{"report_id":"d7ae0353-157d-46d4-b47d-02ff2a669a20","version":6,"status":"done","tags":[],"date":"2026-04-18T09:05:23Z","url":{"schema":"http","addr":"googleadsrefundclaim.com/","fqdn":"googleadsrefundclaim.com","domain":"googleadsrefundclaim.com","tld":"com"},"ip":{"addr":"209.38.54.191","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"googleadsrefundclaim.com/en-us","fqdn":"googleadsrefundclaim.com","domain":"googleadsrefundclaim.com","tld":"com"},"title":"googleadsrefundclaim.com is for sale","dom":{"size":41606,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (28748)","md5":"7f04df10fccf8a837e3329126f16bef9","sha1":"c0739f66615ae68488d388da872e1aef62bcfb40","sha256":"0503c4b573f68eab258883910da744789d1efe1b44fbc6e7875bab07d40eff87","sha512":"abda92d53a49182def7f72475069c52daebf599761bd916027eb6b5a3b2127a6da2ec72f2d0708113233a990b8608cfb7f8d9a2fa4e5660338710daef0bcdad4","ssdeep":"384:vB1APewFyFuv5AMRezFV/gv6R5jH7piyu4MtrUp4B4qU:vB1K4zQyudtrUp4Bg","tlshash":"75139c41f69cfbad0e03c8691ed1b3e5ed17216ab4a40ac69fb392d8c3df086d59521c","dom_hash":"domhash11bb81595796409998e2da08dd4c723a","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"googleadsrefundclaim.com/","fqdn":"googleadsrefundclaim.com","domain":"googleadsrefundclaim.com","tld":"com"},"ip":{"addr":"209.38.54.191","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-23T09:05:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"buy.nameshift.com","ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2002-02-06","domain_rank":5971909,"first_seen":"2024-04-30T14:29:06Z","last_seen":"2026-04-12T18:17:21.411258Z","alert_count":0,"request_count":53,"received_data":2597123,"sent_data":23190,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"stats.nameshift.com","ip":{"addr":"66.241.125.170","port":443,"asn":40509,"as":"FLY","country":"United States","country_code":"US"},"domain_registered":"2002-02-06","domain_rank":0,"first_seen":"2024-11-14T16:12:49.952428Z","last_seen":"2026-04-17T05:26:21.413035Z","alert_count":0,"request_count":3,"received_data":5202,"sent_data":1361,"comment":"","tags":null,"fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"googleadsrefundclaim.com","ip":{"addr":"209.38.54.191","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":55580,"sent_data":991,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}]},{"fqdn":"widget.trustpilot.com","ip":{"addr":"99.86.91.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2007-06-30","domain_rank":36063,"first_seen":"2017-02-01T19:05:34Z","last_seen":"2026-04-13T18:40:39.14149Z","alert_count":0,"request_count":6,"received_data":154532,"sent_data":4183,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"cf.api.nameshift.com","ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2002-02-06","domain_rank":0,"first_seen":"2025-11-08T15:08:38.013936Z","last_seen":"2026-04-17T05:26:21.483907Z","alert_count":0,"request_count":2,"received_data":2664,"sent_data":928,"comment":"","tags":null,"fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/YXf5ulVV.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e46d8fa85c49147d0c8e5c26fca257dc","sha1":"c0c86169924d37804ebf0b7859c283fee0c75871","sha256":"cd92ddb1beb3dfb8ce00a3a42dd66c293453891cec261d5154301fc7f3fdd5ca","sha512":"35bc6567b8644a81938996a22a94aa66f616e408c05db3dcde4b4b743468464eb6f496569914611dae22ed8c8bf7abbf6aae792bac9e38a977c928ed3870e15d","ssdeep":"","tlshash":"9cd0a9692cb0d02082213cf82dba3c6002034c913206825081e18a0038c32ee8e2bf19","size":227,"data":"","first_seen":"2026-04-14T21:26:06.462656Z","last_seen":"2026-04-20T08:09:16.819325Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/CM6zVlaM.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"9b505e1eaf702aa73e9502e25e6b2d61","sha1":"53229955e2ed6fbfeea7b19292211333d16e2a6c","sha256":"83c09747419ebfa1b0f8d634768cf1e57cd13c331edc99e3b4031926dd49c097","sha512":"e99c932b04490180578fb838dff079bec17c83a9a73d8f7046b2b3f4cd4cc0e5ead56a0c63a9048d8e05ade8e0e4e943c9099129e00ada3dab0a5e00552d90d8","ssdeep":"","tlshash":"cfe0e51dcbd0b1b459c1468db2402da1e505d4aa26ab0294d3fe7a1b2776ca40279d9c","size":432,"data":"","first_seen":"2026-04-14T21:26:06.407064Z","last_seen":"2026-04-20T08:09:16.824411Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/D0QH3NT1.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"42f21db36ad72c8c36a737b4c5a568d1","sha1":"391a315c736001175c1cea254c588b932260d880","sha256":"31a34028cf64a9c5415fd0e5e5920a4057fadd0b5974adda1d13eb45aaffbfc6","sha512":"d697aee856c373450d1762c91aace13499e57be53d649a91311ae87de1494729531cc87a1970a12e70ff0533aca91ed3be5cceb8a24db5792b42288c8835b831","ssdeep":"","tlshash":"dcb012140c0080500012209e934726023890103e925d1251914c4d3013ad2bfd408240","size":89,"data":"","first_seen":"2023-08-11T10:21:19Z","last_seen":"2026-04-20T08:49:28.280298Z","times_seen":2427,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/FL0S014f.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2903cc55e9759797e32c9f9d51a75124","sha1":"8e74c74046d5c25168c21e513bf7e01981bf82da","sha256":"8f0ba226bd3f7c4ad38864a21e9fb5507b56f1c8598234a19eaadf6acc40deb0","sha512":"609668a8de03348b90667f602ba44936fad588061645a4676a6e8d5f4848ba06805d6cc6ede1b9e7e6871ddb5b954348ae52d88a5ba086b48bffe3ac59d1a244","ssdeep":"1536:HKjpOe0tNo455wjcQsgJzA/RoLGQPR9F1HMN45RKm3RDJBlk5oWN1p5NsMtfq5P3:HKjpOe03o4Pwj2WFpMmbv8B71fqh3H","tlshash":"43d387b77a40ab6774b13f188f06e28f9fcc8ca2dc58a48c9ae7d8db1c50921607d755","size":135166,"data":"","first_seen":"2026-04-14T21:26:06.429391Z","last_seen":"2026-04-20T08:09:16.816794Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/entry/start.zfrXPybg.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a23800fd304f4d0be8ddf3b48a86536","sha1":"240459c31943eeff60306ff5a201f25658b46642","sha256":"6aa8b39de4ec8da1f5c4b77ac156249a1bda4af702e929d8baa41a12eaf9d286","sha512":"2ade1d4a2b8e0bc9c8d601f15d7d869d5cf5f8fa4f1b7da3885270856605cf16ffbdaea3f41b30b605380c51f55dfb212b05762f3d29345c1922d106fd172ff2","ssdeep":"","tlshash":"47a0243f0c00d070440f34dcd310c70043147c7513701543005cd11cc5d04c7430d5c1","size":83,"data":"","first_seen":"2026-04-14T21:26:06.473683Z","last_seen":"2026-04-20T08:09:16.771374Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/entry/app.u8ucu2vb.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e16f4f3a27e8bf55735fc2b7de13812","sha1":"6f41554ee709dc6d08f08083d95df8ffac2fa59b","sha256":"5d850da12c045f6cd87c2abb76c1c24b5c64e64973a1f6225c1999827bef7bd6","sha512":"fe44080c810aff72de8d42b0a9e16c01e9ff6b3733c1f5034851c4ae0f065db25cd8ec3c847f95216af3d99fb2cf393b50d75d1fd72ec5f5db17d468414300c2","ssdeep":"192:mZSIKbY/4seBeJQ5PwD6wJ3ZjJZNVGS6ZhIArZC2GTkTfo8f/h+KFbkx:mZSIKQ4nfyZjj6zjIiZC2Gcfoih+Ky","tlshash":"6d32975752d5b8bf38c60cfe695f200093f03d256eaf49215a0d8db5aa1c66882fbd2c","size":11440,"data":"","first_seen":"2026-04-14T21:26:06.44145Z","last_seen":"2026-04-20T08:09:16.88003Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/KhxC_gKm.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5419006033ffb1841d6df354de6f4665","sha1":"569c83b5c0958d44d600c9b27c04ea8cc1b2156e","sha256":"aeadf26b598f27de17375f6447198bd6588f8dbba46b9cc9624786d23928d2dc","sha512":"2e75c6fbc67ac5bf6d885974f1d925fbc9518024b9bfbb7eb2e661e976e0249302a52258b42430d460f1aabcb5f47add791360b7ffda0dbdc95b3d8a32c15e68","ssdeep":"384:Cy007Pq8h1FY8JTsmyidPgcUU9FXY2hNUho1Kby4n3/8pz+NnzpTAgU7f+8LwqLF:Cz07Pn45Wt8owbyUp0BvLwqLuiY7IwY","tlshash":"cff250b8432c5a7e700f4a7deb737271837e18b4345d58a44eaff66804632d4e7ab5a0","size":37322,"data":"","first_seen":"2026-02-22T09:57:55.629383Z","last_seen":"2026-04-20T08:09:16.773642Z","times_seen":215,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/ybRde8y_.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ed5ab19280e88d4af5f3238290bb5d0d","sha1":"f5ded97c6145c76699a1b05260d2f2ecf6c514c8","sha256":"5eb9a7750edada64ca3f491141aa93c966a122620fe4d9b588adfac782979094","sha512":"76b919288a966702b18e077c94f2ce7a7b83d1d76cb6d9ac218162a7e6cbafc4011f76a426a9184ea4b252d07c239a13d36f69565b07ee001fe50675751324cc","ssdeep":"1536:o8DYDuoHs4XHk1zMVioqKW4it0wtIcz38H4qg:o8ECBqit9tIccdg","tlshash":"4e431c942219f079b1af44fb60bb400af3655a55b40b0580b6bccadb3cab98c91f7f5d","size":56517,"data":"","first_seen":"2026-04-14T21:26:06.466454Z","last_seen":"2026-04-20T08:09:16.828676Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/B2EEVOYY.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a2ca0148c439db5b346dc746563586de","sha1":"f0980f46ad4d7bcef8772a0c72268c9580aaa395","sha256":"6f19fda5e3c9f89305cf3d272e19210a73030a4391a2b9d5b7b5d4838e4baaca","sha512":"e10af79a9123b35e9eafdedda5a0039d15736c0d68bee79b7b5c2d53dac1fc565e503aa070a3ce3d7bc1e3f26f6b5ffe405255ab29ac1c76905b1ea0bc17a544","ssdeep":"768:Eo2Yqk4pL/XZ1vSfOX2JYZb6VIe3XbCsroiMUt0O+U+PTBf5m0JHlexvXbpQIvOk:8mY6Vxr2o0uoa+Q","tlshash":"3de24ce430f6f07766e715e290bb121271392917380ac4e0b19d9d56393ae4b47bbf2e","size":34152,"data":"","first_seen":"2026-04-14T21:26:06.405248Z","last_seen":"2026-04-20T08:09:16.870105Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/DN0w8dC-.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0d793df812eb9dd66afa868647936375","sha1":"d3e4ed6d4e794501a3606b730a4ff26a084ea7c7","sha256":"2c019b9727f0ce16cef039831a81464a85cc7523eaef57d7913f38ee2321eab0","sha512":"217348cdd4654bdb0f77232f267ab5200e14c25170a6c5dacb2495692efb8ad1035c3db123d56768ba2c1cb474c545e523425f0cab285c0d3be02964979fc5c0","ssdeep":"","tlshash":"f6e04fdf88445428e20590950bbeb709e03e915b1fabd1e1c9e6c261ad522b0551eeae","size":372,"data":"","first_seen":"2025-11-08T15:08:48.021801Z","last_seen":"2026-04-20T08:09:16.779927Z","times_seen":1469,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/Du0bWCQ_.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"01806b83e884da0ebe827c8799b0fbda","sha1":"c483262aae5c435edac9fcba6b68019a8f808299","sha256":"fa5e0cd726d7b4a19c0e5023cf295cf1d211158ee6c7bc27d4f4088073690b57","sha512":"574e8821c885d71a54519ec5bddd29de56f7455a04656dc66b9c909e4beaef1ec38fb1bb72e9ede2aaa986071278efb6f4300e98adb63e191ba5d3151d0622d9","ssdeep":"","tlshash":"de318c80eed67c34c3729ab111bf8d19b031ef9943d1da89e0831eeea04d62271bb594","size":1818,"data":"","first_seen":"2026-02-11T23:00:41.912053Z","last_seen":"2026-04-20T08:09:16.788031Z","times_seen":220,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/kcGcsn6o.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8f7edbef169190e4fdd471bbc7430551","sha1":"2f4d44e8db7e9096257032902710c729931f27c6","sha256":"60a46723369bb4921df59b75930744c23a1396993aa238bbe5487981b778ecf4","sha512":"182246436a88eb94d0d1cb5d9cb1ccdb578a42d6ad57ec4bb460bb36dd247f446c7f66a0922d75b0fca8f095626b91c241c588e73e6e0719c7b4d8e06a1a9924","ssdeep":"384:sM9MCwUeuISUG3zX2wHFOM9lxhBUbxpQpQ2:sM9wUDUyGwlOM9lx/UbrQpF","tlshash":"955273d93294b07693aa05b650ff0106f3743480740a44a4d1aeb8df39765ae46fbfbc","size":14136,"data":"","first_seen":"2026-02-11T23:00:41.893011Z","last_seen":"2026-04-20T08:09:16.85672Z","times_seen":221,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/DlLxFVTn.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d0f473f0a8776b85ee68feab30698a22","sha1":"0a806e06a2ff3da1f162ad523cc1113816a427c4","sha256":"0c74e4a4b7f65d396b47ef53e5c7be72813a9bbec63ece24e1964e7d3fb1656a","sha512":"762e111a11f2a21d06f0f7172bc773e1eafa76b23b2af33f498e123dc6e191b349e2012dd4dae1f1e7b6e8f8937b58e172350ae1cad26476bcda120846b76095","ssdeep":"12288:y2Ol+pQZYLOlqSk3CEhPY4h+N07QDgGDX5PmAy:sl7kmmAy","tlshash":"6605d7c87e6b7651935b99b4e4f7421eb13ea655a01c4000eb7be4cf3a2544e9233b3e","size":829445,"data":"","first_seen":"2026-04-14T21:26:06.400978Z","last_seen":"2026-04-20T08:09:16.815205Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/D3FGWndS.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ccd784e27c67fa80296e7fae2df9199","sha1":"931d54378155f538468de2f49396a73959830f07","sha256":"2abf0aa32fc2d81f17bf9676c17c0cadeccbfc89c72d9bace6aad0ae5d70ddf7","sha512":"7c678f82b41ccf9d612082f8bdf701fcb211ddc837045b160e8226c932fd1e8f43fa537c136f518da706247c446026b729968315872b1d45d574a23a19bc056e","ssdeep":"384:DjGlOg94qwnPQXSL7MgxJOWpkwBhSIdbdc:2t4qwnoXY7DxDB8","tlshash":"f472e84e8608a6750ec20338359b751a737ac1dcd2e19091ecd6972b03b67b6d93f5bc","size":16135,"data":"","first_seen":"2026-04-10T18:23:26.208527Z","last_seen":"2026-04-20T08:09:16.787136Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/Cea4CeX2.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d34944d4de603c91909b7684a735b7a7","sha1":"bf7acc2b1f8306367e602b7ea7a907a440f5e2bb","sha256":"52ba548897f4cf0ee0c045835512da250703293149b155c1610cb5326c5c8775","sha512":"6db6a77201b2e3216fc699283e826c6c5e65dc019351b5d4d712d5940d9eebb832a8058a5b1c023002b7007d37d6ef0d8523268348f671977e48060bbb0bf991","ssdeep":"","tlshash":"1831a5bc7497a4bae427d89642939012f3141a5cf33ccc90e9a859f667bf8a1c123d39","size":1822,"data":"","first_seen":"2026-02-11T23:00:41.907528Z","last_seen":"2026-04-20T08:09:16.841494Z","times_seen":220,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/nodes/3.D2K056W3.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d09d68ead261ba57c200f8ae216e1029","sha1":"3c340be9a041fca0fc9aca99df965a6be805b980","sha256":"ab558f14f7833c82034b1da18cfa77e0fd704e5a7fb5008b1dec318306f40f6b","sha512":"d13206a221c52fad8b3d1b672989a6253564d961ce1f64bbc13bc4789e3d9c7c563aa72c537ef82899a57e5cc3f55c0b5a2d1376d023a5a6ed8bfe1ffa7d6f38","ssdeep":"12288:V4GkhNoDYUbJOLXFhVZkVDqheSfRIntUXU/yD:V4GkhNAJO7oYheGRawU/yD","tlshash":"0bd44a847296707992ab54f9207b0006f3396949b40a885cfabcdceb7d78d4912b7f7c","size":627304,"data":"","first_seen":"2026-04-14T21:26:06.443398Z","last_seen":"2026-04-20T08:09:16.872168Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js","fqdn":"widget.trustpilot.com","domain":"trustpilot.com","tld":"com"},"ip":{"addr":"99.86.91.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3a9a2660d6b39c094392e60a46e6c5f","sha1":"f81a65fb815ecb294c95f85c1e73d70b573e5619","sha256":"c9d8862c05ed77d6fb6871f6e72a6e41132693c86943bbcdbdab5367bc55bc01","sha512":"0fe85bcda57e369ca66b903db2debccb58bfd995fd3f9e9616900ef1a862b9e890d2bbf801cdb873afce0eaa52de812a9212ffeda82db83f73900c260246139e","ssdeep":"768:BUvI7Bt+WNX75sjAuwqU3o+bz3y2uxtFq+ZdDJvQ64YB:avI7Bt+WNlsjAg+bz3lAtFq+Zbf4M","tlshash":"8db2e5e431e2f47642c6a129543f6209b27278687985d488b57cc8f26fa0d9e3237f7d","size":24915,"data":"","first_seen":"2026-04-07T13:59:33.850722Z","last_seen":"2026-04-20T09:30:29.686494Z","times_seen":1657,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.nameshift.com/script.js","fqdn":"stats.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"66.241.125.170","port":443,"asn":40509,"as":"FLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f9126c9ad5f6188c87fc44c8f569ac3","sha1":"efef52e384831c195d27b2446083bacc03c2c346","sha256":"5a1fa60660100b5897f39344c096872b31b3c835e7affda053e01002ca1fefd9","sha512":"ea114bbbd32ffbc6fcff97ca7bfa5f5c7055ba205e83877476157ee35869741e0c3ef365d5e079d82a61c1692f5555aca05e384f5ae301e91d0334f5717f5b86","ssdeep":"","tlshash":"63510bf4765670b1bfac1dd5c1bc9530f0294672780b8090babb1c442d1d506a5f5faa","size":2638,"data":"","first_seen":"2024-11-25T11:27:46.107861Z","last_seen":"2026-04-20T08:09:16.878315Z","times_seen":1819,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googleadsrefundclaim.com/en-us","fqdn":"googleadsrefundclaim.com","domain":"googleadsrefundclaim.com","tld":"com"},"ip":{"addr":"209.38.54.191","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"e5cde4e299f709663a4f62abff09da72","sha1":"bf79395c78c56c2e8fd0568040ba1f5d57338f04","sha256":"396bf5612068f5324144169e2dd342417fa07ca2a9c325d0987c326e8b0d6b46","sha512":"505b34539dd76474bca8ceb5c1b56833525531014a1766236723d494cf0e643d0a1716541bcc632a8ee92587509467b41e4434fe24a2c4528f53ff9d11732d33","ssdeep":"","tlshash":"f3f020ef931e2c1f59080aaf602dbadd617d80761e4484eb389cef5426e6a20220cc08","size":523,"data":"","first_seen":"2026-04-17T05:26:26.76083Z","last_seen":"2026-04-20T08:09:16.885465Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/IHki7fMi.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a57d2a0c60b30e0abc0f7461358f4e44","sha1":"83ad8c69c6880cbe5ea6873d14d3364b4647bf4c","sha256":"e3a14a7d740378a641b90080433ba7b5a949219bf55db04546d151e79d7292d1","sha512":"5785374ce11683f40d2d85da8c4b176a649edea991832b79f37fd143aa1e9256280974b8d2a372120e740d3c82575d44b97cb1ff2bed8d91f34d406add58330a","ssdeep":"","tlshash":"2db012413804423100f1150f52326700b1881379341471f2c290143bb9cfc03cb002a1","size":90,"data":"","first_seen":"2024-08-19T23:06:15.011977Z","last_seen":"2026-04-20T08:09:16.843507Z","times_seen":1821,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/BdPd5Uuk.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ccd784e27c67fa80296e7fae2df9199","sha1":"931d54378155f538468de2f49396a73959830f07","sha256":"2abf0aa32fc2d81f17bf9676c17c0cadeccbfc89c72d9bace6aad0ae5d70ddf7","sha512":"7c678f82b41ccf9d612082f8bdf701fcb211ddc837045b160e8226c932fd1e8f43fa537c136f518da706247c446026b729968315872b1d45d574a23a19bc056e","ssdeep":"384:DjGlOg94qwnPQXSL7MgxJOWpkwBhSIdbdc:2t4qwnoXY7DxDB8","tlshash":"f472e84e8608a6750ec20338359b751a737ac1dcd2e19091ecd6972b03b67b6d93f5bc","size":16135,"data":"","first_seen":"2026-04-10T18:23:26.208527Z","last_seen":"2026-04-20T08:09:16.787136Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.trustpilot.com/trustboxes/5419b732fbfb950b10de65e5/main.js","fqdn":"widget.trustpilot.com","domain":"trustpilot.com","tld":"com"},"ip":{"addr":"99.86.91.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"712fb8d4fc2cd026c0063c493818e7d5","sha1":"f2b2b338d1d39d7747dd556eb6666225ed21ab4b","sha256":"73b9c11a719a4542b36fe6432c78cd731d226bd0fc85e1bfa09ca4c63eb20981","sha512":"0463a345649bcb1784e040073fd8f113b6fb7e980f328fcb3868d5fb8b33828a56f892d498f650da5d809327682b7857d1b38d6c19ee8eac5f1e8812ec2e9d39","ssdeep":"1536:pCpZtj6e7e6MKPVzVAK+UEzQy+y4xzt17K4GpVwS4mD6FvW6:2ZpqKCl6h","tlshash":"8a935da0a0ddaae15c0b432a7c1c1214f524f1fcf949c49df9ec4e6d42765ceb61ae6c","size":95048,"data":"","first_seen":"2026-02-06T00:57:14.331567Z","last_seen":"2026-04-20T08:45:01.58761Z","times_seen":1415,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/Dkhjq4OS.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"58eed89cdd0574b66cc209f1a8c303c0","sha1":"230afd9c829ded7bb71377c495f7dbae549035a6","sha256":"4fa4c8b93a7937a0b30e53ead18db1e5d2728b0ce329b7901df415bd5d8a54a7","sha512":"3a1523c0e6fccbaa03224d2e9aee327d670278aaca455cdf2d7022ece90130b7f25d90b06e0ecb9243122b068a029abd439eda9221b306d3f77963f62e6f2b67","ssdeep":"3072:+OH03o4PwjD8IAn5KTfjPM0uXn3dkmShyMd7QstI/qYHUFJ2:+mYJnOjM0iOdEstI/qC3","tlshash":"df34d5fbab40e73b75a63b188912d2ce6ecc9cb1e8989048abd7d9cf5d50d62107c714","size":245379,"data":"","first_seen":"2026-04-14T21:26:06.432007Z","last_seen":"2026-04-20T08:09:16.825712Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/C1FmrZbK.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"17d364f6a55a02cc2a058c5c8a5e8d68","sha1":"b9bbac8b3626d3dc8c1916cc6e1a43420d51f78d","sha256":"ddabd08ef1896dd07a2c2a8d01a9963d181dcdaf1d3cb917b321965c3937dde9","sha512":"9113fbda524aa8c818ae8468230b44024e4da84611fcb41eb043aa4dedeaf585056c78f84299a4211a656b8aff8a09767d8f17c7452c008dca715c898e933d31","ssdeep":"","tlshash":"3821639621d4e03212a95ed5f2f0a3d3f9e02897b8111491900fcd526f1dfc5d1eae5a","size":1141,"data":"","first_seen":"2024-12-05T16:17:54.649321Z","last_seen":"2026-04-20T08:49:28.396831Z","times_seen":2560,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/nodes/1.CgGeY3nU.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa4ba8cae623e44d9e7fd14f9d4a8e7c","sha1":"2eb63c8b266b84ffe998de99a0e271175d73ddf8","sha256":"7ed9e18f42dad1b10a614b522d3a505ab796b0de2380823b088aa4902027596f","sha512":"e8db728327a2ca0796f3cb0c4ac3daa97eab9aad27fea676ceef2b6aaf893f63160e67a3172815166e409dba1d652158ed5f775e495beecfcc0ac786db1ba165","ssdeep":"","tlshash":"780141cec049543c31a73cd4d51a3a326150318da7fcdd10e8298d0152f46b68ad8ba7","size":813,"data":"","first_seen":"2026-04-14T21:26:06.461041Z","last_seen":"2026-04-20T08:09:16.81386Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/nodes/0.DMfkPDdB.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3443d014ba610eea5a7d99c5d7cdf3d1","sha1":"c913c47e9d3f2d403c3f6cc4de8ed3d765f2f6a4","sha256":"b96519e0c78a973290c400671970512e863b16a99fdf5a5b55d572e81494abff","sha512":"19f73e02eea41f160c9d22460e8dba76b332a76850dd761fdd24c9aa6533ec4f602cfa0b1440c0f7a6c821d8dd2569564ee5f931bc79f77c13d5472e97cae22b","ssdeep":"192:xcSTRSTtC7/7IfqwrSsa0acTxJtm6itZ5qQxK6aUeVPZGcLHnrG9fozjRH:xcSTQTtC7zIfqLH01L0Vo6aUaPwczC9o","tlshash":"05121cae718bf43627d10848547a4102b32d1bd5b81a9a80f6bd8c5172b9f0592b7fec","size":9912,"data":"","first_seen":"2026-04-14T21:26:06.437554Z","last_seen":"2026-04-20T08:09:16.772524Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/CIrWZR5L.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"62444389c2d9190bbdaf70d98919eab9","sha1":"a22696b0f89e06663c8baa4e8afb6f8c89ab6707","sha256":"61b870586898e1df920d8c7f4f9a9e71be7a852b54e905b8b4d1576cfc31ba97","sha512":"05d9fca8036ccfad9659d2ced01d8f7ace3c0f9bad6a60f780c4ac11bd5b22b01af976e9195bfa74a611c86ca9f6a48c5724c8dd902f1d9666f79cc8540c80b0","ssdeep":"","tlshash":"e521d75ec434739976a59e1873b95563080433e6cf28d0949069ef0743f27a8fd85aa6","size":1185,"data":"","first_seen":"2026-04-14T21:26:06.464289Z","last_seen":"2026-04-20T08:09:16.780837Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/BeeOgDcH.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"27adfdf5fe1b3b331238c7b3d5ebd8cc","sha1":"6e1b08d3ea6a382a427a9a8f4163722f631e2923","sha256":"6018576af532b44fe50227458cdc047c35027bfff1fd685946ade905e96e944e","sha512":"6805d6fdefb82eb831758b720753aa026b126d2efd6d885a498127825b1e3f166873f6e32e9045c24388e8d36bfccee37cab603993dac877b6152c1bafe0cce0","ssdeep":"384:wCWSYGj16XqDb1B4z189cFsIlDrd74Cyj5AwJLmJ5:yGj18qDb1B4B/Fs+dECyj5AwxG","tlshash":"6f622bac124ab13a662b34f6689e5401f318195ddc0dac20f4ddec423686ade69f7f6c","size":15735,"data":"","first_seen":"2026-04-14T21:26:06.457302Z","last_seen":"2026-04-20T08:09:16.775282Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/DiTHga7I.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"fae90f845a9f8b4f0eda3f62c8e26c06","sha1":"ba64629866bce95fde3e6ef02350385ab63437a3","sha256":"3f81b46644d40fb0d8c38bde9174ef4fd596dd0489b0fe180d5b29bde81f24a1","sha512":"370fdd535524e4cfe0fbf483c14f3086f743c55b963a82e79032eda56da330a421f9ea99d5317370029fae12f2e2224b8f2f341ef1d8a8ce0d0fa05d062d5a20","ssdeep":"","tlshash":"e041a4ac76c3311703c1bde624bb1419e6e51a08309ea8dc914caa432dfd89585fef6c","size":2298,"data":"","first_seen":"2025-01-13T08:11:22.60098Z","last_seen":"2026-04-20T08:09:16.881722Z","times_seen":1787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/PHRsxjk2.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3c94df851bef13e863b7c11296cd4560","sha1":"d1dc5b167e698a0d9954b804da09380a767a5b2a","sha256":"8977f995953434185b8d0adcec80a431c44b328b770c0550dac934e9af91cad7","sha512":"48008f708f1111c0fdc9359ebed6cee7168b064752303ec6df1f38a449c1513e9d8d51f58347dac6a93d73f6abc338f94e354f0dec68edbfd44b1eba0ff1d42e","ssdeep":"","tlshash":"91e0ab89099adb60e0681ede68991010553c445171268ee464f38112386210e41b7f4f","size":413,"data":"","first_seen":"2026-04-14T21:26:06.477538Z","last_seen":"2026-04-20T08:09:16.874291Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/BRKw6smn.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3b31b3854a889f70f9fd43bf2c4a9328","sha1":"0f3db4cb8ff98405218e53ecfaa623403b2405c7","sha256":"c8fe9550c79fb90c73615f552859e3f90f1d713fa239cec0d72d8d6bb3fa8fdd","sha512":"b1af63b5a1180b7b7266021955aeee5fc0f343b5ffd9649e9577046558b8fbaae9d88a324af660fd8a587e312a6f8915d4cc9183620d7adb0125acee9755bbd6","ssdeep":"768:wfoBgEkUkF5jgPyk81IZSPugb1HzeC4ZzPzl2j/NzBsv003Phue99Dp0QMg4vGOX:goy/TPkFZSPZb1Hzebzl2rN14BPjlpYZ","tlshash":"1703e985b1dbfa67c352d1ec852f4501b92c1e29246eac68f3a6d5617e74c0c81bbf38","size":39365,"data":"","first_seen":"2026-04-14T21:26:06.424306Z","last_seen":"2026-04-20T08:09:16.789708Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/B2EEVOYY.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:00.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /_app/immutable/chunks/B2EEVOYY.js HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://googleadsrefundclaim.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:01 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 12203\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Apr 2026 09:07:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zFwRU81LeNv7PuRZ2YgKnnMt5shu6yvGCZ%2BSTuJG9QBC5cTXyQMiubmm%2BA8Q85OmHw%2BUi4iX1ukqGAtPc6k1J0QZT5IhEUjq3fuJg3HAhXAREiU4nwfZl4jtu9USZgeBtQoV\"}]}\r\ncf-ray: 9ee2815d0ef92efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34152,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31755)","md5":"a2ca0148c439db5b346dc746563586de","sha1":"f0980f46ad4d7bcef8772a0c72268c9580aaa395","sha256":"6f19fda5e3c9f89305cf3d272e19210a73030a4391a2b9d5b7b5d4838e4baaca","sha512":"e10af79a9123b35e9eafdedda5a0039d15736c0d68bee79b7b5c2d53dac1fc565e503aa070a3ce3d7bc1e3f26f6b5ffe405255ab29ac1c76905b1ea0bc17a544","ssdeep":"768:Eo2Yqk4pL/XZ1vSfOX2JYZb6VIe3XbCsroiMUt0O+U+PTBf5m0JHlexvXbpQIvOk:8mY6Vxr2o0uoa+Q","tlshash":"3de24ce430f6f07766e715e290bb121271392917380ac4e0b19d9d56393ae4b47bbf2e","first_seen":"2026-04-14T21:26:06.405248Z","last_seen":"2026-04-20T08:09:16.870105Z","times_seen":18,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/kcGcsn6o.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:00.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /_app/immutable/chunks/kcGcsn6o.js HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://googleadsrefundclaim.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:01 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 5172\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Apr 2026 09:07:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZE%2FmSNwyuJSi8cufsjQroP%2FeJC9n4Df%2FJfAsJ%2Fqsmq4r1mtorWapsuTCM42em8rh1Fzp5AmmRKLAAlFT%2F8HPPao3Ed8Cwh%2BbrnMVN3TQzYjCJbuAAOsCuGXmVoqsAihXee0W\"}]}\r\ncf-ray: 9ee2815d1f132efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14136,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8360)","md5":"8f7edbef169190e4fdd471bbc7430551","sha1":"2f4d44e8db7e9096257032902710c729931f27c6","sha256":"60a46723369bb4921df59b75930744c23a1396993aa238bbe5487981b778ecf4","sha512":"182246436a88eb94d0d1cb5d9cb1ccdb578a42d6ad57ec4bb460bb36dd247f446c7f66a0922d75b0fca8f095626b91c241c588e73e6e0719c7b4d8e06a1a9924","ssdeep":"384:sM9MCwUeuISUG3zX2wHFOM9lxhBUbxpQpQ2:sM9wUDUyGwlOM9lx/UbrQpF","tlshash":"955273d93294b07693aa05b650ff0106f3743480740a44a4d1aeb8df39765ae46fbfbc","first_seen":"2026-02-11T23:00:41.893011Z","last_seen":"2026-04-20T08:09:16.85672Z","times_seen":221,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/assets/open-sans-symbols-wght-normal.BAf6-sld.woff2","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:01.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /_app/immutable/assets/open-sans-symbols-wght-normal.BAf6-sld.woff2 HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://googleadsrefundclaim.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://buy.nameshift.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:01 GMT\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Apr 2026 09:07:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UcfhxD81%2FGQUVOjI5EUOnG%2BjELXLqgwELlWAitZcVXp6y2as0H1lVmhUP8qKSqUY9BtykIrP%2BYTjxxf6xZlwF%2BHlWIB%2BN7gaU%2Br6naZDdz6DA4D6nPyMVG6Sckm4FFZDqp6m\"}]}\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\ncf-ray: 9ee28160b9452efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26596,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26596, version 1.0","md5":"dae1850484b86d299c31bc08aaa563cf","sha1":"dca808d6d16965c40bfba4e4b3c8a819f843890d","sha256":"8f80f993e523f2e6c2d097552740fd26331658da23ffad31d26edcdd3aeec370","sha512":"69b34f2652aa731ad29fe49a8cea85ebe4ef402573a10048598667f94b7a7855e534121f22d7749b81762b3176f437de607745df82b71484c4ab7c9f8bfd40e9","ssdeep":"384:nYOl9Z/81DjYTaXQMfCMNASNEVM9mYQdpx1sLt/zEkNKxgmS8AXACAU:pJ8NY2XQk0omjdKvKxgCAXACAU","tlshash":"9ac2e13f487a2046c71227f8ee5fc9b571c360a35ab32345c26748650db0ea93f86776","first_seen":"2025-05-29T21:46:50.299968Z","last_seen":"2026-04-20T10:02:48.756502Z","times_seen":31332,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/img/flags/3x2/IT.svg","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:00.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /img/flags/3x2/IT.svg HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:00 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 137\r\nserver: cloudflare\r\nlast-modified: Sat, 17 Jan 2026 12:46:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 7614229\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=He5WKGiSLYICbHLODDSboAVOX6ZW4fwasJvopxlSqvdncbGh92ws2CPRGzsljxLa5VBp8F59zg8PpJS8ZnCZxlfogE4XHztvA%2FI88YPJwxCdsyWeBfngB16lC3svDTE51oxz\"}]}\r\ncf-ray: 9ee28159e9097127-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":201,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eb0b6f8dc36c43f904e23474f9f5fa47","sha1":"265bd61965b1a586cfbb5ca16e96c0a55bcc53d7","sha256":"e81d94d0106f2dfe6619c669c85568191732d588f6b02a5044b77c767821ea31","sha512":"ac1db8a6243ce2c7d0cb8485a53c3eed0bd35b55910c2c6d2752388cdf250a669ec801f6fce88559b623a2e3ba2c8f893bbb2ff5fc820a72bec6cd12e1181af6","ssdeep":"","tlshash":"dfd022b6a0fcbc101c0203b43fecb0c612c2108921a50cecf0844328210d28fb842e29","first_seen":"2023-10-28T05:15:57Z","last_seen":"2026-04-20T08:09:16.769908Z","times_seen":1808,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":82,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/nodes/3.D2K056W3.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:01.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /_app/immutable/nodes/3.D2K056W3.js HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://googleadsrefundclaim.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:01 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 150471\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Apr 2026 09:07:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RIXu1dpR55C7K9NxzHfSc4KVmyuCgpLYSfAjNF4I8lohNNKiuRX6%2Fp5NT1EV7zYAcDNxt89ESPCiLfDCdpxkvU8%2FCtXAubPNdAAlOXOaYSlpZx%2Fb%2FNgn9vkxNjXmfo77bij%2B\"}]}\r\ncf-ray: 9ee2815da90a2efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":627304,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d09d68ead261ba57c200f8ae216e1029","sha1":"3c340be9a041fca0fc9aca99df965a6be805b980","sha256":"ab558f14f7833c82034b1da18cfa77e0fd704e5a7fb5008b1dec318306f40f6b","sha512":"d13206a221c52fad8b3d1b672989a6253564d961ce1f64bbc13bc4789e3d9c7c563aa72c537ef82899a57e5cc3f55c0b5a2d1376d023a5a6ed8bfe1ffa7d6f38","ssdeep":"12288:V4GkhNoDYUbJOLXFhVZkVDqheSfRIntUXU/yD:V4GkhNAJO7oYheGRawU/yD","tlshash":"0bd44a847296707992ab54f9207b0006f3396949b40a885cfabcdceb7d78d4912b7f7c","first_seen":"2026-04-14T21:26:06.443398Z","last_seen":"2026-04-20T08:09:16.872168Z","times_seen":18,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/Cea4CeX2.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:01.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /_app/immutable/chunks/Cea4CeX2.js HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://googleadsrefundclaim.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:01 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 877\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Apr 2026 09:07:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BykqMTxCcGmmTCTqvOfQhugk5uQWBtwXJoqqBSEOaxP9LywGDBQ1pJM6BTHJF1KN1I3grzbPdcujy9LrMxENRc2Eyp6yJauuM6KIf%2F3uDFGJlM7W6B7IyvXhDmzRgr%2BowlHy\"}]}\r\ncf-ray: 9ee2815ebbe22efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1822,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1821)","md5":"d34944d4de603c91909b7684a735b7a7","sha1":"bf7acc2b1f8306367e602b7ea7a907a440f5e2bb","sha256":"52ba548897f4cf0ee0c045835512da250703293149b155c1610cb5326c5c8775","sha512":"6db6a77201b2e3216fc699283e826c6c5e65dc019351b5d4d712d5940d9eebb832a8058a5b1c023002b7007d37d6ef0d8523268348f671977e48060bbb0bf991","ssdeep":"","tlshash":"1831a5bc7497a4bae427d89642939012f3141a5cf33ccc90e9a859f667bf8a1c123d39","first_seen":"2026-02-11T23:00:41.907528Z","last_seen":"2026-04-20T08:09:16.841494Z","times_seen":220,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/Du0bWCQ_.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:01.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /_app/immutable/chunks/Du0bWCQ_.js HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://googleadsrefundclaim.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:01 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 580\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Apr 2026 09:07:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2s5Wn2%2BVeLrlipxTNkP%2FwkPtyJIF%2BgHrUOjX3C2JVSmiW%2FOKYMRcPqZeZgfR3IqkREWKjg1vnIFzXsyZrtOv8BfKU8XGpt1ucX5R9ip7I1E1viNeSOCAw1GCP%2ByKsEgve0zk\"}]}\r\ncf-ray: 9ee2815f5d6a2efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1818,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1817)","md5":"01806b83e884da0ebe827c8799b0fbda","sha1":"c483262aae5c435edac9fcba6b68019a8f808299","sha256":"fa5e0cd726d7b4a19c0e5023cf295cf1d211158ee6c7bc27d4f4088073690b57","sha512":"574e8821c885d71a54519ec5bddd29de56f7455a04656dc66b9c909e4beaef1ec38fb1bb72e9ede2aaa986071278efb6f4300e98adb63e191ba5d3151d0622d9","ssdeep":"","tlshash":"de318c80eed67c34c3729ab111bf8d19b031ef9943d1da89e0831eeea04d62271bb594","first_seen":"2026-02-11T23:00:41.912053Z","last_seen":"2026-04-20T08:09:16.788031Z","times_seen":220,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.nameshift.com/api/send","fqdn":"stats.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"66.241.125.170","port":443,"asn":40509,"as":"FLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:02.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stats.nameshift.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 11:28:45 GMT","end":"Sun, 28 Jun 2026 11:28:44 GMT"},"fingerprint":{"sha1":"14:DC:31:BB:56:38:1F:FB:54:88:EC:90:25:E6:4B:2F:D1:45:8F:9A","sha256":"A5:DA:F0:FC:08:FC:8D:43:4D:B3:D1:44:F7:14:C4:6F:F1:0B:AB:A1:0D:81:6C:29:54:AD:08:28:A4:FC:CC:EC"}}},"request":{"raw":"POST /api/send HTTP/1.1\r\nHost: stats.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 223\r\nOrigin: https://googleadsrefundclaim.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":223,"data":"{\"type\":\"event\",\"payload\":{\"website\":\"377f6a3d-f518-4b52-87ea-65612adb259c\",\"hostname\":\"googleadsrefundclaim.com\",\"screen\":\"1280x1024\",\"language\":\"en-US\",\"title\":\"googleadsrefundclaim.com%20is%20for%20sale\",\"url\":\"/en-us\"}}"}},"response":{"raw":"HTTP/2 200 OK\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self';img-src * data:;script-src 'self' 'unsafe-eval' 'unsafe-inline';style-src 'self' 'unsafe-inline';connect-src 'self' api.umami.is cloud.umami.is;frame-ancestors 'self' undefined\r\naccess-control-allow-origin: *\r\ncontent-type: text/plain\r\netag: \"k4r0al4o1ohc\"\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 18 Apr 2026 09:05:02 GMT\r\nserver: Fly/9e64c111f (2026-04-16)\r\nvia: 2 fly.io, 2 fly.io\r\nfly-request-id: 01KPFXC75GEPZK9F45NSSTMY49-arn\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":624,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with very long lines (624), with no line terminators","md5":"640d96a0ad04f2448ea90c063fbf4396","sha1":"fb32df82849a6bf700905760587ce5b569f5a9a5","sha256":"694764b9308ac26082d6dec3ff6df65e488fea9797ada49e5070e0056648dcec","sha512":"62bafd8fc07cc5eaa57c3d6f66343ecf11eb6c7003ff414ee978392cd298b55afd75589dc3707a80fd409be3bf1e2131633eb4193e105daa0d39603cd90e1868","ssdeep":"","tlshash":"e9f002490a51270d69c82a23469f3f9f439e8544b3a9045663cebfcee84618f1ca7563","first_seen":"2026-04-18T09:05:36.470049Z","last_seen":"2026-04-18T09:05:36.470049Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/img/flags/3x2/US.svg","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:00.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /img/flags/3x2/US.svg HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:00 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 336\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Mar 2026 08:02:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 2475613\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yWrhzrjsIENlBstIpCinc3OT4Kp3G%2BFBq5VYD6Fw2G14HCv9OAkexSNJFmmPiSNck3YhaQcnQ%2FD%2F8c83RZATscUq8z3wRiO4Qrq2b0r1%2Bztv7M45ctCbgcPxHEUBp2oaoPwZ\"}]}\r\ncf-ray: 9ee28159e9007127-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1333,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e8e1bf9ae08f402ef9376d117a75f9f4","sha1":"eb2f4b969e4fad4367f85c76d99326198f28b5a6","sha256":"a6fb80d3be97a9158e282d3de5c1f68bd3b9d8d9d91dc97e2fd4c0574b05bd50","sha512":"d120d909f23350bba31420cfcb6f82318e3fe07c8d800d5ce3cdbd8a3ce35da47d720407bed1caadaec5cc193e4a21f25b3b6bb79b48c43361c480c678051ccf","ssdeep":"","tlshash":"c0219cc691102470f2df87d5e225726428cf658476a8803c35e8cba1abe5cc882aecc6","first_seen":"2024-08-20T12:58:01.821138Z","last_seen":"2026-04-20T08:09:16.818229Z","times_seen":1782,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":87,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/img/flags/3x2/ES.svg","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:00.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /img/flags/3x2/ES.svg HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:00 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 288\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Mar 2026 08:02:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 2694192\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fq%2BPq3b%2BsBBPFFEpOZiSVUYiV7Z1i6686QfwAHjc8M2Rtej4PIc6djrgfT0SKRIZBSj5FHxfNH%2BsJurxgNnHZ5Bw%2BY%2BmzOubL9MlOEGzfNKzHGLp2xDceo1C%2FhzTS8%2FmANCV\"}]}\r\ncf-ray: 9ee28159e9067127-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":579,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"61aedf0ff7c8827a0d6b34dd4919ce57","sha1":"82d6907294ceca9eeeb21fc9ee86bf67241d5854","sha256":"ac8dcafe3b7255b64d037fef84c8f6487d8411730652851788ddd9fb644b7616","sha512":"f03a1b6b4658fd0d215a1ae86dee475ebf14af1ad30ba234db8fb9aa0898f105262303b2a73e17b11c7b0c90f05a40e5d86462f9e497eb4b8ce14b0dea35cd51","ssdeep":"","tlshash":"3ef04c13f3b197a71a1482b0cfb85635c45b10d9680f5404b9f1126011ebfdbeb2c6e2","first_seen":"2025-04-14T21:27:18.061462Z","last_seen":"2026-04-20T08:09:16.809139Z","times_seen":1781,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":83,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/IHki7fMi.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:00.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /_app/immutable/chunks/IHki7fMi.js HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://googleadsrefundclaim.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:01 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 80\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Apr 2026 09:07:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OlQ3c0kMKcE6VUQ98F6c5qp1ZHgyAIa%2FUSWjj93srGCNomiVSQgFA8ithQ9%2B8fxjaDiWDjbreY2zLdTFOWUdUyyIKuMsdfe80rB%2Bubi5XO8cOXdO494wmKRI8NO6d1aVTsLc\"}]}\r\ncf-ray: 9ee2815d1f182efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"a57d2a0c60b30e0abc0f7461358f4e44","sha1":"83ad8c69c6880cbe5ea6873d14d3364b4647bf4c","sha256":"e3a14a7d740378a641b90080433ba7b5a949219bf55db04546d151e79d7292d1","sha512":"5785374ce11683f40d2d85da8c4b176a649edea991832b79f37fd143aa1e9256280974b8d2a372120e740d3c82575d44b97cb1ff2bed8d91f34d406add58330a","ssdeep":"","tlshash":"2db012413804423100f1150f52326700b1881379341471f2c290143bb9cfc03cb002a1","first_seen":"2024-08-19T23:06:15.011977Z","last_seen":"2026-04-20T08:09:16.843507Z","times_seen":1821,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/nodes/1.CgGeY3nU.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:01.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /_app/immutable/nodes/1.CgGeY3nU.js HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://googleadsrefundclaim.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:01 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 445\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Apr 2026 09:07:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=scsJicyZ1SravmgnyWrrg8VNU2TaKfQ9G%2B1SjoMFZAamSfES%2FyxlEY2CvxTGfOolI8k%2FtpTAcscCA%2FyN46yoRI%2FMZE35xnrSUweqYcuQx6YRTKdHmX7sjEkMwN4gVFdG4gQb\"}]}\r\ncf-ray: 9ee2815d99062efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":813,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (812)","md5":"aa4ba8cae623e44d9e7fd14f9d4a8e7c","sha1":"2eb63c8b266b84ffe998de99a0e271175d73ddf8","sha256":"7ed9e18f42dad1b10a614b522d3a505ab796b0de2380823b088aa4902027596f","sha512":"e8db728327a2ca0796f3cb0c4ac3daa97eab9aad27fea676ceef2b6aaf893f63160e67a3172815166e409dba1d652158ed5f775e495beecfcc0ac786db1ba165","ssdeep":"","tlshash":"780141cec049543c31a73cd4d51a3a326150318da7fcdd10e8298d0152f46b68ad8ba7","first_seen":"2026-04-14T21:26:06.461041Z","last_seen":"2026-04-20T08:09:16.81386Z","times_seen":18,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/BeeOgDcH.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:01.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /_app/immutable/chunks/BeeOgDcH.js HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://googleadsrefundclaim.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:01 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 5841\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Apr 2026 09:07:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RwzVe0RU9sO%2BKQJfyTSeQYvIRiQCgXu4NLhuzaxCXWibrfyLuByu509fcyNWu4KeJ48o%2FOkWvC8StEv1RqXIdPIPlsB%2B0DjWCC%2BwAZPhAg7QJkezKb%2FWCp4ZM0erxj2XZtQJ\"}]}\r\ncf-ray: 9ee2815ebbb52efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15735,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (15734)","md5":"27adfdf5fe1b3b331238c7b3d5ebd8cc","sha1":"6e1b08d3ea6a382a427a9a8f4163722f631e2923","sha256":"6018576af532b44fe50227458cdc047c35027bfff1fd685946ade905e96e944e","sha512":"6805d6fdefb82eb831758b720753aa026b126d2efd6d885a498127825b1e3f166873f6e32e9045c24388e8d36bfccee37cab603993dac877b6152c1bafe0cce0","ssdeep":"384:wCWSYGj16XqDb1B4z189cFsIlDrd74Cyj5AwJLmJ5:yGj18qDb1B4B/Fs+dECyj5AwxG","tlshash":"6f622bac124ab13a662b34f6689e5401f318195ddc0dac20f4ddec423686ade69f7f6c","first_seen":"2026-04-14T21:26:06.457302Z","last_seen":"2026-04-20T08:09:16.775282Z","times_seen":18,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/img/flags/3x2/AT.svg","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:00.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /img/flags/3x2/AT.svg HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:00 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 123\r\nserver: cloudflare\r\nlast-modified: Fri, 23 Jan 2026 08:20:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 5886769\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0hmVUWIR2aDnfMlsawusA39iuyE0TlM%2F0ufywxlBEQ8ZkQJQFZrB4Mszz93%2BMmZHGfRH7vEJUmI%2BTAt237MGfDiFXYCOpJmq8Dtgxvi79YTssXDat7wdxTJ48Ph3%2Bi5jrpUu\"}]}\r\ncf-ray: 9ee28159f90d7127-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0447178b95ec7cda95f5e21d04ce2548","sha1":"671b18742c40023cc32a5e5236ead0a819a3cc97","sha256":"ddad7df9fb41ce3c498e8b4732dccb65a74635773bb3816e0212809b719ae3aa","sha512":"57b44fa4322bf82f552e6415807b9fa1bd3ac2aca94bb185fd1b299ea522255c7802d1b9a8e7a47dec63739c2a91e265d018a72bbbd4500e2c288c9b1389ca06","ssdeep":"","tlshash":"53c08c88a2e83520980456f1bdbdb0c2b5e2104f10e404eff9a85b34214dacfe803d68","first_seen":"2023-10-28T05:15:55Z","last_seen":"2026-04-20T08:09:16.842188Z","times_seen":1801,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":81,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/img/flags/3x2/PT.svg","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:00.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /img/flags/3x2/PT.svg HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:00 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 254\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Mar 2026 08:02:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 2195962\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fkZK6kCT1Gb3xQAkWQd663%2B7krD3ybJNx9gjAi6sekLUTU0kCxtXMiXDYmc2vP0XfJtTpi0%2F0Qwx2Oio9NiDEB92yOO%2BLFyqGD2Q9UBUn%2BepPCN0NAdC454lZ78V2JqVxheV\"}]}\r\ncf-ray: 9ee28159f9107127-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":443,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c81d247f657ea4a718ba40453aafc07a","sha1":"6daee5d2882cb9961e476d9a3a759a10fe6fbb36","sha256":"c1faac66bbdd834ac265c0a2ac0aa445822b331010f997e4a9f85f7bd39414bd","sha512":"ad80eeb84f8607dd8491e8f2c235b3e924068c72bcf6eabdd7c878c457c2a5b24575eb3a143fb8c2f5aa0a6eaf12521d371fa2e031b4e414fc419ffa77fab508","ssdeep":"","tlshash":"00f054d474fc3c98c9cf03b02dee68c551c0915711990efdb1c05879260ce8bae46d24","first_seen":"2023-10-23T10:14:57Z","last_seen":"2026-04-20T08:09:16.847017Z","times_seen":1805,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/PHRsxjk2.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:01.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /_app/immutable/chunks/PHRsxjk2.js HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://googleadsrefundclaim.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:01 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 237\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Apr 2026 09:07:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ASdalGXBHQuiUzG%2FerlMUq3cRFKOaPps31MQSQ1E7lYcGnO93%2Bqb%2FS1yvWVqoaJiBcCzqpWbGCrWQSziEdN5DzvV0pv0LcY6vqJ9qFHaaK97YVl34ms7BgWgsgYhr1WTFqrf\"}]}\r\ncf-ray: 9ee2815e6ae22efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":413,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (412)","md5":"3c94df851bef13e863b7c11296cd4560","sha1":"d1dc5b167e698a0d9954b804da09380a767a5b2a","sha256":"8977f995953434185b8d0adcec80a431c44b328b770c0550dac934e9af91cad7","sha512":"48008f708f1111c0fdc9359ebed6cee7168b064752303ec6df1f38a449c1513e9d8d51f58347dac6a93d73f6abc338f94e354f0dec68edbfd44b1eba0ff1d42e","ssdeep":"","tlshash":"91e0ab89099adb60e0681ede68991010553c445171268ee464f38112386210e41b7f4f","first_seen":"2026-04-14T21:26:06.477538Z","last_seen":"2026-04-20T08:09:16.874291Z","times_seen":18,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/img/flags/3x2/NL.svg","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:00.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /img/flags/3x2/NL.svg HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:00 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 123\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 14:16:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 5110768\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rJPAHQjS3BwodIrlrVrMRpbBbfeYK9ag0IjJUX59TIS01niS7CVTGVtpaix%2BlPdmB2MPpg6RCwE5h4GdJGXfjepFwrwVhqxjg2RjeLu2hNebS8%2FFslbfZMkOplM5%2BPMDOM8l\"}]}\r\ncf-ray: 9ee28159f90e7127-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":202,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fa66664b8e334da56e2fd8a778cd3b77","sha1":"459ad2551d6bf29d36afcae78ab1fdd7f932502b","sha256":"05346c117ca83a7b4618ebf1f7a975c1aeae287edb8b50a38a80076ff9b4034b","sha512":"4bfbd15a63820a672ea61495f2a320d8051aa38d2d7fb0e4d1d293da3ae8c60c549a5675cc547fb01caff3c53c41efee93fdf467662805b4ced84be6352654ed","ssdeep":"","tlshash":"f3d0c9c9e1b866004a1553a1deb870c26185104a548c80eef5a80634a10dacbac47998","first_seen":"2023-10-23T10:14:58Z","last_seen":"2026-04-20T08:09:16.845908Z","times_seen":1817,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":82,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/entry/app.u8ucu2vb.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:00.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /_app/immutable/entry/app.u8ucu2vb.js HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://googleadsrefundclaim.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:00 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2963\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Apr 2026 09:07:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BXqnKWpFLTkrFHuI3ZFjW3v8E%2FJRfKKE5TchG7EQL5UNthLU71TaHS1q6fm73n0g9PwBy2NdxpvEmzOELkWRLkNgMEbXd9npz24wucY%2BnjHxs1SET2g27HyfqLnzcGzBWjTI\"}]}\r\ncf-ray: 9ee2815cbe282efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11440,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (9987)","md5":"8e16f4f3a27e8bf55735fc2b7de13812","sha1":"6f41554ee709dc6d08f08083d95df8ffac2fa59b","sha256":"5d850da12c045f6cd87c2abb76c1c24b5c64e64973a1f6225c1999827bef7bd6","sha512":"fe44080c810aff72de8d42b0a9e16c01e9ff6b3733c1f5034851c4ae0f065db25cd8ec3c847f95216af3d99fb2cf393b50d75d1fd72ec5f5db17d468414300c2","ssdeep":"192:mZSIKbY/4seBeJQ5PwD6wJ3ZjJZNVGS6ZhIArZC2GTkTfo8f/h+KFbkx:mZSIKQ4nfyZjj6zjIiZC2Gcfoih+Ky","tlshash":"6d32975752d5b8bf38c60cfe695f200093f03d256eaf49215a0d8db5aa1c66882fbd2c","first_seen":"2026-04-14T21:26:06.44145Z","last_seen":"2026-04-20T08:09:16.88003Z","times_seen":18,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/D0QH3NT1.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:01.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /_app/immutable/chunks/D0QH3NT1.js HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://googleadsrefundclaim.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:01 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 75\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Apr 2026 09:07:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mX7XNwcs6XBZEud2bfaswQV56f2IRhrle5BMZ3TMZc1wNKt%2BGna7WjPtNpPfarjwf43VJpJiqp4pZOA0RBGqJoxxW9%2BU4L9raTZai5OKt%2BZc7cmYDYdakzw5E51xUnX6exqa\"}]}\r\ncf-ray: 9ee2815df9d62efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"42f21db36ad72c8c36a737b4c5a568d1","sha1":"391a315c736001175c1cea254c588b932260d880","sha256":"31a34028cf64a9c5415fd0e5e5920a4057fadd0b5974adda1d13eb45aaffbfc6","sha512":"d697aee856c373450d1762c91aace13499e57be53d649a91311ae87de1494729531cc87a1970a12e70ff0533aca91ed3be5cceb8a24db5792b42288c8835b831","ssdeep":"","tlshash":"dcb012140c0080500012209e934726023890103e925d1251914c4d3013ad2bfd408240","first_seen":"2023-08-11T10:21:19Z","last_seen":"2026-04-20T08:49:28.280298Z","times_seen":2427,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/ybRde8y_.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:01.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /_app/immutable/chunks/ybRde8y_.js HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://googleadsrefundclaim.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:01 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 17583\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Apr 2026 09:07:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NI0oX3lbGHGvKI%2Ft1PglRecaIv0wz57JO%2BgfEu7a92yWDtZq%2F2sJGCi1KUE85yzqgoojtR3We%2BkDWXpc%2BRfUq8Em6H27SZW5KONNf8aAnRtq9nmnIP7s6%2Fy65MjNo9zBbIfo\"}]}\r\ncf-ray: 9ee2815ebbef2efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56517,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37155)","md5":"ed5ab19280e88d4af5f3238290bb5d0d","sha1":"f5ded97c6145c76699a1b05260d2f2ecf6c514c8","sha256":"5eb9a7750edada64ca3f491141aa93c966a122620fe4d9b588adfac782979094","sha512":"76b919288a966702b18e077c94f2ce7a7b83d1d76cb6d9ac218162a7e6cbafc4011f76a426a9184ea4b252d07c239a13d36f69565b07ee001fe50675751324cc","ssdeep":"1536:o8DYDuoHs4XHk1zMVioqKW4it0wtIcz38H4qg:o8ECBqit9tIccdg","tlshash":"4e431c942219f079b1af44fb60bb400af3655a55b40b0580b6bccadb3cab98c91f7f5d","first_seen":"2026-04-14T21:26:06.466454Z","last_seen":"2026-04-20T08:09:16.828676Z","times_seen":18,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googleadsrefundclaim.com/en-us","fqdn":"googleadsrefundclaim.com","domain":"googleadsrefundclaim.com","tld":"com"},"ip":{"addr":"209.38.54.191","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-18T09:05:00.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.aviva.nl","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 23:20:35 GMT","end":"Tue, 23 Jun 2026 23:20:34 GMT"},"fingerprint":{"sha1":"9D:22:E6:35:B8:44:51:A6:D3:23:8A:7A:25:0A:EB:8B:A9:1D:48:F2","sha256":"BC:C5:9D:0D:31:48:EB:C5:4F:D5:F2:1F:D1:3C:28:D3:E4:FB:D6:73:4E:AA:7B:95:42:E8:67:8E:5E:87:AA:E8"}}},"request":{"raw":"GET /en-us HTTP/1.1\r\nHost: googleadsrefundclaim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, s-maxage=900, max-age=0\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\netag: \"dhsrdsnnqwvt384\"\r\nlast-modified: Tue, 14 Apr 2026 09:09:56 GMT\r\nlink: \u003chttps://cf.api.nameshift.com/domains/by-name/googleadsrefundclaim.com/sales-information\u003e; rel=preload; as=fetch; crossorigin=anonymous\r\nreferrer-policy: same-origin\r\nserver: Caddy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ndate: Sat, 18 Apr 2026 09:05:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":27302,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (19540)","md5":"0cf1adff7443fb6289a8ec09dc898730","sha1":"52cc077959451b96c4ce39211a5814531d4146d9","sha256":"1602afd9889eb79938b73a414ff5b8365ba519f87a95acfab0c9c799a985c092","sha512":"f2a48b1f5ea534780a8e350d2bcf8b342e5520b1e53cbb0b8e420aeb419cf0ebf532e1396a85f48ec1b2ffddaa8a83c5e690b386c0b44a1e14f281683ae43e7f","ssdeep":"768:Lw4qn2byLiuFGhHzeHA/g8sxfC6cYn3qChJOVlmkSbAmDxYmY86AnA7UW6SdBP:Lw4qn2byLiuFGhTeHA/g8sxfC6cY0Y1m","tlshash":"ffc2b576a245162f354786eab410bb6ea1d7c15fcd07808ae5ede2b27fc2de18c3d058","first_seen":"2026-04-17T05:26:26.71595Z","last_seen":"2026-04-20T08:09:16.78173Z","times_seen":17,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/assets/3.snLEfAlv.css","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:00.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /_app/immutable/assets/3.snLEfAlv.css HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:00 GMT\r\ncontent-type: text/css\r\ncontent-length: 14346\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Mar 2026 08:02:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 2778558\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EfeRBPuGOqJzbnT4oKyGvmo%2B8qXAYYwfsrqIQEsr8lrrsvafWdn0ggSIoIHhLl9hWhVaASgxybkS9lr9q0ZYnlX5jBNTQS%2F8Fz7OmH5r5YsFmNxRTvVFAh9r%2FJ2rsXt2P8PQ\"}]}\r\ncf-ray: 9ee28159e8f37127-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":218979,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d31e1412e62642657775416d8d85f3f3","sha1":"248de498fd1cd263a49cff2918867ca26534767d","sha256":"78a6c61235030631026c71187d9cebfba576784f138d6a2777703ff3de103286","sha512":"1c290b825e897f32a431a73e6b42d9fb9dc94c99089c8e528c3eb823ed094ce117a0b168ab45ba558d241c7bd98fc94916011e247e9fdcd646a883486ae535aa","ssdeep":"3072:bk742UaY+cNX1lt4/ODhXL7SJEbJEeJEdJEp:bk742UaY+cNXaY","tlshash":"4724d3cadb3350b9b423167d6f56b72b71142840df4106a8e3f254b6de8b8d2d2b3e42","first_seen":"2025-01-13T08:11:22.546394Z","last_seen":"2026-04-20T08:09:16.831889Z","times_seen":1783,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":89,"dns":69,"connect":1,"send":0,"wait":18,"receive":1,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/CIrWZR5L.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:01.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /_app/immutable/chunks/CIrWZR5L.js HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://googleadsrefundclaim.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:01 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 431\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Apr 2026 09:07:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=otYBLmUWGtZKA8b2XObNBDit7rLbzV6cC1nuLUW2P1mpGnfWF3o4w%2F26ZF9OI3D3eQVMnBRroEKn9zabiH5rmESbfzDuMCFJ5rQNhULMqtCELehjHLqZI43wvGUV%2BVFCXzdz\"}]}\r\ncf-ray: 9ee2815ebbd42efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1185,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1184)","md5":"62444389c2d9190bbdaf70d98919eab9","sha1":"a22696b0f89e06663c8baa4e8afb6f8c89ab6707","sha256":"61b870586898e1df920d8c7f4f9a9e71be7a852b54e905b8b4d1576cfc31ba97","sha512":"05d9fca8036ccfad9659d2ced01d8f7ace3c0f9bad6a60f780c4ac11bd5b22b01af976e9195bfa74a611c86ca9f6a48c5724c8dd902f1d9666f79cc8540c80b0","ssdeep":"","tlshash":"e521d75ec434739976a59e1873b95563080433e6cf28d0949069ef0743f27a8fd85aa6","first_seen":"2026-04-14T21:26:06.464289Z","last_seen":"2026-04-20T08:09:16.780837Z","times_seen":18,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/assets/0.CpypPrqO.css","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:00.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /_app/immutable/assets/0.CpypPrqO.css HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:00 GMT\r\ncontent-type: text/css\r\ncontent-length: 8461\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Apr 2026 09:07:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 344770\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C9o6VnLQhUimh%2F40REErJjZeun6g6sF7ZYPbXglD%2B7YN6dBct7ZFQDvQXqYm9iPdzn9DabH4F5fraGH496Cr%2FtLQhbXT1vImWDo6Ar1ROjSEQfTswBnPTTjROY8%2BpjP6MBGG\"}]}\r\ncf-ray: 9ee28159f9197127-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49125,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (49124)","md5":"11f67d38556d900f6a185190cd63ae55","sha1":"02010d9022bf86f31db7cdafa03bdef82e15635f","sha256":"7037a9f0c22da36b64949087dc0f631f237c677785076582cfb801cae2da0b16","sha512":"5c01bdf23756599ae422077e5489b44ff5cc2ac35444e9dcbcdd54b26b19d98e9f64ca38e83b86ff4812518c6c1883c8992234ce5d3a5b8b3b7f0e5510fdbbca","ssdeep":"384:A2J0fgRid9wfkbCze59Mi4xGRFx1MUc+TTeZNL2eCLEA:nFxz6qnaMUc+GZNL2eCgA","tlshash":"c823533e6a50003f6d93c4fae598fa99e21771c0df3a96ebec4256109bca3f25d52214","first_seen":"2026-04-14T21:26:06.481434Z","last_seen":"2026-04-20T08:09:16.788935Z","times_seen":18,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":99,"dns":71,"connect":4,"send":0,"wait":20,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/img/payment_icons/amex.svg","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:00.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /img/payment_icons/amex.svg HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:00 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1779\r\nserver: cloudflare\r\nlast-modified: Tue, 31 Mar 2026 07:54:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1348737\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rI6LRL%2Bb%2BZTE8H75Cgw%2BsmD1AA3udZqxm4Bp2cLPNBuO5gGH3xEc%2BP3enaugnF%2FGNHn%2BJv7%2F58JJPDlPvrNEBUo7GyokasW9kpB9MLsVJfJYshF6fuBesH8gCm3jQ%2BfppdKs\"}]}\r\ncf-ray: 9ee28159e8fb7127-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4856,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e64f99082732e08fb8ce8b4aab542409","sha1":"ce7d5051593b240ecbeedd93c2c8e93ccaa876ac","sha256":"5bd7acd768820fde2185777a80c34cd8f5a71fff42d5dee9dcdd4ea6ce669b3f","sha512":"b8171bc4517187db3dc3fb4ab93d440187c14228f3b15ff79577a5d78f59a6b80eb9bf4b9bd7424283b984884dd412daa291dc9f403c6fc0868684c3d1574c7a","ssdeep":"48:LfPv0Xg/9LyUoPOQCmC0FglG4HlG/mC/xi77ct47nQ21SRe9/nANpbcms64y:Ln8O9L2P1C0FgFGD/AB7nbI+/em84y","tlshash":"78a1a8d1c7067b7571270236daba77ad6a6e1cde37116c8cc2ea3040db62f14214e375","first_seen":"2025-08-03T12:31:01.864109Z","last_seen":"2026-04-20T08:09:16.827173Z","times_seen":1776,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/img/payment_icons/bank-transfer.svg","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:00.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /img/payment_icons/bank-transfer.svg HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:00 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 5505\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Mar 2026 08:01:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 2509159\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Effm0gQEolTBb9nftIzWQebg8Lv5geYHrfVF190n%2FlQTL75tXkvulJSB5%2FaWBI5sUIYOEqlnntj1mc3JoICdMqFxgnpoqJOThXSH3j48Ar7yuiwB%2Bf7Kq8f8DGT5y53xwJbB\"}]}\r\ncf-ray: 9ee28159e8ff7127-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16361,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7e2c37a245516b16e2d121f13452c74a","sha1":"aa61491bb2e5c23e62a6115fe7ae36c2ffe85e56","sha256":"5af7422dcd2b6cef0c0da8dbc8ea62c9922f348f04051413b8b33c49f49a9009","sha512":"669b1947078791f9bc47d0740ae3a05eff97f804f90a3619d9f51520935f64d141906a1a28107734d6877b1f8e702ac696164d33289da1b48fecba91d5025646","ssdeep":"384:idZVNhN8Mvov33EN72dEuJlMRG09g6f2zAO3:idd8MvYlC9+zd","tlshash":"3e7265da839445e0fa5e9374ccbb36e6359134eb56c4a48c426b7814d033ef92b7dac8","first_seen":"2025-08-03T12:31:01.899876Z","last_seen":"2026-04-20T08:09:16.785311Z","times_seen":1776,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":70,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/C1FmrZbK.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:00.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /_app/immutable/chunks/C1FmrZbK.js HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://googleadsrefundclaim.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:01 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 569\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Apr 2026 09:07:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=shbjGsmUOwtIPypJkClTSqC%2FhKkA3ekLzuCncD64zlujBqf0kb3blx5swS94yO8TlwASwMmOhPZ2hctuGJyRWwqFKxXqu%2BCMpo9XpgvHD%2FSqeX3cGQflpcVT7Txsbw96iLbt\"}]}\r\ncf-ray: 9ee2815d0eff2efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1141,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1140)","md5":"17d364f6a55a02cc2a058c5c8a5e8d68","sha1":"b9bbac8b3626d3dc8c1916cc6e1a43420d51f78d","sha256":"ddabd08ef1896dd07a2c2a8d01a9963d181dcdaf1d3cb917b321965c3937dde9","sha512":"9113fbda524aa8c818ae8468230b44024e4da84611fcb41eb043aa4dedeaf585056c78f84299a4211a656b8aff8a09767d8f17c7452c008dca715c898e933d31","ssdeep":"","tlshash":"3821639621d4e03212a95ed5f2f0a3d3f9e02897b8111491900fcd526f1dfc5d1eae5a","first_seen":"2024-12-05T16:17:54.649321Z","last_seen":"2026-04-20T08:49:28.396831Z","times_seen":2560,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/YXf5ulVV.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:01.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /_app/immutable/chunks/YXf5ulVV.js HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://googleadsrefundclaim.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:01 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 135\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Apr 2026 09:07:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZAXAkmk%2F%2BfQfY41JCo3x%2FS49GrwAZcbUCNb3aBY3Xg2PANxecCzcZTUXg1AooqppucLa6hLasQ7E0aVf6qk4iUZ2luG8HY8P7w%2BDt8k11xUEwbw%2BkDLlkaJt3hVmm%2BN8wlEr\"}]}\r\ncf-ray: 9ee2815e09dd2efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":227,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"e46d8fa85c49147d0c8e5c26fca257dc","sha1":"c0c86169924d37804ebf0b7859c283fee0c75871","sha256":"cd92ddb1beb3dfb8ce00a3a42dd66c293453891cec261d5154301fc7f3fdd5ca","sha512":"35bc6567b8644a81938996a22a94aa66f616e408c05db3dcde4b4b743468464eb6f496569914611dae22ed8c8bf7abbf6aae792bac9e38a977c928ed3870e15d","ssdeep":"","tlshash":"9cd0a9692cb0d02082213cf82dba3c6002034c913206825081e18a0038c32ee8e2bf19","first_seen":"2026-04-14T21:26:06.462656Z","last_seen":"2026-04-20T08:09:16.819325Z","times_seen":18,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.nameshift.com/script.js","fqdn":"stats.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"66.241.125.170","port":443,"asn":40509,"as":"FLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:02.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stats.nameshift.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 11:28:45 GMT","end":"Sun, 28 Jun 2026 11:28:44 GMT"},"fingerprint":{"sha1":"14:DC:31:BB:56:38:1F:FB:54:88:EC:90:25:E6:4B:2F:D1:45:8F:9A","sha256":"A5:DA:F0:FC:08:FC:8D:43:4D:B3:D1:44:F7:14:C4:6F:F1:0B:AB:A1:0D:81:6C:29:54:AD:08:28:A4:FC:CC:EC"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: stats.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self';img-src * data:;script-src 'self' 'unsafe-eval' 'unsafe-inline';style-src 'self' 'unsafe-inline';connect-src 'self' api.umami.is cloud.umami.is;frame-ancestors 'self' undefined\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, must-revalidate\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Dec 2024 10:39:47 GMT\r\netag: W/\"a4e-19391412938\"\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Sat, 18 Apr 2026 09:05:02 GMT\r\nserver: Fly/9e64c111f (2026-04-16)\r\nvia: 2 fly.io, 2 fly.io\r\nfly-request-id: 01KPFXC718R2ZV64DRBDK81FG8-arn\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":2638,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2637)","md5":"6f9126c9ad5f6188c87fc44c8f569ac3","sha1":"efef52e384831c195d27b2446083bacc03c2c346","sha256":"5a1fa60660100b5897f39344c096872b31b3c835e7affda053e01002ca1fefd9","sha512":"ea114bbbd32ffbc6fcff97ca7bfa5f5c7055ba205e83877476157ee35869741e0c3ef365d5e079d82a61c1692f5555aca05e384f5ae301e91d0334f5717f5b86","ssdeep":"","tlshash":"63510bf4765670b1bfac1dd5c1bc9530f0294672780b8090babb1c442d1d506a5f5faa","first_seen":"2024-11-25T11:27:46.107861Z","last_seen":"2026-04-20T08:09:16.878315Z","times_seen":1819,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":119,"dns":92,"connect":8,"send":0,"wait":41,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.nameshift.com/api/send","fqdn":"stats.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"66.241.125.170","port":443,"asn":40509,"as":"FLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:02.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stats.nameshift.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 11:28:45 GMT","end":"Sun, 28 Jun 2026 11:28:44 GMT"},"fingerprint":{"sha1":"14:DC:31:BB:56:38:1F:FB:54:88:EC:90:25:E6:4B:2F:D1:45:8F:9A","sha256":"A5:DA:F0:FC:08:FC:8D:43:4D:B3:D1:44:F7:14:C4:6F:F1:0B:AB:A1:0D:81:6C:29:54:AD:08:28:A4:FC:CC:EC"}}},"request":{"raw":"OPTIONS /api/send HTTP/1.1\r\nHost: stats.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://googleadsrefundclaim.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self';img-src * data:;script-src 'self' 'unsafe-eval' 'unsafe-inline';style-src 'self' 'unsafe-inline';connect-src 'self' api.umami.is cloud.umami.is;frame-ancestors 'self' undefined\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: content-type\r\naccess-control-max-age: 86400\r\ncontent-length: 0\r\ndate: Sat, 18 Apr 2026 09:05:02 GMT\r\nserver: Fly/9e64c111f (2026-04-16)\r\nvia: 2 fly.io, 2 fly.io\r\nfly-request-id: 01KPFXC748G8MFCWYMK0X3YRTG-arn\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T09:59:59.281443Z","times_seen":13970278,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":26,"dns":1,"connect":8,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/img/flags/3x2/TR.svg","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:00.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /img/flags/3x2/TR.svg HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:00 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 256\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Mar 2026 08:02:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 3290377\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lrj1D5xzrNy9Ot8obblHbhKN%2FK8dLZHhZE5eiCL%2BLdBNPbI4LPL2qkLU0M3xmHeH%2FmkMEB0cLdpkCeCxFayvaZja422kVnIiUlwizmiKneBhEQrkNuVyLTo13eR1ct3pAPpS\"}]}\r\ncf-ray: 9ee28159f9127127-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":443,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9cbde5baf7a23e7bad4fb835d9c57469","sha1":"a726bb67e17dbfb8d196f6d0d2620e635bcf4e39","sha256":"a03c6bc65080fac85d586f22fb6af7428e9cc2d3713802cce40a6e15a424c005","sha512":"5c685c66f4af8dca8ccd83ba8bfdcea04ca6f07ad3b782696f4c56f2e7cebc99e045a85de957985353340ce401f33834757036e4648857b09649627a1162b41e","ssdeep":"","tlshash":"29f0ec98d3451776dfd583b18a7974a069da00ff72d4515d50e40ed132b1cfe90858ee","first_seen":"2025-08-16T13:09:23.422399Z","last_seen":"2026-04-20T08:09:16.842842Z","times_seen":1768,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/img/flags/3x2/GB.svg","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:00.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /img/flags/3x2/GB.svg HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:00 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 351\r\nserver: cloudflare\r\nlast-modified: Fri, 23 Jan 2026 08:20:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 6763815\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M8zu3hiD2BnLIJSXDXZFUK%2Bxkxahn9Nv%2FtzUHDThIjPSTYvFkiA%2B2Qt5RM7Vn%2FJbCzfgaivx3u6%2Byp4ySN%2BHLdipkAHhLZmuEA9BTnoa9hwGhIuzx4rJ1vwnk5n5FkAJWiRP\"}]}\r\ncf-ray: 9ee28159f9187127-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":790,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9ba5a9aa21258ec56206893ac26eabb5","sha1":"88e71bfc5211f0281d5ca9420af89f0ee273ba0a","sha256":"34d57bd6556924ba15ac5122c4ba5ad524fb7c382f7554fd75698e5e42362796","sha512":"8c1ea9554717b270470c61c7042be93ef82d1060fae935497340afcf4154a6147b3697ee20fbe4021b55ffc88350f61ea1c5f2bf4c89bac8bdddc8d032d80ee7","ssdeep":"","tlshash":"b901b12572a8e7129c4752dc19b9ff79386410f8107036bbd8064265513bf9e65ec5bc","first_seen":"2025-04-14T21:27:18.070092Z","last_seen":"2026-04-20T08:09:16.848119Z","times_seen":1780,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/nodes/0.DMfkPDdB.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:01.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /_app/immutable/nodes/0.DMfkPDdB.js HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://googleadsrefundclaim.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:01 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3798\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Apr 2026 09:07:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sGog7kOSFmdP5bX9qDeQkkZ9Ke%2BNjfXS3wxYYOn6StYWgNnNfnO4ZLi4xOCtrgPsFbDLEUG5pNuhmDWpeaxx75bMPdoacgo%2BIJWfD%2BnIJ3GRvRHELNl6EoXa7nrweraX1hTo\"}]}\r\ncf-ray: 9ee2815d99052efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9912,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9911)","md5":"3443d014ba610eea5a7d99c5d7cdf3d1","sha1":"c913c47e9d3f2d403c3f6cc4de8ed3d765f2f6a4","sha256":"b96519e0c78a973290c400671970512e863b16a99fdf5a5b55d572e81494abff","sha512":"19f73e02eea41f160c9d22460e8dba76b332a76850dd761fdd24c9aa6533ec4f602cfa0b1440c0f7a6c821d8dd2569564ee5f931bc79f77c13d5472e97cae22b","ssdeep":"192:xcSTRSTtC7/7IfqwrSsa0acTxJtm6itZ5qQxK6aUeVPZGcLHnrG9fozjRH:xcSTQTtC7zIfqLH01L0Vo6aUaPwczC9o","tlshash":"05121cae718bf43627d10848547a4102b32d1bd5b81a9a80f6bd8c5172b9f0592b7fec","first_seen":"2026-04-14T21:26:06.437554Z","last_seen":"2026-04-20T08:09:16.772524Z","times_seen":18,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/KhxC_gKm.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:01.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /_app/immutable/chunks/KhxC_gKm.js HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://googleadsrefundclaim.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:01 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 7927\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Apr 2026 09:07:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PkIJrEZpVRcWngD3zN9QX7OJfcBSgKZYZ5%2FKHXzzHHUGhxuKFdm3iIUPm2ibAu0VOEZAYyvubjT7K4x6aYBfLQfjZwW13uu5gYvHRk%2B3DFtIG8AdJXAHTfV561bMgDgTPZwB\"}]}\r\ncf-ray: 9ee2815eaba52efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37322,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37321)","md5":"5419006033ffb1841d6df354de6f4665","sha1":"569c83b5c0958d44d600c9b27c04ea8cc1b2156e","sha256":"aeadf26b598f27de17375f6447198bd6588f8dbba46b9cc9624786d23928d2dc","sha512":"2e75c6fbc67ac5bf6d885974f1d925fbc9518024b9bfbb7eb2e661e976e0249302a52258b42430d460f1aabcb5f47add791360b7ffda0dbdc95b3d8a32c15e68","ssdeep":"384:Cy007Pq8h1FY8JTsmyidPgcUU9FXY2hNUho1Kby4n3/8pz+NnzpTAgU7f+8LwqLF:Cz07Pn45Wt8owbyUp0BvLwqLuiY7IwY","tlshash":"cff250b8432c5a7e700f4a7deb737271837e18b4345d58a44eaff66804632d4e7ab5a0","first_seen":"2026-02-22T09:57:55.629383Z","last_seen":"2026-04-20T08:09:16.773642Z","times_seen":215,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.trustpilot.com/trustbox-data/5419b732fbfb950b10de65e5?businessUnitId=673f2e7abfd7b10d26653118\u0026locale=en-US","fqdn":"widget.trustpilot.com","domain":"trustpilot.com","tld":"com"},"ip":{"addr":"99.86.91.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://widget.trustpilot.com/trustboxes/5419b732fbfb950b10de65e5/index.html?templateId=5419b732fbfb950b10de65e5\u0026businessunitId=673f2e7abfd7b10d26653118#locale=en-US\u0026styleHeight=45px\u0026styleWidth=200px","date":"2026-04-18T09:05:01.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustpilot.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 03 Nov 2025 00:00:00 GMT","end":"Tue, 01 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:AC:04:00:1B:E6:03:65:36:95:67:5E:7F:21:62:B2:19:D0:0A:61","sha256":"C0:F0:3C:56:A6:A5:C3:53:B8:0A:28:8E:01:CC:3D:09:B5:5C:FC:55:FE:7F:8C:10:B8:E1:1F:7F:C6:56:F4:80"}}},"request":{"raw":"GET /trustbox-data/5419b732fbfb950b10de65e5?businessUnitId=673f2e7abfd7b10d26653118\u0026locale=en-US HTTP/1.1\r\nHost: widget.trustpilot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.trustpilot.com/trustboxes/5419b732fbfb950b10de65e5/index.html?templateId=5419b732fbfb950b10de65e5\u0026businessunitId=673f2e7abfd7b10d26653118\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nserver: Kestrel\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\ndate: Sat, 18 Apr 2026 08:55:18 GMT\r\ncache-control: public,max-age=1800\r\netag: \"8a19f9f03c568d4498d08e3688bad3e2\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 dcf5a2deb202715e535979acb8e2a6a2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: LHR86-P2\r\nx-amz-cf-id: Brin6QJnPaB3h8V0pcyJn_hWEHB6JJYh7PFSyiz3PeyG2cgr4yRTNw==\r\nage: 590\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1005,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bbc3bedaca75d56b5c54889c4cb54695","sha1":"69eda549a7117e90ef20e9698ebbf5aeebf56594","sha256":"4d76fe83df17bf3a9c067e1414313e8afde6d5ad1b38a1dc2fbb06fd21da974c","sha512":"1944d4b9ac74a6a2974953e84e1bf147513c04f3f636a35c4d3c130190c7b6f67d7a12b421a92d908071af2c2a83b9b3c0d3bae8120103d335859094b25754fb","ssdeep":"","tlshash":"7411ceeb141822f63b878ec46c1ab735a537cb1b2c86a5aee5c8d92c811264c300a969","first_seen":"2026-04-13T07:04:46.908606Z","last_seen":"2026-04-20T08:09:16.808098Z","times_seen":18,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/img/payment_icons/visa.svg","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:00.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /img/payment_icons/visa.svg HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:00 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1163\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Dec 2025 12:23:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 10441172\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xZ0%2BiezG45s9UfwFBrELjnsPXgkkY7eYjQpyNGwYo2J4ObW7S20mvE6Rjn%2BdohQsOJPUrcljrFVzgKvqWIvP0UhjaWhAb56j9XHJRWNKiPPtCxbAhperaSC3q3cttIvf%2BuMP\"}]}\r\ncf-ray: 9ee28159e8f67127-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6937,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cedbd4925f32e356daa1d553ed26dd7f","sha1":"77c04becde8425175c080053bb0a7fa9014ce8f5","sha256":"668dd1caa23181c1b47be28a896876190556d6c8d7c980ef4beae953bd466050","sha512":"0aa08e00fb89e5b4f66b6cffac9baacf86e551148a75c3fa345e96d1138fa0415456152fc6997030169fcfbf3b39c8c5a464aa067565dd31e7dcd35713532f75","ssdeep":"96:LU+2kItmm3OtUbwT0xIpKxYeQtDcm3OtUbwT0xIpKxYeQtO3OtUbwT0xIpKxYeQh:I+2rNEJo0DhEJo0QEJo0woD","tlshash":"57e11905939d0cf8b19a07f4a7e9547317b8b5fe2728068c919eb294f1933cb5438f99","first_seen":"2025-08-03T12:31:01.848804Z","last_seen":"2026-04-20T08:09:16.821284Z","times_seen":1776,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/img/flags/3x2/SE.svg","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:00.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /img/flags/3x2/SE.svg HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:00 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 157\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 14:16:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 5119800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=18AFNXjPtigzbzrQJqKqoG%2BlQ7%2BIvBLH5Q7JubcIvRMrXGB%2F2L1lSnzKdaoFKtj4quLLIzjHaMa8qCrJ%2F%2B%2FzT2QSv9E8srdzmnoSnCWXjkhvGQr4panlDjHUr5Y4%2BBvCgCk6\"}]}\r\ncf-ray: 9ee28159f9147127-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":217,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d5c3d25327724bcddc3cc2be042fb726","sha1":"e5d0f84d88bfd91b89029c51316a28d761a1de6d","sha256":"024fa5c045387b2e5fb153de81a74a7c4fae583456caf0954b55132c8fa7cd10","sha512":"fbeb50709594492d5f241589f81519db54490c7dd86f468806e786942a7853779cdf1b93449a180c51c7436a9f9ac46c302d43c152cd12a5fc422dfcf6396ff6","ssdeep":"","tlshash":"6dd023c5d03c2844ec0047752ef97cd555b2905554dc19fdf04008353606a976c4c558","first_seen":"2023-10-23T10:14:58Z","last_seen":"2026-04-20T08:09:16.884274Z","times_seen":1844,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/img/payment_icons/discover.svg","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:00.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /img/payment_icons/discover.svg HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:00 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1536\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Feb 2026 11:22:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 4760020\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LL1vvdem07xBBvraCHyY6znDM%2BaAEJ3SbLM4%2F981fmdpTaCCRZmAamFZQtgzZSJx4WZfsJHG4N7IXi3J3brAl6WEU1niZWk7GCoWup%2BJdhamtbHo5Bxd%2BEkcYYsuBt0ghw%2Fg\"}]}\r\ncf-ray: 9ee28159e8fe7127-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3409,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"da6734332341995f18808d70b2c53b80","sha1":"85b459d019747afee6f472f06dffa63624a3e953","sha256":"4f609bfa523f1293b768a8120d0449b05a3e08fc19b98d0a71c932a3a6298d78","sha512":"92ea2ea07085a38ba1f5c774f25ce69e7398d07daab522bb08c3e1e2d13cb93df7f424aeb451f33158c777c70858ed58da9f74138347c2db9e1dcc1b23721056","ssdeep":"","tlshash":"1d61c8118328c9b8f69e873cddbc2d532ef418f6350d7bb852722464783b6d224ad759","first_seen":"2025-08-03T12:31:01.902346Z","last_seen":"2026-04-20T08:09:16.865899Z","times_seen":1776,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/Dkhjq4OS.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:01.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /_app/immutable/chunks/Dkhjq4OS.js HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://googleadsrefundclaim.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:01 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 57184\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Apr 2026 09:07:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6PfJmMTSwF23b3kseEg14muAclFghRH0wQ1FYmcpZPH%2F04trcwjwcen3wqIOrRcPjTB1TAgFUqOMMdwGkIQ9fvzlka9uoZLazH08pm0J6SgE0NHNDa8mTIgdRMV2jXha3VgS\"}]}\r\ncf-ray: 9ee2815ebbdc2efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":245379,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"58eed89cdd0574b66cc209f1a8c303c0","sha1":"230afd9c829ded7bb71377c495f7dbae549035a6","sha256":"4fa4c8b93a7937a0b30e53ead18db1e5d2728b0ce329b7901df415bd5d8a54a7","sha512":"3a1523c0e6fccbaa03224d2e9aee327d670278aaca455cdf2d7022ece90130b7f25d90b06e0ecb9243122b068a029abd439eda9221b306d3f77963f62e6f2b67","ssdeep":"3072:+OH03o4PwjD8IAn5KTfjPM0uXn3dkmShyMd7QstI/qYHUFJ2:+mYJnOjM0iOdEstI/qC3","tlshash":"df34d5fbab40e73b75a63b188912d2ce6ecc9cb1e8989048abd7d9cf5d50d62107c714","first_seen":"2026-04-14T21:26:06.432007Z","last_seen":"2026-04-20T08:09:16.825712Z","times_seen":18,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js","fqdn":"widget.trustpilot.com","domain":"trustpilot.com","tld":"com"},"ip":{"addr":"99.86.91.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:01.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustpilot.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 03 Nov 2025 00:00:00 GMT","end":"Tue, 01 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:AC:04:00:1B:E6:03:65:36:95:67:5E:7F:21:62:B2:19:D0:0A:61","sha256":"C0:F0:3C:56:A6:A5:C3:53:B8:0A:28:8E:01:CC:3D:09:B5:5C:FC:55:FE:7F:8C:10:B8:E1:1F:7F:C6:56:F4:80"}}},"request":{"raw":"GET /bootstrap/v5/tp.widget.bootstrap.min.js HTTP/1.1\r\nHost: widget.trustpilot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\ncontent-length: 7810\r\nlast-modified: Tue, 07 Apr 2026 13:47:24 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 18 Apr 2026 00:55:05 GMT\r\ncache-control: max-age=86400\r\netag: \"c548d8a900ee57fc4018febdcf4fc206\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 dcf5a2deb202715e535979acb8e2a6a2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: LHR86-P2\r\nx-amz-cf-id: iYs60R6ETwEbgQAE1yVUUGk9CFpxsKHQ-mRpMBTLtb9MIbsqTfYkMg==\r\nage: 29397\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":24918,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24831)","md5":"c3a9a2660d6b39c094392e60a46e6c5f","sha1":"f81a65fb815ecb294c95f85c1e73d70b573e5619","sha256":"c9d8862c05ed77d6fb6871f6e72a6e41132693c86943bbcdbdab5367bc55bc01","sha512":"0fe85bcda57e369ca66b903db2debccb58bfd995fd3f9e9616900ef1a862b9e890d2bbf801cdb873afce0eaa52de812a9212ffeda82db83f73900c260246139e","ssdeep":"768:BUvI7Bt+WNX75sjAuwqU3o+bz3y2uxtFq+ZdDJvQ64YB:avI7Bt+WNlsjAg+bz3lAtFq+Zbf4M","tlshash":"8db2e5e431e2f47642c6a129543f6209b27278687985d488b57cc8f26fa0d9e3237f7d","first_seen":"2026-04-07T13:59:33.850722Z","last_seen":"2026-04-20T09:30:29.686494Z","times_seen":1657,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":78,"dns":24,"connect":21,"send":0,"wait":23,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.trustpilot.com/stats/TrustboxImpression?locale=en-US\u0026styleHeight=45px\u0026styleWidth=200px\u0026url=https%3A%2F%2Fgoogleadsrefundclaim.com%2Fen-us\u0026referrer=\u0026userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026language=en-US\u0026platform=Win32\u0026nosettings=1\u0026businessUnitId=673f2e7abfd7b10d26653118\u0026widgetId=5419b732fbfb950b10de65e5","fqdn":"widget.trustpilot.com","domain":"trustpilot.com","tld":"com"},"ip":{"addr":"99.86.91.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://widget.trustpilot.com/trustboxes/5419b732fbfb950b10de65e5/index.html?templateId=5419b732fbfb950b10de65e5\u0026businessunitId=673f2e7abfd7b10d26653118#locale=en-US\u0026styleHeight=45px\u0026styleWidth=200px","date":"2026-04-18T09:05:01.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustpilot.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 03 Nov 2025 00:00:00 GMT","end":"Tue, 01 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:AC:04:00:1B:E6:03:65:36:95:67:5E:7F:21:62:B2:19:D0:0A:61","sha256":"C0:F0:3C:56:A6:A5:C3:53:B8:0A:28:8E:01:CC:3D:09:B5:5C:FC:55:FE:7F:8C:10:B8:E1:1F:7F:C6:56:F4:80"}}},"request":{"raw":"GET /stats/TrustboxImpression?locale=en-US\u0026styleHeight=45px\u0026styleWidth=200px\u0026url=https%3A%2F%2Fgoogleadsrefundclaim.com%2Fen-us\u0026referrer=\u0026userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026language=en-US\u0026platform=Win32\u0026nosettings=1\u0026businessUnitId=673f2e7abfd7b10d26653118\u0026widgetId=5419b732fbfb950b10de65e5 HTTP/1.1\r\nHost: widget.trustpilot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.trustpilot.com/trustboxes/5419b732fbfb950b10de65e5/index.html?templateId=5419b732fbfb950b10de65e5\u0026businessunitId=673f2e7abfd7b10d26653118\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 18 Apr 2026 09:05:01 GMT\r\nstrict-transport-security: max-age=31536000\r\ncache-control: no-store,no-cache\r\npragma: no-cache\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 dcf5a2deb202715e535979acb8e2a6a2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: LHR86-P2\r\nx-amz-cf-id: GFOPbtv2pEYrAYhprfwt1QQb8ipoxKG0rave-f_lfskIRNacYo5W5g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T09:59:59.281443Z","times_seen":13970278,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/DlLxFVTn.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:01.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /_app/immutable/chunks/DlLxFVTn.js HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://googleadsrefundclaim.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:01 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 70740\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Apr 2026 09:07:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vr91sRHiOauA3KRDPRIhaHFxiqdcIyWpOUCG1yLomS7sqNXaOFvLMb%2Fek22%2Fo8ERotXn53SHJ535lxHIitsCZI%2BhH8XOFyH3IY8WpIKXa6DAe2FD5HD%2F1HIbZligkivSDp59\"}]}\r\ncf-ray: 9ee2815df9cf2efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":829445,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d0f473f0a8776b85ee68feab30698a22","sha1":"0a806e06a2ff3da1f162ad523cc1113816a427c4","sha256":"0c74e4a4b7f65d396b47ef53e5c7be72813a9bbec63ece24e1964e7d3fb1656a","sha512":"762e111a11f2a21d06f0f7172bc773e1eafa76b23b2af33f498e123dc6e191b349e2012dd4dae1f1e7b6e8f8937b58e172350ae1cad26476bcda120846b76095","ssdeep":"12288:y2Ol+pQZYLOlqSk3CEhPY4h+N07QDgGDX5PmAy:sl7kmmAy","tlshash":"6605d7c87e6b7651935b99b4e4f7421eb13ea655a01c4000eb7be4cf3a2544e9233b3e","first_seen":"2026-04-14T21:26:06.400978Z","last_seen":"2026-04-20T08:09:16.815205Z","times_seen":18,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/BdPd5Uuk.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:01.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /_app/immutable/chunks/BdPd5Uuk.js HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://googleadsrefundclaim.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:01 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4869\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Apr 2026 09:07:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SgcIwjqjnUL%2FYw6LNXvb%2F7CIPKr5FtM7Gu7FkR5AqKCGu%2BdD0Lhbw6wigpqmykDbVhabIVeToz5eSfIG0v5vBt6Re53ODqqCue25vcn%2FHBXj%2F8NRme2xTkoOE4Nwx9g3lYLO\"}]}\r\ncf-ray: 9ee2815f4d4f2efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16137,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (6889)","md5":"4ccd784e27c67fa80296e7fae2df9199","sha1":"931d54378155f538468de2f49396a73959830f07","sha256":"2abf0aa32fc2d81f17bf9676c17c0cadeccbfc89c72d9bace6aad0ae5d70ddf7","sha512":"7c678f82b41ccf9d612082f8bdf701fcb211ddc837045b160e8226c932fd1e8f43fa537c136f518da706247c446026b729968315872b1d45d574a23a19bc056e","ssdeep":"384:DjGlOg94qwnPQXSL7MgxJOWpkwBhSIdbdc:2t4qwnoXY7DxDB8","tlshash":"f472e84e8608a6750ec20338359b751a737ac1dcd2e19091ecd6972b03b67b6d93f5bc","first_seen":"2026-04-10T18:23:26.208527Z","last_seen":"2026-04-20T08:09:16.787136Z","times_seen":55,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cf.api.nameshift.com/domains/by-name/googleadsrefundclaim.com/stats","fqdn":"cf.api.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:01.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cf.api.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 08:51:38 GMT","end":"Wed, 03 Jun 2026 09:51:32 GMT"},"fingerprint":{"sha1":"57:89:C4:6D:25:DB:51:F7:E1:A1:A0:21:BB:E8:BB:C9:D7:14:D2:AD","sha256":"E2:A3:14:F6:C6:36:DF:DE:26:A0:35:20:15:79:0A:B7:D2:6E:38:C4:AD:4D:FF:8E:6C:F2:C5:46:28:2F:16:F2"}}},"request":{"raw":"GET /domains/by-name/googleadsrefundclaim.com/stats HTTP/1.1\r\nHost: cf.api.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://googleadsrefundclaim.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:02 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Retry-After, Content-Disposition\r\ncache-control: public, max-age=0, s-maxage=86400\r\ncontent-encoding: br\r\netag: W/\"9a-mOjVCyLTohsvq2CR4t/iJ1uw4Aw\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uSlKvhlzo7FcjXCYNHgyighf7oBi3u1vNSTP3X6owvXaesPwkBpvNvL%2BkZ59JM1rLncmUxtga%2F%2F0ZXUJLYIASu1bYsH18KKHMFB76TJ4c7xIyBt3c6SylChovckCNMpYHjlJPpGz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvia: 1.1 fly.io\r\nfly-request-id: 01KPFXC674XDG531JJ47FE2HW8-fra\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\ncf-ray: 9ee28160887f56ca-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":154,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"65ee0cb317469784cb8a620a925c9f89","sha1":"98e8d50b22d3a21b2fab6091e2dfe2275bb0e00c","sha256":"b2bd1c54462f8b494b76877ab6b2695d09312bfcc271b58081ee68f2753dba83","sha512":"11a996de9f11a8f749d0b3f5ce040cbd5a59f274e9112369ed6a97b88fc8797a3354a60c3c198086406791f73a5d2c29494a2144b41461631bc756e87ed323a7","ssdeep":"","tlshash":"96c08c8bcc1caa4b09240bd4051ef40843980663898d896670d0ff18c0a06a0da9ce20","first_seen":"2026-04-18T09:05:36.527994Z","last_seen":"2026-04-18T09:05:36.527994Z","times_seen":1,"resource_available":false,"data":null}},"time_used":845,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":845,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googleadsrefundclaim.com/","fqdn":"googleadsrefundclaim.com","domain":"googleadsrefundclaim.com","tld":"com"},"ip":{"addr":"209.38.54.191","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-18T09:05:00.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.aviva.nl","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 23:20:35 GMT","end":"Tue, 23 Jun 2026 23:20:34 GMT"},"fingerprint":{"sha1":"9D:22:E6:35:B8:44:51:A6:D3:23:8A:7A:25:0A:EB:8B:A9:1D:48:F2","sha256":"BC:C5:9D:0D:31:48:EB:C5:4F:D5:F2:1F:D1:3C:28:D3:E4:FB:D6:73:4E:AA:7B:95:42:E8:67:8E:5E:87:AA:E8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: googleadsrefundclaim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\nalt-svc: h3=\":443\"; ma=2592000\r\nlocation: /en-us\r\nreferrer-policy: same-origin\r\nserver: Caddy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 0\r\ndate: Sat, 18 Apr 2026 09:05:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27302,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T09:59:59.281443Z","times_seen":13970278,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":95,"dns":42,"connect":20,"send":0,"wait":22,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/img/flags/3x2/DE.svg","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:00.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /img/flags/3x2/DE.svg HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:00 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 120\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Mar 2026 08:02:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 2345204\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x3YALOe6WuRiRGK1ivCGsdEKDt8Fn%2BgQsCYJ%2BI3We6PrVCL46KeWM48CGdqL4vuhCsF2f%2FRePpYIeO6fO7Rxsh1vA9eSl06t8UUyh%2BOzcyYNTv4KskcpNyPSHSOzttRfamVu\"}]}\r\ncf-ray: 9ee28159e9087127-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":181,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"01e81281596d226ab99fb6ca0d0422a3","sha1":"dacb2aa6d9c2541375fb12e29aff92727f686c36","sha256":"ba6e2a243cb579dea5a8d9b5a87970782f708cfe7b90e82ebd9292f89daa37ab","sha512":"1cd623cb5c59ab547d714a2cc0f6bc200332336ca21ddd75ead69733b454a39ee640b76c53c532c5a8f7599b564945e1af61c35ac82d87c168987d9e644fd2f1","ssdeep":"","tlshash":"7dc0128851e87450640647f17dbcb4c251e6104a20e400def4900734224de8bfc43d58","first_seen":"2023-10-28T05:15:56Z","last_seen":"2026-04-20T08:09:16.839921Z","times_seen":1835,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":84,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/entry/start.zfrXPybg.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:00.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /_app/immutable/entry/start.zfrXPybg.js HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://googleadsrefundclaim.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:00 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 86\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Apr 2026 09:07:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R8do9TvRzZCbeVt6VccSXX%2B09l86cJT9KU8XdkAPos9ITtz2REWwFDdnlcunvA8JpONd1EiCM3d83Dmc95XRew0hTwNN6lekGesJOT2eSPhe20sijruJH3qhrUSP4q70dxeH\"}]}\r\ncf-ray: 9ee2815cbe222efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"9a23800fd304f4d0be8ddf3b48a86536","sha1":"240459c31943eeff60306ff5a201f25658b46642","sha256":"6aa8b39de4ec8da1f5c4b77ac156249a1bda4af702e929d8baa41a12eaf9d286","sha512":"2ade1d4a2b8e0bc9c8d601f15d7d869d5cf5f8fa4f1b7da3885270856605cf16ffbdaea3f41b30b605380c51f55dfb212b05762f3d29345c1922d106fd172ff2","ssdeep":"","tlshash":"47a0243f0c00d070440f34dcd310c70043147c7513701543005cd11cc5d04c7430d5c1","first_seen":"2026-04-14T21:26:06.473683Z","last_seen":"2026-04-20T08:09:16.771374Z","times_seen":18,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/BRKw6smn.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:01.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /_app/immutable/chunks/BRKw6smn.js HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://googleadsrefundclaim.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:01 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 11623\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Apr 2026 09:07:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LEhdpKsBrkNM5%2BuSc94Iu6JPfjmcx%2F3Hd0plrekU%2FfDXn%2FigeGU0lqo5LKp761bs3aNP%2BpHsgTrciWocpvUnmHadVOEqLrPgT5lxqrzWHmzXsrFTVv6aaCcH8va3KHgCCGKF\"}]}\r\ncf-ray: 9ee2815df9c52efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39365,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38982)","md5":"3b31b3854a889f70f9fd43bf2c4a9328","sha1":"0f3db4cb8ff98405218e53ecfaa623403b2405c7","sha256":"c8fe9550c79fb90c73615f552859e3f90f1d713fa239cec0d72d8d6bb3fa8fdd","sha512":"b1af63b5a1180b7b7266021955aeee5fc0f343b5ffd9649e9577046558b8fbaae9d88a324af660fd8a587e312a6f8915d4cc9183620d7adb0125acee9755bbd6","ssdeep":"768:wfoBgEkUkF5jgPyk81IZSPugb1HzeC4ZzPzl2j/NzBsv003Phue99Dp0QMg4vGOX:goy/TPkFZSPZb1Hzebzl2rN14BPjlpYZ","tlshash":"1703e985b1dbfa67c352d1ec852f4501b92c1e29246eac68f3a6d5617e74c0c81bbf38","first_seen":"2026-04-14T21:26:06.424306Z","last_seen":"2026-04-20T08:09:16.789708Z","times_seen":18,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/DiTHga7I.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:01.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /_app/immutable/chunks/DiTHga7I.js HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://googleadsrefundclaim.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:01 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1075\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Apr 2026 09:07:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9oG3PUviiU%2FFu4vSL2AoDkGUYsC2r5uBUFbumh7roGCCFqqVmch1XTiGT%2B4bj1TaUlLTR13%2FRuR33DwcrAORZ7LK6vlBURWQD7nA5Vf%2FKv%2FyhYfffq2uwBovoPYgWIv3jB5P\"}]}\r\ncf-ray: 9ee2815df9c82efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2298,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2297)","md5":"fae90f845a9f8b4f0eda3f62c8e26c06","sha1":"ba64629866bce95fde3e6ef02350385ab63437a3","sha256":"3f81b46644d40fb0d8c38bde9174ef4fd596dd0489b0fe180d5b29bde81f24a1","sha512":"370fdd535524e4cfe0fbf483c14f3086f743c55b963a82e79032eda56da330a421f9ea99d5317370029fae12f2e2224b8f2f341ef1d8a8ce0d0fa05d062d5a20","ssdeep":"","tlshash":"e041a4ac76c3311703c1bde624bb1419e6e51a08309ea8dc914caa432dfd89585fef6c","first_seen":"2025-01-13T08:11:22.60098Z","last_seen":"2026-04-20T08:09:16.881722Z","times_seen":1787,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.trustpilot.com/trustboxes/5419b732fbfb950b10de65e5/index.html?templateId=5419b732fbfb950b10de65e5\u0026businessunitId=673f2e7abfd7b10d26653118#locale=en-US\u0026styleHeight=45px\u0026styleWidth=200px","fqdn":"widget.trustpilot.com","domain":"trustpilot.com","tld":"com"},"ip":{"addr":"99.86.91.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:01.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustpilot.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 03 Nov 2025 00:00:00 GMT","end":"Tue, 01 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:AC:04:00:1B:E6:03:65:36:95:67:5E:7F:21:62:B2:19:D0:0A:61","sha256":"C0:F0:3C:56:A6:A5:C3:53:B8:0A:28:8E:01:CC:3D:09:B5:5C:FC:55:FE:7F:8C:10:B8:E1:1F:7F:C6:56:F4:80"}}},"request":{"raw":"GET /trustboxes/5419b732fbfb950b10de65e5/index.html?templateId=5419b732fbfb950b10de65e5\u0026businessunitId=673f2e7abfd7b10d26653118 HTTP/1.1\r\nHost: widget.trustpilot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Tue, 17 Mar 2026 16:05:26 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\ncontent-encoding: br\r\ndate: Sat, 18 Apr 2026 03:49:04 GMT\r\ncache-control: max-age=86400\r\netag: W/\"ec6f808cf5aab877cabf0572c92428ba\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 dcf5a2deb202715e535979acb8e2a6a2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: LHR86-P2\r\nx-amz-cf-id: JQwGpDXD6XBfFp8IZwlaDAshD_VBcSII0w_VHmVUCDjMKnq_DQWuZg==\r\nage: 18958\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":30097,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (28748)","md5":"ec6f808cf5aab877cabf0572c92428ba","sha1":"cee8db4760147e189ed944aa87a794580af658d2","sha256":"868472d40c12ea91bd6f5fd2d4d17125829a767529700a1bdbb3c8d524ab132f","sha512":"6760a7d9996fb7fcca69a4be542db063e7a47fde1f30c54a4e87557dc0aca706ae52db1daafbf68fda7c29828bbd956255c3ba27d1df770e14ac5f8be3d109d0","ssdeep":"192:lbazi7VyiEl0eYvHgE82NwzOzTVzTMivM68D1EbcGDgMmZc8OZeUu1CUuVdce5D5:QB1APewFyFuv5AMRezFV/gvsst","tlshash":"65d20541f65cfbbe0e03c8695ed073a5ee2b2666b4a40a879fb391d8c3df046c59521c","first_seen":"2026-03-17T23:08:02.226444Z","last_seen":"2026-04-20T08:45:01.61467Z","times_seen":882,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/img/flags/3x2/BE.svg","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:00.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /img/flags/3x2/BE.svg HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:00 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 124\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Apr 2026 09:08:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 28880\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ymE3SlCdVlh0PfhWK7UNlMxpVFOzT8AA7jdrwvyhHOV3NBLpPBA67U3h%2BTcPY2RUu9XDwAR0UeFGNYsYtqxtTa9V5t1oNYBJYU9x42MrKjKUqjFmriheyQQcP3kSiFS5Zpll\"}]}\r\ncf-ray: 9ee28159e9037127-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":183,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"59ca6fd0eb582480673b1ac6d254c3e9","sha1":"de21c4dfb2a0e6cc2dc886f8593f691bcde0bf21","sha256":"7448dd192fb3ba3b4450e40ef2e7be34003a4eeb1e2e1385ba7f76a8fd694979","sha512":"40e91d7e5cfe4f86eeffa0ca55e82532b495466fe5bfd3915e07e60980a0d1180a90430108e40eb4b26e7bdfa21763d37bb2c1162f95ba3b4ed9decc13d6aa0a","ssdeep":"","tlshash":"9ac012fa90a8e9106c0587746ebd71c642d71086206404e9f4440364518e69ab882a24","first_seen":"2023-10-28T05:15:56Z","last_seen":"2026-04-20T08:09:16.777876Z","times_seen":1805,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":86,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/img/flags/3x2/FR.svg","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:00.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /img/flags/3x2/FR.svg HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:00 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 127\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Feb 2026 11:24:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 4639561\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JB%2FHakMx78V7JB%2FS6bd%2FG71gYcEfTxa%2FRBikTgY1iNUDJmYvpRnxnqCvA%2FQt6I8C5qG%2F48YNr3A67A58O%2BgVswgHJDGbif3Bl1Ru%2BxFod5qlL%2ByoZcOc60J2Uk8BPwFVq7Ox\"}]}\r\ncf-ray: 9ee28159f90a7127-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":195,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"805b3c854aeb0f66cdd66a58b82913f6","sha1":"520ca779ee961cdce545f2e1b993fe4a4be599b7","sha256":"06c38629007db9db2ca9fd821f3d8c5d56f30c9f86588e034bd070d1ea439113","sha512":"8705f26706cbca628858e100d623c778bc4026af6a70e76a367ffeed13fe27d27d8b0befc9b324824b462f0be6cb66274e3cd598c3b0c6a4e85c3a1085615529","ssdeep":"","tlshash":"05d012aa90f8a9206c0647b46dfdb0c256d7204a21a508fdf4845365224e68fb882e64","first_seen":"2023-10-22T14:31:23Z","last_seen":"2026-04-20T08:09:16.768423Z","times_seen":1810,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":83,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/img/flags/3x2/CN.svg","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:00.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /img/flags/3x2/CN.svg HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:00 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 308\r\nserver: cloudflare\r\nlast-modified: Sat, 17 Jan 2026 12:46:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 7432130\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qjaCoQHArw5k2h5sscNF2JIEiAelxJZ9pdYRqJEJNvuFTBYNgb0PM2ALtI5w0gFuLNcwpa5GXHaiQ2cXb8qT6elhaI0EWSdrHkwYfGcMBGKh3u1f%2F0yoSetiLe1R8NiV9%2Fvv\"}]}\r\ncf-ray: 9ee28159f9167127-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":600,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8de7237b40ef4ef9eeebab93454234e3","sha1":"9fbc99423afb3b10b472aa790b8b086086786e88","sha256":"37b641ca59656e57f66322b9109f74d1f29cfa302060944c737ce5242aab56d7","sha512":"3408ea7000c7532e678896d3315399a2b750bd1f64a8ae94c96a86089f153ccb4265da96cf82f8bd6419d6b2adb2cd9e7b158c9369d886b9f2679f4c4c7e087e","ssdeep":"","tlshash":"0cf04c69d289aab0c443d360c53d7a7138efd0fad384072865b057803de0dd566de5d9","first_seen":"2025-08-03T12:31:01.898687Z","last_seen":"2026-04-20T08:09:16.840774Z","times_seen":1776,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":77,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.trustpilot.com/trustboxes/5419b732fbfb950b10de65e5/main.js","fqdn":"widget.trustpilot.com","domain":"trustpilot.com","tld":"com"},"ip":{"addr":"99.86.91.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.trustpilot.com/trustboxes/5419b732fbfb950b10de65e5/index.html?templateId=5419b732fbfb950b10de65e5\u0026businessunitId=673f2e7abfd7b10d26653118#locale=en-US\u0026styleHeight=45px\u0026styleWidth=200px","date":"2026-04-18T09:05:01.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustpilot.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 03 Nov 2025 00:00:00 GMT","end":"Tue, 01 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:AC:04:00:1B:E6:03:65:36:95:67:5E:7F:21:62:B2:19:D0:0A:61","sha256":"C0:F0:3C:56:A6:A5:C3:53:B8:0A:28:8E:01:CC:3D:09:B5:5C:FC:55:FE:7F:8C:10:B8:E1:1F:7F:C6:56:F4:80"}}},"request":{"raw":"GET /trustboxes/5419b732fbfb950b10de65e5/main.js HTTP/1.1\r\nHost: widget.trustpilot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.trustpilot.com/trustboxes/5419b732fbfb950b10de65e5/index.html?templateId=5419b732fbfb950b10de65e5\u0026businessunitId=673f2e7abfd7b10d26653118\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 17 Mar 2026 16:05:30 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\ncontent-encoding: gzip\r\ndate: Sat, 18 Apr 2026 04:27:44 GMT\r\ncache-control: max-age=86400\r\netag: W/\"712fb8d4fc2cd026c0063c493818e7d5\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 dcf5a2deb202715e535979acb8e2a6a2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: LHR86-P2\r\nx-amz-cf-id: UGMFRKSIDzYdUr_zEcR2qdvDwi4V5Gb9vHlfpSJZyT5CPAPRlge0fw==\r\nage: 16638\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":95048,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64180), with no line terminators","md5":"712fb8d4fc2cd026c0063c493818e7d5","sha1":"f2b2b338d1d39d7747dd556eb6666225ed21ab4b","sha256":"73b9c11a719a4542b36fe6432c78cd731d226bd0fc85e1bfa09ca4c63eb20981","sha512":"0463a345649bcb1784e040073fd8f113b6fb7e980f328fcb3868d5fb8b33828a56f892d498f650da5d809327682b7857d1b38d6c19ee8eac5f1e8812ec2e9d39","ssdeep":"1536:pCpZtj6e7e6MKPVzVAK+UEzQy+y4xzt17K4GpVwS4mD6FvW6:2ZpqKCl6h","tlshash":"8a935da0a0ddaae15c0b432a7c1c1214f524f1fcf949c49df9ec4e6d42765ceb61ae6c","first_seen":"2026-02-06T00:57:14.331567Z","last_seen":"2026-04-20T08:45:01.58761Z","times_seen":1415,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/img/flags/3x2/CA.svg","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:00.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /img/flags/3x2/CA.svg HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:00 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 208\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Dec 2025 12:23:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 10441643\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=doZfZBHmMMvO8xb1WoCJToppAnpxnZQRaWllISwNCkmAP7uHzhNQpm9DbXV%2BCy0tj0%2B4P9pqUno4leN6Rnwz0W3fSGDrzegSo4ybWgwL7nRR7G9YE0Rz95Mh%2B3oqHlGUQX8F\"}]}\r\ncf-ray: 9ee28159e9017127-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":340,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"811c7617462f0a2cdd8aa2c09e92211a","sha1":"af022040d6f14e0e714f7f1f728fa29533aa927d","sha256":"25a52bb1c21af6512855d7003f8cf6c3ca8c173a63b08ee554f139d8dbe45ac3","sha512":"f277a261747fb2d1e4c6b4affb6fe8391f1124c2a696604f6e47062240eded427453e02a410501865da31a7c7845c9e3ff44fb4384301826cc30dac53f8ffe69","ssdeep":"","tlshash":"cee026d6c09c5eaced0c83f1dabc200e789b10ca106a01b8e690cf10a484fdafc85cc0","first_seen":"2023-07-17T00:52:45Z","last_seen":"2026-04-20T08:09:16.833388Z","times_seen":1888,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":85,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/DN0w8dC-.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:01.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /_app/immutable/chunks/DN0w8dC-.js HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://googleadsrefundclaim.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:01 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 247\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Apr 2026 09:07:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HXfmU%2BZHXKD%2BlIi0svj1z8VU5dGtQ4Id23ymsN9dv5OQ7ToVH%2FlEQoXOHW9tBRZMxlgCAYTcPHakzCvyrAqMwyMCe8ezOyDrxxPPgMBzwB7v6BgDQZRUCBVm1fpS2WZlSJO9\"}]}\r\ncf-ray: 9ee2815e1a012efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":372,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (371)","md5":"0d793df812eb9dd66afa868647936375","sha1":"d3e4ed6d4e794501a3606b730a4ff26a084ea7c7","sha256":"2c019b9727f0ce16cef039831a81464a85cc7523eaef57d7913f38ee2321eab0","sha512":"217348cdd4654bdb0f77232f267ab5200e14c25170a6c5dacb2495692efb8ad1035c3db123d56768ba2c1cb474c545e523425f0cab285c0d3be02964979fc5c0","ssdeep":"","tlshash":"f6e04fdf88445428e20590950bbeb709e03e915b1fabd1e1c9e6c261ad522b0551eeae","first_seen":"2025-11-08T15:08:48.021801Z","last_seen":"2026-04-20T08:09:16.779927Z","times_seen":1469,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/FL0S014f.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:01.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /_app/immutable/chunks/FL0S014f.js HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://googleadsrefundclaim.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:01 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 28812\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Apr 2026 09:07:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1TTDpfOl5ZSWkG9tnAjMIoEINZTqUA5LlSSIGo0t%2Br%2FL%2BH8d3YGr6h8%2B0hBbtHwqhDZP1YIVSJ3HIcKWp%2FWutW5LokP%2BQ%2BPrkBhHblvIfuCeqX0rA%2FLzUWIYl45yfaZClTCQ\"}]}\r\ncf-ray: 9ee2815ebbba2efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":135166,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2903cc55e9759797e32c9f9d51a75124","sha1":"8e74c74046d5c25168c21e513bf7e01981bf82da","sha256":"8f0ba226bd3f7c4ad38864a21e9fb5507b56f1c8598234a19eaadf6acc40deb0","sha512":"609668a8de03348b90667f602ba44936fad588061645a4676a6e8d5f4848ba06805d6cc6ede1b9e7e6871ddb5b954348ae52d88a5ba086b48bffe3ac59d1a244","ssdeep":"1536:HKjpOe0tNo455wjcQsgJzA/RoLGQPR9F1HMN45RKm3RDJBlk5oWN1p5NsMtfq5P3:HKjpOe03o4Pwj2WFpMmbv8B71fqh3H","tlshash":"43d387b77a40ab6774b13f188f06e28f9fcc8ca2dc58a48c9ae7d8db1c50921607d755","first_seen":"2026-04-14T21:26:06.429391Z","last_seen":"2026-04-20T08:09:16.816794Z","times_seen":18,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/D3FGWndS.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:01.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /_app/immutable/chunks/D3FGWndS.js HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://googleadsrefundclaim.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:01 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4869\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Apr 2026 09:07:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BQeh4%2Bl4BaifKX2n%2F961HepNSATzlTR3sh0NRlGgVAXx6zuBk%2F%2FM0%2BJcKVG1smrHRdfrWVZUFGVEwX9JC4fJ8%2FQmiNpooF2e%2BVLY5IA3TaliLM8gzK1Sr34p4ysfMvNKTBhL\"}]}\r\ncf-ray: 9ee2815f5d5d2efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16137,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (6889)","md5":"4ccd784e27c67fa80296e7fae2df9199","sha1":"931d54378155f538468de2f49396a73959830f07","sha256":"2abf0aa32fc2d81f17bf9676c17c0cadeccbfc89c72d9bace6aad0ae5d70ddf7","sha512":"7c678f82b41ccf9d612082f8bdf701fcb211ddc837045b160e8226c932fd1e8f43fa537c136f518da706247c446026b729968315872b1d45d574a23a19bc056e","ssdeep":"384:DjGlOg94qwnPQXSL7MgxJOWpkwBhSIdbdc:2t4qwnoXY7DxDB8","tlshash":"f472e84e8608a6750ec20338359b751a737ac1dcd2e19091ecd6972b03b67b6d93f5bc","first_seen":"2026-04-10T18:23:26.208527Z","last_seen":"2026-04-20T08:09:16.787136Z","times_seen":55,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cf.api.nameshift.com/domains/by-name/googleadsrefundclaim.com/sales-information","fqdn":"cf.api.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:00.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cf.api.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 08:51:38 GMT","end":"Wed, 03 Jun 2026 09:51:32 GMT"},"fingerprint":{"sha1":"57:89:C4:6D:25:DB:51:F7:E1:A1:A0:21:BB:E8:BB:C9:D7:14:D2:AD","sha256":"E2:A3:14:F6:C6:36:DF:DE:26:A0:35:20:15:79:0A:B7:D2:6E:38:C4:AD:4D:FF:8E:6C:F2:C5:46:28:2F:16:F2"}}},"request":{"raw":"GET /domains/by-name/googleadsrefundclaim.com/sales-information HTTP/1.1\r\nHost: cf.api.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://googleadsrefundclaim.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:00 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Retry-After, Content-Disposition\r\ncache-control: public, max-age=30, s-maxage=2592000\r\ncdn-tag: 019386ed-043a-750a-a4ef-97409f6abaa5\r\nvary: accept-encoding\r\ncontent-encoding: br\r\netag: W/\"309-C0VhUagx3kMMliXfUSHcqm4bsNg\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zmQF5fEGOopM2mw90EPa%2BODeiglNArXeDDKcQZ7OlssCV2s%2FwQ1PdnngC7gDuYD%2FB88kC2CYhK31HdSRajQmtUhy37FL7f7lQ6UF1BjFUgeQp5Sy7UssyOL71ujySFThH9HHlRLm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvia: 1.1 fly.io\r\nfly-request-id: 01KPFXC520W9B1H1Q6V695B7X5-fra\r\ncf-cache-status: MISS\r\ncf-ray: 9ee28159b84b56ca-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":777,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"001cb9c18c7dae8283ab62527ba562f1","sha1":"0b456151a831de430c9625df5121dcaa6e1bb0d8","sha256":"3cec2067aab1e8ce34bdd31700b539706695381f7979ff6244ecbf97f587ac97","sha512":"9faef936c0dec853fd6e2cb484bf99a406f1d051562accfdb31046eb466e4c74e216c7bd9ac58f89e045491b81ee5936536189d52b09e4d39db41d54012e6859","ssdeep":"","tlshash":"2f0120ca02083ef88e4582a4d428bd0a16dc843320153e70dfda4f4825ff2b6a03682f","first_seen":"2026-04-18T09:05:36.548932Z","last_seen":"2026-04-18T09:05:36.548932Z","times_seen":1,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":62,"dns":53,"connect":1,"send":0,"wait":134,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/assets/Modal.ByVMVa6t.css","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:00.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /_app/immutable/assets/Modal.ByVMVa6t.css HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:00 GMT\r\ncontent-type: text/css\r\ncontent-length: 2302\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 14:17:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 5769462\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KD2JPydxehjD9ewXQ2RK4nDkxQK3%2B1WXBqPbTNwyPWxSOPsN8fzq%2FkMv4grSQHhPKYgXlFPFXmSfAgskTgeeZqPLK8G3jNPBzc%2FfdJDYCXZ8TG9bedLVBgxXXxe%2FLixJZ9cw\"}]}\r\ncf-ray: 9ee28159f91a7127-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12282,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (12281)","md5":"afe7f33702aa50391c1c294f0431c732","sha1":"d8484110e0d862199693b06ed12b644fd187c81e","sha256":"309003d096de3ff75e48fa183e41cc3b8441d151da6570d3d1775b2c6574a6c5","sha512":"4de36a1b87dcb479c10a1f122ea6c7ad10e6f623483cd73e7a6433dd77e449bbb88ba48246e87ec7925611b0d868f41ead0bd8c6ce9712d770641ebe50caefd3","ssdeep":"192:Q+Ictsj9JGUN1jZxf6RFqfX9uAyJwvxcUXl+H4IZBXcyc:Q+t093Zxf6RY1uFwJtXl+YsM","tlshash":"6e4277acbe4ca5bcece6f676f6b8999cda1ca980dc6106e8e341112410c3fe34770975","first_seen":"2025-10-30T11:47:33.846562Z","last_seen":"2026-04-20T08:09:16.776596Z","times_seen":1700,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":98,"dns":70,"connect":4,"send":0,"wait":20,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/assets/open-sans-latin-wght-normal.BQjZ2nPP.woff2","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:00.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /_app/immutable/assets/open-sans-latin-wght-normal.BQjZ2nPP.woff2 HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://googleadsrefundclaim.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:00 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48336\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Apr 2026 09:07:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LJmCX8OkqaRGTPoiUoZPP2vO%2B9Et3I2K3FrAlFy5h%2FrfmrFP9uCaoxH%2FweKjarZfiR8mVleJKiQIM%2BQgm%2F1kl%2BSR8smYRmCm8HKO%2F%2BZL%2BqP48mBpHu55Kj4oS79Rsu4eIrUP\"}]}\r\ncf-ray: 9ee28159eebb2efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48332,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48332, version 1.0","md5":"5734e133a619a6ae6ee21a6c00a95eba","sha1":"57c0ac17302d07bd4f968240098afe5ed53d4ad2","sha256":"d7a547581722aa055a7fb5b9912aebf3f3e928e1db3e5af9e54cf158cb4c4c4a","sha512":"a881b689d0990693ef7feb11d55155a8fa63f94e870bfeb5c61edbb9a7891990bb920147b05d371d302f91c0562fb87f46d334afd70d1cba36228e41dcd5ec55","ssdeep":"768:VRQzlrtlSlX2HnXb438KRr2FGTI8pGRY+rbma2NHhd37ohZ4Dge99ZBN62GcC7jr:mlrtlnL68gqF98URY+rbmd9XoAD/r42+","tlshash":"2e23f1de20f58f0bf84693f864eb9562506f706877721aa6bee1c1b48e757033267520","first_seen":"2025-05-29T17:20:03.50604Z","last_seen":"2026-04-20T08:49:38.662239Z","times_seen":51154,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":88,"dns":68,"connect":3,"send":0,"wait":43,"receive":5,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/img/flags/3x2/PL.svg","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:00.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /img/flags/3x2/PL.svg HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:00 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 142\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Mar 2026 08:02:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 2601280\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V%2FGxgFY3500DAJj5nGJoG6CVaDGChKS5Th%2FSwFtOkY69y4b3%2BGqYtuQg0H8l99at2z%2F4VPqOQfeJQTm2ThvtvPbFPfDcA1DjgHXVMiNMciA67vDUwHZOZOoYjI4sF%2Fspye6Q\"}]}\r\ncf-ray: 9ee28159f9117127-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":212,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8e1bf24bdaee9971c4e341bb52ce911e","sha1":"610871a6b1819e98d122a0329017818e021111e9","sha256":"3811a64fcafac33bb08df11c78aea97cb8ac0b28d856ae7d8de4371e3ff023ee","sha512":"47529888dac0261dee8e8408dfc66780b906ced064520fb115429ce63bd9634746c915855029c8c58aaf8e60b256a77e972024333adaa4bec2709d03be28a075","ssdeep":"","tlshash":"0bd022a8d1ec2cc4480803f06fbda8d2d2a1115a608d0cfef1802b0d210eb9f7c4ee84","first_seen":"2023-06-18T04:31:26Z","last_seen":"2026-04-20T08:09:16.820245Z","times_seen":1801,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":81,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/chunks/CM6zVlaM.js","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:01.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /_app/immutable/chunks/CM6zVlaM.js HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://googleadsrefundclaim.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:01 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 245\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Apr 2026 09:07:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Kh08PpNYhtvloK5Z3t%2FWKiBkKN2NgB3LoYgTmhNs2Kfk%2F7tyHbl8q2ie1JOiDX15wZD54lG5PkovUcmUkJnjJ%2Fs2Khu98CJmQUCj3E5Ig3Ws9VRELKoZYAgzKG%2FCRVlXrJb\"}]}\r\ncf-ray: 9ee2815e1a0a2efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":432,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (431)","md5":"9b505e1eaf702aa73e9502e25e6b2d61","sha1":"53229955e2ed6fbfeea7b19292211333d16e2a6c","sha256":"83c09747419ebfa1b0f8d634768cf1e57cd13c331edc99e3b4031926dd49c097","sha512":"e99c932b04490180578fb838dff079bec17c83a9a73d8f7046b2b3f4cd4cc0e5ead56a0c63a9048d8e05ade8e0e4e943c9099129e00ada3dab0a5e00552d90d8","ssdeep":"","tlshash":"cfe0e51dcbd0b1b459c1468db2402da1e505d4aa26ab0294d3fe7a1b2776ca40279d9c","first_seen":"2026-04-14T21:26:06.407064Z","last_seen":"2026-04-20T08:09:16.824411Z","times_seen":18,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.trustpilot.com/stats/TrustboxView?locale=en-US\u0026styleHeight=45px\u0026styleWidth=200px\u0026url=https%3A%2F%2Fgoogleadsrefundclaim.com%2Fen-us\u0026referrer=\u0026userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026language=en-US\u0026platform=Win32\u0026nosettings=1\u0026businessUnitId=673f2e7abfd7b10d26653118\u0026widgetId=5419b732fbfb950b10de65e5","fqdn":"widget.trustpilot.com","domain":"trustpilot.com","tld":"com"},"ip":{"addr":"99.86.91.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://widget.trustpilot.com/trustboxes/5419b732fbfb950b10de65e5/index.html?templateId=5419b732fbfb950b10de65e5\u0026businessunitId=673f2e7abfd7b10d26653118#locale=en-US\u0026styleHeight=45px\u0026styleWidth=200px","date":"2026-04-18T09:05:01.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustpilot.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 03 Nov 2025 00:00:00 GMT","end":"Tue, 01 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:AC:04:00:1B:E6:03:65:36:95:67:5E:7F:21:62:B2:19:D0:0A:61","sha256":"C0:F0:3C:56:A6:A5:C3:53:B8:0A:28:8E:01:CC:3D:09:B5:5C:FC:55:FE:7F:8C:10:B8:E1:1F:7F:C6:56:F4:80"}}},"request":{"raw":"GET /stats/TrustboxView?locale=en-US\u0026styleHeight=45px\u0026styleWidth=200px\u0026url=https%3A%2F%2Fgoogleadsrefundclaim.com%2Fen-us\u0026referrer=\u0026userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026language=en-US\u0026platform=Win32\u0026nosettings=1\u0026businessUnitId=673f2e7abfd7b10d26653118\u0026widgetId=5419b732fbfb950b10de65e5 HTTP/1.1\r\nHost: widget.trustpilot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.trustpilot.com/trustboxes/5419b732fbfb950b10de65e5/index.html?templateId=5419b732fbfb950b10de65e5\u0026businessunitId=673f2e7abfd7b10d26653118\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 18 Apr 2026 09:05:01 GMT\r\nstrict-transport-security: max-age=31536000\r\ncache-control: no-store,no-cache\r\npragma: no-cache\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 dcf5a2deb202715e535979acb8e2a6a2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: LHR86-P2\r\nx-amz-cf-id: vo3JPGKMqlwzz9ApVxt0Pvv5Rfm6ZVihIbO9H52FDq7jv8S4wUlZqQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T09:59:59.281443Z","times_seen":13970278,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/img/payment_icons/mastercard.svg","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:00.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /img/payment_icons/mastercard.svg HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:00 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 4616\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Feb 2026 11:22:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 3818588\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p9Z%2BInY3QS7HwOCA03XFPjMCaXJ4EMqoqAFvucTYZkCWkoWJZZS%2BV3J4SQzOFJUlBgcfD%2FY82v1j7AlSLNtvBmymg8bWRTMJX0VDAmnixWeD3%2FAfy%2Bwi8AWtHMQM0Zv4ecAM\"}]}\r\ncf-ray: 9ee28159e8f97127-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14617,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5f0075e246722bb0e6a7a61ae85d0cee","sha1":"93d36dab9a80be543d88c15b889d7a05f3289f3a","sha256":"e50c54a30a22e0937aa44be41af797eb428812c610d50d04cf9dbbeaa6618128","sha512":"1499b7307f92589911dc678557ebb9293b13f23a9a3242f667625ec1899b4eb99410a7ac23f182a1f012d8eab1fc641c443a38d2f7f67be978ac9a820111ecc6","ssdeep":"384:9Bv3X0vPEC42B4nEVTkWtOp09Bggh+XDniOT/aBAbgRBNS:j3+PECtGnesajWiOD2OgRe","tlshash":"1562d8c203a4c2f0faae43609cdb28563f9924fe220855cc5799b940e5b6ff53858f6c","first_seen":"2025-08-03T12:31:01.880816Z","last_seen":"2026-04-20T08:09:16.778973Z","times_seen":1776,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buy.nameshift.com/_app/immutable/assets/open-sans-math-wght-normal.CHNDR2rK.woff2","fqdn":"buy.nameshift.com","domain":"nameshift.com","tld":"com"},"ip":{"addr":"172.67.69.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://googleadsrefundclaim.com/en-us","date":"2026-04-18T09:05:01.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buy.nameshift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 12:15:18 GMT","end":"Wed, 03 Jun 2026 13:15:16 GMT"},"fingerprint":{"sha1":"37:2F:5C:4E:69:74:5A:63:E0:84:36:95:E8:67:D3:93:DC:C1:6F:BE","sha256":"62:DC:65:06:16:8A:48:BD:CD:B9:23:9E:49:A4:30:A4:B2:8C:32:77:70:24:93:EF:EB:89:D4:FD:9E:E5:8C:A8"}}},"request":{"raw":"GET /_app/immutable/assets/open-sans-math-wght-normal.CHNDR2rK.woff2 HTTP/1.1\r\nHost: buy.nameshift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://googleadsrefundclaim.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://buy.nameshift.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 09:05:01 GMT\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Apr 2026 09:07:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O%2BWbnu%2BHQnolvyvXZXIJ5INR5eA3h5MnBjg%2B6z6Sgo%2BBlQs77abjzCyYWNQbF7w9rET56Dg7ggbkXUOh3%2B2l4IYJls%2F1rP1f79YcOTnfi27XJU5PL%2Fb%2FAaENESPIUCEOEr6Q\"}]}\r\ncache-control: public, no-transform, max-age=31536000\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\ncf-ray: 9ee281610a2e2efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52028,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 52028, version 1.0","md5":"26d621d7b5485786c69cf7b07e8dc12f","sha1":"bd378c9281c5d87739d3f835cefdd5ff6c78ce8d","sha256":"0f2fe2478bde9a8e2e5bce7a3794f1f7198ae90ed4ebe3f9e1d7228d2758cd5b","sha512":"878da9d4d3120808d01094696f8c92f2db9e704870e1c8c8fb9d76dbbd2193aabb7c1a6d22c7ef926633ba196ea4697434533c0ee65cc9891612008e39206b4b","ssdeep":"1536:TULHzw1PM+scbz8+m0t99UIWn0JcUt/sk0AEv:TUjzw1Wcn8+/8IbtLm","tlshash":"2f33f2414b4f4cb8efca1d48285acdf937ac7308fa50fc0056a58235b6b676d4ee6762","first_seen":"2025-05-29T23:12:59.409163Z","last_seen":"2026-04-20T08:09:16.882954Z","times_seen":6497,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}