{"report_id":"d520bb91-7ebe-4780-b2d2-d9b2b24abbc4","version":6,"status":"done","tags":[],"date":"2026-03-17T08:13:44Z","url":{"schema":"https","addr":"claim.rex-myfinance.live/","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"claim.rex-myfinance.live/index1.html","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"title":"Rexas Finance - Rexas.com","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T22:46:17.230058Z","times_seen":17894017,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"claim.rex-myfinance.live/","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-21T08:13:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-15T22:16:12.279722Z","alert_count":0,"request_count":5,"received_data":57905,"sent_data":2745,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.gtranslate.net","ip":{"addr":"104.26.12.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-05-26","domain_rank":101861,"first_seen":"2022-11-07T21:49:20Z","last_seen":"2026-03-12T04:34:42.950029Z","alert_count":0,"request_count":1,"received_data":1325,"sent_data":455,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"claim.rex-myfinance.live","ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-17T08:13:45.699023Z","last_seen":"2026-03-17T08:13:45.699023Z","alert_count":0,"request_count":43,"received_data":3064111,"sent_data":21462,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-15T22:19:58.945817Z","alert_count":0,"request_count":2,"received_data":24291,"sent_data":1066,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"claim.rex-myfinance.live/index1.html","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"abcc2c4b40586157a157fe972c4c55f3","sha1":"b6b4fb3a0407302e765737cb2716670b21205f3d","sha256":"2ff6bd08ff850c5768fc7a25c3c1f2063e18255b16be1aad0df4e3cd74b9aec6","sha512":"c6477f1147636c1e89102e8648e3d763e2e5f14ace08d7451a11bcdcb6a262516515a78f63dc3c7edf254d9b325d5d62ca02bfee421c4424db6c371738ffb149","ssdeep":"","tlshash":"82112b20c9642c5e6047020e6c595741020605ffdd4e3b143b2dec9e2f6f00f5ab77ad","size":1034,"data":"","first_seen":"2025-09-08T09:28:19.711498Z","last_seen":"2026-04-12T21:35:46.904104Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"claim.rex-myfinance.live/static/css/main.5c03eaa4.css","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /static/css/main.5c03eaa4.css HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/index1.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:13:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 19 Aug 2025 11:02:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 831\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1841,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1796)","md5":"27d800506e322b3438566ead4afcf6f0","sha1":"22a40b535d50e3dd7a58ad2252319a45dfb302e6","sha256":"0dd4fb925810e324f5358f42fda1770c1fef5d401b194ca2a5ae3fe2313d6077","sha512":"b3442f0f3a0dd382da65064258c5f9ff4e37faf3e881d6edb7a6ab31900b7e2fb7adcefcdded8d11fddc6dd347eed41616e0e89282dbd0a5121912e038c45c6f","ssdeep":"","tlshash":"92314467458d106df697f1b6b8a07f1a202de403d0b31f7ca42975bac4e73a205f5a44","first_seen":"2025-09-08T09:28:19.670912Z","last_seen":"2026-04-12T21:35:46.866988Z","times_seen":4,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/static/media/logorx.02a6c9ac9e9396bd835488886bb8a7ae.svg","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /static/media/logorx.02a6c9ac9e9396bd835488886bb8a7ae.svg HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/index1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:13:22 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 20 Aug 2025 08:14:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 157671\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":210007,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"24885535fae87eaefa69e271ceb450a1","sha1":"dd3c48789fe3a0a68885a4c7ca704d234c006927","sha256":"6205cdd307694951548a4595c67544ce4e5a3eadbbdecaf30c0dd97673e3072f","sha512":"279fc2588037f4f9e7fc90a1eca8003ab45ac7cda8a7a444b5f7d01412294640930e4d644c95d5a78232197e8d97d918d4bd51567eb1b99a9375e3a409d4314a","ssdeep":"6144:CX/bLdo7T+iI3c2d0MmveYWFGHEkzkL2mc:CPbpgTT7TMe2Fm4Xc","tlshash":"da2413a902583eba47e4917e393a3ed6fc8c6651d01da4c3a991d46048bd2fc6d37c2f","first_seen":"2025-09-08T09:28:19.69993Z","last_seen":"2026-04-30T17:41:19.90942Z","times_seen":9,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/static/media/card1.eb8bf96b52151de98df7faae35b55268.svg","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /static/media/card1.eb8bf96b52151de98df7faae35b55268.svg HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/static/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:13:22 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 28 Jul 2025 12:37:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 31004\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43531,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9e382e20b6b4b690993e4c2a2d49d2ae","sha1":"7dbcb818d514daf425c7f429d18a25bfb05cdad7","sha256":"68d4aa02079cb197275656ec0f773b3089a1d4947fd83fe24cce3ec2ac826132","sha512":"c0aec3bf0489cdd4ccc71fac35b28c7cc14e7b2dce10150132cf473b831a1b82e16a14fbcf1deaf5811c1b592a315f3d5fcbcebf0824c2a76fb2d1f25709850b","ssdeep":"768:15YSBsgfzwtjomuytsG9MIuXmZTijcfy2kaWZk:10gfoPbnpuYccaeWW","tlshash":"d013cff221fa8e4fb316791cd3496e144c465aabb258d59bccc42730437ad689e1be31","first_seen":"2025-09-08T09:28:19.681934Z","last_seen":"2026-04-27T02:55:38.423089Z","times_seen":9,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/static/css/style.css","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim.rex-myfinance.live/","date":"2026-03-17T08:13:22.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /static/css/style.css HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:13:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 19 Aug 2025 11:02:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4533\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41996,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"125d20c58531770ff071fe0ae911bb76","sha1":"19c214f8cc726aba9d4e8010392130cbdc54ff5c","sha256":"6de85e64d62c7053afcaa20dd3886099553ec67476b4055874f885bbb1ee9fa2","sha512":"ae8d4899abc11b058e83ea848fb0efe94fdc03bc715d8d22cb6f6c3d375a355e22a170871d8ea3fa9bb1197368a7431f2f3cf2d2f388792774a6e4ceec299201","ssdeep":"384:wehS+650cFhmuVFmuVomuV7muVHmuVXehpwIrq9swgo36CCmBlB7B9hwX87EJAyp:TS+650cFZpwIrK6CCmBlB7B9hwX89Hg","tlshash":"6313f1955ab3000c7812a4742bf63b4a7366e407a20fdd6a7ac0725dcfce1c859e37ad","first_seen":"2025-09-08T09:28:19.704574Z","last_seen":"2026-04-12T21:35:46.902764Z","times_seen":4,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/static/media/part11.eb084957710bb643b399.png","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /static/media/part11.eb084957710bb643b399.png HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/index1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:13:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 Aug 2025 08:16:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7149\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7149,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 749 x 67, 8-bit colormap, non-interlaced","md5":"2dbeb234f80c3a30f76bfe8b88be1934","sha1":"eba07b9f7fe3d9561d4d3aec08f3a6dc3bd0ca09","sha256":"3c23c8070631656ba0240ec2edf1bc4c2bd754675bb15aedb0c4c4a1f623f4e8","sha512":"f455de94ef19d8708cb7310f1355bd0bd5060baa67cb398ccde7d9079be8dceddd760d2463f5b19031ba6b0aca4ebd8896dfdedc267001e56df3ae75c665780e","ssdeep":"192:b9SXHlXSNlcUkYtZEM3yVPmT0c09JxJWp8NZy8S2uZ:JS1i0U5ZEeyV+ThmWYw8s","tlshash":"b4e17dcc9e74a0243e9e2ac5ce389d5abc336d4669758902933cf19743f3a1ac83d581","first_seen":"2024-12-28T18:16:18.006475Z","last_seen":"2026-04-30T17:41:19.949609Z","times_seen":12,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/static/media/part13.ed5a3d63ffb9d6452932.png","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /static/media/part13.ed5a3d63ffb9d6452932.png HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/index1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:13:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 Aug 2025 08:16:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5261\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5261,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 770 x 106, 8-bit colormap, non-interlaced","md5":"1d963a47fcf620e3b0e9e252b24b506e","sha1":"22049c1b3618b88503a31a73296652a8f31d66c9","sha256":"de3ebf2b97490423e37879ad0c00b73e5e038ac915765e36192180ed1fdc4227","sha512":"8296d6f4998a576a29fc551fbb84e67c55d57d8b7c38c51d5be437e140abf021124b046de4c19ad7b329d11324bc5f2b6c4c28a7adda1e4dc6a2226330d8d113","ssdeep":"96:YW/RzvhVqe9MbLufu42C95Mp6jgHr3gm/lx+0hxa8a3NJwdxvMjd:9bVqwv95MIj8jgSlx+0UNmxi","tlshash":"ffb18d5d209c99a95e6ab5a6eb2304270bc33c0c2543dcea18baf16783f314a1a92221","first_seen":"2024-12-28T18:16:18.008359Z","last_seen":"2026-04-30T17:41:19.912741Z","times_seen":12,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/static/media/part7.2863d100af8ab056314e.png","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /static/media/part7.2863d100af8ab056314e.png HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/index1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:13:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 Aug 2025 08:16:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7246\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7246,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 440 x 147, 8-bit colormap, non-interlaced","md5":"971ab15ee1df6810c1b27ea8d428f8ed","sha1":"4e9ebd931c75179aea1feb59e49131e38ee94f53","sha256":"8c35e0651f3b1fcb6f2317181169c1d7f41e03322db2b01d55944c5ddf55d53b","sha512":"709fc504a7b772e82a23eec6dfe667421c75612d019aa3dbbc0a7396f83d221a7a5c52026c5d0b2fde33f0376276164c8642d3c0f7980e762205705b3bff15ed","ssdeep":"192:u0mbU8/mWtNciQC7lUN4yPsKfX4D/MwQxXSGWPVMALUT:rmQ8eWX2LN4osPMw6SFA","tlshash":"fce1ae6fa4606f86a0e9de5661a1622654bc9fae3060332470b53c4a197cffe1bd4407","first_seen":"2024-12-28T18:16:17.986667Z","last_seen":"2026-06-28T11:10:16.81785Z","times_seen":18,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/static/media/token.e67069ff4c78ede84578.png","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /static/media/token.e67069ff4c78ede84578.png HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/index1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:13:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Nov 2025 21:24:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 712954\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":712954,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1944 x 1307, 8-bit/color RGBA, non-interlaced","md5":"b565e8d18c0eda55382387637509c0b8","sha1":"8d804129bcd736ffe1184989fb897524f1456330","sha256":"7c129c3f8e3de39d0d45a6287fa6ff49ab212dc55033fbb24c0e3cddaa19f8ed","sha512":"efd39c2a30a7a43f02a1f3b1ae47fe57f1082c3c35e360ffbc237fb815362186aa03de4255eebdbea57a41659c97ce05e591f1c98608bcfea8978d74ff520136","ssdeep":"12288:ntKSme234IfEoEdlKR4MDU2kIDjqY7Gy44m5O+p1wnggcsIfGZGYxCSRdITjmHiE:n4SPOfTpPU23Djqnh4m4+fHgG0GYxCyD","tlshash":"75e4124c85f573bef912ac76958a0ee8a2b01f9b05fdca4dc16d28142db50fe45af423","first_seen":"2025-09-08T09:28:19.708048Z","last_seen":"2026-04-27T02:55:38.401585Z","times_seen":6,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Space+Grotesk:wght@300..700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Space+Grotesk:wght@300..700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 17 Mar 2026 08:13:22 GMT\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1300,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"35eb4f4c39907924b212d05f82c97376","sha1":"92db94df0aeea6b5a13ed912dc6f7e82d2b94907","sha256":"0fb43c3574f37a8440418e87fe246a58e91e7cf055d5f254f00a13d3cc739e50","sha512":"7f3abc23a9711105f4057532777fd7c7a4d662a414361d6af836fc83fc0f88c6207f77ca5430d899531fcc024c207f6d965dcb5f211c59c60597ac7a0138fca9","ssdeep":"","tlshash":"d921ed9600669500eba35cc226cebe32be8ea0556050da3d7ffe2498ec9ac315311b2d","first_seen":"2025-09-05T07:25:22.933443Z","last_seen":"2026-08-10T13:16:00.561895Z","times_seen":444,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://claim.rex-myfinance.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 16 Mar 2026 19:50:53 GMT\r\nexpires: Tue, 16 Mar 2027 19:50:53 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nage: 44549\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-08-14T22:40:17.683329Z","times_seen":391467,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":114,"dns":1,"connect":34,"send":0,"wait":9,"receive":1,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 17 Mar 2026 08:13:22 GMT\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21659,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"17ded04af7b0636d4f8c934291f09ac8","sha1":"d7766b8a83cf1d92c52f7a94654999e4b033365e","sha256":"54985fb48cc0470e63eaaf30034b348ed6bd73cac3f6a759bc1a1c19387af7e7","sha512":"ce25e5ca2afca5d262b17c8d5c5667cccaebce41eacc6afb16f5cd89a838bfd3192564f9a28b450646f2a2fd76414c462f095065c3a45ca72ce31df9c257748d","ssdeep":"384:H3w3s3VR9xqWSUq+DnLami0A0BNBOi/mkX:XEA3mkX","tlshash":"5fa27ad1087be114ab871cc122cf6d36ee0ea254b850e9786bfd1cd8ad97c654371b2d","first_seen":"2025-09-17T03:38:53.893526Z","last_seen":"2026-08-14T21:52:50.23699Z","times_seen":50143,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/static/media/part2.f90b4394f928b143dff8.png","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /static/media/part2.f90b4394f928b143dff8.png HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/index1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:13:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 Aug 2025 08:16:01 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4891\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4891,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 77, 8-bit colormap, non-interlaced","md5":"cba9ec6e5fe3ae5340d57d4781ccc6ab","sha1":"76f1cb9db5950c47cf542f227bc07161157a0aa5","sha256":"31a89a7c3fc09afc68e62bf7383f750f95e458d56bf2b68aaaaea27a905e5e58","sha512":"3cb7932fd86b24ae9226907d3d78c1361fa68cd4faf59d21adb6b234ad5b4c4ed0a3624d0d27338eda48980aa63e454db8b395e1f883b72ea653636482a22e7b","ssdeep":"96:LXUiKW73Y7eQRvrpHFwUhUOwpuB+lDuP3H/VkepqxvcVerGbHR4A:bbQRvdFwU6ObB8DwWepskVbbx4A","tlshash":"3fa15d8d52a374c466d40a8ca6a8cd757fadec2132014f0ae17ab5bfb4fc31594c93ad","first_seen":"2024-12-28T18:16:17.97854Z","last_seen":"2026-06-28T11:10:16.814713Z","times_seen":17,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/static/media/ewallet1.15d85498d616c9aba18a.png","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /static/media/ewallet1.15d85498d616c9aba18a.png HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/index1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:13:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Nov 2025 21:24:21 GMT\r\naccept-ranges: bytes\r\ncontent-length: 263496\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":263496,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1392 x 1258, 8-bit colormap, non-interlaced","md5":"990298fbae7c1c13aef8fb065de27578","sha1":"3ea9c1b223320200cf98b9358bf4348dbadec4c2","sha256":"2df0200809c0dc34a7d60a48e8590c86449c6fc75cc93990b8d79978fd42f6d2","sha512":"2dc70880bcef0e8a1866f1cd5e2ec9aa008667ab7a2396d2124e9724237bb42637b7f2ffe9deec8c9c05c3b06b79350e8eee97210d0d0ef9dc6b0dc8d1855e3a","ssdeep":"6144:MncV42bfKInvFWx84/MEiDbeNKWZNGO9S+n+DZ6OHKWN3W:McVDiI9m/MHePD9L+EU3W","tlshash":"374423d93a51f0cdc1c76ab191914b76a0fc98f47e7a7e30da1079a64c2d082d1e68fe","first_seen":"2025-09-08T09:28:19.696247Z","last_seen":"2026-04-30T17:41:19.943833Z","times_seen":9,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/static/media/fig5.d4ebb1ca4340e405efc2.png","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /static/media/fig5.d4ebb1ca4340e405efc2.png HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/index1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:13:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 Aug 2025 08:18:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 28469\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28469,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 420 x 420, 8-bit colormap, non-interlaced","md5":"86a5d3b9e5f4522acdc7ad8c3e7bdf26","sha1":"5992d466690d1bf33096b32b654a2d131b059fa7","sha256":"1765c50517a70d867bc56876cc46096924eb99b8aef109a49565ab54c40edcb3","sha512":"258d0d2aeb431cf723bb189d77b7a899febd8eb4b24542098d9ff408c5a29e1d7089f120d9acdcc755e370670ac2e3ab76bc975b43d3300adb29dfd2c40b3999","ssdeep":"384:QDYnWbnpnoCsq7hDbd1PijJT+JjqmgYQD2zthGYQDLAfS2v1iNyNng0S+R5vVNcz:ypnoG1DajoJngYQyzjtQDLAfH6ytgqy","tlshash":"9fd2e151aa47e2edc0f5a16a1f1b957dc9bf0267723f47003a74d09f8da88b78b1340a","first_seen":"2025-09-08T09:28:19.697737Z","last_seen":"2026-04-30T17:41:19.922246Z","times_seen":9,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/static/media/card2.4170d3057132918f7b0744d7f8b13c44.svg","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /static/media/card2.4170d3057132918f7b0744d7f8b13c44.svg HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/static/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:13:22 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 28 Jul 2025 12:37:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 64278\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":86943,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"33392a7a63ef109dc0c819a5d1f6ff8a","sha1":"e626780a71b287185c3dfd5e725f34693e4188da","sha256":"96c7922df9387f0bc517e7d0a5f60349ceb531f24aaad5e1530f2fd6629e72ca","sha512":"9007c09b68981261a77d4f7ba128bc759b3d71eeecdd7ac75e18e85bdd838a34427078cfc5c028777883f79d03e5c53c6eea075c78b50fce85a80bb4b0fba091","ssdeep":"1536:JNVxGuyrTv0kH3eqbAFnkvNwIe6oEvWRgC0vKV5bBMuoKQRNPW5gUOjP:JNVx56hudFnkonHRRBV9BtoKQRS6","tlshash":"968302378417ae9d0a2c2e35c0bf2e20ad687d37d754a820ddd5bbb380298dce5655c6","first_seen":"2025-09-06T14:26:30.540132Z","last_seen":"2026-04-27T02:55:38.41814Z","times_seen":11,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://claim.rex-myfinance.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 16 Mar 2026 19:50:53 GMT\r\nexpires: Tue, 16 Mar 2027 19:50:53 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:36:26 GMT\r\ncontent-type: font/woff2\r\nage: 44549\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-08-14T22:40:17.570047Z","times_seen":276834,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":125,"dns":5,"connect":38,"send":0,"wait":9,"receive":1,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://claim.rex-myfinance.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 12 Mar 2026 11:48:51 GMT\r\nexpires: Fri, 12 Mar 2027 11:48:51 GMT\r\ncache-control: public, max-age=31536000\r\nage: 419071\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22288,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-08-14T21:43:08.438986Z","times_seen":27438,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":108,"dns":4,"connect":7,"send":0,"wait":9,"receive":3,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/static/media/part16.a195ee8a5f704076ce69.png","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /static/media/part16.a195ee8a5f704076ce69.png HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/index1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:13:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 Aug 2025 08:16:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5523\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5523,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 565 x 76, 8-bit colormap, non-interlaced","md5":"37464cb39da2f9d6d781fae50542c662","sha1":"d64bbcd9283e2e12b06ead1a7e6821ef89a33868","sha256":"1d5af3a8d0d2e33fe94da9776aa1479e8e01b9a08191b17978e354054b37cc85","sha512":"2073e1c80433dc2cef1d0adbeb8630eeb86ff0bd613e041a4129ead238de2d77291c2c4e312482ab11e281879990e317bb73868f948c95baa18fbb5c7536ae48","ssdeep":"96:rFuky+GVCLlsQ8w7CzStWaegxAbhKv70UENVPSHTlVTIG+:ELVYWZwOzeWaegxKhQ7mGTrcG+","tlshash":"64b16ebf1572405216110bae519f9d31b1e8bc0facdb628c90d4b4772f37e356db2a4a","first_seen":"2024-12-28T18:16:18.004369Z","last_seen":"2026-06-28T11:10:16.805498Z","times_seen":17,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/static/media/eth.4a4d551ab1bfedb364bd1a91e0c1f19c.svg","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /static/media/eth.4a4d551ab1bfedb364bd1a91e0c1f19c.svg HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/index1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:13:22 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 20 Aug 2025 08:12:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2029\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5257,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6762d7213b9c0a4053fceab9493bddcb","sha1":"c9dec08939b6c9392f6dff580b90c4b458178758","sha256":"2c42cf6160b875f4e4967c8fc7b58c7ed599373789c952aac458e3ae268af88f","sha512":"6b5999ffdf161c0abd74afd1a87f40efdca328da8ede45b1b850411143f4332bce87b8e9383d0e0facd561fc660a8f6000623fc3083e773b7c55f5c3e69c45b7","ssdeep":"96:zn20vik+Vh6aeSOtViXmg+FWQGQgmPcURH1Evn7n+WUCJUzZXWfsW3zi:KNVhJNWViX3+FW9LnUVOvn7ECmZXfq+","tlshash":"5db17465338df3a4f809ebf8171968757a1715efae92d158caba1e1cfd0102e0d998d0","first_seen":"2025-09-08T09:28:19.705805Z","last_seen":"2026-04-30T17:41:19.950973Z","times_seen":9,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/static/media/eth1.fca4c7e82d7ac693785e.png","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /static/media/eth1.fca4c7e82d7ac693785e.png HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/index1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:13:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 Aug 2025 08:14:45 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16828\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16828,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit colormap, non-interlaced","md5":"cb7c6da745b2ce8f91d36d7dd309adce","sha1":"a65126a4831d73e728c705479645d05e6ba7a485","sha256":"e21f0c0ce61a02f84fe22ac5042ed649f37ff15333fb64255575732d792533d4","sha512":"9da01ea80a62b119c71c72c22a96612926f38267f00a49ce6d4ff25ba2626b99eb3c3e50a338657d4794af433170b77677e9ce8ed6649ff9babe0b7400fbebd3","ssdeep":"384:lTjUR2mdKab/t6agamB6Jb2OmtymhxJzJiLV:lTAR2zGt6hB6Jb3mtygzzeV","tlshash":"dd72e0bd6ce42a897830ac25e0c2125fc612bfe8d9fdc6c3f25d9e4cd6d689114a41ca","first_seen":"2025-09-08T09:28:19.709779Z","last_seen":"2026-04-30T17:41:19.959026Z","times_seen":7,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/static/media/fig3.7e4577aa86b2d834bc27.png","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /static/media/fig3.7e4577aa86b2d834bc27.png HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/index1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:13:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 Aug 2025 08:18:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 29012\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":29012,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 420 x 420, 8-bit colormap, non-interlaced","md5":"52e4363c7bcffe3b0f0a821a81a5610e","sha1":"3e82db433dcd9b69a513aa5b4d9b06fb07195e7a","sha256":"8e085c8bf0536c712527f5bb9c8e38e684337168fc79788d3dc052229045a23a","sha512":"26cafe39d583948797dee69fa01be6442e38a2743bc14d953d5a5b8d0909f4cd619357597c8e4b12c7163b5b268fa297570a85cb2e90d497b55a5389ad2062ce","ssdeep":"768:Pc0D+jtwNvWYsCrOs4ZMywFi/mK0opLciEfysEt2Gt9q+O7:PPDSuNvWYacK0Fly3tBt9q+O7","tlshash":"84d2f1c3b1aef83d504765f9e971b8b2e22560059f407d022973865cf80db94e9de51d","first_seen":"2025-09-08T09:28:19.665982Z","last_seen":"2026-04-30T17:41:19.916553Z","times_seen":9,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/static/media/card3.13e2e8fcede25e7d69b232ff9691dd8b.svg","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /static/media/card3.13e2e8fcede25e7d69b232ff9691dd8b.svg HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/static/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:13:22 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 28 Jul 2025 12:37:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 43032\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":60019,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"512e9408fde85334698471708dbc8722","sha1":"954271e64a6f5119f65a8e437d2dc53e31cffdd5","sha256":"4fe190d003df03ad0d73e329c32cef2d1762f1e9815c2c506e32eed97453f7f0","sha512":"4d26032fb252c83ea3f7f73b8e7b66d9ce503aaa02d726e4c8493508eb618c44286298016d1e5d954807be90a031e791cb538b2a8c9c1383516ddc7637d32f34","ssdeep":"1536:zUDCQMCThqzAlzXV170xFQtMa0u+3q27t3+Z:zcPFUUlzXV14fuMaF+57t3+Z","tlshash":"0a43e179373e6cde05c87c1054c72a2754e804b7985d8810facd8aefa273a7bd7b50a9","first_seen":"2025-09-06T14:26:30.552076Z","last_seen":"2026-04-27T02:55:38.3923Z","times_seen":11,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://claim.rex-myfinance.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Mar 2026 23:23:03 GMT\r\nexpires: Thu, 11 Mar 2027 23:23:03 GMT\r\ncache-control: public, max-age=31536000\r\nage: 463819\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-08-14T22:40:17.684035Z","times_seen":292777,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":113,"dns":1,"connect":7,"send":0,"wait":9,"receive":2,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/assets/font-awesome.css","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /assets/font-awesome.css HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/index1.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:13:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 28 Jul 2025 12:37:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2209\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6414,"size_decoded":0,"mime_type":"text/css","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (757), with CRLF line terminators","md5":"7d0dcdf5be6552dc53467c2727fdf177","sha1":"1af04498a6680268e710f8e47c991fafdaed5cec","sha256":"2d023f1aeebb954b7fe8247651bca486e116f55242d3db8c2b66d4b29fd49d19","sha512":"9e111a2875b23f64b836a6b3bb860a738b77061f39c4a2bbf8f67e3a3a421a27141c94eae74c2f5aa5ca581eb948a76f176fe8fa0568f01708cf897272c80fdc","ssdeep":"96:ulws2i6gYUPW8iRSxAceAnxJVFuD0G4OD7RwGRot9srM6jWlRsdV8:r0uceAxJVFuD0cD7RwGRoqjWlR4V8","tlshash":"4ed1ba579e01c42c027580a5a5f7f14de21a4127d694dc61f5ac2cab2ff2bc2cda3ae4","first_seen":"2025-09-08T09:28:19.68319Z","last_seen":"2026-04-12T21:35:46.875302Z","times_seen":4,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/static/media/fig4.f572dbdfc035e581b90e.png","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /static/media/fig4.f572dbdfc035e581b90e.png HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/index1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:13:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 Aug 2025 08:18:31 GMT\r\naccept-ranges: bytes\r\ncontent-length: 45435\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":45435,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 420 x 420, 8-bit colormap, non-interlaced","md5":"eeab6645df93ecbbac90dddcd1bb023d","sha1":"6da0161ec7e5c0f2aa98178102c412cc175ff5f3","sha256":"a71901b7c56bf814936b3779a6309da5633b9bbab02df751d1de050b3ef363af","sha512":"31469a5ed860f6a53e837892a52f35f2023fbd2514d9d30c81892e19a091519f0c496b5cdddaa5fcd8f865ffe3835aa8d4dd56cdffb38eb31bb6d2387e24fadb","ssdeep":"768:Urb0kdSlOIb941RE+Jf56SlBUonfRI1TRKVJ7RJVYGLAcVvAkfCEe2:UngKRfgSXlodKVJ7RJGCxxC72","tlshash":"9f1301122dc65b28a436f9c7710e2991cf6a209ba5ba116c913551f3f313f06a0ba68a","first_seen":"2025-09-08T09:28:19.691992Z","last_seen":"2026-04-30T17:41:19.890322Z","times_seen":9,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/index1.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-14T22:11:12.274316Z","times_seen":149591,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/static/media/card5.d524972979258aac0138f70fc9f00890.svg","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /static/media/card5.d524972979258aac0138f70fc9f00890.svg HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/static/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:13:22 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 28 Jul 2025 12:37:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 57532\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":77831,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c10e4b0b1fe0eb75aa397a30ecc600e8","sha1":"3a1e4443e1471e66d1164e771250537064776d87","sha256":"a198428c67c7e42522b974456c32955e7d55a5334f6a051210f2a29720e2b64a","sha512":"309848b69709c328f2570c797bbfc47b244da60400e1d437b24a853117cdd29c4db49ea10acfd1cd9df78230fd5bd6aa9678cc8630e61905565789117806ec24","ssdeep":"1536:M9njtdbb61iRV3X3hXBLhOwy0OU5jpdLsYxbA4TTc5s44Qu085:8nBdbb6gV3X3J9y0R3dLsGc4fb1N0i","tlshash":"b27302b33312cf1d9e041d98a28c5045fd19cecbe3597698c6c45f6e83afa3486260af","first_seen":"2025-09-06T14:26:30.559086Z","last_seen":"2026-04-27T02:55:38.420287Z","times_seen":11,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/assets/font-awesome.css","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim.rex-myfinance.live/","date":"2026-03-17T08:13:22.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /assets/font-awesome.css HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:13:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 28 Jul 2025 12:37:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2209\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6414,"size_decoded":0,"mime_type":"text/css","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (757), with CRLF line terminators","md5":"7d0dcdf5be6552dc53467c2727fdf177","sha1":"1af04498a6680268e710f8e47c991fafdaed5cec","sha256":"2d023f1aeebb954b7fe8247651bca486e116f55242d3db8c2b66d4b29fd49d19","sha512":"9e111a2875b23f64b836a6b3bb860a738b77061f39c4a2bbf8f67e3a3a421a27141c94eae74c2f5aa5ca581eb948a76f176fe8fa0568f01708cf897272c80fdc","ssdeep":"96:ulws2i6gYUPW8iRSxAceAnxJVFuD0G4OD7RwGRot9srM6jWlRsdV8:r0uceAxJVFuD0cD7RwGRoqjWlR4V8","tlshash":"4ed1ba579e01c42c027580a5a5f7f14de21a4127d694dc61f5ac2cab2ff2bc2cda3ae4","first_seen":"2025-09-08T09:28:19.68319Z","last_seen":"2026-04-12T21:35:46.875302Z","times_seen":4,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/static/css/style.css","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /static/css/style.css HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/index1.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:13:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 19 Aug 2025 11:02:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4533\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41996,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"125d20c58531770ff071fe0ae911bb76","sha1":"19c214f8cc726aba9d4e8010392130cbdc54ff5c","sha256":"6de85e64d62c7053afcaa20dd3886099553ec67476b4055874f885bbb1ee9fa2","sha512":"ae8d4899abc11b058e83ea848fb0efe94fdc03bc715d8d22cb6f6c3d375a355e22a170871d8ea3fa9bb1197368a7431f2f3cf2d2f388792774a6e4ceec299201","ssdeep":"384:wehS+650cFhmuVFmuVomuV7muVHmuVXehpwIrq9swgo36CCmBlB7B9hwX87EJAyp:TS+650cFZpwIrK6CCmBlB7B9hwX89Hg","tlshash":"6313f1955ab3000c7812a4742bf63b4a7366e407a20fdd6a7ac0725dcfce1c859e37ad","first_seen":"2025-09-08T09:28:19.704574Z","last_seen":"2026-04-12T21:35:46.902764Z","times_seen":4,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/static/media/part10.61d3c6e1377166100045.png","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /static/media/part10.61d3c6e1377166100045.png HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/index1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:13:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 Aug 2025 08:16:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5394\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5394,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 345 x 105, 8-bit colormap, non-interlaced","md5":"a2c98333b52c9749faacdda257373760","sha1":"2edb475410f97f2ecf1fd165c4c960898ee1e520","sha256":"bf8c77c0902d537bd635b5748da04b484d6b40a62210773e77af2846ecae2dec","sha512":"f97a3fe678f94773e87ed6dca76e18e59280d1e8a2be466429ad4db92e9a51a1db7ea4e4eb659ea6ac3b9fff3d9c4f879c4c29958f799f9f31d38a8d7c88401f","ssdeep":"96:QtvQXGVwyK7DyJshzN6nkS7+KQmImV0KmUI834sly2h53+FOUFRmphPJt+BJizCT:ivQX7yK7D4shzWkSSKQmtfe4yWUFQn7G","tlshash":"b1b19e3a0b50c555b7e6bcbf4e68c468a6702d56a37dfb821404fa69723f40e97c844f","first_seen":"2024-12-28T18:16:18.023468Z","last_seen":"2026-04-30T17:41:19.873855Z","times_seen":12,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/flags/24/en-us.png","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"104.26.12.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtranslate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 01:40:44 GMT","end":"Thu, 28 May 2026 02:40:40 GMT"},"fingerprint":{"sha1":"F0:7F:B1:BC:BE:73:55:AD:38:9F:92:6F:D6:4E:DB:1C:05:30:A3:80","sha256":"32:CE:74:34:FD:C2:62:30:95:38:1B:13:E0:4F:A0:DC:0F:1D:D8:44:4D:60:AF:C5:1C:94:AD:15:57:F1:6F:2F"}}},"request":{"raw":"GET /flags/24/en-us.png HTTP/1.1\r\nHost: cdn.gtranslate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 550\r\nserver: cloudflare\r\nlast-modified: Mon, 07 Nov 2022 15:42:08 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XMfV2X3DPT8lZK2zBv%2FsffjQj7uWMeVdliEI7C9pa1qSASD3qncZ0nFDgMQVDegtW53Q5lvLLRHvh1%2BZdwxHyXXWGjn%2FUZByC0VzjbG2Mg%3D%3D\"}]}\r\netag: \"63692750-290\"\r\nexpires: Sun, 21 Feb 2027 02:40:30 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(89;u=4;i=?0)\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-polished: ok\r\nage: 2093571\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 9dda89b87d161f50-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":550,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"8d9aaedf287ae36a3a3ff6c278f7bd6e","sha1":"2dabfd9612ac251de351549a90d947917d70c7a2","sha256":"5f6e94cecd1a40df47417c30488a05108f8151a64eee2f89763d00b3198550c1","sha512":"d7bbf5225b40b300f39707f1b38c84aaf1b333fffd7e8dc0cfeb079ea56d13d493d16f59e5ccba8c138b8a4f7a8f8b493c28668a42c406c98e370a387e7bd6be","ssdeep":"","tlshash":"76f090aa259a3808d22eaf6b425fc823e54048d0498e008aa03cfa0d1ae0a8933cc1c9","first_seen":"2024-10-01T22:43:11Z","last_seen":"2026-08-14T05:17:33.653573Z","times_seen":357,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":25,"dns":15,"connect":8,"send":0,"wait":20,"receive":1,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://claim.rex-myfinance.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 14 Mar 2026 07:02:38 GMT\r\nexpires: Sun, 14 Mar 2027 07:02:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 263444\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-08-14T22:40:17.616921Z","times_seen":297706,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":115,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/static/media/part9.320d5ae7e08adcb532f1.png","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /static/media/part9.320d5ae7e08adcb532f1.png HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/index1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:13:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 Aug 2025 08:16:27 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8634\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8634,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 778 x 182, 8-bit colormap, non-interlaced","md5":"7582294446f41513a2e6795908e0cf2c","sha1":"60d4d746e4b2d86dab4ff5c0d00d954ff3de065d","sha256":"f6d61778e1b115558b3841bb7e53bd41e0dbf53fa9a7bb3b8cdd069902dd1f32","sha512":"e0d770933d3299f074d8b0b1b34558c43d2dc07e2b28db7ac3328999634cdbc536f2d9f1010382af609ecbb8827e38f135329d314b8faabe666e1fc643aeff15","ssdeep":"192:q9PbQyOGB5FuelOCqr9HtjqB7rYzRKIDTYSBWvmtsAIzYzLMR:q5cyOOLuqEruBAzRKIvhB4tAIzz","tlshash":"83029f21b845fb645cb84261eb61704e030c1d9b3856e86e10117bc639778d56afaf74","first_seen":"2024-12-28T18:16:18.011658Z","last_seen":"2026-04-30T17:41:19.897286Z","times_seen":14,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-17T08:13:21.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Tue, 04 Nov 2025 21:29:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4885\r\ndate: Tue, 17 Mar 2026 08:13:21 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31239,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (403)","md5":"a10f02d9f1115936f7bbd3ab494dfa61","sha1":"622e561e7e7c84b3294654783aa676a4330725e6","sha256":"075815e3557bc72dd81012e6b5852e6c3454e81a2b985049e331ae292e9fbb79","sha512":"6c82f1c7ac13bf9c8582e1d47df26d3602005b9e7e0553fd4e85241141dbac60e55596c14850a3d5d9a15380d93284d83ea5ac729d88d13c4e525bc4be8f7ef1","ssdeep":"768:H0YKqqWKRPHloDGL6Ujw31v8ZvRujjEPEJfJmrzCFggFvq0XRMuEghQUHV0JvClN:s6K3bLW/","tlshash":"a2e2dc45fd62cd7a3a1361ff27ca9d4e627070038900fe8876fe60a18f866b759b3564","first_seen":"2026-03-17T08:13:53.534074Z","last_seen":"2026-03-17T08:16:41.981297Z","times_seen":2,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":136,"dns":65,"connect":34,"send":0,"wait":35,"receive":1,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/static/css/main.5c03eaa4.css","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim.rex-myfinance.live/","date":"2026-03-17T08:13:22.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /static/css/main.5c03eaa4.css HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T22:46:17.230058Z","times_seen":17894017,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/index1.html","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-17T08:13:22.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /index1.html HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html\r\nlast-modified: Wed, 20 Aug 2025 07:58:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 56282\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}],"data":{"size":215664,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7466), with CRLF line terminators","md5":"2e209476ab5c91c619594f13a8857bd6","sha1":"081ba0f1648e49460a9b0a1b9ae5e015d7ab14b3","sha256":"1c4a12dab25299bec1e908be1e9eb79f2848330ba22373fcbf7a7cf236a308d1","sha512":"63294254341b9c0dcf7e03e5d8c0f64ac07c44bf647d13a08e73a0f9d0bd8f4b0c925a18719bf77ebef99a50a6993055e61bfad1fd216b8e3c385b0a27758fd4","ssdeep":"3072:R91PCawqNe9xXPQwGFZ8wqN+NxXPgw+Fpuhv:R/xWx4wGFymxow+Fu","tlshash":"f0245b109680443b713385df6be04b4eea949103c606ba897bfc23d39f77e76985369e","first_seen":"2025-09-08T09:28:19.68917Z","last_seen":"2026-03-17T08:16:41.956655Z","times_seen":3,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/static/media/fig1.67821f18580e14af9224.png","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /static/media/fig1.67821f18580e14af9224.png HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/index1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:13:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 Aug 2025 08:19:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 30975\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":30975,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 420 x 420, 8-bit colormap, non-interlaced","md5":"4a98800b1d771e96b0a8dadc114996eb","sha1":"220ba98f131289509ce98664586f7ba49d84f50e","sha256":"be3994ccf9c81ef6b2483a53722857f26693885ab123d392017631def7428d55","sha512":"ca884539e285eac3fd4be8864a75009b7372dac43a15637453720f7570603ddb44d3fac9743faa04b9d84fb4fbb72781de0b46f2d1c3a52a1d305defc79b6ee2","ssdeep":"768:w5Wg5eO15pwFoNKRFRSMthA+1pBkY4PjNVYB7Poq1AAucm:w5fwOCGKVSMthPpYPjsyFcm","tlshash":"13d2f1a78ed49ae3602ecdfd9a01356e1470b7b1f12684dac051d6a7d508a99cff30d3","first_seen":"2025-09-08T09:28:19.667096Z","last_seen":"2026-04-30T17:41:19.944767Z","times_seen":8,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/static/media/card4.141711aa24ff0ec82193de0d04bbbbd3.svg","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /static/media/card4.141711aa24ff0ec82193de0d04bbbbd3.svg HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/static/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:13:22 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 28 Jul 2025 12:37:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 55604\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":75371,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1c55427435074e0c86155681ab4a8716","sha1":"7530f1103b4b7d1618ef34fbd77412d11abc582c","sha256":"d182cd224bae87d3fb8ab0a7c415375d80e13797bc979342c49a88f72b552d67","sha512":"a6305890c521d232645bda8c527011cb5af36291c8e685b5f8c15d0123fdfefbc8a46d86261ec71bb7a62f65a195eb1c66b3133fa069293b05c425da631ac8ce","ssdeep":"1536:a2qP+jOLPcu+qWywTzCcq9OOD61Y9OcbYWDjqUTC2RjChAP:a2w+Ocu+qCTzjyOOdOGjDjqU+4j4AP","tlshash":"f0730272351edd7ef55c28d231558906cbcd34a0a78ed3cafa092d6bc0be6620e61c1a","first_seen":"2025-09-06T14:26:30.617399Z","last_seen":"2026-04-27T02:55:38.400528Z","times_seen":11,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/favicon-16x16.png","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:23.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/index1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:13:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 28 Jul 2025 12:37:21 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1661\r\ndate: Tue, 17 Mar 2026 08:13:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1661,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"35ac627171791bd16ae46197ef5d56d7","sha1":"852f88b7d48ffe35761d20c8b524f099929702f6","sha256":"96a690e4843666c4bfaa2286ecab72132a689fa2346edf5e359d7b5485ec34f1","sha512":"71278e897ce4dacbbe561b5c67acd50da8d35ae5e583faf8201718d3503ffd8c3e4004efe442481456dd76763a404da95bded285da3097652272a54fc4615e8a","ssdeep":"","tlshash":"5e31d6c0f429e217e61311f889016844eab8490b5b0fc65ee9868428b83c7681ae9f19","first_seen":"2025-06-19T19:59:31.775334Z","last_seen":"2026-04-27T02:55:38.418689Z","times_seen":9,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/static/media/usdt.e1dd3c5e107351ea2c7097bf5ccb20da.svg","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /static/media/usdt.e1dd3c5e107351ea2c7097bf5ccb20da.svg HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/index1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:13:22 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 20 Aug 2025 08:14:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3313\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7970,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"35da94df1ec079e078b43f28c8fc76e4","sha1":"87a2fa11434bd3e1b070c1a44c1d8e2c20736118","sha256":"1efeecb1db60af59bff4fad3a2c0740e642b0fff7a28b9a69f83a160be731f2a","sha512":"877a2e118f3047c9469450ec6a6824991f46c5278c014d35ed426cf40bde038f4a87ece92c20f2bfbc75d8249c8bfc873abb0a360cea3ca95acf7e4ca4767171","ssdeep":"192:5UC605xFCE/JyJkMdZlz2VnCadzOKr2WWrLPqJMLkeOUfgofURiJvv/yC:51yP2Vnf2WWrjqJML8UT8RiJqC","tlshash":"b3f188a1b3e9b3e4e445f7f05726e4743a0325bfba62c599c79a6e88f91101d0dc4ce4","first_seen":"2025-09-08T09:28:19.677001Z","last_seen":"2026-04-30T17:41:19.908707Z","times_seen":9,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/static/media/part12.de01bab8cdbf888b84bc.png","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /static/media/part12.de01bab8cdbf888b84bc.png HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/index1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:13:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 Aug 2025 08:16:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8080\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8080,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 651 x 159, 8-bit colormap, non-interlaced","md5":"ad599588ee677371c006199c49c6b75f","sha1":"ea5d7f2e1310bd2cf317e5481ecce5b80314d6b6","sha256":"e0cdf3e25b1cdccd4447f8c79ec9483766d98f60e6865a10aa3adf93f9b8a811","sha512":"6b82db00032c4d1e3d274fcb79cf17bc6a91a8e4faf4471db4938178ddaaedf3f3dfd69f5a63ebc87c791ee485e667298d70332fc03010c668e9047643120158","ssdeep":"192:H1l44BncOaF/6QMHF4qUlqsXDTpjBVz75OED5/Lf5NSpAvh+lQerh6:r4uQMOFqaDTNjz74WBfqp2hFV","tlshash":"ecf19c9b1c80120a23de640ad2714cd7d8e1acb2e3354f9c7ba535b6a0fa9e75cc8942","first_seen":"2024-12-28T18:16:17.990563Z","last_seen":"2026-06-28T11:10:16.810024Z","times_seen":17,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/static/media/fig6.74cbc802e49f741902ae.png","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /static/media/fig6.74cbc802e49f741902ae.png HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/index1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:13:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 Aug 2025 08:18:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 33977\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":33977,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 420 x 420, 8-bit colormap, non-interlaced","md5":"58897845dc94e8fea12a1ecea7eba489","sha1":"470f1da0655ed6324afa1356ec46b97aba3a3fdb","sha256":"0b8932681b0299d8ff7f1b2b588c16a7f4c78ae2f562afce18fd86bf3a671618","sha512":"0155e5cb3be9f9c461f16fcedc9bceebea2a2b15dbf1c935685ea7d9090efbf0159b649de61ca3b4a8398ec977c92246e6dd10a676627243db2bc06e0e99b734","ssdeep":"768:+luywn/JOSeU9JQCIco8y9v4l/8mv+FR3BKJPq1D:+Ayw/jACvr89wJi1D","tlshash":"7be2f1584e045cca78cf95a0154cba62702ba8b1a07756eb91db3469c72c5633cea3fb","first_seen":"2025-09-08T09:28:19.706831Z","last_seen":"2026-04-30T17:41:19.923018Z","times_seen":7,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/static/media/fig2.c78402887392364fb9ed.png","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /static/media/fig2.c78402887392364fb9ed.png HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/index1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:13:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 Aug 2025 08:19:17 GMT\r\naccept-ranges: bytes\r\ncontent-length: 35601\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":35601,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 420 x 420, 8-bit colormap, non-interlaced","md5":"bc38e5603d960025a449f7ea85fec04d","sha1":"bc1111850b868ea4ff0de2bdf3856f41e62b8a9a","sha256":"6c46fc6c2dce5f4ee38b303a0f8d90b22f2b0744c10b298538e6146a61b68bb9","sha512":"53c59fd6ef7625a799bc4a20ac834e1e3edd91518d15ee62146141464f78a32c2038886518dd2047eda14a69abdb95b07e3d24ec0c1dbc0babe9b119126c8687","ssdeep":"768:KX+WHJDhE3hO88vSpW2NrIigrUoQ9O77FNW0B/:G+DM8MSM2N9WUoXdAC","tlshash":"9cf2f118fcd274c6fdbff424744ea2884e2a3239fa214c334181aa6db869606115fd7f","first_seen":"2025-09-08T09:28:19.693103Z","last_seen":"2026-04-30T17:41:19.905837Z","times_seen":9,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/static/media/part14.6194ab648e9cd56e810e.png","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /static/media/part14.6194ab648e9cd56e810e.png HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/index1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:13:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 Aug 2025 08:16:55 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11510\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11510,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 633 x 98, 8-bit colormap, non-interlaced","md5":"0c790e9145ed72548e7c48f8a65bad31","sha1":"47ed3e002c6d62c20faf5c99392c4a55f82ec970","sha256":"7d91ec772828a69eabcf9885a19e56c6419529709ed11496f4006b861fdf58a2","sha512":"1d84f3572e95c1745cf71eacb0593000c8aae0f31b6c2cf6e8d96442363a9fca13628ecc94ea77c12306559a4b65c854d54e4ef5d9a818dccf0a211e2b167009","ssdeep":"192:Sptbro2Q6/ONstNurL7pgamhsZdDeZLA3FdbZPzHreigKxzt5X7e8MGCNStKbuxI:krFQEOKPuVm4DcLMdFPzLmKTNkScIQsi","tlshash":"ca32c00b2df06a96589a05dbc9db448d8bf90d10c6d18e098830b3367fbab92f1477c5","first_seen":"2024-12-28T18:16:18.016607Z","last_seen":"2026-06-28T11:10:16.817127Z","times_seen":16,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/static/media/background.041829ad5e92faa4fae3.png","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /static/media/background.041829ad5e92faa4fae3.png HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/static/css/main.5c03eaa4.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:13:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Nov 2025 21:24:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 523776\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":523776,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 5422, 8-bit colormap, non-interlaced","md5":"30cbdcad6f83a616b5066ecb8d5d014c","sha1":"08118fb7f6fdf26397d1b3891bd628e477d3a8f7","sha256":"ee3a6f6abab7117ca7eb0b6ee90968402ab5b8abd99db028f975037b4e453e27","sha512":"2f569744be07b4fc31105057db79c9e2fbd7f5ec1f1821cd72cfe7ec772d64c6ed42e336f068b3cc10fc0390993b5d6161daa02767af679dd158b1124f9f733d","ssdeep":"12288:avb7Fj63Q3SpE1TY1iZaOMsEow7FOmJqrVcbMrKpRuf:azhe3QipSY1WIsEpRYVcbre","tlshash":"ddb423d4afca005a80671cbcc0025df598a16fc0e4b6f9e24b677c0e9d5f19c6e990af","first_seen":"2025-06-19T19:59:31.773467Z","last_seen":"2026-08-13T23:21:24.04668Z","times_seen":14,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/static/media/card6.b29d28d4b21cebc1e63565a38da3233f.svg","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /static/media/card6.b29d28d4b21cebc1e63565a38da3233f.svg HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/static/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:13:22 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 28 Jul 2025 12:37:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 34248\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":50217,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b350f8a55761c0412e4e8922f0e59ba9","sha1":"d9634b31a71abdd29edce4dfc3398a9d5f5f8835","sha256":"46808134a5d474bf1529952d03df45e44231954c8beeeeb492094cfcaeb5d833","sha512":"9a61ef9c10a6485c475e6725e19f13532441ada791cb59105a95f3a603714a53bb3f278a84a170fcb106bcb066798f774a91144816d236a1c659153099deef6f","ssdeep":"768:hj11ihmKMg2FqFkKzxMRIcQshvi49wBkf58kxx+JpgQnaxKLG:hB0X8SxRUf9VBb0pgQGK6","tlshash":"7533d036923ffedf739c1d04f68922148c5d2c8fa64e4442a5d1977252a5a881faf4fc","first_seen":"2025-09-06T14:26:30.581367Z","last_seen":"2026-04-27T02:55:38.391695Z","times_seen":11,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/apple-icon-180x180.png","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:23.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /apple-icon-180x180.png HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/index1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:13:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 28 Jul 2025 12:37:21 GMT\r\naccept-ranges: bytes\r\ncontent-length: 28527\r\ndate: Tue, 17 Mar 2026 08:13:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28527,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"8b6034e63ac0b3faa7cc08db0f8b532f","sha1":"e71d907be9718ea2bded4b120204b2af0fc2c071","sha256":"142d46c24b0e30e290586a9863a5cb6c93357f6ad1a5bd24b5533beb28f9dd49","sha512":"b280255a40ff8c504bcea6de4df92f75f9349cd2524ea79ad7ea98d00be5c9f4d386b96940f0f8e7371c6cd90db0fd29c6fef7551ec39c23dda7e56ac5c9c7d4","ssdeep":"768:H9IicCjTQJ0R0D30d/1jttb9uvsNz6bfyM7Xh+iIXjUJ1cOYOL:H+Ij0mR7Ht59BNwnXh+isOcV0","tlshash":"69d2d086f17430df28732bb01df2d8918d26024d15832a45598b2ee92eff7b125f8de5","first_seen":"2025-09-08T09:28:19.687977Z","last_seen":"2026-04-27T02:55:38.424185Z","times_seen":6,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/static/media/part6.f56f984a2330c1523c3c.png","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /static/media/part6.f56f984a2330c1523c3c.png HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/index1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:13:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 Aug 2025 08:16:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4946\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4946,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 389 x 55, 8-bit colormap, non-interlaced","md5":"d81793f1e8f34b951812e19a5be01b2a","sha1":"b066dc64dc7a0b22cfb978ac831c64e57e58da07","sha256":"5b6cfc208b4e75404cf3d93f631fec6dfb06e511d7d81dce7a6ee887d6c3b0cd","sha512":"b30c2803c1bbb36ffe2a42ea75bbf7f05c9f04c07607d03a232339a4b631d5718773e8dc6655c63fec5d6762dc9e2ae528579f888819fa7778b4b0fb841d71cc","ssdeep":"96:7xXZOSkEBIH+SwXkM8KTcpkxGLkQM+PGvPCRWlhSqdiQCq8KCqKpt9o:FXZJWJM8KXa+bhV2q8KCqKp8","tlshash":"4aa15c085174edf76358842eed74f32a9d277c1aeaa4a016cc94712b73b82b9250b457","first_seen":"2025-01-03T12:55:47.43919Z","last_seen":"2026-04-30T17:41:19.891757Z","times_seen":11,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/static/media/eco.c48baf191719852d294c.png","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /static/media/eco.c48baf191719852d294c.png HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/index1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:13:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Nov 2025 21:24:21 GMT\r\naccept-ranges: bytes\r\ncontent-length: 244612\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":244612,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1046 x 1218, 8-bit colormap, non-interlaced","md5":"8b149e2cf9e78d6de38fcdeee2feba68","sha1":"adb44531e798b428a3a58b86a40c3aeafe7ea497","sha256":"1d11fb6a98ad108116d3312e5947f37fd3ca27cf5a15a7f1393617a955f484c0","sha512":"cbcbe137b894ff6a78ff9df1bce743b77bbb56f7541b1542932b59747b4975d03a262a7978ba79f8a4e72b0ed651b1b64d83769d135741ace9ac860894e276fc","ssdeep":"6144:Xy36JEnN/qWYLzEFwqyOUuHy7JGWe2o+i:Cq8qEFZyOS7Ecni","tlshash":"d43423ce8dd8e570802bc6dbdc29e54892558dfca521776e10e4c70db41b706a8efabc","first_seen":"2025-09-08T09:28:19.685741Z","last_seen":"2026-04-30T17:41:19.945648Z","times_seen":9,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/static/media/accelerator.81dd81f3fe7c9be53279.ttf","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /static/media/accelerator.81dd81f3fe7c9be53279.ttf HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/static/css/main.5c03eaa4.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:13:22 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Mon, 28 Jul 2025 12:37:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5138\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17892,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, digitally signed, 11 tables, 1st \"DSIG\", 32 names, Macintosh, Copyright frongile 2022AcceleratorRegularAcceleratorAccelerator Regular1.0AcceleratorFontStruct ","md5":"fdbb0d7f7d81d1ce2117ceb332478e48","sha1":"90ef8b6aac8129ec637935ae2a0e1ae276e24742","sha256":"eed97415dafeda0ff03486864f424a2d3ec3ce0b43cbc8bb5e7c0ce87d709476","sha512":"45a29dc12621535c967c42cafcc64178a313089545b72a48a20da49df2e68d02af61f003563a316007363ceb9828e3ff3712bed27ca9e3baef1af9f6f5f7c04a","ssdeep":"192:BXlP/BwCFZuhvvwc8LPMyVlr0zNAOpUm33hal5FxKZqZlZ+Ss:hlXBtyhn6PMzPUm33hu5s","tlshash":"cb82ed27bfa69d22f9621eb98eb9c3182b28f5548f1b8b73711402e4efd11c68d507d4","first_seen":"2025-06-19T19:59:31.735591Z","last_seen":"2026-04-27T02:55:38.42363Z","times_seen":12,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.rex-myfinance.live/static/media/part5.b6f314417a445aef57f4.png","fqdn":"claim.rex-myfinance.live","domain":"rex-myfinance.live","tld":"live"},"ip":{"addr":"5.9.79.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.rex-myfinance.live/index1.html","date":"2026-03-17T08:13:22.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.rex-myfinance.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:24:38 GMT","end":"Sun, 14 Jun 2026 19:24:37 GMT"},"fingerprint":{"sha1":"D1:DA:07:81:26:3F:DB:D9:1C:21:58:45:76:53:61:5C:7D:B0:25:75","sha256":"13:81:E9:A2:59:F9:45:91:92:B2:F5:A2:7C:7D:04:24:7F:22:B7:7E:E2:15:F1:1D:FF:D6:D4:E5:26:1D:62:26"}}},"request":{"raw":"GET /static/media/part5.b6f314417a445aef57f4.png HTTP/1.1\r\nHost: claim.rex-myfinance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.rex-myfinance.live/index1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:13:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 Aug 2025 08:16:02 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6099\r\ndate: Tue, 17 Mar 2026 08:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6099,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 364 x 86, 8-bit colormap, non-interlaced","md5":"006dde865aaea3129e5b0b9d9169cb7d","sha1":"eda99fafb6775b87978356133f740645f9910714","sha256":"e891a539f2a22dabd4c02e7fd609a4ba64fd05fd3cb0a78908061f1bf39fea3f","sha512":"74dbf07e558b003be447bfa55cd9c0269c2529cc5a5bc2944e5af321303e1cf3d3a2113d987e66b391456a32df2f0d3e8e08605ee096ccb8f5ec6405228519c4","ssdeep":"96:p5W3wP5VIISkfoOJOCCiV62zsdDIjECsIxYqRSPLUYSHj1Qx24+Sn31ugQ+:nW3U5pwQ62+IjrsIxYfLWjKxv31D","tlshash":"50c17de57896deabea47880654125654feb62cff1e0053d00c1278719ab514f27ce3d2","first_seen":"2024-12-28T18:16:17.988841Z","last_seen":"2026-04-30T17:41:19.871495Z","times_seen":13,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}