Fs2O6raBLJ3N1pnbBDBQ3A5liyiX%2B5%2B%2B6jqwwTGAbeByVRggX%2FH4ZwWCgH49S0G%2FN%2BFBTu%2B%2FlahUUyNT6PMQ2DFkamKrU4kR3ce75%2B1kyqRXJJo1J8ZlN\"}]}\r\ncf-ray: 9ce25ecc9decb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200644,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (63582)","md5":"8b4428b81903cf4b7f334b6d03a908ab","sha1":"67cde6fac884ab94ab24bdec5530bc31848a7070","sha256":"933305d5a487ed4be3133371cee6c73582124cdd35a42e7eaa9ecbe6bb7f0a7a","sha512":"2cd627e00687c2c6b369125c56fd770e743ccdb459e5121d84edd9a5ccee70f212634618c76b8b258b336fc92be100a15d7c54b2eaa016fee3300e4ce353a1ba","ssdeep":"6144:eKj5l7gD+2jU8OFiy2nuuE+jdSijBoX7Bs:e5D+xBPFG","tlshash":"bc145b21fdba2ea83813a72412de574d3327734bd92d4ea87ddc325c4f4d3e42a88665","first_seen":"2026-02-15T05:23:24.368262Z","last_seen":"2026-02-17T06:52:45.105831Z","times_seen":3,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}