{"report_id":"c87eae6a-d4da-4a08-8a4c-04f6b41d4db6","version":0,"status":"done","tags":[],"date":"2026-08-28T14:18:14Z","url":{"schema":"http","addr":"claims.eisen.co/","fqdn":"claims.eisen.co","domain":"eisen.co","tld":"co"},"ip":{"addr":"100.51.161.83","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"claims.useeisen.com/","fqdn":"claims.useeisen.com","domain":"useeisen.com","tld":"com"},"title":"Page not found","dom":{"size":27140,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (21906)","md5":"9f1eb8fc2d02ce2c8412187713bf64ba","sha1":"2cd700fdc4d617bd0fe6f4c263bcd42750109a7e","sha256":"e54adc71437bfc369969b4dfc0219191a2da4e7c0bd1a7d963cdddd4ad847dc4","sha512":"14045bf1bec770adcbc27bc48aafc575a5abf9392a72b4546a21a111f47df45d74099397d95c72661b58bc6f03cc274a9be88e790baa88669f57d5c756d94841","ssdeep":"192:DYuUh0XIY0aynAi+PHmTXI4IxnsfaaJz6j:Rn4zo","tlshash":"78c23152111f9558a6938dd331ccbb33398a906694ea4166dafc0d9e8cdfc7703b972c","dom_hash":"domhash5aad6259a42391183ae27cf7f282d2fd","first_seen":"2026-08-28T14:05:31.63453Z","last_seen":"2026-08-28T14:18:17.553636Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"claims.eisen.co/","fqdn":"claims.eisen.co","domain":"eisen.co","tld":"co"},"ip":{"addr":"100.51.161.83","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-02T14:18:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"claims.eisen.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"claims.useeisen.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"claims.useeisen.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"claims.eisen.co","ip":{"addr":"54.198.208.73","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-14T00:37:07.391794Z","last_seen":"2026-08-28T14:05:31.907667Z","alert_count":1,"request_count":1,"received_data":182,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Amazon ELB","description":"AWS ELB is a network load balancer service provided by Amazon Web Services for distributing traffic across multiple targets, such as Amazon EC2 instances, containers, IP addresses, and Lambda functions.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"claims.useeisen.com","ip":{"addr":"100.51.161.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2024-11-04","domain_rank":0,"first_seen":"2026-07-23T00:43:34.209408Z","last_seen":"2026-08-28T14:05:30.041908Z","alert_count":16,"request_count":8,"received_data":1216964,"sent_data":3724,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-23T22:20:52.902616Z","alert_count":0,"request_count":2,"received_data":94754,"sent_data":1133,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"claims.useeisen.com/runtime.13d9a23d08e57c29.js","fqdn":"claims.useeisen.com","domain":"useeisen.com","tld":"com"},"ip":{"addr":"100.51.161.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"baeef59788e183d356891ff890d4fc62","sha1":"4314b6e2056f110112f4b4c4a08017dfef88c609","sha256":"f1256d8bc3c350e11694930112c8792d3ac7cece266ebd7cdedbcd2dc05bc054","sha512":"2fc20d86eb187b46bc4a494dd4cf5e59f065c63def992599e877fad325baca4e6dcb74f11f3cb87ae2b6581fd9dac6c42783c18c980312489147164fc0c81b6c","ssdeep":"","tlshash":"f551b9f63760edf626b418c1183ed992ba1470334417edf1eb2bde5a6514ed00962ef1","size":2811,"data":"","first_seen":"2026-08-28T14:05:31.638549Z","last_seen":"2026-08-28T14:18:17.561589Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claims.useeisen.com/polyfills.a91d0a4870490a93.js","fqdn":"claims.useeisen.com","domain":"useeisen.com","tld":"com"},"ip":{"addr":"100.51.161.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"03d0944c11e8b3aa67a61f83cc49cb8c","sha1":"789d12e4a02e3f9dd0c9684ee244bf397cdde824","sha256":"9987a122b75c81aaf8e79366853dd0743f3558d56f1227cd1d55975ab163cac4","sha512":"e5f464d5f2f01c66297a62fe6eb88cbb4ec2f542d7962b27d457ee4006cb316682cc3cc0ae89598b0b42ee6f40335cbd48145419c882198e9dcb84e7ed884cbc","ssdeep":"768:qSR/AH5ZBU5gYQ6CAvdMjI5TDnCGFmeDRi048P3OVmI/eBFvMdtNJbWjX7Q1lD0e:ZKxaWJELQ1U218ytiTMh","tlshash":"44f2e7d57392b0b28bfa59b1917f8007e63625a4784c88e8f15c99da3c3704ad1a7f3d","size":34796,"data":"","first_seen":"2026-08-28T14:05:31.640425Z","last_seen":"2026-08-28T14:18:17.558428Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claims.useeisen.com/main.c9d490da4beb1e63.js","fqdn":"claims.useeisen.com","domain":"useeisen.com","tld":"com"},"ip":{"addr":"100.51.161.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c6625eafff16d0b491bd44e3c06d00a","sha1":"4cb477521e7d356a150d57211f40a436fbbcc0fd","sha256":"c63cf03e99b0027e88d6c3ee422dc42073aa99bc944bb193185c3f9abd33e333","sha512":"d3a2782100e1e232d70680f14ac972f3d4a09ace6a73e200cf21b7b57d22b318f67b2801a8f3ddc9eb05e6d9b9bc0f71b6db06e24b4412d6c52e6efd3e8c4cd5","ssdeep":"12288:2QWjQL8RmQPS42o4n2VxdVxj9bhvB9Gj+F5:2QWjQL8QQQoNVx7vB9HD","tlshash":"4815e840f6d1727523a380d591ae0c16b369612fbcea51f8b08ccdfb2cf67046766b66","size":932122,"data":"","first_seen":"2026-08-28T14:05:31.642515Z","last_seen":"2026-08-28T14:18:17.559206Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claims.useeisen.com/231.0f31d0eed42a9a56.js","fqdn":"claims.useeisen.com","domain":"useeisen.com","tld":"com"},"ip":{"addr":"100.51.161.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dfd87ff5f652f18f66ffb6279a3b92dc","sha1":"65ba6c5bddfa042d9c008e9fc194e8cb9f3543e3","sha256":"6f3840ad86d9c6a4dab26817f9fc7ecb206050ee444f2b2a0184beffb479db8e","sha512":"677fac534f9b259fdef7c1f7ca61f55d589a21124fd0dd4e31ede40a499447b9b00588bd84981709b4d8d8e5d09a8959c147b3df50025c7f15fe0ed326247498","ssdeep":"192:05EoHcXLxbThHcQlAzl9sfanQzn9Y2ZvRGlKDra/ZOWC7951BWP/kga3:05EoHcXLxRHcQlAp90r9Y2LNMwZ5sMgs","tlshash":"ae120a592355f2bd13b9842ed0b30447f22b256b5209489c7a6cf9eea4fc646137f738","size":9817,"data":"","first_seen":"2026-08-28T14:05:31.650621Z","last_seen":"2026-08-28T14:18:17.560388Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claims.useeisen.com/727.4a677c13466209cc.js","fqdn":"claims.useeisen.com","domain":"useeisen.com","tld":"com"},"ip":{"addr":"100.51.161.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"34f7b454f4a0e39fa9c7886a331dd4f7","sha1":"41fb4121493c21668553f11044bf31e41afe36f7","sha256":"f8f0ba982f31361c1c92ab4b6ceeb971a0562b7f8173f395e7ee96840895f07d","sha512":"10cda1f065c5e01bddc1588b0ce26b06698b1e9406730fbb64168ee6afbf90a1bbbcbdbcec2bdd6e216f67fbceb047a97f5131d966ebf6c0933ebc0bca5fbde4","ssdeep":"768:lEI/wAbG3+Gv3L/n4T+nM8fC9hrB9l9E8tDZJHlJ6aQkwi/fiLWofyMvo79kJxvx:5wAEkRF9Dn07ZIu5cNdAzpDY5Ipp","tlshash":"1b933a8ab111b1b51bd1b5d890ba0342e21d2dc4a909809df27cecda77fd8a57177f38","size":95531,"data":"","first_seen":"2026-08-28T14:05:31.645027Z","last_seen":"2026-08-28T14:18:17.560998Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"claims.eisen.co/","fqdn":"claims.eisen.co","domain":"eisen.co","tld":"co"},"ip":{"addr":"54.198.208.73","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-28T14:17:39.949Z","timestamp":1787926659949,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.eisen.co","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Thu, 18 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:D8:57:C1:61:EE:11:CD:21:A4:EF:FB:6F:6C:DB:81:6C:10:08:F0","sha256":"43:04:C1:2E:1D:3B:16:2D:DD:77:9E:DA:0F:E7:33:5B:DB:DB:DB:DF:42:A7:73:52:45:8E:EA:A9:0B:71:A8:E2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claims.eisen.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nserver: awselb/2.0\r\ndate: Fri, 28 Aug 2026 14:17:40 GMT\r\ncontent-type: text/html\r\ncontent-length: 134\r\nlocation: https://claims.useeisen.com:443/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Amazon ELB","description":"AWS ELB is a network load balancer service provided by Amazon Web Services for distributing traffic across multiple targets, such as Amazon EC2 instances, containers, IP addresses, and Lambda functions.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T20:22:58.661106Z","times_seen":18172180,"resource_available":true,"data":null}},"time_used":1088,"timings":{"blocked":0,"dns":85,"connect":96,"send":0,"wait":192,"receive":0,"ssl":714},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"claims.eisen.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claims.useeisen.com/","fqdn":"claims.useeisen.com","domain":"useeisen.com","tld":"com"},"ip":{"addr":"100.51.161.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-28T14:17:41.047Z","timestamp":1787926661047,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.useeisen.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 19 Jul 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"29:4B:CC:EB:D6:73:22:6A:37:04:65:31:86:C4:BC:BA:D6:87:E0:33","sha256":"CE:B7:F4:82:A3:2C:D6:98:3B:78:AF:7D:E3:86:52:3D:C2:DC:2B:2C:CC:FB:B5:28:46:BA:15:C6:46:7C:A8:11"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claims.useeisen.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 14:17:41 GMT\r\ncontent-type: text/html\r\ncontent-length: 23781\r\nserver: nginx\r\nlast-modified: Wed, 26 Aug 2026 18:35:02 GMT\r\netag: \"6a8f31d6-5ce5\"\r\nexpires: Fri, 28 Aug 2026 14:17:40 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; script-src 'self'; script-src-attr 'none'; style-src 'self' https://fonts.googleapis.com 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data:; connect-src 'self'; base-uri 'self'; form-action 'self'; manifest-src 'self'; frame-ancestors 'none'; upgrade-insecure-requests\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin\r\npermissions-policy: geolocation=()\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23781,"size_decoded":24719,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (21906)","md5":"a71bc7116247051a683f38c8c40b50d4","sha1":"49485df4f9f42ef69460b8a6d99afee1714905b6","sha256":"dd29925c5ee714b03ea60543e58240d0e9ee2efde58c9119756e103c16c09006","sha512":"7c5d3b702751efaa1236ec3d2c368702d337b75ec3ed9698d3baeccdd2fcd6aadba2d8ba21b81c192b88ff8f411dff078ee5f6a007737d98735402b37fd65d36","ssdeep":"96:ouzFZXsJc+u0MFZtgJc+udIFZVAJc+uPOFZb8Jc+ui8FZVAJc+u1nFZD6Jc+ukvJ:3YuUh0XIY0aynAi+PHmTXI4I6","tlshash":"98b20d52102f9548a6934dd331ccbb333d8a506694e64162dafd0d9e9cebcb713ba72c","first_seen":"2026-08-28T14:05:31.658679Z","last_seen":"2026-08-28T14:18:17.556441Z","times_seen":2,"resource_available":false,"data":null}},"time_used":619,"timings":{"blocked":-1,"dns":32,"connect":97,"send":0,"wait":195,"receive":97,"ssl":198},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"claims.useeisen.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"claims.useeisen.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claims.useeisen.com/styles.ff06a44959b482f1.css","fqdn":"claims.useeisen.com","domain":"useeisen.com","tld":"com"},"ip":{"addr":"100.51.161.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claims.useeisen.com/","date":"2026-08-28T14:17:41.777Z","timestamp":1787926661777,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.useeisen.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 19 Jul 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"29:4B:CC:EB:D6:73:22:6A:37:04:65:31:86:C4:BC:BA:D6:87:E0:33","sha256":"CE:B7:F4:82:A3:2C:D6:98:3B:78:AF:7D:E3:86:52:3D:C2:DC:2B:2C:CC:FB:B5:28:46:BA:15:C6:46:7C:A8:11"}}},"request":{"raw":"GET /styles.ff06a44959b482f1.css HTTP/1.1\r\nHost: claims.useeisen.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claims.useeisen.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 14:17:41 GMT\r\ncontent-type: text/css\r\ncontent-length: 108528\r\nserver: nginx\r\nlast-modified: Wed, 26 Aug 2026 18:35:02 GMT\r\netag: \"6a8f31d6-1a7f0\"\r\nexpires: Sat, 28 Aug 2027 14:17:41 GMT\r\ncache-control: max-age=31536000, max-age=31449600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; script-src 'self'; script-src-attr 'none'; style-src 'self' https://fonts.googleapis.com 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data:; connect-src 'self'; base-uri 'self'; form-action 'self'; manifest-src 'self'; frame-ancestors 'none'; upgrade-insecure-requests\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin\r\npermissions-policy: geolocation=()\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":108528,"size_decoded":109427,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8a6c5a0065c31acf0fd17c1e2f36c79b","sha1":"3b4b4a0fa5d680d0bbe417dd328072f6fcacdc42","sha256":"cf0d01d79846910a5565505cdc93d2e34e5886e2e455bf5eedb6c86ba7e60935","sha512":"dfd43f8916bffb79db2b7858cc514abbf87cbe2badc676f5f558f4c79d0cd8e152c1932f9019087664cf078f145d208d400103bcc361cc5ea62dcf91bec0b384","ssdeep":"1536:E9f8zFDf55X22x5XCPd5XCPf5XCPvMiJuo42tOSbSPmpovd+TGi8rTEGv351gXQ1:6c3n","tlshash":"1cb34f02e600092fb997cbfe8494dd65afd0ccc1ca01b7aff190994db65c869f28d5a7","first_seen":"2026-08-28T14:05:31.66173Z","last_seen":"2026-08-28T14:18:17.557362Z","times_seen":2,"resource_available":false,"data":null}},"time_used":969,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":870,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"claims.useeisen.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"claims.useeisen.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claims.useeisen.com/polyfills.a91d0a4870490a93.js","fqdn":"claims.useeisen.com","domain":"useeisen.com","tld":"com"},"ip":{"addr":"100.51.161.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claims.useeisen.com/","date":"2026-08-28T14:17:41.780Z","timestamp":1787926661780,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.useeisen.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 19 Jul 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"29:4B:CC:EB:D6:73:22:6A:37:04:65:31:86:C4:BC:BA:D6:87:E0:33","sha256":"CE:B7:F4:82:A3:2C:D6:98:3B:78:AF:7D:E3:86:52:3D:C2:DC:2B:2C:CC:FB:B5:28:46:BA:15:C6:46:7C:A8:11"}}},"request":{"raw":"GET /polyfills.a91d0a4870490a93.js HTTP/1.1\r\nHost: claims.useeisen.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claims.useeisen.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 14:17:41 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 34796\r\nserver: nginx\r\nlast-modified: Wed, 26 Aug 2026 18:35:02 GMT\r\netag: \"6a8f31d6-87ec\"\r\nexpires: Sat, 28 Aug 2027 14:17:41 GMT\r\ncache-control: max-age=31536000, max-age=31449600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; script-src 'self'; script-src-attr 'none'; style-src 'self' https://fonts.googleapis.com 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data:; connect-src 'self'; base-uri 'self'; form-action 'self'; manifest-src 'self'; frame-ancestors 'none'; upgrade-insecure-requests\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin\r\npermissions-policy: geolocation=()\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34796,"size_decoded":35707,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34796), with no line terminators","md5":"03d0944c11e8b3aa67a61f83cc49cb8c","sha1":"789d12e4a02e3f9dd0c9684ee244bf397cdde824","sha256":"9987a122b75c81aaf8e79366853dd0743f3558d56f1227cd1d55975ab163cac4","sha512":"e5f464d5f2f01c66297a62fe6eb88cbb4ec2f542d7962b27d457ee4006cb316682cc3cc0ae89598b0b42ee6f40335cbd48145419c882198e9dcb84e7ed884cbc","ssdeep":"768:qSR/AH5ZBU5gYQ6CAvdMjI5TDnCGFmeDRi048P3OVmI/eBFvMdtNJbWjX7Q1lD0e:ZKxaWJELQ1U218ytiTMh","tlshash":"44f2e7d57392b0b28bfa59b1917f8007e63625a4784c88e8f15c99da3c3704ad1a7f3d","first_seen":"2026-08-28T14:05:31.640425Z","last_seen":"2026-08-28T14:18:17.558428Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":870,"receive":524,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"claims.useeisen.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"claims.useeisen.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claims.useeisen.com/main.c9d490da4beb1e63.js","fqdn":"claims.useeisen.com","domain":"useeisen.com","tld":"com"},"ip":{"addr":"100.51.161.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claims.useeisen.com/","date":"2026-08-28T14:17:41.781Z","timestamp":1787926661781,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.useeisen.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 19 Jul 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"29:4B:CC:EB:D6:73:22:6A:37:04:65:31:86:C4:BC:BA:D6:87:E0:33","sha256":"CE:B7:F4:82:A3:2C:D6:98:3B:78:AF:7D:E3:86:52:3D:C2:DC:2B:2C:CC:FB:B5:28:46:BA:15:C6:46:7C:A8:11"}}},"request":{"raw":"GET /main.c9d490da4beb1e63.js HTTP/1.1\r\nHost: claims.useeisen.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claims.useeisen.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 14:17:41 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 932122\r\nserver: nginx\r\nlast-modified: Wed, 26 Aug 2026 18:35:02 GMT\r\netag: \"6a8f31d6-e391a\"\r\nexpires: Sat, 28 Aug 2027 14:17:41 GMT\r\ncache-control: max-age=31536000, max-age=31449600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; script-src 'self'; script-src-attr 'none'; style-src 'self' https://fonts.googleapis.com 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data:; connect-src 'self'; base-uri 'self'; form-action 'self'; manifest-src 'self'; frame-ancestors 'none'; upgrade-insecure-requests\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin\r\npermissions-policy: geolocation=()\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":932122,"size_decoded":933035,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1c6625eafff16d0b491bd44e3c06d00a","sha1":"4cb477521e7d356a150d57211f40a436fbbcc0fd","sha256":"c63cf03e99b0027e88d6c3ee422dc42073aa99bc944bb193185c3f9abd33e333","sha512":"d3a2782100e1e232d70680f14ac972f3d4a09ace6a73e200cf21b7b57d22b318f67b2801a8f3ddc9eb05e6d9b9bc0f71b6db06e24b4412d6c52e6efd3e8c4cd5","ssdeep":"12288:2QWjQL8RmQPS42o4n2VxdVxj9bhvB9Gj+F5:2QWjQL8QQQoNVx7vB9HD","tlshash":"4815e840f6d1727523a380d591ae0c16b369612fbcea51f8b08ccdfb2cf67046766b66","first_seen":"2026-08-28T14:05:31.642515Z","last_seen":"2026-08-28T14:18:17.559206Z","times_seen":2,"resource_available":true,"data":null}},"time_used":4196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":869,"receive":3327,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"claims.useeisen.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"claims.useeisen.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claims.useeisen.com/","date":"2026-08-28T14:17:43.177Z","timestamp":1787926663177,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://claims.useeisen.com/\r\nOrigin: https://claims.useeisen.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48256\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 27 Aug 2026 07:36:57 GMT\r\nexpires: Fri, 27 Aug 2027 07:36:57 GMT\r\ncache-control: public, max-age=31536000\r\nage: 110446\r\nlast-modified: Tue, 09 Sep 2025 18:33:53 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48256,"size_decoded":49069,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-08-29T19:33:50.253749Z","times_seen":28363,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":33,"send":0,"wait":17,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claims.useeisen.com/231.0f31d0eed42a9a56.js","fqdn":"claims.useeisen.com","domain":"useeisen.com","tld":"com"},"ip":{"addr":"100.51.161.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claims.useeisen.com/","date":"2026-08-28T14:17:46.333Z","timestamp":1787926666333,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.useeisen.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 19 Jul 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"29:4B:CC:EB:D6:73:22:6A:37:04:65:31:86:C4:BC:BA:D6:87:E0:33","sha256":"CE:B7:F4:82:A3:2C:D6:98:3B:78:AF:7D:E3:86:52:3D:C2:DC:2B:2C:CC:FB:B5:28:46:BA:15:C6:46:7C:A8:11"}}},"request":{"raw":"GET /231.0f31d0eed42a9a56.js HTTP/1.1\r\nHost: claims.useeisen.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claims.useeisen.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 14:17:46 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 9817\r\nserver: nginx\r\nlast-modified: Wed, 26 Aug 2026 18:35:02 GMT\r\netag: \"6a8f31d6-2659\"\r\nexpires: Sat, 28 Aug 2027 14:17:46 GMT\r\ncache-control: max-age=31536000, max-age=31449600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; script-src 'self'; script-src-attr 'none'; style-src 'self' https://fonts.googleapis.com 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data:; connect-src 'self'; base-uri 'self'; form-action 'self'; manifest-src 'self'; frame-ancestors 'none'; upgrade-insecure-requests\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin\r\npermissions-policy: geolocation=()\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9817,"size_decoded":10727,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9817), with no line terminators","md5":"dfd87ff5f652f18f66ffb6279a3b92dc","sha1":"65ba6c5bddfa042d9c008e9fc194e8cb9f3543e3","sha256":"6f3840ad86d9c6a4dab26817f9fc7ecb206050ee444f2b2a0184beffb479db8e","sha512":"677fac534f9b259fdef7c1f7ca61f55d589a21124fd0dd4e31ede40a499447b9b00588bd84981709b4d8d8e5d09a8959c147b3df50025c7f15fe0ed326247498","ssdeep":"192:05EoHcXLxbThHcQlAzl9sfanQzn9Y2ZvRGlKDra/ZOWC7951BWP/kga3:05EoHcXLxRHcQlAp90r9Y2LNMwZ5sMgs","tlshash":"ae120a592355f2bd13b9842ed0b30447f22b256b5209489c7a6cf9eea4fc646137f738","first_seen":"2026-08-28T14:05:31.650621Z","last_seen":"2026-08-28T14:18:17.560388Z","times_seen":2,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"claims.useeisen.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"claims.useeisen.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claims.useeisen.com/727.4a677c13466209cc.js","fqdn":"claims.useeisen.com","domain":"useeisen.com","tld":"com"},"ip":{"addr":"100.51.161.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claims.useeisen.com/","date":"2026-08-28T14:17:46.336Z","timestamp":1787926666336,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.useeisen.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 19 Jul 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"29:4B:CC:EB:D6:73:22:6A:37:04:65:31:86:C4:BC:BA:D6:87:E0:33","sha256":"CE:B7:F4:82:A3:2C:D6:98:3B:78:AF:7D:E3:86:52:3D:C2:DC:2B:2C:CC:FB:B5:28:46:BA:15:C6:46:7C:A8:11"}}},"request":{"raw":"GET /727.4a677c13466209cc.js HTTP/1.1\r\nHost: claims.useeisen.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claims.useeisen.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 14:17:46 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 95531\r\nserver: nginx\r\nlast-modified: Wed, 26 Aug 2026 18:35:02 GMT\r\netag: \"6a8f31d6-1752b\"\r\nexpires: Sat, 28 Aug 2027 14:17:46 GMT\r\ncache-control: max-age=31536000, max-age=31449600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; script-src 'self'; script-src-attr 'none'; style-src 'self' https://fonts.googleapis.com 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data:; connect-src 'self'; base-uri 'self'; form-action 'self'; manifest-src 'self'; frame-ancestors 'none'; upgrade-insecure-requests\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin\r\npermissions-policy: geolocation=()\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":95531,"size_decoded":96443,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"34f7b454f4a0e39fa9c7886a331dd4f7","sha1":"41fb4121493c21668553f11044bf31e41afe36f7","sha256":"f8f0ba982f31361c1c92ab4b6ceeb971a0562b7f8173f395e7ee96840895f07d","sha512":"10cda1f065c5e01bddc1588b0ce26b06698b1e9406730fbb64168ee6afbf90a1bbbcbdbcec2bdd6e216f67fbceb047a97f5131d966ebf6c0933ebc0bca5fbde4","ssdeep":"768:lEI/wAbG3+Gv3L/n4T+nM8fC9hrB9l9E8tDZJHlJ6aQkwi/fiLWofyMvo79kJxvx:5wAEkRF9Dn07ZIu5cNdAzpDY5Ipp","tlshash":"1b933a8ab111b1b51bd1b5d890ba0342e21d2dc4a909809df27cecda77fd8a57177f38","first_seen":"2026-08-28T14:05:31.645027Z","last_seen":"2026-08-28T14:18:17.560998Z","times_seen":2,"resource_available":true,"data":null}},"time_used":292,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":193,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"claims.useeisen.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"claims.useeisen.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claims.useeisen.com/runtime.13d9a23d08e57c29.js","fqdn":"claims.useeisen.com","domain":"useeisen.com","tld":"com"},"ip":{"addr":"100.51.161.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claims.useeisen.com/","date":"2026-08-28T14:17:41.778Z","timestamp":1787926661778,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.useeisen.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 19 Jul 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"29:4B:CC:EB:D6:73:22:6A:37:04:65:31:86:C4:BC:BA:D6:87:E0:33","sha256":"CE:B7:F4:82:A3:2C:D6:98:3B:78:AF:7D:E3:86:52:3D:C2:DC:2B:2C:CC:FB:B5:28:46:BA:15:C6:46:7C:A8:11"}}},"request":{"raw":"GET /runtime.13d9a23d08e57c29.js HTTP/1.1\r\nHost: claims.useeisen.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claims.useeisen.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 14:17:41 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2811\r\nserver: nginx\r\nlast-modified: Wed, 26 Aug 2026 18:35:02 GMT\r\netag: \"6a8f31d6-afb\"\r\nexpires: Sat, 28 Aug 2027 14:17:41 GMT\r\ncache-control: max-age=31536000, max-age=31449600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; script-src 'self'; script-src-attr 'none'; style-src 'self' https://fonts.googleapis.com 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data:; connect-src 'self'; base-uri 'self'; form-action 'self'; manifest-src 'self'; frame-ancestors 'none'; upgrade-insecure-requests\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin\r\npermissions-policy: geolocation=()\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2811,"size_decoded":3720,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2811), with no line terminators","md5":"baeef59788e183d356891ff890d4fc62","sha1":"4314b6e2056f110112f4b4c4a08017dfef88c609","sha256":"f1256d8bc3c350e11694930112c8792d3ac7cece266ebd7cdedbcd2dc05bc054","sha512":"2fc20d86eb187b46bc4a494dd4cf5e59f065c63def992599e877fad325baca4e6dcb74f11f3cb87ae2b6581fd9dac6c42783c18c980312489147164fc0c81b6c","ssdeep":"","tlshash":"f551b9f63760edf626b418c1183ed992ba1470334417edf1eb2bde5a6514ed00962ef1","first_seen":"2026-08-28T14:05:31.638549Z","last_seen":"2026-08-28T14:18:17.561589Z","times_seen":2,"resource_available":true,"data":null}},"time_used":968,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":871,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"claims.useeisen.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"claims.useeisen.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claims.useeisen.com/assets/img/Favicon-White.png","fqdn":"claims.useeisen.com","domain":"useeisen.com","tld":"com"},"ip":{"addr":"100.51.161.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claims.useeisen.com/","date":"2026-08-28T14:17:44.524Z","timestamp":1787926664524,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.useeisen.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 19 Jul 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"29:4B:CC:EB:D6:73:22:6A:37:04:65:31:86:C4:BC:BA:D6:87:E0:33","sha256":"CE:B7:F4:82:A3:2C:D6:98:3B:78:AF:7D:E3:86:52:3D:C2:DC:2B:2C:CC:FB:B5:28:46:BA:15:C6:46:7C:A8:11"}}},"request":{"raw":"GET /assets/img/Favicon-White.png HTTP/1.1\r\nHost: claims.useeisen.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claims.useeisen.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 14:17:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 2290\r\nserver: nginx\r\nlast-modified: Wed, 26 Aug 2026 18:35:02 GMT\r\netag: \"6a8f31d6-8f2\"\r\nexpires: Sat, 28 Aug 2027 14:17:44 GMT\r\ncache-control: max-age=31536000, max-age=31449600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; script-src 'self'; script-src-attr 'none'; style-src 'self' https://fonts.googleapis.com 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data:; connect-src 'self'; base-uri 'self'; form-action 'self'; manifest-src 'self'; frame-ancestors 'none'; upgrade-insecure-requests\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin\r\npermissions-policy: geolocation=()\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2290,"size_decoded":3186,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"0f23babe1362a8c2dca941d045ddf4a0","sha1":"65c259c9f81bf26c0ecf8791f2eca5ad0df32670","sha256":"3ccdda87fd165143d82461e69093159efe46b42d03e8f880d8e02b7dc190e93a","sha512":"ba23aa1fb4bf1566db91641940d625d81924d4ecf3f04604110b8ecbccc3a97224128c80ef8aec380b21b43e079a03aadf30cf1aa81362f156ff14bcfa996197","ssdeep":"","tlshash":"2741b6b122f9bd394981c271dba821e8af445589d2427e9ef57c133cfe83fb1aa54409","first_seen":"2026-07-14T16:39:24.535278Z","last_seen":"2026-08-28T14:18:17.562224Z","times_seen":12,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":347,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"claims.useeisen.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"claims.useeisen.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/intertight/v9/NGSwv5HMAFg6IuGlBNMjxLsH8ag.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claims.useeisen.com/","date":"2026-08-28T14:17:46.670Z","timestamp":1787926666670,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/intertight/v9/NGSwv5HMAFg6IuGlBNMjxLsH8ag.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://claims.useeisen.com/\r\nOrigin: https://claims.useeisen.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 44872\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:31:21 GMT\r\nexpires: Thu, 26 Aug 2027 10:31:21 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:28:02 GMT\r\ncontent-type: font/woff2\r\nage: 186385\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44872,"size_decoded":45685,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 44872, version 1.0","md5":"f5af7a761c2b64f7c28f1e6721d7743b","sha1":"4179443c5359657e3c405662378f19b96112154c","sha256":"77fefe8ca19b9f69b5284832c519e0493127c1f091f0a8936884be7721c4e618","sha512":"89118c1ad40849d2684d32ddc4300681caedbc09d406a75aaedbbec06902f66ae8a23d2fb05e58cfd6a74d9e41481c94c874df18907cf4730c9e79242aa8388c","ssdeep":"768:pIbgboC/jX8ToguHZRHkJAHFCGNxHefy2BiO07nP/adgItMqmUu1ztZf3BbXsi:SgboAEcsAEGxHefy2BgaPMqf6Lf+i","tlshash":"3913f2f67f5c2bab97efb99eb8f90c1619d50a3091934c9e01941c1b6728f821d9d063","first_seen":"2025-06-03T20:24:39.584186Z","last_seen":"2026-08-29T20:00:49.024953Z","times_seen":7516,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}