{"report_id":"c44cb28b-c114-41b1-b964-6f0530d7e753","version":6,"status":"done","tags":[],"date":"2026-02-11T03:31:09Z","url":{"schema":"https","addr":"claim-gate.fun/","fqdn":"claim-gate.fun","domain":"claim-gate.fun","tld":"fun"},"ip":{"addr":"172.67.192.68","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"claim-gate.fun/","fqdn":"claim-gate.fun","domain":"claim-gate.fun","tld":"fun"},"title":"Token | Airdrop","dom":{"size":122115,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"4de4ea8e23b08182be26e1e81c4d4530","sha1":"f9e4e99d65713ed2398018210ad290fded7fe461","sha256":"5aff2f9dea6fb40b50859b4a96fbd87d0942380091343b20992491ee15852cf0","sha512":"58edd2a0e9b90c435dbbe62c36657949d57ad62fae4337a4489ed0e6a67299c1214163f390739cf8805e8c184e0d290cea1cd693f01b3e60814152621e00706b","ssdeep":"3072:e1Oqu/klh3ZGxZ5GIhXq2dl2iBKjOFMtBz7:B4h","tlshash":"12c3a75669e35127781354ee3bdb6b093634b0039145e9683efd22c4cfc6ab295b3b8c","dom_hash":"domhash50216ce70e00a476fb140b3c4057dd4d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"claim-gate.fun/","fqdn":"claim-gate.fun","domain":"claim-gate.fun","tld":"fun"},"ip":{"addr":"172.67.192.68","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-18T03:31:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"claim-gate.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"claim-gate.fun","ip":{"addr":"104.21.43.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-09","domain_rank":0,"first_seen":"2026-02-11T03:06:42.632158Z","last_seen":"2026-02-11T03:06:42.632158Z","alert_count":14,"request_count":14,"received_data":1924696,"sent_data":6746,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"claim-gate.fun/","fqdn":"claim-gate.fun","domain":"claim-gate.fun","tld":"fun"},"ip":{"addr":"104.21.43.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f7ff7c357900e89f3996440f6d993141","sha1":"009487d13786f6ccac192422512a76a136756038","sha256":"a6359fa762114ac2a13c85832e5e47eab47a85896d116d4e8976c5e9d22c4bed","sha512":"954367cce1dbc5ebfc39ad424582a456f7521d76c6959e4a293aa07f61fcbff0c443222bbb599c323d20770ed732563fafb2883f630901c5d318d81faf0b68dc","ssdeep":"","tlshash":"72e02b286aa755fd36b73591c71fb240e86500735085d801fd1cf58a0fc0e1434b9fc9","size":319,"data":"","first_seen":"2025-03-07T16:16:50.313512Z","last_seen":"2026-06-02T08:58:23.961977Z","times_seen":108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-gate.fun/","fqdn":"claim-gate.fun","domain":"claim-gate.fun","tld":"fun"},"ip":{"addr":"104.21.43.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"63afcb80a028dedea1f9b5a70c4f0391","sha1":"1425284a0a9f74b1faa85f1d3524151015c4bb59","sha256":"25bc91c3c40ea75713f438f6780c69e28a8afe1e05edb716f1f6205f627cefaf","sha512":"5ac25311757f73e66a340aa38e6c5f1532122c3c8ddd0d6afafc139a09f276720bc457b83ce4c9069fa80248f69c3d723a4c185259dadb6c1083acb4b12f36f1","ssdeep":"","tlshash":"06e02ea82ee61338237b2120831fd28037e48043a0e4f8023a1ce1cb0fd2e1000bf5db","size":292,"data":"","first_seen":"2025-03-07T16:16:50.323665Z","last_seen":"2026-06-02T08:58:23.963206Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-gate.fun/","fqdn":"claim-gate.fun","domain":"claim-gate.fun","tld":"fun"},"ip":{"addr":"104.21.43.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"767ff8a2d4917d8777194a41ef638bf1","sha1":"2a94a3ae20c37a51baaeaf2ccfba1748ba14d6a0","sha256":"b896a2eaf3c9f5988167e3d4e80040670d25eb6065791fe7093a727b94686be3","sha512":"22770bbf64c8135ba689da754dc6f6659ced595f6e084a827e464bd59dcd72f12e2ca2fc93335321c974cbf81244dbb5aff3f5bb992f49a7cc579bbee58bdf74","ssdeep":"","tlshash":"e9d0a93e36b62634093be83b870fa38a7eb2106b2006c80b3d4c40460fa0f1038f2988","size":253,"data":"","first_seen":"2026-02-11T03:06:45.949055Z","last_seen":"2026-02-18T18:01:58.050012Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-gate.fun/","fqdn":"claim-gate.fun","domain":"claim-gate.fun","tld":"fun"},"ip":{"addr":"104.21.43.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"86660623b23372be917102dfad760c6c","sha1":"b1bce5819e7c5aa8e8028b462cf61eef77f1e49c","sha256":"f007d7bb73151ea36b1ce6a51502b580096251fa1835a48704cf8d112c50dade","sha512":"dfcd047a0e2b137111cfccafeae17d39a82fa539a42d739823dc01e2998a7aa5161a83ed86c934bc565109e3a02e5917dd11518581b3d7218ffde3a0631275a7","ssdeep":"384:0ZWF88Gls2CrT9HasZab62Bx8hA8AFluS/fEMBXNmc4vFGiGSW:c8GANH1Z+oA8AFM+fEuuFg","tlshash":"92c272292bf7203155a765a75fdba125302060073b8aca05399d87c64fe2e70e9f7bdc","size":26063,"data":"","first_seen":"2026-02-11T03:06:45.950451Z","last_seen":"2026-02-11T03:31:16.008046Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-gate.fun/","fqdn":"claim-gate.fun","domain":"claim-gate.fun","tld":"fun"},"ip":{"addr":"104.21.43.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9ab48ebbb89ab08de8475162c6b9c108","sha1":"6e88f19077458194d92c42a00ad52857e7532340","sha256":"b38457eef3c41a456c7f56787688e03f24928fa6b434a46e284eb9a37680b533","sha512":"e68fefd31fde8bf267214a0e2cb32ffb293e614924bc8cf464e14e197d69b409bb1f7072e0a1c9489207cf604985150e4a3ed36da46d895c4cd817a7bea50a5e","ssdeep":"","tlshash":"a1e0265413902210056766ae13c372b0b8623447a8458d243f8dc3049ff06f18ed27aa","size":341,"data":"","first_seen":"2026-02-11T03:06:45.953442Z","last_seen":"2026-02-11T03:31:16.008732Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-gate.fun/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fwebdriverio.js%3Ft%3D29513010%26u%3DQw1ssC27qGzXkdYdGDY5N2ZmNGFkODBmZTU0ODQyNzZlNzM1OQEVmBpaW53uRyoO7Q","fqdn":"claim-gate.fun","domain":"claim-gate.fun","tld":"fun"},"ip":{"addr":"104.21.43.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c835ce0aa761a791b29ba4c102a85e28","sha1":"828e40328ca8ff740f1090e6f63e170c1592a62c","sha256":"4ee6631554867dc1bfadbfe5f4b4ebf4cec5164ba142f8db92f840c2028496cf","sha512":"49cefc3ca9614cebafe201eef12b5cdebcdd19da6ab30f530d7a81a8ef91fca5f02eb63108b8056c2dbd4c22b8b337aae939a712f4a876bdeef21a1e2a9f3225","ssdeep":"6144:9ujB8gltIeTM5/S8g6zRhNgDzQebuazBzqXQPkBAUvVdZcml4L:ihltVM/g6ZszQeqazNqXQcBvK","tlshash":"29d4bcec970a167788cb97b6423363afef884d1a236b3c406ec19cd1574a74e53ea15c","size":641034,"data":"","first_seen":"2026-01-01T19:22:06.925398Z","last_seen":"2026-03-30T11:52:16.142566Z","times_seen":405,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-gate.fun/","fqdn":"claim-gate.fun","domain":"claim-gate.fun","tld":"fun"},"ip":{"addr":"104.21.43.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2781e19bb34f54b70743a9e9a810d440","sha1":"fc6a1ac5901635f9306cd280fde0f040f0959fcc","sha256":"b8abbcf25a535223e3c35c95b8a460e3d5a5b0a5f4ed435ebe4512141f325648","sha512":"2aa0fbf73562e1a3e1d14dc326c0f7a0ab384bd90d7813cfe46ad31ec95bb41ed5bb27158b2bd3a6d919d78dc35e3b9fe8b9520a0e161fe795d69e19bdd857c0","ssdeep":"3072:YytTep6CITiNAu/BZTSz8sPj69XSTkaz1Pxmxc0ONtkq69kcGdNXED/B7BJoCEAG:YyYZDTjg2CYFxOmG/0opMsU2h","tlshash":"0c9461b85e9327ebeb629baf65a2d1a4f400390d32477732a5c5fe2fac2455071d31c2","size":443339,"data":"","first_seen":"2026-02-11T03:06:45.954482Z","last_seen":"2026-02-18T18:01:58.048913Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-gate.fun/face-api.fluid.min.js","fqdn":"claim-gate.fun","domain":"claim-gate.fun","tld":"fun"},"ip":{"addr":"104.21.43.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"640783b8922512a6426449ae65d89610","sha1":"c393b4e1bb7cf0e642183811d0ad42b5b618bbcf","sha256":"6d85a6b19614678b37977cc7c3660ed49cb414fa6002ceac6fc6ba0fd1222f72","sha512":"3668d8ab89339de9c5f7d196e0914fed6313bf6fcea399dbf31c6b5a2464520d75fa3c55da52b89fc230a2f3d2265e6275b039f29f5cbede98d5fb12f5a249bf","ssdeep":"3072:6+tpe3DgRKHk06J+wseGhdOP0ezTdJQVamqVFti069kiiv1Xu7lD7BJoCEAnHs2n:6+a5Hk0m+wBmOMXVsEiBmKLWGU24","tlshash":"dca484b85e9223ebe7629baf55a2d1a8f400350d36837732a5c5fe6fac3855071d31c2","size":451166,"data":"","first_seen":"2026-02-11T03:06:45.935977Z","last_seen":"2026-02-18T18:01:58.043287Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"claim-gate.fun/64b5d5afccfa95aecdbd90514aa42144c233e477.png","fqdn":"claim-gate.fun","domain":"claim-gate.fun","tld":"fun"},"ip":{"addr":"104.21.43.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-gate.fun/","date":"2026-02-11T03:30:46.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-gate.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 11:05:53 GMT","end":"Sun, 10 May 2026 12:04:22 GMT"},"fingerprint":{"sha1":"D9:DE:01:94:79:66:1E:92:EF:80:95:DB:29:71:6A:6E:DC:95:8F:8E","sha256":"BD:3E:FD:A3:1E:E0:DB:2C:9A:2C:10:3A:7F:6A:1F:49:B6:F6:BC:1A:1D:BF:AF:E0:E3:BA:26:DA:46:91:23:5E"}}},"request":{"raw":"GET /64b5d5afccfa95aecdbd90514aa42144c233e477.png HTTP/1.1\r\nHost: claim-gate.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-gate.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 03:30:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 93688\r\ncast-mode: default\r\nlast-modified: Mon, 09 Feb 2026 15:37:49 GMT\r\netag: \"6989ff4d-16df8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 1467\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ymnUBJfjYuaqMD8h5uXjC4V1YwdonpNEw1d2JhRJ%2FKcUJfDE%2By8oA7flKIYXerH%2F9ieQy1as5xSdt%2B8zSahDBjGZ%2FWyo3VaGImZwQK8L\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc0c501bc4476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93688,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 717x717, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2aec2b42429867c42c318a2aa951e5d8","sha1":"64b5d5afccfa95aecdbd90514aa42144c233e477","sha256":"6443419e73c0bd9103c0fcf689fa1ba0ea61644537ecb01db6ee1b66c4eb0983","sha512":"7e350458c4ebcb371e1318564d304260f5c6d436a9761ddf2076c86a9a2ebbf96a7b9228a39c1d56451332d270b4c4568b6cc82160ab1a1d48516e978745668d","ssdeep":"1536:ImaxfOOV0qBZmucyCQ6vqGB2wt0xOLXidfzxyM1SDIrLbFdy8D9R8Nt9bNNG+Qv3:ImaEOV1BZmucyCnqG7tQBzxf1SDImlfq","tlshash":"93931270246205eff981218c6a4ce6022bd342ff3bc7a26476746fbd54c6a96750d3ab","first_seen":"2026-01-20T23:52:00.050668Z","last_seen":"2026-02-11T03:31:15.994622Z","times_seen":4,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"claim-gate.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-gate.fun/5296100bf92a9df9aa9cf8b820fa75e474e8917e.woff2","fqdn":"claim-gate.fun","domain":"claim-gate.fun","tld":"fun"},"ip":{"addr":"104.21.43.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-gate.fun/","date":"2026-02-11T03:30:47.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-gate.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 11:05:53 GMT","end":"Sun, 10 May 2026 12:04:22 GMT"},"fingerprint":{"sha1":"D9:DE:01:94:79:66:1E:92:EF:80:95:DB:29:71:6A:6E:DC:95:8F:8E","sha256":"BD:3E:FD:A3:1E:E0:DB:2C:9A:2C:10:3A:7F:6A:1F:49:B6:F6:BC:1A:1D:BF:AF:E0:E3:BA:26:DA:46:91:23:5E"}}},"request":{"raw":"GET /5296100bf92a9df9aa9cf8b820fa75e474e8917e.woff2 HTTP/1.1\r\nHost: claim-gate.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-gate.fun/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 03:30:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 14108\r\ncast-mode: default\r\nlast-modified: Mon, 09 Feb 2026 15:37:49 GMT\r\netag: \"6989ff4d-371c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 1467\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FT1W80FWO5I8POgJQEBFF1Wzq2241l0EOOamPr1G%2BeTtEGLmf1t3mf5qXjsOPb%2FpY8kdA5yW5dAS3HzsXJz9SXWuppKKt0y8LXPHPNX0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc0c503ec6a76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14108, version 1.0","md5":"1589a53d0b0e81b757201b56ec289d92","sha1":"5296100bf92a9df9aa9cf8b820fa75e474e8917e","sha256":"849290ef12a2eeb9af5c11924120d11aa4ae8b435ed3347d7fc8bc240c293ca3","sha512":"08de38ebe938a9036ce4a02d50810117cd339169f0ea8a55350d22b373fed7f58999eb41c51f969eac1726dda7bc28f92bc5b0e6579c27046f6dda93d45fd1b4","ssdeep":"384:9fW/LcVxKHhaPKTjaRjtcyV1sKDKka/wNu04jP0T:9fW/Lo4RHkcyV1p+ka/wNu03","tlshash":"4152cf95830d8a564bec68b0563a92d912ecc7f0940d93443f8c3da1687eabd935b3fc","first_seen":"2025-06-04T22:07:03.561923Z","last_seen":"2026-06-06T20:49:22.625375Z","times_seen":1269,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"claim-gate.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-gate.fun/d7c94b4e5ad6062eb1102c5e7f78915d563a508b.woff2","fqdn":"claim-gate.fun","domain":"claim-gate.fun","tld":"fun"},"ip":{"addr":"104.21.43.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-gate.fun/","date":"2026-02-11T03:30:47.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-gate.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 11:05:53 GMT","end":"Sun, 10 May 2026 12:04:22 GMT"},"fingerprint":{"sha1":"D9:DE:01:94:79:66:1E:92:EF:80:95:DB:29:71:6A:6E:DC:95:8F:8E","sha256":"BD:3E:FD:A3:1E:E0:DB:2C:9A:2C:10:3A:7F:6A:1F:49:B6:F6:BC:1A:1D:BF:AF:E0:E3:BA:26:DA:46:91:23:5E"}}},"request":{"raw":"GET /d7c94b4e5ad6062eb1102c5e7f78915d563a508b.woff2 HTTP/1.1\r\nHost: claim-gate.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-gate.fun/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 03:30:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 14212\r\ncast-mode: default\r\nlast-modified: Mon, 09 Feb 2026 15:37:49 GMT\r\netag: \"6989ff4d-3784\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 1467\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CrnkfLgesWGiZVjsUjxHNEoaB6H0KRaxp9V6JcgH7B1oUsqiNcuIheXVMe8ixJfsZdbMvwI94e6SzkE2MeTf0j%2FMKa0V9UqQM9uflpLG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc0c503ec6b76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14212,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14212, version 1.0","md5":"ed9e261b92db70cd782956b9cf363091","sha1":"d7c94b4e5ad6062eb1102c5e7f78915d563a508b","sha256":"d2a12c85a831e4b5db341767d0347fa3d1361d22a1fcb3e361a16b6c90080f71","sha512":"75c818a70e2002f37e6ce80ba4ee108fbda7a6491e22919f3228c01489bda03faa16fd8b0d6eeb2bd4706cdd36affa98ce840fa80301421429ca730b3c725c84","ssdeep":"384:Bh8gh4Qwx7QFgypATerRdruPbEhDFQZdJqPqg6:P8g/w+g+ACzrxhJQZMqJ","tlshash":"0052cf0ae1020fe1d74ba1ba6dbc14ea11ce11ca523d76eef5d7013b96e20342b95d9c","first_seen":"2025-06-20T23:32:47.433885Z","last_seen":"2026-06-06T20:03:28.73097Z","times_seen":723,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"claim-gate.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-gate.fun/64b5d5afccfa95aecdbd90514aa42144c233e477.png","fqdn":"claim-gate.fun","domain":"claim-gate.fun","tld":"fun"},"ip":{"addr":"104.21.43.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-gate.fun/","date":"2026-02-11T03:30:47.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-gate.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 11:05:53 GMT","end":"Sun, 10 May 2026 12:04:22 GMT"},"fingerprint":{"sha1":"D9:DE:01:94:79:66:1E:92:EF:80:95:DB:29:71:6A:6E:DC:95:8F:8E","sha256":"BD:3E:FD:A3:1E:E0:DB:2C:9A:2C:10:3A:7F:6A:1F:49:B6:F6:BC:1A:1D:BF:AF:E0:E3:BA:26:DA:46:91:23:5E"}}},"request":{"raw":"GET /64b5d5afccfa95aecdbd90514aa42144c233e477.png HTTP/1.1\r\nHost: claim-gate.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-gate.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 03:30:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 93688\r\ncast-mode: default\r\nlast-modified: Mon, 09 Feb 2026 15:37:49 GMT\r\netag: \"6989ff4d-16df8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 1468\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E17aubDnzyl5H55Dd6mc2Wvdfnky667IMYTmUNNNaS6CEYs3qGNrydPBL3rjBjbJJ5Kw7cL8Ni7eNnQYSDKe6wjn1uqgEyFTDr9TSv6n\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9cc0c5044c7476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93688,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 717x717, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2aec2b42429867c42c318a2aa951e5d8","sha1":"64b5d5afccfa95aecdbd90514aa42144c233e477","sha256":"6443419e73c0bd9103c0fcf689fa1ba0ea61644537ecb01db6ee1b66c4eb0983","sha512":"7e350458c4ebcb371e1318564d304260f5c6d436a9761ddf2076c86a9a2ebbf96a7b9228a39c1d56451332d270b4c4568b6cc82160ab1a1d48516e978745668d","ssdeep":"1536:ImaxfOOV0qBZmucyCQ6vqGB2wt0xOLXidfzxyM1SDIrLbFdy8D9R8Nt9bNNG+Qv3:ImaEOV1BZmucyCnqG7tQBzxf1SDImlfq","tlshash":"93931270246205eff981218c6a4ce6022bd342ff3bc7a26476746fbd54c6a96750d3ab","first_seen":"2026-01-20T23:52:00.050668Z","last_seen":"2026-02-11T03:31:15.994622Z","times_seen":4,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"claim-gate.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-gate.fun/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fwebdriverio.js%3Ft%3D29513010%26u%3DQw1ssC27qGzXkdYdGDY5N2ZmNGFkODBmZTU0ODQyNzZlNzM1OQEVmBpaW53uRyoO7Q","fqdn":"claim-gate.fun","domain":"claim-gate.fun","tld":"fun"},"ip":{"addr":"104.21.43.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-gate.fun/","date":"2026-02-11T03:30:47.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-gate.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 11:05:53 GMT","end":"Sun, 10 May 2026 12:04:22 GMT"},"fingerprint":{"sha1":"D9:DE:01:94:79:66:1E:92:EF:80:95:DB:29:71:6A:6E:DC:95:8F:8E","sha256":"BD:3E:FD:A3:1E:E0:DB:2C:9A:2C:10:3A:7F:6A:1F:49:B6:F6:BC:1A:1D:BF:AF:E0:E3:BA:26:DA:46:91:23:5E"}}},"request":{"raw":"GET /secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fwebdriverio.js%3Ft%3D29513010%26u%3DQw1ssC27qGzXkdYdGDY5N2ZmNGFkODBmZTU0ODQyNzZlNzM1OQEVmBpaW53uRyoO7Q HTTP/1.1\r\nHost: claim-gate.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-gate.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 03:30:48 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\nvary: Accept-Encoding\r\ncache-control: max-age=2592000, must-revalidate\r\netag: W/\"9c80a-go5AMoyo/3QPEJDm9j4XDBWSpiw\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=webdriverio.js\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/11/2026 03:30:48\r\ncdn-edgestorageid: 883\r\ncdn-requestid: 2134534a32638d153d347346a4028155\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zlXHgE11WoSZ45AsuUp7MoFlzK0LKKd5I377LBrX8%2BDalEr%2Byfc1T1EFs%2BE0QDEU1p7OpVKaPuHX5zfsFHi7ezDG65R5%2FhFKE3UadBA9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc0c5048c7876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":641034,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c835ce0aa761a791b29ba4c102a85e28","sha1":"828e40328ca8ff740f1090e6f63e170c1592a62c","sha256":"4ee6631554867dc1bfadbfe5f4b4ebf4cec5164ba142f8db92f840c2028496cf","sha512":"49cefc3ca9614cebafe201eef12b5cdebcdd19da6ab30f530d7a81a8ef91fca5f02eb63108b8056c2dbd4c22b8b337aae939a712f4a876bdeef21a1e2a9f3225","ssdeep":"6144:9ujB8gltIeTM5/S8g6zRhNgDzQebuazBzqXQPkBAUvVdZcml4L:ihltVM/g6ZszQeqazNqXQcBvK","tlshash":"29d4bcec970a167788cb97b6423363afef884d1a236b3c406ec19cd1574a74e53ea15c","first_seen":"2026-01-01T19:22:06.925398Z","last_seen":"2026-03-30T11:52:16.142566Z","times_seen":405,"resource_available":true,"data":null}},"time_used":1466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1290,"receive":176,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"claim-gate.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-gate.fun//secureproxy?s=%2Fjmpd%2F","fqdn":"claim-gate.fun","domain":"claim-gate.fun","tld":"fun"},"ip":{"addr":"104.21.43.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-gate.fun/","date":"2026-02-11T03:30:48.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-gate.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 11:05:53 GMT","end":"Sun, 10 May 2026 12:04:22 GMT"},"fingerprint":{"sha1":"D9:DE:01:94:79:66:1E:92:EF:80:95:DB:29:71:6A:6E:DC:95:8F:8E","sha256":"BD:3E:FD:A3:1E:E0:DB:2C:9A:2C:10:3A:7F:6A:1F:49:B6:F6:BC:1A:1D:BF:AF:E0:E3:BA:26:DA:46:91:23:5E"}}},"request":{"raw":"POST //secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: claim-gate.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-gate.fun/\r\ncontent-type: application/json\r\nContent-Length: 2196\r\nOrigin: https://claim-gate.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2196,"data":"{\"route\":\"8XUwkBv9vhPYfVpD1fxb7EC65sUXJdqr\",\"payload\":\"5GmUXgCMPWsEdL46umyKZptYLWCsqqwraAzVi5HcXJDBou1Gs8sVCnK9HmihKvpVpb3UuDDk7xZAyFHjy4NNoqZxRo2khs3RyyoQ71PvSKwc8mngHApXJ4fwwMyy56MNtV1dTi2ZrJoHJ3XFAGUsoyS5XZ2EvjShiGi9aqV6LE8y13GVARxAH4tBrvFrUyip9kztXb6QPUKXSMvu8e5gKBkcXCNsuCbuzw8cvKvwir4Dpi73VAdiYpdePdJBQFzmmGuHLfD59QWVN3ehsMXr9VgurA3SyvTob6CgbgoT99dDrjE3fswfs48y8UQyz6FFz2LXXD7BxBNsqL7qPuB7EXcwAbiJRcWYkLjfbz1JaU4cSyzMoYaiVFEMF6q24rcxwe1RjEY683dGoqTgMF1P94aDaV23GqK8LY4siQL9MUWAfRd2RumJrfLSEcc9Gn3WcMA4QrvCrLFn3PgfsxgTSJSYr7QBGfeTnNEqbAXDNfRHEV9WB6cEkRv167ZZiBAXkZb2oyqZh24AtsgVPUYh6QkCzbuHhNXqKFj5PzRcqGFyf6FZEKfspSUcSYSjv8QvXeRsJHogyPDMJsz6tDneqEUTBfgguEJ6fLBztsuUyi3d6943LkHAJYz9WZuMz3myBbzgs3aojs2N6s5EFfqELrpVzgX6j3TKwQKzyMqWnVjau7qEGRLrxH2NFog6oxTBmi2XByAsdfEeSiebYErVsGehNAf8JSViWxB7uTm21ubhTUoL6LFvaFnuoNsrwahMcsNDfFg2P7arMeR1k87hWASJ9smsvSfpQuzNUJTwBnxVfCrgQ6uvpgYzhusitiwMcL9G8aEkTheyHuNQZQiFPigkp67CGLU6qHbbmDtdgMDS6EBKHC3Gfx8bBFm4uy1oSkgrL61gp7RsFoqSniJxH9zwdi7kPt3uEA2V3jPjEXNyKLKPCpeLEdKgP96YLDhsGDxXDgi9t5bDT19vtU61aoSUS19igbaYHtMgVciGq7uYTSQ2BqSSxVGxrRgucaNeNHRSWj9wydRxjCAvJbDrBH47S2RWeieP6US2wY1G7dkQiewckt859YQ6T9gZTie4baeLT5x5Y6MbFae5HYyc6A33arBm4RSfoz38yan7aTgZKH92o1mcPBygBf5Qia82RTo6psw2As8f4qgTi6bgwH1iuTDVVzu1kCntvWtM2bH1TzXgdwxBrKzDufRPxBkACe9JbC2yhuTCWKhXa7UvVEevyXUqsH28yBBcebw6Dpfxp6tzX6kkwU94DEJ1nVewxkiouDFhBLRmDSyvv2YipLCW3MJmWa1wDMN9mCNyHfoMQNKVw6GZ1KAiNkAqujXMusCLSJCziDSpnGGwUcjAR4TjrENqqSdJsAtPqXE5daqXRFdstZXhFQvCbbQbVNMucwoGhTxV4abybarwubHV1oh6w1auayxE8PbLHgzgmm7roaJiVJMEfs85yLBhrbrFKkpdif6sR4VsjMdbvQydp9PfwHmXYLPzcwNkT5k3vmaEajc9n9vwiHKcmbsadWvpntxBnjX2ykSHFuBGBnADieXi8FJmXpZSijdQzH39xuEU8UFyi8AWtE4j13VhtbQLv6qae5wTtBh7jZiTkpURpNghBi5typdXtNcgqWarRzNktZgAUNZvNJB569f1GhYWtZ2DEvo3NGXbFx1yCaZoJ6HQmtLGk1VL8bgozjEPJNtdxmNzdvGYMrogLpBYZbLGGY2PJRzndUrnug1WocdFfauB8dkEQxtQvoMVT92t8MfcYYhNaFJPFzWEKRJXV9BGAcTCz73hgLdoinqsi5TgZ4AruasGAyky39wrFjsfktoxx5rDuYoTMKe4MqMFbzbZZ7Hym3g9jFKo7FAU3tBVqLVNQ9U8KRTAbBch22XyHegV33REReAn8St1djVgLkim3njrsxLATvMEMX8wCVnC4hFy5zwtdwZfeFSZvsys9VmCepTqbnhMofMQG2dJ89RZagYE7uy6bqzkRs7TRXHMZMfZ6Di3kP3w7ZGfnUrDUfvA9HMwpYt7hX1SJnUNXR7w95N48yoapMmPekA9GegSRsvUMohvc3cXSZMgY6nLFMmXxxEcQpmPKsFTMphe8vTHTDdDhikPceppCQfEujE9zCN12eZ\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 03:30:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"e5-unglbsjMansYwnjMfaAhDo/nqqQ\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1770780709233\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/11/2026 03:30:49\r\ncdn-edgestorageid: 879\r\ncdn-requestid: 534ef8c44dc30a45051bf0926a956d64\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aexWmL9O2XZrlZ4SOeM%2FN9Mr%2BPaei1whWInYSOSGZzDo6PFKDvaxPI9qQSYgE22YEmmpmJoO7oPn6eLvBcIjHNYopDlVimEghj57W6Qv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cc0c5103d3c76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":229,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9fc3fc3fee866c312562a9f76a828fc9","sha1":"ba78256ec8cc6a7b18c278cc7da0210e8fe7aaa4","sha256":"566abfb8ce9aefe3ca9647e49d6537382c47e9a1528fd084fec517c7d36988cb","sha512":"d417def95dc19a02e279c6fa10888b711a286cde4704406f3adf4f4c670e7d157346150e7c3f4040c999d3470095cb02208814b3421a4640fee06e4383e23667","ssdeep":"","tlshash":"c8d0978fb5f162a1988300fc73e8a6b47ab23c1588c8b1404202a4f354b1808659862c","first_seen":"2026-02-11T03:31:15.998382Z","last_seen":"2026-02-11T03:31:15.998382Z","times_seen":1,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":520,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"claim-gate.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-gate.fun/","fqdn":"claim-gate.fun","domain":"claim-gate.fun","tld":"fun"},"ip":{"addr":"104.21.43.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-11T03:30:46.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-gate.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 11:05:53 GMT","end":"Sun, 10 May 2026 12:04:22 GMT"},"fingerprint":{"sha1":"D9:DE:01:94:79:66:1E:92:EF:80:95:DB:29:71:6A:6E:DC:95:8F:8E","sha256":"BD:3E:FD:A3:1E:E0:DB:2C:9A:2C:10:3A:7F:6A:1F:49:B6:F6:BC:1A:1D:BF:AF:E0:E3:BA:26:DA:46:91:23:5E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claim-gate.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 11 Feb 2026 03:30:46 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 09 Feb 2026 15:37:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3z26LFhrT%2F7AZsMoRhO%2FEey07ExIeTtHLE%2BsawIAaBnTME9yjMfoEAPIu2bOhbxwZUj5GpVc4KYjCpNJMHiGIbKvyMPRBVRp4unu0WbI\"}]}\r\nage: 1467\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cc0c500be2f32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121631,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"45fc2e476d60ed855ef1677c4a728e81","sha1":"2fcfa8cb364fc0b55b08fd80eff5c46f668f41b9","sha256":"b2df6cff39fad93d57f44e40c19e0a5cb6e21c685e71f5177bfafac31ce3f3b0","sha512":"25b6fca90b0568a02a4a4ba5af9ce1ec7303930643d2bda4c1b18349854907a53b28324ec14f692a37154f79e097d2e436a4c9eb667486ba555dc152f0d6fe38","ssdeep":"1536:L18kj1fJEiqu/NYf59lh0ZZFmP36JZLlNHTXlrFzS:L11qu/klhoZFY4ZLtBzS","tlshash":"04c3a75669e35127781354ee3bdb6b093734b0039145e9683efd2384cf86ab259b3b8c","first_seen":"2026-02-11T03:06:45.936856Z","last_seen":"2026-02-11T03:31:15.999566Z","times_seen":2,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":51,"dns":33,"connect":3,"send":0,"wait":14,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"claim-gate.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-gate.fun/face-api.fluid.min.js","fqdn":"claim-gate.fun","domain":"claim-gate.fun","tld":"fun"},"ip":{"addr":"104.21.43.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-gate.fun/","date":"2026-02-11T03:30:46.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-gate.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 11:05:53 GMT","end":"Sun, 10 May 2026 12:04:22 GMT"},"fingerprint":{"sha1":"D9:DE:01:94:79:66:1E:92:EF:80:95:DB:29:71:6A:6E:DC:95:8F:8E","sha256":"BD:3E:FD:A3:1E:E0:DB:2C:9A:2C:10:3A:7F:6A:1F:49:B6:F6:BC:1A:1D:BF:AF:E0:E3:BA:26:DA:46:91:23:5E"}}},"request":{"raw":"GET /face-api.fluid.min.js HTTP/1.1\r\nHost: claim-gate.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-gate.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 03:30:46 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Mon, 09 Feb 2026 15:37:49 GMT\r\netag: W/\"6989ff4d-6e25e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 1467\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0KAAW%2Fhl%2B9PQIPkRd7k9QOIvqMLnTqopoatkzMXW%2BRATqyJMlukmZiGZOFdZ%2FCKF19sIg2TdKUoR8PcKVfH7eGvLejIVNK%2Fg1vWtkIc0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cc0c501bc4376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":451166,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65159)","md5":"640783b8922512a6426449ae65d89610","sha1":"c393b4e1bb7cf0e642183811d0ad42b5b618bbcf","sha256":"6d85a6b19614678b37977cc7c3660ed49cb414fa6002ceac6fc6ba0fd1222f72","sha512":"3668d8ab89339de9c5f7d196e0914fed6313bf6fcea399dbf31c6b5a2464520d75fa3c55da52b89fc230a2f3d2265e6275b039f29f5cbede98d5fb12f5a249bf","ssdeep":"3072:6+tpe3DgRKHk06J+wseGhdOP0ezTdJQVamqVFti069kiiv1Xu7lD7BJoCEAnHs2n:6+a5Hk0m+wBmOMXVsEiBmKLWGU24","tlshash":"dca484b85e9223ebe7629baf55a2d1a8f400350d36837732a5c5fe6fac3855071d31c2","first_seen":"2026-02-11T03:06:45.935977Z","last_seen":"2026-02-18T18:01:58.043287Z","times_seen":4,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"claim-gate.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-gate.fun/18708a21e557687531064aefdc5bee62b55bd0c8.webp","fqdn":"claim-gate.fun","domain":"claim-gate.fun","tld":"fun"},"ip":{"addr":"104.21.43.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-gate.fun/","date":"2026-02-11T03:30:46.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-gate.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 11:05:53 GMT","end":"Sun, 10 May 2026 12:04:22 GMT"},"fingerprint":{"sha1":"D9:DE:01:94:79:66:1E:92:EF:80:95:DB:29:71:6A:6E:DC:95:8F:8E","sha256":"BD:3E:FD:A3:1E:E0:DB:2C:9A:2C:10:3A:7F:6A:1F:49:B6:F6:BC:1A:1D:BF:AF:E0:E3:BA:26:DA:46:91:23:5E"}}},"request":{"raw":"GET /18708a21e557687531064aefdc5bee62b55bd0c8.webp HTTP/1.1\r\nHost: claim-gate.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-gate.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 03:30:46 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 09 Feb 2026 15:37:49 GMT\r\netag: W/\"6989ff4d-28546\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 1467\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2DfTwI4sQYi8f%2FXsEvhUKGhNDaiJvHWhzW%2BtBxruHatTheKfhdeGdQoeh2tiViKWlDmGbBC7DnqYl0pvDzAkn9n%2BiJPamhnRT5VbAHfB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cc0c503ac6676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":165190,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1917x1081, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"693947eea8e9e904539210f679f748a6","sha1":"18708a21e557687531064aefdc5bee62b55bd0c8","sha256":"82fe6c20113692c5356475a1708f545dbc486f7c2fcf79a295628b839422be03","sha512":"4e24ac07bd7f69fab158d731b2646f8a46765c46aa7396ea344c295a68e02e65515379f71d41414397fb0158efe4b9da7c13e01534014e160620b31c306ae179","ssdeep":"3072:KmV98E8adQ4q7qKbswpKgWH2XW4eCWbqeaulRO/GlQHMt95UUNaBzl5S+A5rh:h/EeQ4qOdH2XWtCIaul4/GlpUUNaBp5Q","tlshash":"f0f3227108fde4f719de8ad3470468c086d0da98dda19ee7719e002e76081dfbad2e72","first_seen":"2026-01-20T23:52:00.053971Z","last_seen":"2026-02-11T03:31:16.001291Z","times_seen":4,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"claim-gate.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-gate.fun/6427857f63f3ad4dc4c4c6df226600d4192bbbea.webp","fqdn":"claim-gate.fun","domain":"claim-gate.fun","tld":"fun"},"ip":{"addr":"104.21.43.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-gate.fun/","date":"2026-02-11T03:30:46.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-gate.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 11:05:53 GMT","end":"Sun, 10 May 2026 12:04:22 GMT"},"fingerprint":{"sha1":"D9:DE:01:94:79:66:1E:92:EF:80:95:DB:29:71:6A:6E:DC:95:8F:8E","sha256":"BD:3E:FD:A3:1E:E0:DB:2C:9A:2C:10:3A:7F:6A:1F:49:B6:F6:BC:1A:1D:BF:AF:E0:E3:BA:26:DA:46:91:23:5E"}}},"request":{"raw":"GET /6427857f63f3ad4dc4c4c6df226600d4192bbbea.webp HTTP/1.1\r\nHost: claim-gate.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-gate.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 03:30:46 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 09 Feb 2026 15:37:49 GMT\r\netag: W/\"6989ff4d-45c08\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 1467\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hGuHlIaL3T227%2F482d%2FO0BPXpOB50sdW44%2FK274T6xnKoH913yxYakzNK1364xwrKsffAxjmZzgMnYUtR9UXNijl%2FEwq8kvx6%2Ft6p7Uw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cc0c501bc4576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":285704,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"07becf5f355c98e746d4d77ec23504ad","sha1":"6427857f63f3ad4dc4c4c6df226600d4192bbbea","sha256":"4ac49efb0426e52ad7562fb024f30cc972bced329b4f8a542c00fc0e367d37e0","sha512":"ed04c2891e9d30df14a4379ab2070df2a4956ed9cb474c0ad13c3ea62e32c0625e18765eba03297c35fe47363dc629ca9c5d81e5e72689a2e2602c50b0b0aa81","ssdeep":"6144:rYtoKSE+dWMpwJ5aOrflHfwo29y/nsG7ezdP2bliEyQ9EEDS:rZKSE+Vuz3ZHXikncdP2MEyQN2","tlshash":"5954225714fd84b99fb78e6c6a0e72b4e16cb825aa27f726d21406740d793e3fc004a7","first_seen":"2026-01-20T23:52:00.052884Z","last_seen":"2026-02-11T03:31:16.002145Z","times_seen":4,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"claim-gate.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-gate.fun/secureproxy?e=ping_proxy","fqdn":"claim-gate.fun","domain":"claim-gate.fun","tld":"fun"},"ip":{"addr":"104.21.43.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-gate.fun/","date":"2026-02-11T03:30:46.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-gate.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 11:05:53 GMT","end":"Sun, 10 May 2026 12:04:22 GMT"},"fingerprint":{"sha1":"D9:DE:01:94:79:66:1E:92:EF:80:95:DB:29:71:6A:6E:DC:95:8F:8E","sha256":"BD:3E:FD:A3:1E:E0:DB:2C:9A:2C:10:3A:7F:6A:1F:49:B6:F6:BC:1A:1D:BF:AF:E0:E3:BA:26:DA:46:91:23:5E"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: claim-gate.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-gate.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 03:30:46 GMT\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=4,i=?0\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 1467\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 11 Feb 2026 03:06:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fZSlD%2FlkeGiUv7syuFGySy5iOoVkvXuAuSp60fZdMQOFtLG1z4lf%2B0zr7sd6oGYe5JsGQM5x3qNpjVdhYoQ0a2Z1MNSLzT31CjqqsB34\"}]}\r\ncf-ray: 9cc0c5039c6476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-06-08T03:19:44.35598Z","times_seen":8781,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"claim-gate.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-gate.fun/c3ddfb1bc217df453b41b49dba72402079b7111a.woff2","fqdn":"claim-gate.fun","domain":"claim-gate.fun","tld":"fun"},"ip":{"addr":"104.21.43.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-gate.fun/","date":"2026-02-11T03:30:47.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-gate.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 11:05:53 GMT","end":"Sun, 10 May 2026 12:04:22 GMT"},"fingerprint":{"sha1":"D9:DE:01:94:79:66:1E:92:EF:80:95:DB:29:71:6A:6E:DC:95:8F:8E","sha256":"BD:3E:FD:A3:1E:E0:DB:2C:9A:2C:10:3A:7F:6A:1F:49:B6:F6:BC:1A:1D:BF:AF:E0:E3:BA:26:DA:46:91:23:5E"}}},"request":{"raw":"GET /c3ddfb1bc217df453b41b49dba72402079b7111a.woff2 HTTP/1.1\r\nHost: claim-gate.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-gate.fun/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 03:30:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 14172\r\ncast-mode: default\r\nlast-modified: Mon, 09 Feb 2026 15:37:49 GMT\r\netag: \"6989ff4d-375c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 1467\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7S3Qaq%2BI11vNX4vcbkYVRD0IIPSTFelNQBtdR5cm%2B1H%2BAGpYI0AMmdf53CfQO2H8ihGlc%2FuzhTIgLkZ%2BPTCePvbO5c3RUJ8D%2FpIuReLA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc0c503ec6c76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14172,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14172, version 1.0","md5":"58d382c3e4488e9998619e5deae8887d","sha1":"c3ddfb1bc217df453b41b49dba72402079b7111a","sha256":"f7ac6258da20ab7541939b59851155753d1d24f1b30cbcb949077a3faa3d1593","sha512":"2116002053ee417a92a0ed78f1503c52096cacb7993f45f2a7759d33edeb183ba23c04f37a93e8108ef0b6418bbbc61785614342ca88330860b0fb5d15835514","ssdeep":"384:FAFB6ObdtjCMOyyVWmZ+bHyRRIg0c0WG4Ncit:FwBJfCMtwZQKIg99D","tlshash":"3652d0315e887b71cfb9e1c57c165a92eee7c2a1f12415004bbe10134eb6faa2931c36","first_seen":"2025-06-07T09:41:14.989295Z","last_seen":"2026-06-07T00:49:04.195573Z","times_seen":534,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"claim-gate.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-gate.fun/af6e1b42fa1ee08334be2ab2e225bd79019a100b.woff2","fqdn":"claim-gate.fun","domain":"claim-gate.fun","tld":"fun"},"ip":{"addr":"104.21.43.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-gate.fun/","date":"2026-02-11T03:30:47.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-gate.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 11:05:53 GMT","end":"Sun, 10 May 2026 12:04:22 GMT"},"fingerprint":{"sha1":"D9:DE:01:94:79:66:1E:92:EF:80:95:DB:29:71:6A:6E:DC:95:8F:8E","sha256":"BD:3E:FD:A3:1E:E0:DB:2C:9A:2C:10:3A:7F:6A:1F:49:B6:F6:BC:1A:1D:BF:AF:E0:E3:BA:26:DA:46:91:23:5E"}}},"request":{"raw":"GET /af6e1b42fa1ee08334be2ab2e225bd79019a100b.woff2 HTTP/1.1\r\nHost: claim-gate.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-gate.fun/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 03:30:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 7840\r\ncast-mode: default\r\nlast-modified: Mon, 09 Feb 2026 15:37:49 GMT\r\netag: \"6989ff4d-1ea0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 1467\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rMOG6%2BzCI%2BMfANf0YY%2B7okq4WdRPjfznzAdllpTNZRYKDEp693NCxTILu0vGKtTYZAaRJQ%2BerzSLGvsT5sBxS958lkxk6Dvg0RFQwC%2BA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc0c503fc6e76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7840,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7840, version 1.0","md5":"7d1637a696b6e7b88b42419e1d9ef71b","sha1":"af6e1b42fa1ee08334be2ab2e225bd79019a100b","sha256":"5a987d1484070f1ea54de7c10ebfa4057a18e379361dbe5fd5c4fa4c2d95ef39","sha512":"c520254d6a96c34a745fb0a34997eb50ec378cedfe12bc829ff4a9daa74bed99614a09dc199131da97f78cbd7340a032375697523316cfaa18ef75e0ccbfd5cf","ssdeep":"96:7RNqPYeaXE9WQVxvqEvXrljyoHRo4SJO+2Muf2goEEIjFe2anHrqjznm7BAhLXM2:7RoaXffUXxjMjWJ1arEm7yIalpFBRJn","tlshash":"0ff19d4591be0909d97af93da988c4503018299ed1c88abd0ff5b19d62b0db6c93f1f9","first_seen":"2025-07-03T12:15:58.546826Z","last_seen":"2026-05-26T03:47:37.996037Z","times_seen":66,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"claim-gate.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-gate.fun/a7835c6cb9d0f42c3d627ff28d2b29d0828f6f41.woff2","fqdn":"claim-gate.fun","domain":"claim-gate.fun","tld":"fun"},"ip":{"addr":"104.21.43.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-gate.fun/","date":"2026-02-11T03:30:47.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-gate.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 11:05:53 GMT","end":"Sun, 10 May 2026 12:04:22 GMT"},"fingerprint":{"sha1":"D9:DE:01:94:79:66:1E:92:EF:80:95:DB:29:71:6A:6E:DC:95:8F:8E","sha256":"BD:3E:FD:A3:1E:E0:DB:2C:9A:2C:10:3A:7F:6A:1F:49:B6:F6:BC:1A:1D:BF:AF:E0:E3:BA:26:DA:46:91:23:5E"}}},"request":{"raw":"GET /a7835c6cb9d0f42c3d627ff28d2b29d0828f6f41.woff2 HTTP/1.1\r\nHost: claim-gate.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-gate.fun/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 03:30:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 7872\r\ncast-mode: default\r\nlast-modified: Mon, 09 Feb 2026 15:37:49 GMT\r\netag: \"6989ff4d-1ec0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 1467\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hpBOQgOF0lzoGrXiXL9h7Vm0gfVaatXPOe5ixRi99%2BHUeNGLi7K9noB9REpNV6HcwlQnNKulCUlgVBkQ8oZ0yoQn0cEw5ibp3KdShNw1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc0c503fc6f76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7872,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7872, version 1.0","md5":"3470ad06386cd4b3b4db674dac120943","sha1":"a7835c6cb9d0f42c3d627ff28d2b29d0828f6f41","sha256":"80b86efbef1c9fb66557cc4cc7b6db42db2fd631f1a9b8735f3bbefbb5128799","sha512":"ab91fdd4e7b9d8f8bbbda375f9445ac8e4a3456cc18968864c3400538d96c410b1d43041d33f4ff22afb775e95037d184f32424ebe1a7cc90799fc59d6d0a0ce","ssdeep":"96:IqwDHdiwwRsk0RjCSMDVDP8rRamPo6NBBTgRzd722fAi7aRvw3LSQnFfDm0jYMlL:A9wuk0hq5PSJtqLqESQFfDGKsLU","tlshash":"9ff1ae0b96941f66fd19a134398461c01f6fb08303e95cc17b014668634eaeef97f72b","first_seen":"2025-06-25T21:25:22.942755Z","last_seen":"2026-05-16T15:38:38.684678Z","times_seen":15,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"claim-gate.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}