{"report_id":"c3395b69-a185-4084-a83d-4bc46d2fdca6","version":6,"status":"done","tags":[],"date":"2025-10-04T13:20:50Z","url":{"schema":"https","addr":"jito-claim.pages.dev/checker/","fqdn":"jito-claim.pages.dev","domain":"jito-claim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.167","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"jito-claim.pages.dev/checker/","fqdn":"jito-claim.pages.dev","domain":"jito-claim.pages.dev","tld":"pages.dev"},"title":"Jito Foundation | Solana Liquid Stake Pool: Non-Custodial Liquid Staking"},"submit":{"url":{"schema":"https","addr":"jito-claim.pages.dev/checker/","fqdn":"jito-claim.pages.dev","domain":"jito-claim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.167","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-08T13:20:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"auzxgwxsowaamxchvzhnseclqkdlxtybdes.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"jito-claim.pages.dev","ip":{"addr":"172.66.47.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2025-10-04T13:20:51.799577Z","last_seen":"2025-10-04T13:20:51.799577Z","alert_count":0,"request_count":18,"received_data":1972919,"sent_data":8158,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-28T22:11:39.889585Z","alert_count":0,"request_count":1,"received_data":9481,"sent_data":519,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"auzxgwxsowaamxchvzhnseclqkdlxtybdes.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":7,"request_count":7,"received_data":348808,"sent_data":4835,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"corsproxy.io","ip":{"addr":"104.26.6.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-30","domain_rank":175528,"first_seen":"2016-05-19T01:27:08Z","last_seen":"2025-09-30T09:21:57.534043Z","alert_count":0,"request_count":2,"received_data":4009,"sent_data":1013,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"jito-claim.pages.dev/checker/","fqdn":"jito-claim.pages.dev","domain":"jito-claim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"846f83cad28aa07f55ba94b96133b937","sha1":"dd86fd25dc930308e3ab1e3d9f3be832a482e7fc","sha256":"a73582e75762a671403b66128a2630bc5901ac56eb67d4b6991155f79e443ba6","sha512":"728b5940b24c71e1fab303f9a52e12e0ef8f827b06e629c30ef9857fff15c2d926cdbb5f57c6f598e4bfcb4cdb19e2840e5e005d0f9e760aaaeb49cc2f15c2df","ssdeep":"6144:9X1a3UHJWYTmpC289Hgm0Fn7e/LV35ePgPuc:9wemEL9Hgmoe/LV35ePgPuc","tlshash":"1354101ae7a911aa83a990d2df628df7b4dcbd10435e17bdb8d6f361e004cf091e568c","size":299708,"data":"","first_seen":"2025-10-02T19:27:27.663299Z","last_seen":"2025-10-04T13:21:25.492936Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jito-claim.pages.dev/checker/jquery.js","fqdn":"jito-claim.pages.dev","domain":"jito-claim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2442916ae5a79e71183cdf913566c90f","sha1":"5ca408825bc6a37191d05709b5c42cf9c8722430","sha256":"90db435beb66d79d24214d6d71318b6ccf0a692c8cb7c7c0b48531796789b97e","sha512":"2d52f965ae91d3842d41a138ab95a85ce60a94f1410e90e34887e57fe8ff0e5dea46910059cd6c9b2d1d6375b77a68f30c05f4facf0c0fe632672aab15c7c157","ssdeep":"3072:gXn1aXUTTT3lVLN9IBhxWoLnveRn9ERyNqrpaudgfHLV35ePgPuV:Gn1aXUHDPIran9Iyqrrdg/LV35ePgPuV","tlshash":"7d54211ae7e911ab836990c2df628df7b4dcb910035e07adb9d6f3a6e004cf451e568c","size":305579,"data":"","first_seen":"2025-10-02T19:27:27.640167Z","last_seen":"2025-10-04T13:21:25.490964Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auzxgwxsowaamxchvzhnseclqkdlxtybdes.com/@v1/cdn/js/pizzicato.custom.js?t=29326400","fqdn":"auzxgwxsowaamxchvzhnseclqkdlxtybdes.com","domain":"auzxgwxsowaamxchvzhnseclqkdlxtybdes.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"24404746a19282e59647a86b7e141a22","sha1":"615f3aba285976877691a28a6fa05ab94572dcc5","sha256":"9414e2c983ebb430480803c5e608a2b747f8725aefbf8e7f137b2ac7f916803e","sha512":"d870420943e56e1a8e5756b0bdc7c2cb26c58639c7dc1911df1a109eed1b8ad88dc1ec23e68ebb65bb934abf710746dd63af61f558b09b799d20f43d06df9afa","ssdeep":"6144:UsWR+jpPUbczk6p1ZsJzO3fXefpvVBtcaovA8C3Iq:RWklPQUWCvXefT38o9","tlshash":"90748c917280617916634fea41bf094ab238f120a409892cf75cc8d71bb99dad5bff7c","size":342552,"data":"","first_seen":"2025-10-04T13:20:57.139939Z","last_seen":"2025-10-08T22:43:50.294317Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"jito-claim.pages.dev/checker/images/8.webp","fqdn":"jito-claim.pages.dev","domain":"jito-claim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jito-claim.pages.dev/checker/","date":"2025-10-04T13:20:27.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jito-claim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 12:33:58 GMT","end":"Thu, 01 Jan 2026 13:31:58 GMT"},"fingerprint":{"sha1":"22:66:D0:E9:9E:96:78:D1:B4:56:31:A2:D1:6D:46:CC:92:70:DA:9B","sha256":"E2:AA:98:D0:5C:C5:29:9A:8C:91:3D:C4:DB:98:82:E0:91:50:BB:21:C2:63:2A:8C:CD:F3:21:95:2F:73:D3:45"}}},"request":{"raw":"GET /checker/images/8.webp HTTP/1.1\r\nHost: jito-claim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Oct 2025 13:20:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2940\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"468123614554c8f561be32c52855c154\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GYWqI6c6VQOKKWWRaq0C%2BGMsLufvaUsbhSxZrQNcbij5z5KchrjI5uvuFm3x5gMzwq77mfkjtaCjyE%2Fsj3fdHeYJHJvKobsFhiMvM1mFe%2Bfk6DN0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9894fa0dbe12a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2940,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3a5defe887b8885a85605f60696b182d","sha1":"1854b73c927bda4e2e70d47006c3103f4d315e8d","sha256":"6f5750f164472da57c5e6dcf87b9dbd38f9a1c5622c25085b7d10db6f93212fb","sha512":"3707680110d072a4abe9012c1393ab45a1d98e7bb482a169b6cd822dcaf481c03b82b2362b66c38d6d5ef6a45ab31cb78a922af3153276d364a9f246b6baa80a","ssdeep":"","tlshash":"6c515ba0f24c028dc3bdaea1415d1b23337f914058aaddd3b2abfd24a724964e5a5c54","first_seen":"2025-09-16T05:04:38.703268Z","last_seen":"2026-02-14T05:05:28.515885Z","times_seen":15,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jito-claim.pages.dev/checker/","date":"2025-10-04T13:20:28.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"54:09:EF:2E:96:03:5C:86:DF:F0:DA:AC:A6:7A:0D:35:49:4E:68:90","sha256":"0E:84:83:07:1D:C1:46:17:EB:EA:2F:15:CE:88:56:D2:FF:9E:AE:31:D2:C3:FC:DA:00:24:46:48:43:CD:11:1F"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 04 Oct 2025 13:20:28 GMT\r\ndate: Sat, 04 Oct 2025 13:20:28 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8795,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"51955a067b2f96efe49c2412a4c8c713","sha1":"44103446803299fdae2aa9fdf4c21af4e90fe450","sha256":"2598c04bc6015e0fdad9381928b8238d997efd88a0e450042a60e9d59435f915","sha512":"ca70f49f25ca02d0491518a04e3fdd3c9cb9d35a573ecae94d1bf8fe184ee1ceb53b623b4ba9bf2faf7ee4e321d30fb57954326ac064cdd7605b031355ef680b","ssdeep":"192:vywfydyGy63gy/yFVyR73xpmj3U8fHiyYwyNFyuy3uySRk73vO6u8:vtfcHjg8ciIShwCFnbL8B","tlshash":"2002ff91056be504ea431cc627cf7e369e8e62667081d1797ffe2cd9aceac22132475c","first_seen":"2025-09-11T02:59:26.857486Z","last_seen":"2026-08-09T17:43:28.209509Z","times_seen":924,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":60,"dns":1,"connect":8,"send":0,"wait":27,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auzxgwxsowaamxchvzhnseclqkdlxtybdes.com/@v1/services/connector?referrer=jito-claim.pages.dev","fqdn":"auzxgwxsowaamxchvzhnseclqkdlxtybdes.com","domain":"auzxgwxsowaamxchvzhnseclqkdlxtybdes.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jito-claim.pages.dev/checker/","date":"2025-10-04T13:20:28.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auzxgwxsowaamxchvzhnseclqkdlxtybdes.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 23:17:09 GMT","end":"Thu, 01 Jan 2026 23:17:08 GMT"},"fingerprint":{"sha1":"BC:D2:0A:E2:84:6C:5E:30:CB:C5:F2:92:96:B5:CE:CE:C9:68:ED:AD","sha256":"55:15:06:3A:98:BA:0F:15:D2:6D:46:83:BB:AA:1F:4C:11:70:E3:B5:2F:C4:EC:BC:D3:7D:03:4B:0C:23:53:7F"}}},"request":{"raw":"OPTIONS /@v1/services/connector?referrer=jito-claim.pages.dev HTTP/1.1\r\nHost: auzxgwxsowaamxchvzhnseclqkdlxtybdes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,x-auth-key,x-direction-safe,x-scale-referrer\r\nOrigin: https://jito-claim.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 04 Oct 2025 13:20:28 GMT\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4587606\r\ncdn-uid: 0f8c994c-6486-40f7-a986-92e996f7e2d2\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 86400\r\ncache-control: no-cache\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 10/04/2025 13:20:28\r\ncdn-edgestorageid: 830\r\ncdn-requestid: f9a6fdb682338fdaf4799636a9ea42bc\r\ncdn-status: 204\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T16:56:48.763508Z","times_seen":17821057,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"auzxgwxsowaamxchvzhnseclqkdlxtybdes.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jito-claim.pages.dev/config.php?s=%2F%40v1%2Fcdn%2Fjs%2Fpizzicato.custom.js\u0026t=29326400","fqdn":"jito-claim.pages.dev","domain":"jito-claim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jito-claim.pages.dev/checker/","date":"2025-10-04T13:20:27.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jito-claim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 12:33:58 GMT","end":"Thu, 01 Jan 2026 13:31:58 GMT"},"fingerprint":{"sha1":"22:66:D0:E9:9E:96:78:D1:B4:56:31:A2:D1:6D:46:CC:92:70:DA:9B","sha256":"E2:AA:98:D0:5C:C5:29:9A:8C:91:3D:C4:DB:98:82:E0:91:50:BB:21:C2:63:2A:8C:CD:F3:21:95:2F:73:D3:45"}}},"request":{"raw":"GET /config.php?s=%2F%40v1%2Fcdn%2Fjs%2Fpizzicato.custom.js\u0026t=29326400 HTTP/1.1\r\nHost: jito-claim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Oct 2025 13:20:28 GMT\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XAWIpNTSJ47celNlJtBVal1nD%2BYyws%2BnEN410KyJiUoCpcJsfevHfGrXCEnrcdB8RIDbe7hleurF5CEb8Qw%2FZ%2FsvYDGst6iURsqBLwjcTucWZF3W\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"8fd729daf59a3bc1df967cae8f18b54e\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9894fa0ea871a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T16:56:48.763508Z","times_seen":17821057,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jito-claim.pages.dev/checker/fonts/4.woff2","fqdn":"jito-claim.pages.dev","domain":"jito-claim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jito-claim.pages.dev/checker/","date":"2025-10-04T13:20:27.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jito-claim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 12:33:58 GMT","end":"Thu, 01 Jan 2026 13:31:58 GMT"},"fingerprint":{"sha1":"22:66:D0:E9:9E:96:78:D1:B4:56:31:A2:D1:6D:46:CC:92:70:DA:9B","sha256":"E2:AA:98:D0:5C:C5:29:9A:8C:91:3D:C4:DB:98:82:E0:91:50:BB:21:C2:63:2A:8C:CD:F3:21:95:2F:73:D3:45"}}},"request":{"raw":"GET /checker/fonts/4.woff2 HTTP/1.1\r\nHost: jito-claim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://jito-claim.pages.dev/checker/css/stylesheet_0.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Oct 2025 13:20:28 GMT\r\ncontent-length: 36932\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"72cb9e44846c4f179109b1305313edbd\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yesKF7iHVunQtoYU9Xuk8nTYTvwmJ%2FQBQ53m0%2FPsAi2ncCyAgirajkKpZr3Okvntnylwmyqh7gyu2EFX1oqSIBTXOshkx2viQ9ng1p6u1El2Kxe6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9894fa0ec8e0a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36932,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-08-10T16:48:02.24179Z","times_seen":33290,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"corsproxy.io/?https://api.mainnet-beta.solana.com","fqdn":"corsproxy.io","domain":"corsproxy.io","tld":"io"},"ip":{"addr":"104.26.6.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://jito-claim.pages.dev/checker/","date":"2025-10-04T13:20:28.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corsproxy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Sep 2025 23:42:06 GMT","end":"Thu, 25 Dec 2025 00:42:04 GMT"},"fingerprint":{"sha1":"0C:CD:24:B7:B0:CE:FE:13:D4:74:92:88:E5:8A:19:06:1B:6E:63:58","sha256":"0A:01:7A:C2:3C:74:E6:03:26:29:BB:69:4E:28:E2:F1:01:93:57:7A:C8:02:E9:3E:47:23:C2:D6:66:65:DA:08"}}},"request":{"raw":"POST /?https://api.mainnet-beta.solana.com HTTP/1.1\r\nHost: corsproxy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 130\r\nOrigin: https://jito-claim.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Oct 2025 13:20:28 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\ncf-ray: 9894fa1079beb4f9-OSL\r\ncf-cache-status: DYNAMIC\r\nallow: OPTIONS, POST, GET\r\ncache-control: no-store, no-cache, must-revalidate, private, max-age=0, s-maxage=0, proxy-revalidate, no-transform\r\ncontent-encoding: gzip\r\nexpires: 0\r\nvary: *, Accept-Encoding\r\npragma: no-cache\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH\r\naccess-control-max-age: 86400\r\nsurrogate-control: no-store\r\nx-cache-buster: 1759584028425_ccoav3x\r\nx-cache-status: DYNAMIC\r\nx-client-country: NO\r\nx-client-ip: 82.148.169.64\r\nx-original-url: https://api.mainnet-beta.solana.com/\r\nx-proxy-contact: support@corsproxy.io\r\nx-proxy-mode: cloudflare-snippets\r\nx-proxy-region: unknown\r\nx-proxy-response: true\r\nx-proxy-service: CORS Proxy\r\nx-proxy-time: 174ms\r\nx-proxy-version: 2.1.1\r\nx-proxy-website: https://corsproxy.io\r\nx-ratelimit-conn-limit: 40\r\nx-ratelimit-conn-remaining: 39\r\nx-ratelimit-connrate-limit: 40\r\nx-ratelimit-connrate-remaining: 39\r\nx-ratelimit-endpoint-limit: unlimited\r\nx-ratelimit-endpoint-remaining: -1487\r\nx-ratelimit-limit: 1000\r\nx-ratelimit-method-limit: 30\r\nx-ratelimit-method-remaining: 29\r\nx-ratelimit-pubsub-limit: 5\r\nx-ratelimit-pubsub-remaining: 5\r\nx-ratelimit-remaining: 999\r\nx-ratelimit-reset: 2025-10-04T14:20:28.425Z\r\nx-ratelimit-rps-limit: 100\r\nx-ratelimit-rps-remaining: 99\r\nx-ratelimit-tier: free\r\nx-report-abuse: abuse@corsproxy.io\r\nx-request-id: fafc950b-cba2-441a-8d3a-4259e55cc015\r\nx-rpc-node: fra119\r\nx-timestamp: 1759584028425\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Ds936x9q4ErQs9nP6bsyvAzkzONTVAOsMh4XhbRzfmrzJC9Prni3Jb9hB4LqeZX98z2fmFAvVKAMgSPmJe82woDvzTKpvYEl%2BtuHCfIDAfhbj21Nf3mSX6TsA8ZX5Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1726\u0026min_rtt=707\u0026rtt_var=823\u0026sent=9\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3800\u0026recv_bytes=1553\u0026delivery_rate=2048090\u0026cwnd=253\u0026unsent_bytes=0\u0026cid=2e90cec9c291cc9d\u0026ts=380\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":326,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"52356306ce0b320e49f1bdfd22109683","sha1":"41b71960e576423da561a5d21f729acb3261e793","sha256":"38d15952ac54336dcd4044b6d1546ee4de6fea60d449e6b93aedf1446b7ebd57","sha512":"2fba7679b1c4e754cfe48dcd531058e45eafe6299f8add3faa48a2a38b34e6c076a8acd85cc183755f29c8425ae259d96859172a5886648678b8e7760207a477","ssdeep":"","tlshash":"79e07d403f4917bae7a04f53d61421b9b2e11d5db3104a0a13ec068465c119ca64b97b","first_seen":"2025-10-04T13:20:57.121099Z","last_seen":"2025-10-04T13:20:57.121099Z","times_seen":1,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auzxgwxsowaamxchvzhnseclqkdlxtybdes.com/@v1/log/join","fqdn":"auzxgwxsowaamxchvzhnseclqkdlxtybdes.com","domain":"auzxgwxsowaamxchvzhnseclqkdlxtybdes.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jito-claim.pages.dev/checker/","date":"2025-10-04T13:20:28.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auzxgwxsowaamxchvzhnseclqkdlxtybdes.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 23:17:09 GMT","end":"Thu, 01 Jan 2026 23:17:08 GMT"},"fingerprint":{"sha1":"BC:D2:0A:E2:84:6C:5E:30:CB:C5:F2:92:96:B5:CE:CE:C9:68:ED:AD","sha256":"55:15:06:3A:98:BA:0F:15:D2:6D:46:83:BB:AA:1F:4C:11:70:E3:B5:2F:C4:EC:BC:D3:7D:03:4B:0C:23:53:7F"}}},"request":{"raw":"OPTIONS /@v1/log/join HTTP/1.1\r\nHost: auzxgwxsowaamxchvzhnseclqkdlxtybdes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,x-device,x-scale-referrer\r\nOrigin: https://jito-claim.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 04 Oct 2025 13:20:28 GMT\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4587606\r\ncdn-uid: 0f8c994c-6486-40f7-a986-92e996f7e2d2\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 86400\r\ncache-control: no-cache\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 10/04/2025 13:20:28\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 9bb44044a7d7531d328682ed9914815f\r\ncdn-status: 204\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T16:56:48.763508Z","times_seen":17821057,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":7,"dns":0,"connect":1,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"auzxgwxsowaamxchvzhnseclqkdlxtybdes.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jito-claim.pages.dev/checker/","fqdn":"jito-claim.pages.dev","domain":"jito-claim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-04T13:20:27.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jito-claim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 12:33:58 GMT","end":"Thu, 01 Jan 2026 13:31:58 GMT"},"fingerprint":{"sha1":"22:66:D0:E9:9E:96:78:D1:B4:56:31:A2:D1:6D:46:CC:92:70:DA:9B","sha256":"E2:AA:98:D0:5C:C5:29:9A:8C:91:3D:C4:DB:98:82:E0:91:50:BB:21:C2:63:2A:8C:CD:F3:21:95:2F:73:D3:45"}}},"request":{"raw":"GET /checker/ HTTP/1.1\r\nHost: jito-claim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Oct 2025 13:20:27 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=qG12fOXcbQbYqldJ3T7mp3Hd4WK4ltEvayH4TVBdUefvDftOAHmirQFfSnIXK8GwSiuyB7jDIOvNMJK67Pifbf%2BYu2utTa3mfG8UcehJIzwCEFq2pf7Y0OaunhNoupIL9rC4IGJbNA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9894fa0c5d2056c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=3056\u0026min_rtt=2166\u0026rtt_var=921\u0026sent=7\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3200\u0026recv_bytes=1134\u0026delivery_rate=1342398\u0026cwnd=253\u0026unsent_bytes=0\u0026cid=bbc5009754f95498\u0026ts=154\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":989743,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (24201)","md5":"437f1fbec552c59aad40e75f85e255dd","sha1":"da6995a2409125bf75b4f13bef687ad422e4e00d","sha256":"0f99a979f418f89bffadc2b6fd520367af77bbeaecfbae627023977047f0b711","sha512":"f802bbd97b11a2f66719e816bdd176a9c0abb1b675296e32128b3aa08d172c61e5e95f672f008d5b433b1e2bc4500d3617eafe75c71b8c0df55e21464cb810a4","ssdeep":"12288:u4YB2idFz5SHsbcwprzRv8ArA8AzAzABA8AvcwprzRvlnSHSX2bidQ4YBaa:u73FAHsoERvxUxMMaxkERvlSHSGqQ7aa","tlshash":"fa25f2bc3509859b8b0517c8e5e7a52cac6832efccc5d098f7583256356ef98b73a087","first_seen":"2025-10-02T19:27:27.647841Z","last_seen":"2025-10-04T13:21:25.484579Z","times_seen":4,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":22,"dns":8,"connect":3,"send":0,"wait":147,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jito-claim.pages.dev/checker/images/7.svg","fqdn":"jito-claim.pages.dev","domain":"jito-claim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jito-claim.pages.dev/checker/","date":"2025-10-04T13:20:27.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jito-claim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 12:33:58 GMT","end":"Thu, 01 Jan 2026 13:31:58 GMT"},"fingerprint":{"sha1":"22:66:D0:E9:9E:96:78:D1:B4:56:31:A2:D1:6D:46:CC:92:70:DA:9B","sha256":"E2:AA:98:D0:5C:C5:29:9A:8C:91:3D:C4:DB:98:82:E0:91:50:BB:21:C2:63:2A:8C:CD:F3:21:95:2F:73:D3:45"}}},"request":{"raw":"GET /checker/images/7.svg HTTP/1.1\r\nHost: jito-claim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Oct 2025 13:20:27 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SeTkWUIBDC5B2hvvFlbzsPLeMEdfN9m%2FAzpt8iepwBqxLeL7qXMSJLD5J8q5ln1tM3Lbu%2F9Jjbbe9B1sWN2nmsU5uRrQh2gX6ceRjN%2F7ORXFhMkn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"12115890e6c419be3b56954c2fed52c4\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9894fa0dbe10a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1673,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"597050b5e30cc8ad0e0fdd7edfc633a1","sha1":"c175cfdc83ad0b913f4901e30c9fa2ce6a86b607","sha256":"1d8dd3613cf2cdf42f75270c15511e0bef121cb2660c9d917e41ccae67898b06","sha512":"0fbfe13ab0b295ef82004df57edf385f390044ed5091fe8e14a4f87ea931d97fc3d1410a54ec74f77138dad4e39d4f5f0f283145c91e422b061647187a174e3e","ssdeep":"","tlshash":"c93110e493d041a491062bb44618e433ec1f31fd66a28abcc5b8be417c8b46e890edce","first_seen":"2025-09-19T02:32:18.942138Z","last_seen":"2026-06-29T00:40:53.536559Z","times_seen":55,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auzxgwxsowaamxchvzhnseclqkdlxtybdes.com/@v1/services/temp-link/create?referrer=jito-claim.pages.dev","fqdn":"auzxgwxsowaamxchvzhnseclqkdlxtybdes.com","domain":"auzxgwxsowaamxchvzhnseclqkdlxtybdes.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jito-claim.pages.dev/checker/","date":"2025-10-04T13:20:28.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auzxgwxsowaamxchvzhnseclqkdlxtybdes.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 23:17:09 GMT","end":"Thu, 01 Jan 2026 23:17:08 GMT"},"fingerprint":{"sha1":"BC:D2:0A:E2:84:6C:5E:30:CB:C5:F2:92:96:B5:CE:CE:C9:68:ED:AD","sha256":"55:15:06:3A:98:BA:0F:15:D2:6D:46:83:BB:AA:1F:4C:11:70:E3:B5:2F:C4:EC:BC:D3:7D:03:4B:0C:23:53:7F"}}},"request":{"raw":"OPTIONS /@v1/services/temp-link/create?referrer=jito-claim.pages.dev HTTP/1.1\r\nHost: auzxgwxsowaamxchvzhnseclqkdlxtybdes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,x-auth-key,x-auth-key-v2,x-direction-safe,x-scale-referrer\r\nOrigin: https://jito-claim.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 04 Oct 2025 13:20:28 GMT\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4587606\r\ncdn-uid: 0f8c994c-6486-40f7-a986-92e996f7e2d2\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 86400\r\ncache-control: no-cache\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 10/04/2025 13:20:28\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 0ffdbc1cf87baca8b4dce3f7ee34da7b\r\ncdn-status: 204\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T16:56:48.763508Z","times_seen":17821057,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"auzxgwxsowaamxchvzhnseclqkdlxtybdes.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jito-claim.pages.dev/checker/fonts/1.otf","fqdn":"jito-claim.pages.dev","domain":"jito-claim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jito-claim.pages.dev/checker/","date":"2025-10-04T13:20:27.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jito-claim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 12:33:58 GMT","end":"Thu, 01 Jan 2026 13:31:58 GMT"},"fingerprint":{"sha1":"22:66:D0:E9:9E:96:78:D1:B4:56:31:A2:D1:6D:46:CC:92:70:DA:9B","sha256":"E2:AA:98:D0:5C:C5:29:9A:8C:91:3D:C4:DB:98:82:E0:91:50:BB:21:C2:63:2A:8C:CD:F3:21:95:2F:73:D3:45"}}},"request":{"raw":"GET /checker/fonts/1.otf HTTP/1.1\r\nHost: jito-claim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jito-claim.pages.dev/checker/css/stylesheet_1.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Oct 2025 13:20:28 GMT\r\ncontent-type: font/otf\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4iGNmUEw6lLmZaLWZ0Wq4kp88WUhEsCfr1gA8P%2FoP9yXpkpfvYK0qiDtJtf4BUtDjQYWHUi4uaLAdB9Xx1IwW6KrcWpIEkC%2BYn1Qr5G6xU5B8110\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"170d83d4936355a8ace7310ea649a97e\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9894fa0ec8c7a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118852,"size_decoded":0,"mime_type":"font/otf","magic":"OpenType font data","md5":"844324dc83d98980285a9ab8f3dcb5f0","sha1":"23c5509c167f7fb3985302a148e5d97d74f573df","sha256":"cdd8de1c7cb7a759b53d2830e8000f32e91c40337829c9d398d9b6cf55e5bae8","sha512":"00f5e77506719666e8c8296adfb9928aa8ff69ec5b0f43ca725d8289add8e032fbff6f4c80e79847291767c002eb18c50a4473609ed5a0ac7101775dd990a0ca","ssdeep":"1536:dwHtDhkyml/y/uNHMmrSuDH47MN3I2zkFTOVKbx7Zjp/Xotk17u4javdK7fgsQyi:fPxymNmCY7QY2zmNXNu4GvdK7fgsti","tlshash":"43c32a025bc95a64cec40a36c4eecbe30bb3dddc1d2816865ad216455ffcf92d6123ea","first_seen":"2023-04-15T15:59:13Z","last_seen":"2026-08-04T01:41:02.091179Z","times_seen":263,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jito-claim.pages.dev/checker/css/stylesheet_1.css","fqdn":"jito-claim.pages.dev","domain":"jito-claim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jito-claim.pages.dev/checker/","date":"2025-10-04T13:20:27.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jito-claim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 12:33:58 GMT","end":"Thu, 01 Jan 2026 13:31:58 GMT"},"fingerprint":{"sha1":"22:66:D0:E9:9E:96:78:D1:B4:56:31:A2:D1:6D:46:CC:92:70:DA:9B","sha256":"E2:AA:98:D0:5C:C5:29:9A:8C:91:3D:C4:DB:98:82:E0:91:50:BB:21:C2:63:2A:8C:CD:F3:21:95:2F:73:D3:45"}}},"request":{"raw":"GET /checker/css/stylesheet_1.css HTTP/1.1\r\nHost: jito-claim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Oct 2025 13:20:27 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dDUbipemIKy2%2FiPLhqnpVkjz%2BcMic5M6s5zGxwK%2BcVfY7GCkEkYnamP8Bobpj2g50bzan67qcE5KvQCTJ6WjEKXS8HLl33fWt7LeIMhCTIhrnqgz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a04e691813bbcdce6c60e3a21b6cd75b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9894fa0dbe0aa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31434,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (31434), with no line terminators","md5":"b76f4d6040b3384dc2bfb8b8d393b51f","sha1":"043e76dd0bf4a1bae5af1a739cee23951bc617fa","sha256":"b722e575c547a8d31c1b64de9af8f7ff8f625f6fae71cb80cfd1f8ddc3864c4a","sha512":"2b886c67849ae8bb709164fbfedea46d663f7cc4468a2ec6fd1cfd9dc6465f4a4feb51698fcfd3fe8314ef0ac2a80f7235c3be96b9810858e9db19fd7d48fc2a","ssdeep":"384:sz1ng+xMpP0nAJNg1YXId3JYgLL1rIqBUiPuU9e0Bk1EP:sJGPfJ+1YYd5NrHvGU9e0BX","tlshash":"f6e2b69d5f16103e6c2345f2d0e4aeacd12be5c1ef265adfba4316018bd03e72ab2715","first_seen":"2025-10-02T19:27:27.651606Z","last_seen":"2025-10-04T13:21:25.485867Z","times_seen":4,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jito-claim.pages.dev/checker/images/19.svg","fqdn":"jito-claim.pages.dev","domain":"jito-claim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jito-claim.pages.dev/checker/","date":"2025-10-04T13:20:27.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jito-claim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 12:33:58 GMT","end":"Thu, 01 Jan 2026 13:31:58 GMT"},"fingerprint":{"sha1":"22:66:D0:E9:9E:96:78:D1:B4:56:31:A2:D1:6D:46:CC:92:70:DA:9B","sha256":"E2:AA:98:D0:5C:C5:29:9A:8C:91:3D:C4:DB:98:82:E0:91:50:BB:21:C2:63:2A:8C:CD:F3:21:95:2F:73:D3:45"}}},"request":{"raw":"GET /checker/images/19.svg HTTP/1.1\r\nHost: jito-claim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Oct 2025 13:20:27 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"25b643669ab212a8e5d52c53567b4801\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QWKoWzI6ezGM%2FrlDjGkxH7UaVm9uTVSN1%2BOUf%2FcbSaTbSuiQhwF25RWrCSSMCtOeP4695Zn6EeBSVoSSj1IMPJ1C5WAK0iVIBUGqyD0rLqUKXJwem9eXts8%2B9x8TSzdhUd0nzloTXA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9894fa0dbe26a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2394\u0026min_rtt=1263\u0026rtt_var=1413\u0026sent=19\u0026recv=16\u0026lost=0\u0026retrans=0\u0026sent_bytes=10096\u0026recv_bytes=3311\u0026delivery_rate=3356210\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=86294da4e6a80129\u0026ts=122\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2144,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"834cd58e861bd3583776581efe19e599","sha1":"b7a20f08b98bc38e0f02c51281bb43384c26ef6e","sha256":"55f2993465f0c2dd69954aa62246f257bba78d250031e21e52183e09ba51f8f1","sha512":"6f5a162545f9c49bb3092160dbd3900e103bf026478f24a4e9082ceb40a8f71c7c59167553a5e8fbbc496cde2abec6c7fdc3ea75cafd4f78bc12840852c3876c","ssdeep":"","tlshash":"014140de77b084e9dfc49adafe113448325fb5be7a168300d049af1ca8aa498a015dd9","first_seen":"2025-09-16T05:04:38.700417Z","last_seen":"2026-05-13T12:57:16.632445Z","times_seen":42,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jito-claim.pages.dev/checker/images/12.svg","fqdn":"jito-claim.pages.dev","domain":"jito-claim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jito-claim.pages.dev/checker/","date":"2025-10-04T13:20:27.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jito-claim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 12:33:58 GMT","end":"Thu, 01 Jan 2026 13:31:58 GMT"},"fingerprint":{"sha1":"22:66:D0:E9:9E:96:78:D1:B4:56:31:A2:D1:6D:46:CC:92:70:DA:9B","sha256":"E2:AA:98:D0:5C:C5:29:9A:8C:91:3D:C4:DB:98:82:E0:91:50:BB:21:C2:63:2A:8C:CD:F3:21:95:2F:73:D3:45"}}},"request":{"raw":"GET /checker/images/12.svg HTTP/1.1\r\nHost: jito-claim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Oct 2025 13:20:27 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Le1yP0rfoTBm6ILH8Lc%2BMikJTzzlvX11KXw9LTjNpW%2BNF%2BDcjZGq%2B1wVqck%2Bqrz98bRTgDuVGnSS86v8WPO0tH80xtMS%2FrXPRAdE7ar7mLAWJm81\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"e47d28ea1c56fcb5d8f961988348d79f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9894fa0dbe19a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":856,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"92cf0703ae33978436aac8f308d18464","sha1":"74f8ee89ac90097f7e205dbf81f3aabe28801632","sha256":"d4bf5a7beaf428fc2c7cfdf3789b2fcfdbbee00653f6c5886a1b4bbbf7981073","sha512":"8e32b337654e4bfd33800c53883257c87cd3f685d6f9270bd6d630c9479e6136d48afee90328c512eecb17a5f4573b2b1f25f8f16ca37d398e31934afb236c0f","ssdeep":"","tlshash":"ee111edaf3cc0d6dee07d788cb217530909b62731cc64054a9009bb1962a22d65efec4","first_seen":"2025-09-16T05:04:38.698746Z","last_seen":"2026-05-07T11:37:05.442335Z","times_seen":25,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"corsproxy.io/?https://api.mainnet-beta.solana.com","fqdn":"corsproxy.io","domain":"corsproxy.io","tld":"io"},"ip":{"addr":"104.26.6.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://jito-claim.pages.dev/checker/","date":"2025-10-04T13:20:28.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corsproxy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Sep 2025 23:42:06 GMT","end":"Thu, 25 Dec 2025 00:42:04 GMT"},"fingerprint":{"sha1":"0C:CD:24:B7:B0:CE:FE:13:D4:74:92:88:E5:8A:19:06:1B:6E:63:58","sha256":"0A:01:7A:C2:3C:74:E6:03:26:29:BB:69:4E:28:E2:F1:01:93:57:7A:C8:02:E9:3E:47:23:C2:D6:66:65:DA:08"}}},"request":{"raw":"OPTIONS /?https://api.mainnet-beta.solana.com HTTP/1.1\r\nHost: corsproxy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://jito-claim.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 04 Oct 2025 13:20:28 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BMUGfFsH%2F72fuCvJBvX4fG%2FC8ZqisfUixXKMcesQjIBhoA97o0%2BMCFjKfTM65nH3SWM38spDv7DjYSF%2BG3qqmmxAKaxqJlpY1A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache, must-revalidate, private, max-age=0, s-maxage=0, proxy-revalidate, no-transform\r\nexpires: 0\r\nvary: *, accept-encoding\r\npragma: no-cache\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH\r\naccess-control-max-age: 86400\r\nsurrogate-control: no-store\r\nx-cache-buster: 1759584028225_p8rntmg\r\nx-request-id: bf024e82-2255-44fe-9dd5-fa626b76aa1e\r\nx-timestamp: 1759584028225\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 9894fa1059a4b4f9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T16:56:48.763508Z","times_seen":17821057,"resource_available":true,"data":null}},"time_used":412,"timings":{"blocked":201,"dns":29,"connect":3,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auzxgwxsowaamxchvzhnseclqkdlxtybdes.com/@v1/services/temp-link/create?referrer=jito-claim.pages.dev","fqdn":"auzxgwxsowaamxchvzhnseclqkdlxtybdes.com","domain":"auzxgwxsowaamxchvzhnseclqkdlxtybdes.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jito-claim.pages.dev/checker/","date":"2025-10-04T13:20:28.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auzxgwxsowaamxchvzhnseclqkdlxtybdes.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 23:17:09 GMT","end":"Thu, 01 Jan 2026 23:17:08 GMT"},"fingerprint":{"sha1":"BC:D2:0A:E2:84:6C:5E:30:CB:C5:F2:92:96:B5:CE:CE:C9:68:ED:AD","sha256":"55:15:06:3A:98:BA:0F:15:D2:6D:46:83:BB:AA:1F:4C:11:70:E3:B5:2F:C4:EC:BC:D3:7D:03:4B:0C:23:53:7F"}}},"request":{"raw":"POST /@v1/services/temp-link/create?referrer=jito-claim.pages.dev HTTP/1.1\r\nHost: auzxgwxsowaamxchvzhnseclqkdlxtybdes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjdXN0b21lcklkIjoiWXpXQ21KdzU5SCIsImdyb3VwX2lkIjoxMDcwMTI1LCJpYXQiOjE3NTk0MTc3Mzh9.nnmChGNofXrDlC9yKU8yuiUqOpnQPBYlyxwz-FIByKQ\r\nX-Direction-Safe: 1759584028828\r\nX-Scale-Referrer: jito-claim.pages.dev/checker/\r\nX-Auth-Key: O7TSO%2FojOfiR6J4RDmd%2B23Gt4miZd5U5tWCXLBZb3Qo%3D\r\nX-Auth-Key-V2: MFGLUolUDHPsZ4jHhy%2BkWwrmMPSwD4x4mZkLATekxFM%3D\r\nContent-Length: 1719\r\nOrigin: https://jito-claim.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Oct 2025 13:20:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4587606\r\ncdn-uid: 0f8c994c-6486-40f7-a986-92e996f7e2d2\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ncache-control: no-cache\r\ncontent-encoding: br\r\netag: W/\"254-0cdbCiX766sT8EyNFZsb3sbLbT0\"\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/04/2025 13:20:29\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 938cdad531e421fda710a7db2b85fbfc\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":596,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c31eec061e81e2b859f40dcd2efa86fb","sha1":"d1c75b0a25fbebab13f04c8d159b1bdec6cb6d3d","sha256":"0a543808a435d2e5a4729c153fb85fcda7862bd0dc31cf508890472cbc8a538f","sha512":"d622315ffe8a7283ca8c1789f3be849cd3e622b7fc1726a70a45b0490a6a4f67fe43b01363be61147f6d996bc43b6b1bbe5c89875d7126af174acd34b8e57a02","ssdeep":"","tlshash":"88f04137f93d2fb0c83c115649ab67da6d2a7560a11006e82ea31ba6f219c072424e01","first_seen":"2025-10-04T13:20:57.131981Z","last_seen":"2025-10-04T13:20:57.131981Z","times_seen":1,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"auzxgwxsowaamxchvzhnseclqkdlxtybdes.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jito-claim.pages.dev/checker/fonts/0.otf","fqdn":"jito-claim.pages.dev","domain":"jito-claim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jito-claim.pages.dev/checker/","date":"2025-10-04T13:20:27.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jito-claim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 12:33:58 GMT","end":"Thu, 01 Jan 2026 13:31:58 GMT"},"fingerprint":{"sha1":"22:66:D0:E9:9E:96:78:D1:B4:56:31:A2:D1:6D:46:CC:92:70:DA:9B","sha256":"E2:AA:98:D0:5C:C5:29:9A:8C:91:3D:C4:DB:98:82:E0:91:50:BB:21:C2:63:2A:8C:CD:F3:21:95:2F:73:D3:45"}}},"request":{"raw":"GET /checker/fonts/0.otf HTTP/1.1\r\nHost: jito-claim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jito-claim.pages.dev/checker/css/stylesheet_1.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Oct 2025 13:20:28 GMT\r\ncontent-type: font/otf\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fCIfqAfI9bPgvnFljzzcoq3lgmUD1WUzkBsRVLNiq%2BM%2BB2HPoWEP2%2B1xmw18RBSGkFhV7vAbEMA4oYTFK7Q8qPDyxwEP%2FjSj9A13mL%2FyPW14VJsC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"3e5e47fe904ae90d3d15b197d9dc646f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9894fa0ec8c3a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":123040,"size_decoded":0,"mime_type":"font/otf","magic":"OpenType font data","md5":"8b596560260fe8d7fbb96e368603800f","sha1":"71c14766339bed3fddc7bbec1e042e4f3c81b980","sha256":"d35e8cdca0b54583100a7f06ad585cbab52e2617498dc19bdaee95d313a526ad","sha512":"5943f0fd0dc9812aff1e000bedc2c6e4f40ee420be2e653424174e7a66522f746a503c7240dae2fd1be03c38cea3da288317ece6507999a3b8d5dcb84a8f219e","ssdeep":"1536:exHXDdexq4y/1Gv5MjHt1FHQJgZE3cjmexwlGJaVfEguFq+lnofSa4G6nsb:HM/1o50HQJgZEGme9SEgUofSass","tlshash":"bcc32b026b8929a5ced40936c4eecfd30bb39ddc1c1817865ad226455ffcbd2d6223e9","first_seen":"2023-07-03T04:30:13Z","last_seen":"2026-07-23T18:06:49.17743Z","times_seen":78,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jito-claim.pages.dev/checker/images/6.webp","fqdn":"jito-claim.pages.dev","domain":"jito-claim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jito-claim.pages.dev/checker/","date":"2025-10-04T13:20:27.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jito-claim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 12:33:58 GMT","end":"Thu, 01 Jan 2026 13:31:58 GMT"},"fingerprint":{"sha1":"22:66:D0:E9:9E:96:78:D1:B4:56:31:A2:D1:6D:46:CC:92:70:DA:9B","sha256":"E2:AA:98:D0:5C:C5:29:9A:8C:91:3D:C4:DB:98:82:E0:91:50:BB:21:C2:63:2A:8C:CD:F3:21:95:2F:73:D3:45"}}},"request":{"raw":"GET /checker/images/6.webp HTTP/1.1\r\nHost: jito-claim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Oct 2025 13:20:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20386\r\ncf-ray: 9894fa0dbe0da0f0-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"59338d3ef558fcadd8094b057edb845b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=WAc1OitWcBmUUVo6O%2B0tlbsmfLmatFH2nPyA%2BQ3xrZDS%2BvDa76AodVbKofK2epUEJu01uTxz2ZSGGMc8F3HFRdBtB4CiGrxSEIYCoU3ZHKMDcM07Z7XOO0lhWP2ChaDOl9rAkt5EQg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2053\u0026min_rtt=1232\u0026rtt_var=674\u0026sent=34\u0026recv=22\u0026lost=0\u0026retrans=0\u0026sent_bytes=24318\u0026recv_bytes=3837\u0026delivery_rate=3902613\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=86294da4e6a80129\u0026ts=133\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20386,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6c4869f94c27ccebeb1fe6d3759e1d74","sha1":"1eaef9c80fb5a9fd2b800187c1d46152677b16ff","sha256":"88378676d9fac133f20b1ed8929c4c2c089916d49d529a333780e9bbdcbc0b8b","sha512":"74a478d9900c36b3c3418c0ecb1c787ebe07b3d5da3111df1297244b392bca2f12b201dc7313eedca26a82b4ff2761494c42a8be516acfdcde2b866ac3402cce","ssdeep":"384:xOmEt48JM/L6CAnW0AncZaKNipMFuP4dVtgjTg53zW3TAu4NL:xHK48JM/TAnW0qcZaGiOnjtgU5jC34NL","tlshash":"3392bf5697a5f48cddbdb03f00970009640ec995608555baeb0f2fcbbbf116ee17602b","first_seen":"2025-09-20T17:18:32.652251Z","last_seen":"2026-02-14T05:05:28.50545Z","times_seen":14,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jito-claim.pages.dev/checker/images/9.svg","fqdn":"jito-claim.pages.dev","domain":"jito-claim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jito-claim.pages.dev/checker/","date":"2025-10-04T13:20:27.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jito-claim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 12:33:58 GMT","end":"Thu, 01 Jan 2026 13:31:58 GMT"},"fingerprint":{"sha1":"22:66:D0:E9:9E:96:78:D1:B4:56:31:A2:D1:6D:46:CC:92:70:DA:9B","sha256":"E2:AA:98:D0:5C:C5:29:9A:8C:91:3D:C4:DB:98:82:E0:91:50:BB:21:C2:63:2A:8C:CD:F3:21:95:2F:73:D3:45"}}},"request":{"raw":"GET /checker/images/9.svg HTTP/1.1\r\nHost: jito-claim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Oct 2025 13:20:27 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3eaH89ZTqtQeFUM%2BYThQxkKPYk09XG1rsEdwtO5fXQVMo3FXyI1b1m62l8uZTIfPgMg6s0%2FebwAZZmKqzoGaDlKViOZQSrL02nrz8BJ8qc3yQQky\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"1e038d3c2f963ad39bf02a4c47303f4f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9894fa0dbe13a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1242,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"534496dd27e9a44d52d4bc11dd49132f","sha1":"8f868c8d5190f5fbe998df0743d6bc5ab164bfc7","sha256":"6ec66891d0b2efbe2d319ea18ef7ea9bcf76b4b214d4a0f4f93412d5c914875f","sha512":"bf0867588e23c97c5c48d7189f812770f7081e30c8ed9412f8559e4205a1eee1c0d7bd19af0bbbcfc2e808627ee503342b53322086872feeec794e7226a64fb9","ssdeep":"","tlshash":"072105d9528c56cc76420b00ea537275d57f30fb2335dfa443654b72370425d656bcd0","first_seen":"2025-09-16T05:04:38.666474Z","last_seen":"2026-05-07T11:37:05.382783Z","times_seen":30,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jito-claim.pages.dev/checker/fonts/2.otf","fqdn":"jito-claim.pages.dev","domain":"jito-claim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jito-claim.pages.dev/checker/","date":"2025-10-04T13:20:27.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jito-claim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 12:33:58 GMT","end":"Thu, 01 Jan 2026 13:31:58 GMT"},"fingerprint":{"sha1":"22:66:D0:E9:9E:96:78:D1:B4:56:31:A2:D1:6D:46:CC:92:70:DA:9B","sha256":"E2:AA:98:D0:5C:C5:29:9A:8C:91:3D:C4:DB:98:82:E0:91:50:BB:21:C2:63:2A:8C:CD:F3:21:95:2F:73:D3:45"}}},"request":{"raw":"GET /checker/fonts/2.otf HTTP/1.1\r\nHost: jito-claim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jito-claim.pages.dev/checker/css/stylesheet_1.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Oct 2025 13:20:28 GMT\r\ncontent-type: font/otf\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vi2mPcgUO%2BGaU7CZZ0VHuTWGdVav3kz1wbkZdYtBsIzO4EH6y%2BiDc7ofGIOolTxkLHPtsz9k%2Blft%2ByfStZXfpFhj0%2BpPx%2FH8v10XirZXBxBw4DWJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"b19abaf623a2ad432e191929425d22ac\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9894fa0ec8d1a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":122080,"size_decoded":0,"mime_type":"font/otf","magic":"OpenType font data","md5":"79b6167962ee95a91f64e8bd218d6fec","sha1":"2f08ac4aedccab83ff7aa5d74a0cbbbdf8789862","sha256":"94252cc23a51ebcab1826a001a10d364a22ae296f0ec9484fa3ef105ca48fcfa","sha512":"6c188d51703886b47afe6472954046e7b6355aa0fe10e4413d0ae3ae85424d8712cdeaf893c456da1fc8de3d5fd4396575cd113eb687c94cea18622ab9735c58","ssdeep":"3072:xzVgDN0A/odKaqukENZKhB4Y3Dy/NADm+5xTf1bs0:vaqA/odKaqukUa4iD4NA3tbt","tlshash":"e0c31a065b896565cad40a36c4eecfe70bb3dddc1c1816864ad226444ffcfd2da223e9","first_seen":"2023-04-15T15:59:13Z","last_seen":"2026-07-23T18:06:49.16667Z","times_seen":167,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auzxgwxsowaamxchvzhnseclqkdlxtybdes.com/@v1/cdn/js/pizzicato.custom.js?t=29326400","fqdn":"auzxgwxsowaamxchvzhnseclqkdlxtybdes.com","domain":"auzxgwxsowaamxchvzhnseclqkdlxtybdes.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jito-claim.pages.dev/checker/","date":"2025-10-04T13:20:28.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auzxgwxsowaamxchvzhnseclqkdlxtybdes.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 23:17:09 GMT","end":"Thu, 01 Jan 2026 23:17:08 GMT"},"fingerprint":{"sha1":"BC:D2:0A:E2:84:6C:5E:30:CB:C5:F2:92:96:B5:CE:CE:C9:68:ED:AD","sha256":"55:15:06:3A:98:BA:0F:15:D2:6D:46:83:BB:AA:1F:4C:11:70:E3:B5:2F:C4:EC:BC:D3:7D:03:4B:0C:23:53:7F"}}},"request":{"raw":"GET /@v1/cdn/js/pizzicato.custom.js?t=29326400 HTTP/1.1\r\nHost: auzxgwxsowaamxchvzhnseclqkdlxtybdes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Oct 2025 13:20:28 GMT\r\ncontent-type: text/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4587606\r\ncdn-uid: 0f8c994c-6486-40f7-a986-92e996f7e2d2\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\ncache-control: no-store, must-revalidate, no-cache\r\ncontent-encoding: br\r\netag: W/\"53a18-YV86uihZdod2kaKKb6BauUVy3MU\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=pizzicato.custom.js\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/04/2025 13:20:28\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 64380140ebc8afaefbe074d7649b32db\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":342552,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65428)","md5":"24404746a19282e59647a86b7e141a22","sha1":"615f3aba285976877691a28a6fa05ab94572dcc5","sha256":"9414e2c983ebb430480803c5e608a2b747f8725aefbf8e7f137b2ac7f916803e","sha512":"d870420943e56e1a8e5756b0bdc7c2cb26c58639c7dc1911df1a109eed1b8ad88dc1ec23e68ebb65bb934abf710746dd63af61f558b09b799d20f43d06df9afa","ssdeep":"6144:UsWR+jpPUbczk6p1ZsJzO3fXefpvVBtcaovA8C3Iq:RWklPQUWCvXefT38o9","tlshash":"90748c917280617916634fea41bf094ab238f120a409892cf75cc8d71bb99dad5bff7c","first_seen":"2025-10-04T13:20:57.139939Z","last_seen":"2025-10-08T22:43:50.294317Z","times_seen":59,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":28,"dns":19,"connect":1,"send":0,"wait":150,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"auzxgwxsowaamxchvzhnseclqkdlxtybdes.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auzxgwxsowaamxchvzhnseclqkdlxtybdes.com/@v1/log/join","fqdn":"auzxgwxsowaamxchvzhnseclqkdlxtybdes.com","domain":"auzxgwxsowaamxchvzhnseclqkdlxtybdes.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jito-claim.pages.dev/checker/","date":"2025-10-04T13:20:28.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auzxgwxsowaamxchvzhnseclqkdlxtybdes.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 23:17:09 GMT","end":"Thu, 01 Jan 2026 23:17:08 GMT"},"fingerprint":{"sha1":"BC:D2:0A:E2:84:6C:5E:30:CB:C5:F2:92:96:B5:CE:CE:C9:68:ED:AD","sha256":"55:15:06:3A:98:BA:0F:15:D2:6D:46:83:BB:AA:1F:4C:11:70:E3:B5:2F:C4:EC:BC:D3:7D:03:4B:0C:23:53:7F"}}},"request":{"raw":"POST /@v1/log/join HTTP/1.1\r\nHost: auzxgwxsowaamxchvzhnseclqkdlxtybdes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nx-scale-referrer: jito-claim.pages.dev/checker/\r\nauthorization: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjdXN0b21lcklkIjoiWXpXQ21KdzU5SCIsImdyb3VwX2lkIjoxMDcwMTI1LCJpYXQiOjE3NTk0MTc3Mzh9.nnmChGNofXrDlC9yKU8yuiUqOpnQPBYlyxwz-FIByKQ\r\nx-device: 0:Windows:Firefox\r\nContent-Length: 2\r\nOrigin: https://jito-claim.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Oct 2025 13:20:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 32\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4587606\r\ncdn-uid: 0f8c994c-6486-40f7-a986-92e996f7e2d2\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ncache-control: no-cache\r\netag: W/\"20-llti1nxI8SZi+xVpiFYUSfGpvg8\"\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/04/2025 13:20:29\r\ncdn-edgestorageid: 830\r\ncdn-requestid: c3066bdac8646652c519a574a0be701f\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":32,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3b5b4d21f8c87c5e6534b5a1d9d4574a","sha1":"965b62d67c48f12662fb156988561449f1a9be0f","sha256":"24dcf0603597089c21d0ab963001064690004c39e72221981b7faf7a5edd5f25","sha512":"1218be959182a70f35f2eeaeadc640c721f546b6b46b48f21f9acb3dead02d478da0ac6855f6c55777fbf33486b967fad262e93a5da6327ac7517933f9663ba8","ssdeep":"","tlshash":"d18000000e00aca83bc20802b2832028aaf22a80808b20a2800c803a0b028e0c22ba0c","first_seen":"2025-07-26T22:59:19.534167Z","last_seen":"2025-10-13T01:44:36.478944Z","times_seen":529,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"auzxgwxsowaamxchvzhnseclqkdlxtybdes.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jito-claim.pages.dev/checker/images/10.webp","fqdn":"jito-claim.pages.dev","domain":"jito-claim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jito-claim.pages.dev/checker/","date":"2025-10-04T13:20:27.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jito-claim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 12:33:58 GMT","end":"Thu, 01 Jan 2026 13:31:58 GMT"},"fingerprint":{"sha1":"22:66:D0:E9:9E:96:78:D1:B4:56:31:A2:D1:6D:46:CC:92:70:DA:9B","sha256":"E2:AA:98:D0:5C:C5:29:9A:8C:91:3D:C4:DB:98:82:E0:91:50:BB:21:C2:63:2A:8C:CD:F3:21:95:2F:73:D3:45"}}},"request":{"raw":"GET /checker/images/10.webp HTTP/1.1\r\nHost: jito-claim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Oct 2025 13:20:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 58934\r\ncf-ray: 9894fa0dbe14a0f0-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"07143ea979b9366d6e0bdf6494e718f6\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Vj0d5AYeQGl3bs4yK9xFo1lkqS%2Bple47ZHDvkDNDMNYjABH5Ab03gp7nGB%2Fvx8Wso4FDcZy2mMcmBlZcxmgqIWLfAbtbRqR%2FAJyZYbJBsMvJuq1pGreirUqwIWmb%2BSJEMCDuGqnkcQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1261\u0026min_rtt=694\u0026rtt_var=678\u0026sent=111\u0026recv=30\u0026lost=0\u0026retrans=0\u0026sent_bytes=115108\u0026recv_bytes=4200\u0026delivery_rate=36011962\u0026cwnd=55200\u0026unsent_bytes=0\u0026cid=86294da4e6a80129\u0026ts=136\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58934,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ea1793806a8272d597abee097b2a450a","sha1":"e0a99368ec3eecd775739bce511ec4dde2d2448a","sha256":"84327dc75eb976007bd5e2772054c2003b0a74cc346abe99f0c3ce1f00883935","sha512":"01ddbbddda82312339b65aa0e00566048485b75db833d879d0861f83c5d9d759d6a3030710a52834123e594bef94ffd40e8abef324d1fa4a145a1629f1466e59","ssdeep":"1536:fcDmXmgSZ+TDa0bSclYI6jF9CRaxHyFGzD:f2mX7HhSclcF9AyH7H","tlshash":"4143f292e43a72e425645a70dd03f0827b4ad692adbe2ccbfa4b73b48d6595a0f4c430","first_seen":"2025-09-16T05:04:38.710342Z","last_seen":"2026-01-03T00:05:16.318334Z","times_seen":11,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auzxgwxsowaamxchvzhnseclqkdlxtybdes.com/@v1/services/connector?referrer=jito-claim.pages.dev","fqdn":"auzxgwxsowaamxchvzhnseclqkdlxtybdes.com","domain":"auzxgwxsowaamxchvzhnseclqkdlxtybdes.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jito-claim.pages.dev/checker/","date":"2025-10-04T13:20:28.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auzxgwxsowaamxchvzhnseclqkdlxtybdes.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 23:17:09 GMT","end":"Thu, 01 Jan 2026 23:17:08 GMT"},"fingerprint":{"sha1":"BC:D2:0A:E2:84:6C:5E:30:CB:C5:F2:92:96:B5:CE:CE:C9:68:ED:AD","sha256":"55:15:06:3A:98:BA:0F:15:D2:6D:46:83:BB:AA:1F:4C:11:70:E3:B5:2F:C4:EC:BC:D3:7D:03:4B:0C:23:53:7F"}}},"request":{"raw":"GET /@v1/services/connector?referrer=jito-claim.pages.dev HTTP/1.1\r\nHost: auzxgwxsowaamxchvzhnseclqkdlxtybdes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjdXN0b21lcklkIjoiWXpXQ21KdzU5SCIsImdyb3VwX2lkIjoxMDcwMTI1LCJpYXQiOjE3NTk0MTc3Mzh9.nnmChGNofXrDlC9yKU8yuiUqOpnQPBYlyxwz-FIByKQ\r\nX-Direction-Safe: 1759584028835\r\nX-Scale-Referrer: jito-claim.pages.dev/checker/\r\nX-Auth-Key: TolG1BXUIadguaqxG5hPlaAOqWj6IXZyXhgGD1g0HBs%3D\r\nOrigin: https://jito-claim.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Oct 2025 13:20:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4587606\r\ncdn-uid: 0f8c994c-6486-40f7-a986-92e996f7e2d2\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ncache-control: no-cache\r\netag: W/\"18b-JPMj3YYnrxescG7lBkzHczbtV7Q\"\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/04/2025 13:20:29\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 0edfa3163c33f2e4c1ea6f3edd80b4a1\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":395,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8154a458ec235fd38f6d632f3af91a65","sha1":"24f323dd8627af17ac706ee5064cc77336ed57b4","sha256":"b911b6aeea2f5fceeda1dc9152ea5e9d43d1126107f65cbadc3b1235796fa0a0","sha512":"4115db2a3424105619b9e53d13ee4880feecd34c4f903bcd673c62c5bfa2ed75d07c2d6d6e4545197372816f8457dc4f055015d65384140fbc6a270960114eba","ssdeep":"","tlshash":"6fe0f17079a496b7923879c1bc10ca014c72ae7513544a04e398fb80a291499107b63f","first_seen":"2025-10-04T13:20:57.143439Z","last_seen":"2025-10-04T13:20:57.143439Z","times_seen":1,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"auzxgwxsowaamxchvzhnseclqkdlxtybdes.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jito-claim.pages.dev/checker/fonts/3.otf","fqdn":"jito-claim.pages.dev","domain":"jito-claim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jito-claim.pages.dev/checker/","date":"2025-10-04T13:20:27.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jito-claim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 12:33:58 GMT","end":"Thu, 01 Jan 2026 13:31:58 GMT"},"fingerprint":{"sha1":"22:66:D0:E9:9E:96:78:D1:B4:56:31:A2:D1:6D:46:CC:92:70:DA:9B","sha256":"E2:AA:98:D0:5C:C5:29:9A:8C:91:3D:C4:DB:98:82:E0:91:50:BB:21:C2:63:2A:8C:CD:F3:21:95:2F:73:D3:45"}}},"request":{"raw":"GET /checker/fonts/3.otf HTTP/1.1\r\nHost: jito-claim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jito-claim.pages.dev/checker/css/stylesheet_1.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Oct 2025 13:20:28 GMT\r\ncontent-type: font/otf\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xahTKTipngLuEKzJCczjSGNK0By6F3uogXhLMJ4kq8pjh5F4Hkx2IYcwGUbQgqqLeQugEeXMDBR4aESEQ4P3uvXdIQ440hteQUwBfqTudD%2FG4R5s\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"cea7919393eef44a9af518a549f99955\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9894fa0ec8e6a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119176,"size_decoded":0,"mime_type":"font/otf","magic":"OpenType font data","md5":"3ab5a6301d79b3e3e3afeca89c2d1695","sha1":"4f2ce3d81d3cfb85ac46d73b024b0f626765a06c","sha256":"0b9aa117448147a616b62314d1c8dc1c0d1215ae36b280d50579d451fadfdf94","sha512":"8242d373a90ecada58f2bf17ad02298e61fbf960f5eb8f0b166780de9b97bb3dfb0c4f0bb3399ca9fed328c614ded4718a34eeb7c5a2004098d3dceaf81711a8","ssdeep":"1536:5sHFDzgw1dm3WWHXWtvyDEAdv7/0TD35VH2P/CfppTP4flXW+W66:igxWWHBtdITD3UC/gflXO66","tlshash":"d0c32c025b892564cad41936c4efcfe74bb3dddd5d2802864ac226450ffcfa2d6223e9","first_seen":"2023-04-15T15:59:13Z","last_seen":"2026-07-24T21:38:52.51418Z","times_seen":209,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jito-claim.pages.dev/checker/jquery.js","fqdn":"jito-claim.pages.dev","domain":"jito-claim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jito-claim.pages.dev/checker/","date":"2025-10-04T13:20:27.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jito-claim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 12:33:58 GMT","end":"Thu, 01 Jan 2026 13:31:58 GMT"},"fingerprint":{"sha1":"22:66:D0:E9:9E:96:78:D1:B4:56:31:A2:D1:6D:46:CC:92:70:DA:9B","sha256":"E2:AA:98:D0:5C:C5:29:9A:8C:91:3D:C4:DB:98:82:E0:91:50:BB:21:C2:63:2A:8C:CD:F3:21:95:2F:73:D3:45"}}},"request":{"raw":"GET /checker/jquery.js HTTP/1.1\r\nHost: jito-claim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Oct 2025 13:20:27 GMT\r\ncontent-type: application/x-javascript\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2B%2BG%2BgwEHAiKvFVEaLhB0f1M%2B0jX6A9HLSuWFnh6HgT2x2hKVmT19HGYYr3DjaJVwyTgyA41gL3Wq26C1AJPsboOK8Gv7cVKflR9SfZrdtR%2Bb0vr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"1a6d10031daaa628804a32b89fec2ab1\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9894fa0dbe06a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":305579,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65286)","md5":"2442916ae5a79e71183cdf913566c90f","sha1":"5ca408825bc6a37191d05709b5c42cf9c8722430","sha256":"90db435beb66d79d24214d6d71318b6ccf0a692c8cb7c7c0b48531796789b97e","sha512":"2d52f965ae91d3842d41a138ab95a85ce60a94f1410e90e34887e57fe8ff0e5dea46910059cd6c9b2d1d6375b77a68f30c05f4facf0c0fe632672aab15c7c157","ssdeep":"3072:gXn1aXUTTT3lVLN9IBhxWoLnveRn9ERyNqrpaudgfHLV35ePgPuV:Gn1aXUHDPIran9Iyqrrdg/LV35ePgPuV","tlshash":"7d54211ae7e911ab836990c2df628df7b4dcb910035e07adb9d6f3a6e004cf451e568c","first_seen":"2025-10-02T19:27:27.640167Z","last_seen":"2025-10-04T13:21:25.490964Z","times_seen":4,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jito-claim.pages.dev/checker/css/stylesheet_0.css","fqdn":"jito-claim.pages.dev","domain":"jito-claim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jito-claim.pages.dev/checker/","date":"2025-10-04T13:20:27.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jito-claim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 12:33:58 GMT","end":"Thu, 01 Jan 2026 13:31:58 GMT"},"fingerprint":{"sha1":"22:66:D0:E9:9E:96:78:D1:B4:56:31:A2:D1:6D:46:CC:92:70:DA:9B","sha256":"E2:AA:98:D0:5C:C5:29:9A:8C:91:3D:C4:DB:98:82:E0:91:50:BB:21:C2:63:2A:8C:CD:F3:21:95:2F:73:D3:45"}}},"request":{"raw":"GET /checker/css/stylesheet_0.css HTTP/1.1\r\nHost: jito-claim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jito-claim.pages.dev/checker/css/stylesheet_1.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Oct 2025 13:20:27 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=owjuOjI87kVhKTdPhsA6MCAbbmJ97IFf7pd%2BbAzpJrLwWyzktO%2FoTwS27bXKmdupIYxJINVMGuECcVCsiseiycPcchLYBK%2BgKfb1Wn6KRXyOTEH1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ab8329a947a2cb6afc364cb1ce337c09\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9894fa0e1f1ea0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":825,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (825), with no line terminators","md5":"1e796fcb2e1e3e4824147867f7ea3b76","sha1":"fee633606a3d4f41028aec672d7c0daf06e9e983","sha256":"ac83e262902459efcbba55083ba45b4c790c91a8a3a68c4eccb1c8540d97d16f","sha512":"7fc1727c7487e333f584344e6aeb83b7469172a447e5d0512c72a20536b89c571f75a2967f4f66c96f6a9681424a15ac3bdb512ab0f88bebef4e656eb7bdf9c0","ssdeep":"","tlshash":"55012b3009257805d2f74c7234c87803180dd05492d76913e61e1af85ff996b63a7729","first_seen":"2025-10-02T19:27:27.627541Z","last_seen":"2025-10-04T13:21:25.489293Z","times_seen":4,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jito-claim.pages.dev/checker/images/5.ico","fqdn":"jito-claim.pages.dev","domain":"jito-claim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jito-claim.pages.dev/checker/","date":"2025-10-04T13:20:27.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jito-claim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 12:33:58 GMT","end":"Thu, 01 Jan 2026 13:31:58 GMT"},"fingerprint":{"sha1":"22:66:D0:E9:9E:96:78:D1:B4:56:31:A2:D1:6D:46:CC:92:70:DA:9B","sha256":"E2:AA:98:D0:5C:C5:29:9A:8C:91:3D:C4:DB:98:82:E0:91:50:BB:21:C2:63:2A:8C:CD:F3:21:95:2F:73:D3:45"}}},"request":{"raw":"GET /checker/images/5.ico HTTP/1.1\r\nHost: jito-claim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Oct 2025 13:20:27 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MsNA1Aa1ldhJpM2XZLSdDj3AZjZTFQ021POLt7fKVHKdpHtQ1f02bAOPd186zV3kmas445JoawUaUIpWgA8Vurvj3wux2beGqThefpWxoCa0xrSS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"577d5ff7f3ea6bd4e4cb879ba98ec74f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9894fa0e986aa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22382,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"dfa170c4e71d08415c03ecc44ac8a8ea","sha1":"4014e39c3797c5f33b4c449bf2dee00acea8441d","sha256":"3dcff0e2fbcdf97a708579c536bc5356b1aa1b7250ff6051d624b1826e7a7869","sha512":"d84bd37b118ff5db04a1ba41722ccf47bec0fbbd78b9b38c2b08632156ba266823defebdaf307014972b0acfce8815d4199808381aabcc290abd7108e040d205","ssdeep":"96:o/rSpUQ8RSxoSv5gJCJcI5VcNzNesBxcEj1moK2as+oxO3BLmKX8ZM1:Iibwoc+9V6LLZmaaexQf8ZM1","tlshash":"77a2b49606504c22db1d52f0ab8bcafe22736d792732960dd4fa7d7339ba2470c2145d","first_seen":"2025-07-16T14:09:54.336258Z","last_seen":"2026-06-29T00:40:53.533802Z","times_seen":74,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
