{"report_id":"d88f9831-f549-4d2b-b1a5-68756188c691","version":0,"status":"done","tags":[],"date":"2026-06-24T19:35:50Z","url":{"schema":"http","addr":"skyroon-claim.xyz","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"skyroon-claim.xyz/","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"title":"Skyroon Protocol","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T23:45:00.487881Z","times_seen":17963874,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"skyroon-claim.xyz","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-29T19:35:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"skyroon-claim.xyz","ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-03","domain_rank":0,"first_seen":"2026-06-24T19:08:15.461315Z","last_seen":"2026-06-24T19:08:15.461316Z","alert_count":786,"request_count":786,"received_data":11226630,"sent_data":889761,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"EmailJS:4","description":"EmailJS is a cloud-based email delivery service that allows you to send emails directly from your client-side JavaScript code without the need for a server-side implementation.","website":"https://www.emailjs.com","common_platform_enumeration":"","icon":"EmailJS.svg","categories":["Email"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-06-21T22:46:13.623663Z","alert_count":0,"request_count":2,"received_data":475235,"sent_data":1003,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2026-06-21T23:33:31.856708Z","alert_count":0,"request_count":7,"received_data":755445,"sent_data":5391,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-06-22T07:56:40.593876Z","alert_count":0,"request_count":2,"received_data":408707,"sent_data":940,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-21T22:22:12.048317Z","alert_count":0,"request_count":1,"received_data":10792,"sent_data":533,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-06-21T22:41:40.060069Z","alert_count":0,"request_count":2,"received_data":161293,"sent_data":992,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-18T23:44:53.596496Z","times_seen":815854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@emailjs/browser@4/dist/email.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"271138733214648bd35015f2e3186107","sha1":"4204eb126522fafb3ccdcdd9976dc59405e117d7","sha256":"052f6916a21ba5be140366439e81b84ad11363c84dfba2a06f208c7b4a6f6d5f","sha512":"2013c798d5b24a5cd3e5168f9a529af2a5a42188084feb1ba433a6d83898b5623f18acefe412abac24a2902f54fff70824115dbeb3fad2df59d063541730a4a9","ssdeep":"","tlshash":"9d81b79e02e260f25ed21b483c6d8616e13780ac7c5dc5e1e3f25917244fc9b837aa97","size":3941,"data":"","first_seen":"2024-07-21T22:23:39Z","last_seen":"2026-08-18T21:08:17.25952Z","times_seen":1004,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f1052e4052f22a37ec5348962ba6a931","sha1":"a35cf3c3284d8ed883deab9579dcf931309f0e41","sha256":"896ba67daee6000a1831e214e999a9ee9c45bb3d4323e15f736f0a7b01b539b5","sha512":"1960001867365cb09ddad9381db8742476a882cad6b26958cdda82c5d21ead2e4307aa8109c6e94a13d5ec619cf4d1f2c5ebda2fe9ad0e0375c0723b71c22528","ssdeep":"768:vCrfJcHw0nY9k6+XmJb8/2V9CpO3B0FacncDvsYG226Gfczc9qoZOidcDcbcQchI:G056xJbG2V9CgB008VZNArA","tlshash":"407372d5a90bd4e48e5211ddd477ec09e8680a63cdadf1a3ba2cdec1745df22848723b","size":75116,"data":"","first_seen":"2026-06-24T19:36:13.112252Z","last_seen":"2026-06-24T19:36:13.112252Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a10e2ca3ffb4723c","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"77a2dbab9f5522c292acd6d9b68a4341","sha1":"5a5aae49cd5dbd6ff2e6f55981c8a52d0b5f24f3","sha256":"d00cf08800a55a0dfd9a8936fbd6d2a7e7edec0fbe8d58ff2c4510b2d5b31d83","sha512":"2d13ede21cfafbfe278e20e4abf24b3b8e519534c3143d2bd80ccb879f3352737918cd540d27f6e2713ac01756527907eabb09bd239c2326b93a81460b8d622f","ssdeep":"6144:+43hnWvLj4IM98THz4tip3A36CFR6ZsTP0Fe:MMG5gcZsTt","tlshash":"e624c58e75c6bb36038ee4b8503f3b4a72bd6894149c981cd253d0e9fc72f5ad466d28","size":215363,"data":"","first_seen":"2026-06-24T19:36:12.528016Z","last_seen":"2026-06-24T19:36:12.528016Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7421fc63ba64fae678bc788c62e29546","sha1":"e2360ee8932407eae8f7647b8147ba26a3bd5153","sha256":"2dbd7694660aa3fca3bef2258a3318cd7783eaebba7bbdce11765d084b1736ca","sha512":"49138e93103a4fab84d743bd8bc9435ae4f668502642f1f534649358acf92a60c3c926d8c2fb32704c855ff17c97e218c38a7d2dac0908554b849d729a35e77c","ssdeep":"3:N/BKL1XPjUzK:eL1roK","tlshash":"c95504c0544030734410c405dd703517510d050c131f04c7705dc4dc37300040455540","size":1337359,"data":"","first_seen":"2026-06-24T19:36:13.115997Z","last_seen":"2026-06-24T19:36:13.115997Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-18T23:44:53.596496Z","times_seen":815854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-18T23:44:53.596496Z","times_seen":815854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-18T23:44:53.596496Z","times_seen":815854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"070e1b55df427aab1542c5104d541ab6","sha1":"0845fa8ab357428c8f430393e94466b9c88f96ab","sha256":"708a901295a2531ee865ddda8051a57cb9e3ef9294c36f6d2f9e88baa9f7a9b0","sha512":"128bcd414af71d3f2535831128429976205cb9747d3741c7ebd5c672187b3e565357099d9f336d22fc8924e877a0a1228e050aea25268c562f2b58385ecbda38","ssdeep":"3:N/BKL1XPjU5:eL1ri","tlshash":"6b5504c05c403071c410c414d1701417500d1504135f0441705d44dd173010004d5540","size":1337359,"data":"","first_seen":"2026-06-24T19:36:13.118312Z","last_seen":"2026-06-24T19:36:13.118312Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f5a0515f31ee16a529e25eb0938fd321","sha1":"f8883d5dced880dbc9c2d235699c1d22999c8941","sha256":"2d0209a4f8ad8943f31ff6ffa43cf3cdaf2796474660ed7f218650afb9b6c7d7","sha512":"389b3edc40db6f143b6666a5d8495718b3be24002a0fc72d5e48a5afbae1b0cbad5d2924305c8cc079bcd5f8dafde3995564d15924ce9514ecb72f7284a00dee","ssdeep":"3:N/BKL1XPjUPS:eL1raS","tlshash":"475504c0544030714454c404f5701417500d0504131f4441705d04dc17300100c77540","size":1337359,"data":"","first_seen":"2026-06-24T19:36:13.120766Z","last_seen":"2026-06-24T19:36:13.120766Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4b6de07a30d6a948fdeda3182640e156","sha1":"9fd58335b34fe4d01d8ed24b0fea67c836e2c1e0","sha256":"bf1833800d33c4c8f3e65e835f8a1d89d78aa2178550ddcca5792ba21d4bee08","sha512":"ddc4ae08aabcbab075f183306c4c66d4a0cfd6b7afdad6cdce34ba932a5d6e0415296514271cfebef65bb40f40f31d1ca3f28ec99264fd03c88aeae9db70dabd","ssdeep":"3:N/BKL1XPjUzg:eL1rog","tlshash":"0d5504c054c03071c410c405d5703517500d0504131f1447705dc4dc37300000455540","size":1337359,"data":"","first_seen":"2026-06-24T19:36:13.123262Z","last_seen":"2026-06-24T19:36:13.123262Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-18T23:44:53.596496Z","times_seen":815854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-18T23:44:53.596496Z","times_seen":815854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-18T23:44:53.596496Z","times_seen":815854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7cc4cfde3ae973cf201dab35dbaab3d5","sha1":"64d6f883fdc5c7bf1ab08d93f36cfaead78b14d8","sha256":"f4a3448444ae5f4891237445c848447fe7e4da29721a86bbd7351eeb90a3c31b","sha512":"f603623938cf8ecaf405c70f46ee4ba9df287fc738a85b2d08986ef025996d0e75cf4c8f9213edba89a30e06dc78460ef9848acc3ed782a3657e469947fb8a7d","ssdeep":"3:N/BKL1XPjUTU:eL1r4U","tlshash":"865504d0544030714410cc44d1711c17500d0514133f044170dd04dc37340000455544","size":1337359,"data":"","first_seen":"2026-06-24T19:36:13.124882Z","last_seen":"2026-06-24T19:36:13.124882Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/chartjs-4.3.0.min.js","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7572ca49413111a3bc219093843dce32","sha1":"93cbeab1667219e67763f5210a5f18f3d1a3d498","sha256":"8293ba3fb1f612e8dd3cf4ad8c13832f7b81eb9484a5cc0f1ba0ee23dad4edc0","sha512":"8a8acb5a22be29145d2e4796eb766bc1495b5f80b146feeb9d38695299058cb72b184e3453b509b7393eefd3d08cb1ed60a533bb94f8df9aa3dd4d831c4d707f","ssdeep":"768:Q6nfJcVU0ndK/qiF8pf9tQ3ymiHqcVcbvoyY2w+wdc7cxq6OmdcDcbcQchchcTcF:n0d6JF83tQFiQU9JArk","tlshash":"747383d6690bc4d98e5111ddc477ec08e4a80aa3cdacf193ba6cddc6b45ef26844723b","size":78120,"data":"","first_seen":"2026-06-24T19:08:41.963572Z","last_seen":"2026-06-24T19:36:12.963931Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/app.js","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fefc4b11785d4367d35ebc1195c7b18f","sha1":"98dd7b05425a7cc674cd893b8704630a59d36200","sha256":"f3dbb6366136dcc3e29087c809b5be86bdb26cc39ccf313a0b0921643475b0d6","sha512":"86d5ea886df4191a073dd3a7c1cc15c4fa50b4e8b38ac9b7768f51e6867ca94b5e34386de8458c7a81f4cb9d0599c038d10abb74c5aab206b04bd9145c6af9df","ssdeep":"96:plAvL4WmYbt/mz0IH8nytlkCN61Til65zdi775zJAiN+GvSC0EX9Bzd4NMt25hA:plAvL2impYhiAZdi77ZJVN+Gv/9Bzd46","tlshash":"17916551607614300a6fbed926e78667329d50177906eec03d8c41180fe7ba5cafeed7","size":4498,"data":"","first_seen":"2026-06-24T19:08:43.057487Z","last_seen":"2026-06-24T19:36:12.665509Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-18T23:44:53.596496Z","times_seen":815854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-18T23:44:53.596496Z","times_seen":815854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"20d526c4ee3e07f2206f66917b41e295","sha1":"6366f9dbebfa42295f8f472b0b9eefb424706a48","sha256":"09453aca1e863242b91323185c04b7bc4b5f079c301c675341814b3649b9bb17","sha512":"76bdab65d6c49ae79ad97a39b93d8899408d26182fb042d79cc508591b1a3b445cbcd98e9b7007aa918d4fa8821222fc163582990944a62431771d50d02c15c1","ssdeep":"3:N/BKL1XPjUQ6:eL1ra","tlshash":"af5504c0544030734510d404d3701417504d0504131f0441f05d04dc17300000455540","size":1337359,"data":"","first_seen":"2026-06-24T19:36:13.127235Z","last_seen":"2026-06-24T19:36:13.127235Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-18T23:44:53.596496Z","times_seen":815854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ccb403c14a3bddb2913c5f8014b280c1","sha1":"4b33b9fee083ab6114822a6e7a13799a6c070dc2","sha256":"89b86ac1f114a4f3528c37edc2b322a77791f014f6b7d03032c9f1ee178ebae7","sha512":"19a63aa1121e9f0293849da5e00c917184c1f619617e729a695d5230f2ea92d609ec4c5a2336c704cceb2f0965e100fa67d30cae3848cc29bb18ac8ee7520ba6","ssdeep":"3:N/BKL1XPjU5:eL1r+","tlshash":"cc5504c4544031754410c404f3701417500d050c131f1441705d04dc37300001475540","size":1337359,"data":"","first_seen":"2026-06-24T19:36:13.128786Z","last_seen":"2026-06-24T19:36:13.128786Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-18T23:44:53.596496Z","times_seen":815854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-18T23:44:53.596496Z","times_seen":815854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"93e354e833ee7b4feead7057a3f33168","sha1":"4025c763f11cdc2eef6318108989528620fef9e7","sha256":"80b90237b40178e74c34d6652d95b3918d01b603ba83f9dce47ba6b19343c245","sha512":"2b37a9bb6f2c3e2ad3624228638881eaeb961c98a31e60a424d9c6146f002a852cec318a17772a5be5015fd197ad4582b007eb0b15335ba6d25412b27b576c13","ssdeep":"","tlshash":"19600000c0303003000f0000f00000033cc000f0cccc0003030c00f000c000c0cc000c","size":13,"data":"","first_seen":"2026-04-23T17:24:48.301435Z","last_seen":"2026-08-18T23:44:53.621189Z","times_seen":113764,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-18T23:44:53.596496Z","times_seen":815854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-18T23:44:53.596496Z","times_seen":815854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/53f1713e-8db0-4a8e-bdab-737ca8bd8bf8","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"559b25e286518dd5095285175eaaf1f3","sha1":"73796b05b604f1f9b9e82ba5efe05b1ff0624805","sha256":"e2dec43e5f28a3c6ed7646c44bce131b1a582210b6d7d029b883a283e4b166f4","sha512":"89ef12ceea529b9a9f05dfba8ce32eda13432f1e4942a917c9e83752f94e65d75d2bf37732152214eed075911cdd5c57741fbb6654d931dbd72145aac6b68232","ssdeep":"","tlshash":"86e0cd093d71e64982b311337c7f3926c1656664650992485335cef9db6069f2514f54","size":292,"data":"","first_seen":"2026-06-24T10:51:52.198846Z","last_seen":"2026-06-30T15:15:09.076549Z","times_seen":6358,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"442b152a7a6fb4cad87a2ed2858fd7fb","sha1":"2bcd151497c590dc9dd682e1d61bef1bff8aec2a","sha256":"eb181a3de0d21cabee42e05522a750803a8210fa6ebcdb530ea8ee5c0b6af050","sha512":"0b1237389dbe24672238a0ef627fffe04260bbcc6cd2c02c0e6f9b05952ce7889370374d00a3af416c90385f5879ac8f4d2b39252fc3bca1f76d5c071d7d4590","ssdeep":"3:N/BKL1XPjUbdWn:eL1rMU","tlshash":"ed5504c0744030714510c444d5711417544d050c131f0441705d0cdc37300000455540","size":1337359,"data":"","first_seen":"2026-06-24T19:36:13.132236Z","last_seen":"2026-06-24T19:36:13.132236Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-18T23:39:07.735689Z","times_seen":49830,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/a7976305-b72e-40da-a128-59e656aebda5","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"559b25e286518dd5095285175eaaf1f3","sha1":"73796b05b604f1f9b9e82ba5efe05b1ff0624805","sha256":"e2dec43e5f28a3c6ed7646c44bce131b1a582210b6d7d029b883a283e4b166f4","sha512":"89ef12ceea529b9a9f05dfba8ce32eda13432f1e4942a917c9e83752f94e65d75d2bf37732152214eed075911cdd5c57741fbb6654d931dbd72145aac6b68232","ssdeep":"","tlshash":"86e0cd093d71e64982b311337c7f3926c1656664650992485335cef9db6069f2514f54","size":292,"data":"","first_seen":"2026-06-24T10:51:52.198846Z","last_seen":"2026-06-30T15:15:09.076549Z","times_seen":6358,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"656fa1f524e9ef9852a7f1926f9f411c","sha1":"358a113517e7836bd4a32c0579ea57bcc4612895","sha256":"bd279b4d2f2e6bd8b3f5c7a4016434ff0e01acc7d95ed6fa7330cb6ff8112c01","sha512":"1cde8c02ef0b57aa160f2a1d6a6fef4eb8d5cf879d658aa4fea108f65ddecb35a4d6bcbaeaaf5e0dd2aa2764b9e4d7b87081f017d7d1ee2cf4cf18a8fce78237","ssdeep":"","tlshash":"43a004ccf141f0505303f1350c374115f11557c1041c1010554c44537d1414f4111f5c","size":71,"data":"","first_seen":"2026-04-23T17:24:48.307672Z","last_seen":"2026-08-18T23:44:53.613495Z","times_seen":113399,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1ad1e03e6dc7e673a3ebf8e95f037665","sha1":"2ddcd7125572d7f90d0b855a20ab32925bd020d9","sha256":"71692d78de47ac0aa24134b59bc5ad3f2143883d5dacc9fdf299468d983ff981","sha512":"82294558a5ae3e616ccc7ebc8cfb2a3022db3264639aa1b362c4f5d1b2fe656531bae4b536620cad5feb280aaacf2dd82927137da8bdf7ac6a5a9822693729da","ssdeep":"3:N/BKL1XPjU2ST:eL1rW","tlshash":"785504c0544030714410c404d1703417500f0504331f0443705dc4dc57310001455550","size":1337359,"data":"","first_seen":"2026-06-24T19:36:13.137706Z","last_seen":"2026-06-24T19:36:13.137706Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-18T23:44:53.596496Z","times_seen":815854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-18T23:44:53.596496Z","times_seen":815854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a08ece9ee32148037eadf06213c35882","sha1":"0e55243276337c2a80bb099ac5150cb5d770a88a","sha256":"f5e9c6edc31bc44dfad52ce097751f226bc748b232b1666cc3d6d5e4061fb476","sha512":"a8a672bb01b4ef466e2e13afc253ba2046ef292052e0cd4d59d26825f6d29fe69e5227695b05f46b6f51a8cf263e63bf7071f5719e2d79dd6ba2d4e7902db15a","ssdeep":"3:N/BKL1XPjURWW:eL1rGWW","tlshash":"535504c0544070734510c404d1701417500d0504171f0441705d04fd17300040455544","size":1337359,"data":"","first_seen":"2026-06-24T19:36:13.142548Z","last_seen":"2026-06-24T19:36:13.142548Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-18T23:41:52.15668Z","times_seen":189559,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/?__cf_chl_rt_tk=spPIa73jbcVxgayMT3JHUvpK2AGA7G7WC3kcs2Lr8T8-1782329713-1.0.1.1-7bS78dYZqN0yP3aqqp9DWsFxILZwhb_zdFRbLJgI3Pg","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-18T23:44:53.596496Z","times_seen":815854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1e50fcfc8c752175ff807841572530cf","sha1":"03ad81477e761297b3303f079f659d0269fcd829","sha256":"31f8094427d685dd7b752b1d660ec2612ce236cf5402d8351c685ae1654acce6","sha512":"d3af1b45d5b712563fb0b88ed05ee831eabdbfcf04056f2fd8ed9cb37f4cb2241a83e8523977ae0a06b91fa1572bce52ae3050f47c46889e3e4259aa5cd8ccbf","ssdeep":"","tlshash":"8ac08c887a80e014c28125351c6b428ae638de6008581003a0425249b6a071003aaf0f","size":137,"data":"","first_seen":"2026-06-24T10:51:52.241503Z","last_seen":"2026-06-30T15:15:09.065929Z","times_seen":6599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-18T23:44:53.596496Z","times_seen":815854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4909b58f29d2b6126766af79949edc2d","sha1":"893dbb788a70767738464afc6e04e0d2d042ec81","sha256":"0f0aa954c612fb40488113d3ba8c857acd94f8941eac45fafd8cc4aaa571a817","sha512":"a47fa7807bb6f20c5580130a75d28b3cef3274f19e06962a182ae7d104e54bb1f046424ed475f862d1e7ea50265cc6c2ea9953afa39cb6434a389c982078cdbf","ssdeep":"3:N/BKL1XPjU1b:eL1rub","tlshash":"465504c0544030f14510d504d1703417510d0505173f0443705d44dc17700000455540","size":1337359,"data":"","first_seen":"2026-06-24T19:36:13.152668Z","last_seen":"2026-06-24T19:36:13.152668Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-18T23:44:53.596496Z","times_seen":815854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cb5e1ab94e504581d32ae6b9c055a943","sha1":"0cad9511af75b68d95f8077aa1dc8630a95c89ba","sha256":"ae65b3b036ee7ad66c3da31c392be2c453f1ee68af8c47ac63744c3ffe61f5ab","sha512":"5770eef8de4cfc342aa99d6bf2da8ec2984303fbd51b5dafb1b6867d91f6ff256d89003b22b87e01913909fd2bccd2e0e38a6130c5630420ce721932cc374c12","ssdeep":"3:N/BKL1XPjUSG:eL1r8","tlshash":"d55504c0544070714510c404f1701c17770d0504131f0451715d04dc17310000455550","size":1337359,"data":"","first_seen":"2026-06-24T19:36:13.155186Z","last_seen":"2026-06-24T19:36:13.155186Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1e50fcfc8c752175ff807841572530cf","sha1":"03ad81477e761297b3303f079f659d0269fcd829","sha256":"31f8094427d685dd7b752b1d660ec2612ce236cf5402d8351c685ae1654acce6","sha512":"d3af1b45d5b712563fb0b88ed05ee831eabdbfcf04056f2fd8ed9cb37f4cb2241a83e8523977ae0a06b91fa1572bce52ae3050f47c46889e3e4259aa5cd8ccbf","ssdeep":"","tlshash":"8ac08c887a80e014c28125351c6b428ae638de6008581003a0425249b6a071003aaf0f","size":137,"data":"","first_seen":"2026-06-24T10:51:52.241503Z","last_seen":"2026-06-30T15:15:09.065929Z","times_seen":6599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-18T23:44:53.596496Z","times_seen":815854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-18T23:44:53.596496Z","times_seen":815854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2981b7de6dc60ad42f7f7f4645675e6f","sha1":"005305936c7a2cfeb40fde3dc8ea19cd265eb9e1","sha256":"e4bff0ad6e4bbf67185a869db3c00b6eb62611eacf69423acd7e0356255d650b","sha512":"407c06b55ac3ee34c9752344018c0aa236ab016e26cb18e9f09a37e45a41553f9da6e6d59d13eb5c6ca5148cad9f29315cb22a21f8e7f1af6c1c030b6a10231b","ssdeep":"3:N/BKL1XPjUxn:eL1rW","tlshash":"e25504c0544030734474c404d1711417500d0d04335f0441705d04dd1730000045d540","size":1337359,"data":"","first_seen":"2026-06-24T19:36:13.15704Z","last_seen":"2026-06-24T19:36:13.15704Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3c1811154a596394278c26fe144ceb74","sha1":"fff234cda21fdb357cc2eed85065d7b51b978e9b","sha256":"8228c387c7b6077d1af53defc0eb934a45b72ee16083f2931793f17e204b5042","sha512":"10da2e0aff23d835176f1eb267780a285a589ada4188731c0b26fe78a8f16b87b90294d2cec3e3cc42d4d2a42e5484532d3759e9dbe9e6f3dde94936ada1893b","ssdeep":"3:N/BKL1XPjU8:eL1rL","tlshash":"105504c054403071c410c404d170155f511d0504135f044170dd0cdc173010004555c4","size":1337359,"data":"","first_seen":"2026-06-24T19:36:13.158937Z","last_seen":"2026-06-24T19:36:13.158937Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9aae4c99f435002b1407d6bbc31c421b","sha1":"6bc94ddaf81c85efe66b55d017d4ac5500232876","sha256":"f3f5313ecb448b1e8ca818bcf61360347fe265b672a38133a15fd39368df0f73","sha512":"80b844d8042191c2556c9368f65857faead9e01a07845c0da7868c67b9e97af84af24aa4e0261842cf88e8421f1045f0733a3635f0aa8b6e3b8cf144f84ccd12","ssdeep":"3:N/BKL1XPjUX6n:eL1r86","tlshash":"d05504d0544034714410c404d1701c17500d0504531f0441715f05dc37300100455540","size":1337359,"data":"","first_seen":"2026-06-24T19:36:13.160626Z","last_seen":"2026-06-24T19:36:13.160626Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-18T23:44:53.596496Z","times_seen":815854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-18T23:44:53.596496Z","times_seen":815854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-18T23:44:53.596496Z","times_seen":815854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"50bda72e04f85f9b4338c0f939c34b9c","sha1":"d53056a9d7a7424238f0faf0b93b098f28d4d3ca","sha256":"db8d20f2dfaf9df3877967927de5ecb9648fecda131ab44bf854f8d72baa2b23","sha512":"3e55d7e8940bd66ef537062f73d3d2c6982a25a4e9fe9ac98e18253782cf28e01f106382d2e9dbbc05b6cdd62aae372b75cd430aa5a7ce2e327fb2ece33a30d0","ssdeep":"","tlshash":"736000030c00cc300033000c0000003c30f00c3003cc000c033003f003c030c0000030","size":15,"data":"","first_seen":"2026-04-23T17:24:48.299417Z","last_seen":"2026-08-18T23:44:53.624441Z","times_seen":113459,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-18T23:44:53.596496Z","times_seen":815854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b2e4dd0fe311d4aa8a61b2b1beca5bf7","sha1":"12abfd5799f5aa414246af76d5f700346672ca6e","sha256":"da36eb0bce4f3406f31109bd0ba39323c32adb947098bdbb56ef6c9d3f9d6888","sha512":"94c7c4d5e09ee7e958e0a382f03c33eca8ed0bbb8d59b37b0dc801d719551d259b8dd42c00cc4b4fa1d6c844bd7b2f6b215bf04c738f8fccd0163adb4c5afef7","ssdeep":"3:N/BKL1XPjUBRn:eL1rMR","tlshash":"945504d05c4030715c14c414d1701417d00d050c131f0441705d05dc17310000455540","size":1337359,"data":"","first_seen":"2026-06-24T19:36:13.163981Z","last_seen":"2026-06-24T19:36:13.163981Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-18T23:44:53.596496Z","times_seen":815854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-18T23:44:53.596496Z","times_seen":815854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/25e6c66701a0/api.js?onload=ePmH8\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d26819e314c7334b3a5dd5a004898650","sha1":"559b39e547d32af023ed6ab08c369e93db0c7f80","sha256":"9715b51191ac5c467c5b8d983bf9f77c688c61987ab80f94fe3b4c452429cbf4","sha512":"9f4ea7965bdfe1afd68bd1dbdf79cdaa039492ef8e1d29a4966ec6ae8d9b8cc6af8f8920964deab2926662041ee1ac0feb7d70df7df9e6f0e55c5d130adc818c","ssdeep":"1536:4oYt3AYYdolrsHspjxegN8t5LMhfS8OpyJr:b8+onxeg6Dgc6F","tlshash":"3a632cc472aa7877129ac0f0a03b6753b3267d36a84cc850d427dc65277de869173fba","size":67081,"data":"","first_seen":"2026-06-24T10:51:52.15506Z","last_seen":"2026-06-30T15:19:47.495467Z","times_seen":10376,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-18T23:44:53.596496Z","times_seen":815854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4be7b6b8aa783300ae657a82c16d2a09","sha1":"39c051c1ee899fb0fdec892c96de143739ad2628","sha256":"9ce4a40dab4ae7a062f4860f6a5f77bb0f93dd15b4a24f086e633a62dfaa26cc","sha512":"ed4f6be02687fb5ca630c617096aea4f63e85839ce294d6026bac126865ce8de8cfca9d5bfb335b13b135351e13d49cee6712e22d8274a313c9f1b15f858c66d","ssdeep":"","tlshash":"89900277b5817125574568f1842a251be61946d406544459910400862d104648651bd9","size":50,"data":"","first_seen":"2026-04-23T17:24:48.285702Z","last_seen":"2026-08-18T23:44:53.60821Z","times_seen":113843,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-18T23:44:53.596496Z","times_seen":815854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b3b995436b2e33c330c70f112b859bd6","sha1":"ccbdcd573a4301e03b5fc1257a43f1a555cce882","sha256":"827f8befcff7381345ecfe621a5609bf7b0f698f5d1de7a79ee3c856a2373da3","sha512":"837a2d24481d71f1e525095a861a64422c24b7c7b3319e08b5404d1ec2fc5d8384dbc9be06691ddee1a3b13162ae6bacd3d7f660f5fd98d7aae9b99a96cc8706","ssdeep":"3:N/BKL1XPjUTXn:eL1ruXn","tlshash":"3c5504c175403071c514c404d1701c17510d0515135f0441715d04dc57300000455540","size":1337359,"data":"","first_seen":"2026-06-24T19:36:13.167117Z","last_seen":"2026-06-24T19:36:13.167117Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-18T23:44:53.596496Z","times_seen":815854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/e81da6f0-220d-43e1-8302-85d9a5540da8","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"559b25e286518dd5095285175eaaf1f3","sha1":"73796b05b604f1f9b9e82ba5efe05b1ff0624805","sha256":"e2dec43e5f28a3c6ed7646c44bce131b1a582210b6d7d029b883a283e4b166f4","sha512":"89ef12ceea529b9a9f05dfba8ce32eda13432f1e4942a917c9e83752f94e65d75d2bf37732152214eed075911cdd5c57741fbb6654d931dbd72145aac6b68232","ssdeep":"","tlshash":"86e0cd093d71e64982b311337c7f3926c1656664650992485335cef9db6069f2514f54","size":292,"data":"","first_seen":"2026-06-24T10:51:52.198846Z","last_seen":"2026-06-30T15:15:09.076549Z","times_seen":6358,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"97c175590695ca7748b63bd1f9ddfd20","sha1":"c33aeb014888bb7bf93b2e17c61f70f76ee6eba9","sha256":"4273cefc181b97be5f7a4f25f3647585dea6cfdca8c4b734e7b5b37e7c83c8cd","sha512":"76eebd5e639aef32774c88ca5547674d9487071136d3120ac73e9ede3add8c50d134c32bb0d9155180501cc3f9267420462750ff28b535193990a09303cff208","ssdeep":"3072:NWvwcP5AXpeT37+S0eWejhHuLaTF5nsc5WqrpZ3iMLlg335CGz:AhPqXpY3qeWWdiwM35CW","tlshash":"ad34c8c475c3767a535eb5b4002f379aa1ba1c84d098cd19c222d4f9f872b5ea52bcbc","size":244075,"data":"","first_seen":"2026-06-24T19:36:13.169719Z","last_seen":"2026-06-24T19:36:13.169719Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-18T23:44:53.596496Z","times_seen":815854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-18T23:44:53.596496Z","times_seen":815854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-18T23:44:53.596496Z","times_seen":815854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2e3599542549c464313cb1bd8488749c","sha1":"26b79ad04bf6ec21402baf0d223ca5b1eb313d02","sha256":"bfd0f3779b5d41bf35e37c0531a2f06da32b500fe20bdf2a3d257538c19f477a","sha512":"e70cc41293bde3518c5f42e5edc87bf5d5eb6aeb649b6976d82ae23df74e548b9ce4f12372de1d4e791d0b9e262ae5dee3536a2d00540cb17987ed53205b0523","ssdeep":"3:N/BKL1XPjUoW:eL1ro","tlshash":"9b5504c0544030714714c404d1701437540d0504135f0441705d04dc17340000455744","size":1337359,"data":"","first_seen":"2026-06-24T19:36:13.173205Z","last_seen":"2026-06-24T19:36:13.173205Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"94081036cbf595a3dac383955367903b","sha1":"4c78fee58d05c79857142f6a1823b584e693d678","sha256":"a3c4f20a8b17293aceca90edf64056d45c645f5adc2d5c853448063f6fa56a8b","sha512":"99084ac603dabfdbf3736d9064ab97c259689afaf02fe04dccc45f4ed0dbb4be9af01b5e797fa80f5f6881c3f1f245f4b0d79fa6472f1eb8e2aa07f5404e5e69","ssdeep":"","tlshash":"64600000000000000000000cc00300003cc0003300cc0300c30c003000cc3cc0000000","size":13,"data":"","first_seen":"2026-04-23T17:24:48.314042Z","last_seen":"2026-08-18T23:44:53.62296Z","times_seen":113576,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-18T23:44:53.596496Z","times_seen":815854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"bf8d9319349aa9eeb8a487a94d99a2e6","sha1":"d3c15b5a74e589567af3a8ba57cf0003e7c27154","sha256":"7effa010a6af88836674b0a18bab7c76636c32356a67b6d4aba6a33bd30bf3bc","sha512":"8ea0f08f636aa07b6138d85d2468f77f137845e803c60969f24eddc99952ed1f7e0a11b47c6c1132f6941396b20ff34a2d109dd856ba1e9c73b1b08711d075a0","ssdeep":"3:N/BKL1XPjUD:eL1rQ","tlshash":"355504c054403071443fc404d1711c17500d0504135f0441705f04dc17300000457541","size":1337359,"data":"","first_seen":"2026-06-24T19:36:13.176401Z","last_seen":"2026-06-24T19:36:13.176401Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-18T23:44:53.596496Z","times_seen":815854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-18T23:44:53.596496Z","times_seen":815854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-18T23:44:53.596496Z","times_seen":815854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"520dcb010927e176b5a3e74c63a7492e","sha1":"2685998a60e62a330f6dbfb3ade99c9af18e2613","sha256":"dda4e5c200e6748f2f568a95b3af9babac7728f3b958048c9f037b8dae506512","sha512":"8b73880518ab75cbbec34d29fd12784369d49e6eafdc6dd62f9857dcb15dd021f6659eaf4150131d16f73d66a10c223573d4e8d5cc58444e40bb2397b80415ff","ssdeep":"3:N/BKL1XPjU2:eL1rp","tlshash":"645504c054407071c510c404d1711457500d0504135f0451705d04dd37303001455540","size":1337359,"data":"","first_seen":"2026-06-24T19:36:13.182441Z","last_seen":"2026-06-24T19:36:13.182441Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"54e1b00687c6b3e91d6ed5405ab2c567","sha1":"34995487462bbad60d3147a484fedf00745e36be","sha256":"b329e51b4ca3dd4c3036612e5a11bbe4025d69ef5c3d175fdeb33c5bbbdb7eab","sha512":"c060b7cc4b314aeb0bfb432ac360057f76d721aa920024f3f9eb843d5e17622d758bfaab3a39d1aae76ed4aa94922ac72709ad66d06bcc8ae58d5d54c6ef9501","ssdeep":"","tlshash":"93c0222ef13f4d44a1231420bd3f36a0cc2b718810083e89aa2a08c607624c0a5d1fb1","size":192,"data":"","first_seen":"2026-06-24T10:51:52.218115Z","last_seen":"2026-06-30T15:14:23.65232Z","times_seen":4332,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-18T23:44:53.596496Z","times_seen":815854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"20c7bdb43587be6c08b82fe31f89d495","sha1":"70765af45bf23810f50831648c7b37aca7770314","sha256":"ce7575e8ba4b284f7ab345c362c191f3070eff32780dcec589ac9307e103af42","sha512":"93fee770e80b8c537e172185c0a83a3d1be67077cb9468dcd4be630d6e2a2441e365c9c517fb0cb19d918c15c3f924308b2e6fd3a60d8fdacadd69ed712c8b54","ssdeep":"3:N/BKL1XPjUaE:eL1rS","tlshash":"2e5504c0745034714414c404d1701417d10d0505131f0441705d04fc1f300000455540","size":1337359,"data":"","first_seen":"2026-06-24T19:36:13.185141Z","last_seen":"2026-06-24T19:36:13.185141Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-18T23:44:53.596496Z","times_seen":815854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-18T23:44:53.596496Z","times_seen":815854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"The next request for the Private Access Token challenge may return a 401 and show a warning in console.","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj192 class:RegExp displayString:/.*.*=.*/ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj195 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process8//obj196 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj198 class:HTMLAnchorElement contentDomReference:map[browsingContextId:1.5032385538e+10 id:0.598617001155681] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:a nodeType:1] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"debug","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"error","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"info","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"warn","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"debug","text":"","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj190 class:RegExp displayString:/.*.*=.*/ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj193 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process8//obj194 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj197 class:HTMLAnchorElement contentDomReference:map[browsingContextId:1.5032385538e+10 id:0.598617001155681] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:a nodeType:1] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"debug","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"error","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"info","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"warn","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"debug","text":"","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"warn","text":"cdn.tailwindcss.com should not be used in production. To use Tailwind CSS in production, install it as a PostCSS plugin or use the Tailwind CLI: https://tailwindcss.com/docs/installation","filename":"https://cdn.tailwindcss.com/","line_number":0,"column_number":0}]},"http":[{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Battlemon.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.633Z","timestamp":1782329721633,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Battlemon.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gFkBm9qrvpJzRjX2XUb1DntNHkX%2BmUPWN1e7H5uA3ODsai5dyHmmo2Y9pVKPXq5mWm0fZt4qN9bYXAZQX0TaZ7G%2F433N5INiEBz5pW%2FrZypqhR9CM1G0If8kHd%2Bpn%2Bq4VPVG1w%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"10f86-19e8af971fa\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 69510\r\ncf-ray: a10e2cd83d39723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69510,"size_decoded":70498,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"e515a767c8439f41a5f66c37531b8334","sha1":"b4561df76de298b0f7fa9bb892093140920d8f30","sha256":"094771c86efc580be551561162a4777b4424576c050fd24589f756d6051ac899","sha512":"05c100fdb22aa78480af1dd210b876e24bab5a32249d5a737b9a763a3f5b172460f9ed5e6d6243ed5ee1b935ede6119e4605d94d981b5b4577ba617a1cae0834","ssdeep":"1536:q4nNe8blBtoyVefcMSTZz/ykYdBtmF4uIpAUvpL8sFCDsqT6pZ:q4n88blPoCefcJZjqdPm+98sFCir","tlshash":"3c6302c9458690803572ee625376132f96b4f280f17cf9d4118eb82276feaefc0e4e85","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:40.694454Z","times_seen":18,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/haex_io.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.786Z","timestamp":1782329721786,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/haex_io.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ip%2F9S73fAyZrqdiX4Xlf%2BtcI%2F2BWRyHMoNPglvE6N9l15B2poQNAEKrz7freWaBt7q2jWIgkNg3nc1fFGDcRDPossSLsRbQnXou9VrZ6%2FogX%2FmHwJbLXkLwFXqntqXUV8%2B0GlA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"238b-19e8af97252\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9099\r\ncf-ray: a10e2cd92d82723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":9099,"size_decoded":10087,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"8d558e923e7187f3993e3d94bc67391d","sha1":"8653d964c67c818961221eb0f36d97dbbef46802","sha256":"b844246cc58dc27d803006a448e81563fb0897fc4e9a66a90e12f2e43cddb3aa","sha512":"f3d3de5926dd5f470c116928280053f64c72a29d4534013bca0e6742eb9f9593ff8b885abb0877615148549376c270eeeb97c044d8d2d3c0539d6fe8d3ed19f8","ssdeep":"192:GugY+zgeaPNP9eL2GSIUq2MvvT9EZB9YE/aq+7oflyn7VL:G4OgeCgLm7DZBi4V+746L","tlshash":"2c129ee897c1f565d7680ea938006138490a1fb9cb273b5e496bfde4feb079320112a7","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:40.796692Z","times_seen":18,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/favicon.ico","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:13.716Z","timestamp":1782329713716,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://skyroon-claim.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:13 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff, nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i\r\nx-cast-cache: STALE\r\nage: 1672\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8oPuKkDRbZT7O7rDhBgtO9UqG9vt4HRbTOjvrl3YZAvT76B%2B3zb0W7uexm65u0RgmmEtSKVh8KzYc6TfTw2SO8pwTIjDpKqDwawW245vKG2d%2BJVYWLcjixRVf3KT89y1IqQ8%2FA%3D%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\ncf-ray: a10e2ca6b868723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":150,"size_decoded":1086,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"84241342d84ac29592a5d9516f8edf7f","sha1":"03c53980e18e17625f439c20e7d438f066202428","sha256":"6e21162bc64073fe9e3d3d6375ca24d04fed1912a5b7716aac0cb0f2d16fae7c","sha512":"7509483335c7a30365f7f403098491ac0b44fffcc68a5cdacb86ec191f02dbda5b16a20a09e924b6a29ac938578d43bacb9a50115db5c5668ea27fe1811bd530","ssdeep":"","tlshash":"34c08c9e140012010b2087042ac1326464973b992de685006a87e027ece8a1ad987288","first_seen":"2023-04-05T13:59:49Z","last_seen":"2026-08-18T22:24:26.134233Z","times_seen":9017,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Paper.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.788Z","timestamp":1782329720788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Paper.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qEbneumWKx%2FJ%2FQjUq60us1kEbxSCPztCVC1sFXtLjaOs275E4qzdqBWVMkHIejE6gLkjIAgfqTDqGYeFsG6tS0TuVlnKQe2y0h%2FYdApXzCOYZCoRZ53uxoNqpkQSjSysi%2BvU4Q%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"eb4-19e8af973aa\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3764\r\ncf-ray: a10e2cd2eab7723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3764,"size_decoded":4747,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"0aff532f93e28cbc608b86fa8c303575","sha1":"a9da97ad86a6f250b6a1451c835fbe847cd7fbd4","sha256":"b30011685588d06cb575f47d000c639f648b11b0326707b0f6d94b90f5617f8c","sha512":"aa67a568bcaf146978ab99461e834cee6d6fa8c23252541dda26228a1d7ce2aabc90deebd177baeb71d50f9693f2beca12772f56404816524b1e5f50a2d6f7bb","ssdeep":"","tlshash":"c4715d5a44fd65a1cd003afdcaa94a34902e983e03de72e0240b4781725b868e42a947","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:40.741409Z","times_seen":20,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/LichtBit.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.103Z","timestamp":1782329721103,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/LichtBit.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xVXp%2BtX0oACS%2BVtnVxe1racNLoSy2%2FW0njHOdoUEfDOZg6%2BZ6nMo97eHjHyS%2FUvbSs89W5hQRSI3XOgvdMZdG92Q7RnZYbq3pS2LuBgSYEcrL4w6viruhVeY6k25HRgf1R2DDw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"6edc-19e8af9738a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 28380\r\ncf-ray: a10e2cd4eba4723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28380,"size_decoded":29367,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"a9e870d762b2c457a3d0ad7c0d250259","sha1":"62e9932f12ba849df273d4f4a86468280786ff0e","sha256":"dffa3fef3e061e6405a1dca01559cf3694cf4ec2eb31d82e63f871e80d89ddcd","sha512":"b75c6554f31b509c8aba7e3757a12f9a347c283dabdca6df1cb8b844a08685478f4cd310490db55f690b01649ce8cde96b8b33342a08be6c28b12e8d805e4620","ssdeep":"768:ZXvQc1/haSkdThPJJTiF2am87PhkYxNDu698aZ:ZXbD8hPJJWPPhkYxTJ","tlshash":"d4d2e0829c3feae21cab492407e1bdaa5a1d524b05df987b428d75bcf84c3822b1104a","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:40.994887Z","times_seen":19,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Wallacy.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.212Z","timestamp":1782329721212,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Wallacy.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JY2ehdOhjIfIPhnusTdsxAQfVrk8S%2FuKvuimh1vZlPp4688KsScJO5SZLM3tjl638Ta19YhnIn6ebrTa07eESYMzNkECgGpYDxLXKRX1o0NSlFeOfqm%2FDxd8qgsq1pOT964o%2Fw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3009-19e8af973e6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12297\r\ncf-ray: a10e2cd59c0d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12297,"size_decoded":13280,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"0e311733b57816a9a009abde05eba674","sha1":"e2c98071fa7b835b77d915b8956280ab12663594","sha256":"a12218e1d9b2469b023cd603ab2d52e0e646dae20eddcd46d0b6504be6bae1f7","sha512":"98de551ed312e17ca4b4bc2b9675f992dfb1d2733f56349487c95f856fd7a0ae5323bef810a985a6dbe63e15471124a2ddfcda715401882e50b3f739c86e6693","ssdeep":"192:KZVlrriwghuLZxx8fkY5ODPJg3vF/jXYJVjGIu90ObCarzT0dmp1:YXd9xevUxg5bapxqC8H0M","tlshash":"a242b0a6fc455f22eb987c77ce15c8b21c0b683a2a46de78f5c1536c58b4b014f29ac3","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-08-04T05:59:25.991902Z","times_seen":36,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/The_Graph.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.944Z","timestamp":1782329721944,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/The_Graph.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jYcw66EHZgHEkGjEyX9Lq6VrF7ajbxgymur5OCMTZAJC%2BlaxcYBc0KOT5%2FqO%2BaKLUGhOAoQdiJgtwTQ8N%2FCYOiUhA25L5JwC8E9U8X4XgKn69OkFSX9ztsQX3pRkoA6pYP7Pkg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"26e9-19e8af972ee\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9961\r\ncf-ray: a10e2cda2e26723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9961,"size_decoded":10945,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"7910fbcd27508eb13a4e54b63208c8dd","sha1":"cc54f536fede23dbc4e968f1a2afcb8838edf860","sha256":"93dacc6a63e4f46f0db759f5a607c9b32b6280ed046d84ec884be42c801f0d22","sha512":"dbaea59794a1c713b8a74df9f64d14540960954cc1d77808622bbf0a754b58be475353d0d6f3f324690f019f23ccb4017f3d56ff24f02fddc699f2b008dac659","ssdeep":"192:tmI6cHaQ8GQOf4iBXlIqpHFcckLw7HuQjfio/Yf1K49SP:19H8GKYXWqpycNTuQbi5f1b6","tlshash":"e322a0e61c6cfb42e1d195d91adc769bb013e013d3f539965230cba8434792f0ae9056","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:41.139103Z","times_seen":17,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/UBET.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.946Z","timestamp":1782329721946,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/UBET.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c%2BVZkM%2F6HaW5wHqY6ACK%2BtIPsO0i90pja7PIRInf8JtEo7UIaYM7tGTDNs6%2BaTRoZKlQ5758dmpbjaxhaworX8mxou26Yk22GP%2BXU27oJ62tH4vty19mbfE0GB9m%2BU4UL%2FpTqw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2583-19e8af972f6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9603\r\ncf-ray: a10e2cda2e2b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9603,"size_decoded":10593,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"a7955bd7e957bc86299bd8c53ab7b4d8","sha1":"a71055809360cb43423b3e4973a1196ec429e5d0","sha256":"102da9086681d4c1ba50390d62f72b762175400c129e41600d71de4ae55b856e","sha512":"e17756ac74401724453bd4274e993f926161d844b31bea4811dc71dca2255ce508d8d34b7e70b3dfac70cc61ae814f04614ee08f7882711e02e0275a865188df","ssdeep":"192:mq76gwr/8W2HViM5yFJszgarUj66BTaOZeceVumxkCBKduzizD0HS:V76gy2cM5yn4prsBuBp3SqS","tlshash":"d912ae66e8f237864960e1f19649f1c778ee40e9ea5a5f93b486b3dcc702fc0c95528c","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:41.25112Z","times_seen":17,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/De_Fi.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.046Z","timestamp":1782329722046,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/De_Fi.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CgKahSTti97URmJfT1nbmmQQYnpSTlSiqezLew%2BGWDSA9%2FysT7g1rydwJwkhwUcuOnDs4MjS86lsnb3P4O7%2Fg6murtdzzQnNwptj15a9qeqVnoS6Adrl6EVRZvnTiGdh7K8HTA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"173b-19e8af9721e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5947\r\ncf-ray: a10e2cdace80723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5947,"size_decoded":6929,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"2f5c2f23e63dcd0525ca03e521c7be64","sha1":"ef409dca03ca73dddc813ed4eeb57b498c30ddfe","sha256":"aaac48440e4df14282656dd1f360d9349bfbb825e69213483d7813f95127a3aa","sha512":"13efc55ac4febb89dcf598302bc8955353016961ca978d20d2d93564beb8485b2daba32c36d50a4513dd3a7d99347c166e37fe5d2e644645ae1929709da6229a","ssdeep":"96:KcHc4fwP1YAXf/8k2UbvGC1aNY4RfrHTkH2ZWqBgrCK5ZgcBSLi2EA65yTuVNLM0:lHcpCAX3hbvGRYErHHZW4K5qcBYFEZse","tlshash":"e9c19e35dc137b76d8283cdc367667a0b711533c22027e32c5a6b10d86df20bb1429ab","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:40.705956Z","times_seen":17,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Zenox.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.138Z","timestamp":1782329722138,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Zenox.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7JX%2BIFhSYEGSm0dE9Wpb34RsN%2FJYMiDcJyNJNRDH8xcf5H18Q%2F6JM3ONU4jtamH4dCcAqsi1llWhCwJZ4ycRn7Ivdwrf3w7Vx8sv3GKuugKiUfOPlm93Ic68oVq2dfqySM6elg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"133c-19e8af9730a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4924\r\ncf-ray: a10e2cdb5edb723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4924,"size_decoded":5906,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"7742470c2f325569edff10306a5312f1","sha1":"53a0dd424574ca90b023c52ec4300f17fa30fc37","sha256":"77f2509023802daa68dd7fe44ee538fd99431d1f1e729cff22424e640ec0b1ec","sha512":"55e21a6861393a614ae160439e1246a3353fc0fd57f09dd861d334fe6a6cea9d758361275cb14c2c71ac37f05106c784afe87c709a4c7466f23dd25103cacbb3","ssdeep":"96:5BFlgFL999TDuuvTbP/8dl2jlPMO74A20ZJxVZpXHjPWAibUWMHLKVv1np1xSjqx:Mu4Tb22jlPQ0ZJHqA5zHLKVv2Xc","tlshash":"09a16d0b5ea734f7203f06725b8450014fa63651d3f3d6da3b63caae10e8916a23e3d0","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:40.782685Z","times_seen":17,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Dohrnii_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.683Z","timestamp":1782329720683,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Dohrnii_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3R1QQLrW3QZepV3gn%2BfSjntdl5raC%2BFPFE4gVzawvtLFoqa6I%2BJT9cfvlF5%2Fe%2FSOpMUOuYZQk%2BUqwzZY73dgt%2BqkW4ou6R%2F64hOZU9xsjtu0VkXGmVVw97MEqgsxM8iIaPSsww%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"6d35-19e8af9735e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 27957\r\ncf-ray: a10e2cd24a6c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27957,"size_decoded":28950,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"21baf5961d7e653ff04ba1e2d0c70a2f","sha1":"06331743801ca395d80794156c34d5a85d7bf717","sha256":"443a82c9abc0a8290fc18616951c9799ecdbac8b620b1b1d72c0e043721626cc","sha512":"58f411e47b2ee5f11b048ae95350118b320630d4f6cd579c1bde0e7060ff76203cc23ea92485c0a5f61f04a60f379c4e48bc7854562fbdfcd1e583dfd04be4f9","ssdeep":"768:d94jYuKpte3BWNzm6eNMtac71uaVYRrie11HA2:HcKze3yzDeNVc70aGnB","tlshash":"abc29e0e569c2156a43368f2a209d44cfb7ece9286e0e7b93ab5340c3d52d25d5a06f6","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:40.692522Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Reunit.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.955Z","timestamp":1782329720955,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Reunit.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yt4ZmGcVCXpQQKgnEnpssTvMFZxPMmEY6T%2Bnf7p27cFuux1lodPCDe1gDilz%2Fdjlz7b2NiryMzJvZGYkrPDwW28bkOfM6JVsR7tcOVsOklICSuneRUBZrlNTlt57L8c1hVaHtg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"4184-19e8af973b6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 16772\r\ncf-ray: a10e2cd3fb20723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16772,"size_decoded":17753,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"1083954641c3a1e1ce90398fca430fa0","sha1":"0f0dad756dba790d9061010202c17142da89633a","sha256":"4685bdd1f2e4e35e863de03cea7054516bb784a08b8984dbff14a44bf9fd11b5","sha512":"e87780f0f5e09a829f1dee8ab352b3c16d364e8f60538a076c084942ec2847db75984d850128e44f3b9b293b820d875ba3d88649eb54ff665182812b0a91c98b","ssdeep":"384:OJlvBCaOS7A0t/V3uQ9iLrZ/oToPQ9phpnvKnwzLY:mlvBCTS7A0t/V3p9ihs5p8wvY","tlshash":"f872d0a9b6253df4470e2c6ff2663c9d17a1e19b0429074bed93048cd51cbbbeb22a15","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:40.737376Z","times_seen":20,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/MOONSTAKE.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.030Z","timestamp":1782329721030,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/MOONSTAKE.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eM6S4fr7AThFPB85iSZcnsJ6%2FiRJ4vmcfKprMnkiowgsh5BiFv%2Fexy%2B631SGAbsj63JMdAe0u7WZpRAlh1vt1xR3bBKN%2Bt%2By63XbxKiVV8qaKm3hxdvcCzt%2B74ofZre19QgYdw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3aef-19e8af97396\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 15087\r\ncf-ray: a10e2cd47b6a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":15087,"size_decoded":16076,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"162361391bda7746d0f8f660d7bed068","sha1":"19fb3996c2ab377236f86c3aa8a50f32c10c028f","sha256":"8d06effc03bffb7ac0820b7978c4dc9ad56dcc7c4324571b265a8f5e8923f49f","sha512":"de49dd6dd9e020e7021c34d983daaa4dc445a4cd9e051a60d8bbf93338583e0f3a015cf95cce76e5d8970151dc829ef0ddaba538031318929f0a69ba985d6992","ssdeep":"384:A9R2g9yn3fCB2HG5YdK3RkdoZhumhAE7KwLS4e:AT2g0naPBkqJeEeV","tlshash":"3762e1bd151b4fc2c9240b484dfeb678ec5f9d292cbe9529af8250e50876722cc9cd62","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.656626Z","times_seen":20,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Bixos_com.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.730Z","timestamp":1782329721730,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Bixos_com.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=79B%2FpKmxHNrAbZ75SdUvYqCVXKiEW5BTS9KdDVhzjskhDj1dQUjJwO3vzEzG39%2F3qDsCNRakBPBQV4TEdtcpQvh%2FhCghEdWcIbkVZlu3TjCyrpSe6XDWNJbokp4MhaIuUp2CXQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"1052c-19e8af971fe\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 66860\r\ncf-ray: a10e2cd8dd60723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66860,"size_decoded":67844,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"7347e58fdd1c4cb74e595de979cc06f7","sha1":"24351b3b6df1f950006d19c2208a52b42d9d826d","sha256":"0a5ff2dc790618600ad5238b9a06e0805e5758fba67f9541e5fd578181e99465","sha512":"27591228880070fa679db81ab29c4e41e0046e682896cd48f9d957bf00a7073c8ade0cf35c95598ef4d24d2c958ed81cf4c8bb06b2792489e2e280cda622783b","ssdeep":"1536:xGDPNYGZnS7INtlu6h4J4a9mSa/PN70sdJ/CD4FO0kzJJC:xGhYoFtZh4JwSa/57CEFO0kzJs","tlshash":"d863026fa63ead4ac3d5dd4c4488226243cbac7549569fbc93bb7f132436e4ca600e17","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:41.173811Z","times_seen":18,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/TIME_Token_Finance.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.873Z","timestamp":1782329721873,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/TIME_Token_Finance.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ug8lpe26950aZhD77%2BkAmZtQK%2BCgS%2FLKyOcZiDhPi3nSJ%2B0o2pIeCSIsNIhhXh9ylfnmOJFd1NoGRrYyWOF3z5o4%2BUNxja3bIem3EJ2QxOwWv6Ln0thbtHU8aFEpTuERQ4hmWg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2f6a-19e8af972f2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12138\r\ncf-ray: a10e2cd9bdc8723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12138,"size_decoded":13125,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"5407e099482a081643d606d2c1ad6017","sha1":"c5ebbe77e736154e1430b401d0517518130c7262","sha256":"83b09de872c77a8bc5f4785014fdfd3627552784716385914dfd0808ac99fe06","sha512":"1e31b256f8869cbe16a35f67b73c30f9a8537f9349cdb254cb3a1008e39e9a455096413f5642b878087c0c1ee26a0c647fd1c9805d629fd0b9c9f41fa4a062b6","ssdeep":"192:rjAwziROXOeSdo+87cs1G3AgxbopzNd48vEcae4QyqEuP+RkP+6KyFfKFlPFe5DG:P7zsOXOeSssDxbopzH48vEcaVsEUuU43","tlshash":"a542bfe73949e340ba0b990ceba979946bf16ef93e73164d0b38239342e4491cfb4561","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:41.07977Z","times_seen":18,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/BasedApp.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.988Z","timestamp":1782329721988,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/BasedApp.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7%2BtALIrzm28DCG9SLQdETQSRdQP7BimbG97hC%2FdEjzTC8lIbuPSIO%2Fxj8CfczcXAHxQIuoZdWlTbROzTNns68mkQqmJnH9cBCIcbftX43HZA0IHPGGrKnwnHxu%2F0AG36CiRO6w%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"123b-19e8af971f6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4667\r\ncf-ray: a10e2cda6e57723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":4667,"size_decoded":5651,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"3281b59b066a04daa810145d21ac2f33","sha1":"a1058800178b73417545d80e202599a8a1fb1bde","sha256":"46242f503c6ac9578b73a399aa67bee0c3efd0a68dd52d66b28120dcb295bfe4","sha512":"8d2902955816c98d8331f53d3fb41c30adf8acbe228436fb0d4d8af90ea38d607a0f20c2675877a29291a2980adfdb5668711580ac7d2cc1d3c1dc8ea3376c13","ssdeep":"96:25CK0YGctkkqhOfiZzwHJpO385TvTfP4S2IyAe0P4V6:ARqh9ck812IyAlP4g","tlshash":"f3a11afe0e947da5805600b2d6e674f3c40721b94f6862a206a9cfc71b596edf94e0cd","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:40.906034Z","times_seen":17,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Qtum.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.253Z","timestamp":1782329722253,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Qtum.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y529NLw%2F9s%2F8HaZHMlYW%2FdKDkbavXlOxg4dzW354X%2FXcac79w3XeuKtcF5U%2B9WTAgvloazi%2BSrDzSs0HPutDkfnRsIaqJaAtgXvPmCnlWfR9P2j%2F7YfbQHIXHqIgRXZCLbdY1w%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"2850-19e8af971d6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10320\r\ncf-ray: a10e2cdc1f2f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":10320,"size_decoded":11311,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"82332fa185a1dbf80028da33a15cc076","sha1":"ace348cb56ae9519b38d182f27dc727926188678","sha256":"e3f28e3931854d75d355d55a0ee1e1da23dfbb007c431fa55ebb0e81c2daa905","sha512":"a6d2dabad515c75eafb0327c6044ac6100edeefc7424b2987af08a6d490ae6a42d59aa1a3ec8ac7586341d97acea49f59d4925275703a07b5e2319121b041537","ssdeep":"192:Q5atAb5q9LJlaUvVueo3gswN+qMqACvG2p2E+zsvQT4h:Q5aeoLJlXueoQ/pvGG+QvQU","tlshash":"ac22d051522f2d752e8da93576f8226080e77bce548d0cde27ccf32a99905f12b306c6","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-06-29T07:04:41.038958Z","times_seen":17,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@6.6.2/dist/ethers.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.150Z","timestamp":1782329720150,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/ethers@6.6.2/dist/ethers.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 144642\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 6.6.2\r\nx-jsd-version-type: version\r\netag: W/\"72858-pugjQv2jeWNWXsYJM9XK5WrVJZM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230168-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 171849\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SZkDWPAmua%2FRh61SrRTWw39kEl2HJTEk%2FHD21FLKGYJonMwtwdtUhisxRbA7vhBvFi1bt8aOsvu2R6B1vocAExDCaIT0u4RS6hVWSdGNsjrb9N5mg4SYGd2FYDL6iuTduPA%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a10e2cd068cb75ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":469080,"size_decoded":145756,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d9e7b9564bef8d9d20a8c875fdb065b0","sha1":"a6e82342fda37963565ec60933d5cae56ad52593","sha256":"155ef2ed5391f1d58aae4887f6ca5d40a1a1f3ac7c22a739b6a2027c6570a776","sha512":"136630af3a342561d1b2fdb73034f5bc3c8a6f4893ca252071910ee8c2325839262de661c556f10b83975ba37a2681bd2a7dd47269300dfb7ddda675897598af","ssdeep":"12288:cSHwpYX+NZ5PNVxXufEgPc41dLsbh9P7F2NzevTT:cSHpX+NZ5ZXufE00/8NzerT","tlshash":"99a43dd132e3a47187d618e128651902f238f952705d40dcf6ace9e23e7bd8995bbf38","first_seen":"2026-06-24T19:08:42.474819Z","last_seen":"2026-06-24T19:36:12.415586Z","times_seen":3,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":7,"send":0,"wait":15,"receive":7,"ssl":225},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Wirex_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.588Z","timestamp":1782329720588,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Wirex_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dtcrpAo%2Bby8YPfEAbzGaOZVmTgeVkAt2EYNTk7eHCwvqc0ziMfVyfPlhb2SWDvGdoT22djIm5y8w8luvO1akrX8rxDLJJ2VCQBLtpSALRErYpnIYDIkJqw8o6hAaaxVoLUEadg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"16fc-19e8af973e6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5884\r\ncf-ray: a10e2cd1aa4a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5884,"size_decoded":6862,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"ea908d951d030b83b5d63fa8cef58bf8","sha1":"308b526c83d7a612aa2f171c563c4aed220203d1","sha256":"09dc7333c342709ee125af48954eab38ad43f881e599b2b19390e595a7e57c6b","sha512":"51f5dc21b65713bd934203287b247bff027d24f5222b112ae5db7f62bb2fb59fe03128005d771fe4806e24c7c3913f3f409093796c3d610d51f2a0c33af052d9","ssdeep":"96:wmm0L36SNnH0oOtNO4vyIQJLWzZhGwNYrrNL5/9JrTOehta:nRUoOtLWBMZowNerNLJraeK","tlshash":"1dc15bb11a71dea2fda7d332498b9f4307cbe8782ac90411dd425cbf0139e08e659760","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:41.044322Z","times_seen":20,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Okse_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.828Z","timestamp":1782329720828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Okse_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BmiBFx5rW9xz6FwyzTsWX7v57q%2Bkqqqi5URmUDw%2F1rZzUkfKOjddmwu7WQjd3Su02ocA8LahZ6WmZLp9ElHXH0c2RkWBLPH%2FhQ%2BzvySd%2FdpDbJ6HrdSOeHtKFZ0sXeW2ZGsjVw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"252b-19e8af973a2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9515\r\ncf-ray: a10e2cd32ace723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9515,"size_decoded":10503,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"385422914602775a748e36eed313ce1d","sha1":"706a6314ebe1d62739e5b6062ed518f85c170be1","sha256":"89974e92f441a0318b4f67aeec01320bb24f0cdf00ac35624bb96737d8bf266e","sha512":"744faa0527cdce27a874e09264e19d0cb734b3dd094921514498775ee00a2ca03e23b4cad6b1c37246862673e83d7489133c324971f43c3eb9fde20152ce4b02","ssdeep":"192:n0uJesimy708ltNCVAu6OP2/bjKWDKIFCnQCBbGaypWQq6t4rIhSFQ:n0uJejg8lT0TTP2/bjKWFFCnQ0GS6QIP","tlshash":"26129d3428f8d7b5521a975755dde91cce232706e0ec6ac60e355bb03580be8f92cc67","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:40.668987Z","times_seen":20,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Buffer_Finance.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.467Z","timestamp":1782329721467,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Buffer_Finance.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oLQGM0wcGZ7oImPLyARqiBXhSf0uN7I10hfeo8gPEYwjt9EmUMF1vclR4Kk95fPjAHOqu0PS0RvVIZJB2mXYo6Mf7pgxtbYc9feSYEBUTpolmFytD1fP8Df5SubQQZxvdgJW0g%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"33f7-19e8af97202\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13303\r\ncf-ray: a10e2cd72cdd723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13303,"size_decoded":14280,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"0d6ad301b715be2fb23101374b2f38d2","sha1":"82c70e755f6157e0a070b5b094f1e864b39876c8","sha256":"1a4791d14030620557e3072fb10b78c5ea4ecf6e3356f1b0f88a90381487bc35","sha512":"f2ee7918373cd4dad9581e625ec1d82e624d0ec52910a8ab05fc0ac4ca0427e4a9ba75d06afdbc6480dad89d6740475aba2e58271771dca2f6b87b122edfd5ff","ssdeep":"384:FRURlJqH0DHZkMVTHFZXPjwSCwOu7+6ov9XU0Ge:FRURlsHy5HVBR0SCwD+6oBhT","tlshash":"d452cff22075112212a72b3221d02cfe4510f6befd43e51867e9f877b4a8b7a0a7561a","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:41.071883Z","times_seen":19,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Collecto.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.808Z","timestamp":1782329721808,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Collecto.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1fQBOcDv%2BWBg%2FuN7kyHE4nOP2H%2FnR%2FP5Wl8ZxvZi%2FpJaeg52xij5LAJJbEQC7h%2FUXKtXOHnYF%2BkgPIA90NMafIzDiCEX%2F8wkoUrB9thMozFQ7tP%2F7YnEDn3D0sRFJZO%2FAqvowg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"192a-19e8af97212\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6442\r\ncf-ray: a10e2cd95d96723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":6442,"size_decoded":7438,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"18d817aa3843b3a79ff0ee1a4775b33c","sha1":"2aad7ef51df33dc6277f10085cc070e19f4fc8b7","sha256":"dc1e74a9910ac51f365c62f68a5462ca2ae075e79288c9357c27cbd7c6c1c668","sha512":"7dc5e2287d3afef1bb807acd68e14b7e685fd09798a6ca79789d12d453c0256811777249ec03d31941e2ea7400e2baebbb490b795684c97512c53e8c478925ac","ssdeep":"192:IzvXzvKAqEnvFAU/Rq24Nei5Au8Trt9cXPf1oL+:IDzih1U5qFNLTGfwloq","tlshash":"d5d18e8d13e57aaec5f45231241111d6a9c138f8199d9cde202fa9f223c94a6a7c78da","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:40.728889Z","times_seen":18,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Kanvas.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.844Z","timestamp":1782329721844,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Kanvas.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FzS9Nde%2B2xXH5vkawXjNl7U1qAb8iQICvzq%2B9oq71lftxIbKICXYCp3Jd4rYm93YK9qNVGrByD%2FfuLMRKQmHdZCgx1K%2B2cW0RsTqMybUKnLrhHUcKdbGFuigzd3mk6zWKJxDBg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"fb0-19e8af97262\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4016\r\ncf-ray: a10e2cd98db1723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4016,"size_decoded":5001,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"7f6e81a7ab4d28bf2cffeb42427a2d14","sha1":"c62cd49a5a2456d0895658e367f2d3194151779c","sha256":"6327c173daaa7ac91cf04b7fb9ced9705a038b7a1c0778c5c1a1afa21b2ce2e1","sha512":"a508e128ef0793ca981d607d7682da7377e7a591201fcbd816d61e5abb2c565d3a9738ba035bc1b98a23c7681436dcb9f3fbed1a961c9b4b5b3e18cd17148090","ssdeep":"","tlshash":"9281e8e4f5805a10e75ca3f136136f6ce483a83e6754bb47c66eace08644a78389b8c4","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:41.135894Z","times_seen":18,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/CoW_Swap.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.043Z","timestamp":1782329722043,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/CoW_Swap.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vNbVtF%2FF%2B0dRMEFK6fzo0DlLvMSqE87wyp89Q4lgS15bZ%2FqzEs3z3vMN0P%2FoA3aPOKKcl685WRUO8iAUqYbbgQftigrQU8KgOtXVzFJjTSFZ5vVbKubFUt77PPP10IFhcaUClQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2e3c-19e8af97216\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11836\r\ncf-ray: a10e2cdace7e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":11836,"size_decoded":12821,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"e78d14026f098a25a78a588366ae1aed","sha1":"d956421c1f2ca5f4505d67b8f26d6f755fb456db","sha256":"deca6c704583a98cbb13d24671bc19c22020cfc12e3b2fe0e5052493a6aedfdf","sha512":"d6557712ce5cf66903f2d82c643833694da11ca3181cbae7d00372d67f8d58759196ddd2b31fbb0210b4f6d7b7a62bb6b8f4c1fcc8feab61431bdc6ff01c75f5","ssdeep":"192:GjOuCxAtva6U8w6x5xmrCtvkER8LGETY0bNte/dBZoX8pOKHy8I+D+MkHUEFx4ZE:KfCxAMB6vSUM+CciXWdBVHu+VkHUkx4C","tlshash":"8432b0e38b4f34558fcb905727328abd3bead1d7d8289301d2a51e5d557cd33262188b","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:41.148807Z","times_seen":17,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Cadabra.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.179Z","timestamp":1782329722179,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Cadabra.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2t5pSKuySGHnKDtH0krnNgPZd9sxoTDqRDccMeXv4oWXf%2BEFx7xuDGD%2FJ%2FGevGVbXx70o9%2BnKF32DNoLO8Ku33lRI4FiAlH3%2BtQX5k6QBX09e9EljdOybu4qMA7egg9WtOahzA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"24e1-19e8af97206\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9441\r\ncf-ray: a10e2cdb9efd723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":9441,"size_decoded":10427,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"6cb83d21146aca7d5c86a682953c8bf9","sha1":"5d0f2e4d2f09f74a4d017a471f5599985f108b57","sha256":"9d9e3b53e7e0ee8dd33573a7eede607d4ac818fde0c430cc52e21c392ac99b51","sha512":"0930d1c2553fb241d4edf60c64a4341013b0a20dcf73ebdaa4c31070283e6966760ffeeef4762d7a5446c5a1a51d314656ceb2531d769477615d9903224faef3","ssdeep":"192:mE1YpmqKs/BmF29/xIi0FKQ870AzIEbfoNnpNQD+OviNOv5nyIFmH:mE1amf29/x30KG3EbfoN0QNQDe","tlshash":"a312a07148778c0ee37b8dc0ed685893fbb055ee897980c5c5b52f27f02966aa4e0343","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:41.093119Z","times_seen":17,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:13.775Z","timestamp":1782329713775,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 24 Jun 2026 19:35:13 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-uNl7hQRPmUkEsg2fALb82b' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self' https://hagen.challenges.cloudflare.com https://brunhild.challenges.cloudflare.com; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; trusted-types gIqNx7 default; require-trusted-types-for 'script'; sandbox allow-same-origin allow-scripts allow-popups allow-forms\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nreferrer-policy: same-origin\r\ndocument-policy: js-profiling\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a10e2ca71af2c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: bot2p3xs;dur=261942, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":261942,"size_decoded":101503,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"f393a3a2f2cb921cffe3e6cb33d7ed0e","sha1":"5efde669147c2303ffc8d0548c371244d6f69be1","sha256":"465b24d9f14c33c9d6455e40ff83f2c60a238ccce0ccc69035b38ba315a99c1d","sha512":"3d415d761e1108acb17a97e046ca21bc7c836c92d2fae08a0a0575c0d25265243659dfb743d447851405864fee34b6e900923878bfb3bf9339d7a3b6c7a0185b","ssdeep":"3072:7WvwcP5AXpeT37+S0eWejhHuLaTF5nsc5WqrpZ3iMLlg335CGb:yhPqXpY3qeWWdiwM35CG","tlshash":"ba44eac475c2767a575ef1b4002f379aa1ba1c84d099cd18d222d4f8f8b2b5a953bcbc","first_seen":"2026-06-24T19:36:12.420389Z","last_seen":"2026-06-24T19:36:12.420389Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Tidus_Wallet_.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.997Z","timestamp":1782329720997,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Tidus_Wallet_.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ylsyXhdg%2BKY2NIA%2BZSkGWNrJ4Y1ilaIh2GK8JDFyvRTlxuGd%2BluiVez8BYDru7aVSeKD2JBbs8raJ4Eh0nwQyFvqcaV4%2BgOOdP4Yf1QZ9AAH9de7j5ZWLns3hS5njtLv%2F4jYAg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3964-19e8af973d2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 14692\r\ncf-ray: a10e2cd43b49723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14692,"size_decoded":15679,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"9f441aa11534e60c4f37bbae89b074a1","sha1":"804ac80f384f51ca52c95df004bc2076438efc0d","sha256":"879c3c6b260bfe92e960cf942bb6aab3358ac0823d5771f369c019500df640cf","sha512":"2257c164dfeac79f69ae533792b82955c29c4aff48414d33ba536ff7205ae0633f53ff301108ed64ec93b9ffc5966e0726fec2abba72a4bbd1b0da15c54d60a9","ssdeep":"384:7bFkZ5EfKNhoFtMCuR3L6yuN2RUi/CWmBAyVryYHD:7aZ2fuhoYFLDRUivmBAyV/HD","tlshash":"3362d09c0056aefe739c4551b38a46da0bd058bd358df312745806bc4a281edf7ccec2","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-08-04T05:59:26.032176Z","times_seen":37,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/CoinWallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.014Z","timestamp":1782329721014,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/CoinWallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QquMKsHMG%2B5YUgpyGXFWF0%2FaTPg7wByDD0YTx9e1d3gzMmo6x4S7Afkp658F7L2pY7S3HEH4eNXqlxmvhLVBC1bKfYJk%2BlxXLYxmQrUt8to8H6zrqCPkK3InF0CaH61Hw5nBUg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"5caa-19e8af97356\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 881\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 23722\r\ncf-ray: a10e2cd45b56723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23722,"size_decoded":24704,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"9e215ce8f6c121463f886ae51368325d","sha1":"93fc97e7870bc6b7b702c945ba0bf5b969baa807","sha256":"06058e0b43e2a866089f3577c0db089eee797c79c01578b2be3fca93f3a7f524","sha512":"8a66802a55dbf663002b491ef2507f14fc451ff0625c9980abe8ecf0ee5a8252c43d7161ec2fc55c6a1c5628fa43856f6ff539b6379872d831342dc311212166","ssdeep":"384:q7+jEczanMc4sV22nSMTp15dWkJ0Z+/NrYEc9jLSqFGbqSqKPc55iQnW/IQi+R:AwW4X2nSMT9nk+/Nk9jvF0xqKEfdZQie","tlshash":"0db2e137dd420cd4a7a7ff2f8110a0d95b30214e2b63a55bb8086a3c466a78f4f8562f","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.920069Z","times_seen":20,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Starheroes.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.784Z","timestamp":1782329721784,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Starheroes.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J6dx712h38Dvti8nzOX%2Fg0FLGpgLCLwJvlmr20gNqfJ8aaAA2BSdYa3BaIDvuZzjStRs3e0GrrTdsjY4CPlntiC7IhRRnlAStwgBvGDpe6zcVo8KLU2ZcszblCyxAD7XCYC7Sw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"128ed-19e8af972e2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 76013\r\ncf-ray: a10e2cd92d81723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76013,"size_decoded":76993,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"666db98d4684e2909b315f0716b07d4d","sha1":"91a7abbffc83e5cfaffb243d20f32285a6dd2028","sha256":"b9fd1d7cdce587545457a813e371ab07f8c65324a869a570ad01352effcdbcac","sha512":"7882864818e010eb714acbcaaf7d5db5b908f277bdbd9547fec6a4b11eafbc30254fcbb8bb44d1f501330b00458e81225971d240266c24c53f1cd6e112045fa2","ssdeep":"1536:VKc1qaCHp5UxcLIlZqfwZ/JwSePipqYh97Jenn4SEpjfRL1CXVJbEm:Ig2qcoqfwJJH8HY/8epjRxCXHbEm","tlshash":"217312f26639b684a0213e767153e236da2dde322a774af804c3a0020ed74c64d1ecde","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:40.695574Z","times_seen":18,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/singularLab.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.800Z","timestamp":1782329721800,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/singularLab.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FCkQbsgL%2BNmUuJnHayIBKCAAPtZoCoR4fbeTpbjTugITHBw8cKC6mVlsOgcMwf9LFpekqpb2KtZIPNUNLclbehpP9N1vJ6ufBn4Rm%2F0lBwg7TE50EOxoKn1olqvZl8DLcUSNQg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"9a73-19e8af972d2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 39539\r\ncf-ray: a10e2cd94d8f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39539,"size_decoded":40520,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"f6510d0eeb58065b97eeb5bff2b24a8d","sha1":"966fb3db8ffa000124f5afd735a565ea587a9297","sha256":"59156a7e1191999df203904ab17d578e7173b524bdb7d5ed15901152f83b79de","sha512":"ace916933a94a0f4d3180443ee2ae1e5bf4a3cc62c10a65c2e10146898960930d0299c4c95c24435eb4bf1e8eb5741422180d6522aef30521511a559ef1a8d4b","ssdeep":"768:MUlgOvyKezxd0RNnhED+qbRk+IUPiPwrpfmILQyhhX7ueqYDCc4:M66/aNhED7RRpEwVmILQOXCeVDF4","tlshash":"3503e0427692ecccc4c70e781c18015dd5b519c2ee849d1ee62bd6ba6352dc63d95bc3","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:40.864318Z","times_seen":18,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/The_Masked_Singer_Experience.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.913Z","timestamp":1782329721913,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/The_Masked_Singer_Experience.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0MtTcU2TrlQybG1gJrcbyDE7hOsjOozTEFn2IImLUwk1FDtqK3o6NzKG2uEI8aDeCQ2Ad52jJKIH68GKFe8NOhHYxu4Oh8yePFBOggNCmKYb%2BtNpJCORftFMYEwEvCm0ytOmmw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"350d-19e8af972ee\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13581\r\ncf-ray: a10e2cd9fdec723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":13581,"size_decoded":14560,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"0bce716980e33094d90d59969ee44111","sha1":"088daf6f3f815d4b9455d12323802ea9d5deb729","sha256":"c5e38be1ec8b6259616a565cec86069b2c3e4def8daad2ec8efd9a7becc6ac95","sha512":"41af0cdcc6c95ef5233510fe7715c0da1e7ee6629326bdb876d2ec02711083d8871cc44818e30732be272377269d54e18aee70c6ccaa4194a202eaa21eb35b63","ssdeep":"384:B6y08HAQcnZvKyShIzqE2gz503qniFk64f:B6y7HzcZvrShIzdz10e164f","tlshash":"5a52ae5929cd9714c158f7f090ee7696cb93f33aea731d8db076c942e986e28000d5ea","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:40.5525Z","times_seen":17,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Unstoppable_Domains_Dapp.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.098Z","timestamp":1782329722098,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Unstoppable_Domains_Dapp.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z7QOP%2B00wloVKjLf%2FKe0MsTQA0YU3FQBGnOubVtLMM%2BUVefMIhHRyjTZW74wBLlQ9uUXZYgFfhONZrk0sRwiUqFvKR2MtkGKccvdWPQKxnvP339PJi85JkzUiFXg2LjqMMRcUw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1bbb-19e8af972fa\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 7099\r\ncf-ray: a10e2cdb1eac723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7099,"size_decoded":8081,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"abfb97e4e8983c00fcd8e98656d7a3b2","sha1":"89f5c1679d121a7dc5740abedd3cccd4f3eaac9f","sha256":"5824ca5ca1447dc8a425a98e2f8286bb8e6a525b6974fe465eb2f262c61c6d96","sha512":"0570ddbc3df86af8f5fedb070093034216969e290c8e2dbacf20c1029c686f63c41d1590af1f83d3f6026d39ebfc39b76b921482746cabaeacafe79d3ca1e947","ssdeep":"192:IpPFiXTo3QnMc3zrN4sR0SLP3thZcKuAywC/5oB0pQ:IL48kM8zZuSbd3luA5aC0+","tlshash":"25e14bfe05f4d1e60ae10f511ce4a60f7dcf18ba27ea5622f38b54ad78b711c9039064","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:40.696099Z","times_seen":17,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Sui.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.324Z","timestamp":1782329722324,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Sui.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1sIFIEn4YfxIdhkkuszPfsg8L5hCDaj8uuO0nLUcwmdapBus%2FihgP4xuOEYL2XwQoYLW%2Bpe5JzDUsZpmk4Ss3BHp4jLJUIhEJl62UYfpyOwDz5RBXU7XxW2SXDG9gZoAImNYhw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"69e-19e8af971da\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 1694\r\ncf-ray: a10e2cdc8f66723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1694,"size_decoded":2673,"mime_type":"image/png","magic":"PNG image data, 121 x 120, 8-bit colormap, non-interlaced","md5":"d3ca0c1d1eb1e75b7d4e706bae5c1465","sha1":"dcac668270551601c7521f8a04bfdb1e86d442a7","sha256":"80623a02ecb455e81c7fc78258ef915ef1d3ebcf2de1b28eaa4fc6078ee5d0b3","sha512":"211a3d2792a1c03304fc3e9b924d62a97f979f20a5255e415adc112a16a40cc3367afa1d23897e6d746d0724fe7ade19b884e308232febebf06c0b608b9442d9","ssdeep":"","tlshash":"7b3118f2225a40f0a5a49e272fb9236028255f918c70120ea3a3423265ee63c4072a61","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-08-04T05:59:26.017779Z","times_seen":34,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Youba.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.169Z","timestamp":1782329721169,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Youba.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GJH7JJa0VW%2FQHKedmLy8W49DtQQhUqmQrXb%2B8YUE1KiyC0rEK5LdLwq1kF%2FbQ9GZPFwmtqlBJZ3Tr0ajswX8lQsUC%2FlRQw4kRsVcy9k%2FQG%2FbVfNw3QS3ahhpTNywDped0mvZdw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"12a0-19e8af973ea\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4768\r\ncf-ray: a10e2cd54be1723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4768,"size_decoded":5756,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"8abd118d56167155bc7ea1226fc706d4","sha1":"47c52c7a0a54737f56725cd6c5cb04d51f58652c","sha256":"9962e7ee9f270a62703aecad0fff32ce6ffab34303098683fb4ae3ec5573e9cf","sha512":"2fbee25268477a4c888dd9d49e70a2f24d2daff714f8fcfebf900d7a2688157ca862d7e6f36d8088de98b667b6c1a9eff8cdc51f85f42a2f759ce4e66a4b7fb2","ssdeep":"96:eIfMpgT79PCkToh7TsPpuvvvOlYNUEkyayC60Fef04/Nwkxv9:jnP4kEho8mYm5n760FAPCkV9","tlshash":"2aa17db09b637e6dd23fbc3ceab686e2017919890e46c71f15366c4926398c19c19913","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:41.017943Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Sinum.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.219Z","timestamp":1782329721219,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Sinum.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VqUfkO32idjpBgBk85eh2QSF4u9FJE01EYLAss9SYqTcAu83mNRv0h1%2BXhzsR27Po1pRyzHxV0rLoeqyl4JoGxnGYibqwgrFmyQQovyWv1PNJ%2BVyqJoQMKxRnytA4alOOqoaCg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2ab2-19e8af973c2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10930\r\ncf-ray: a10e2cd59c12723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":10930,"size_decoded":11911,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"8e639067c6ceca1196d417ba271d9b38","sha1":"1df4e7b0e539b1cf13e7a64d86abffaba9f485ba","sha256":"1f5b3b403352d20f5660deca497e2d4cac2c34e45cb27251b76a26d0565479cd","sha512":"90908457b7cc9dbc472d4f5284081890663490f7faa7be86bfc416ce793678a154e5370abda255894e51bd50cc48a018460fdc8a6452c31b6baccfb3f530b32c","ssdeep":"192:gSdlKfpfjhesijIK0l42sjLDoUDWa69+X3MTZJWucgC:jdlCEs35sjHiTT3cgC","tlshash":"8232c0090c1c3f76ffa10d47a85b67fae8b1c7a5a68d7a6fa0c07230f0674b90699744","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:41.084953Z","times_seen":19,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Tokoin.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.239Z","timestamp":1782329721239,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Tokoin.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zuCerkT5PcVo%2FC%2BEhTJArMtvMfbcKS1j5jLg%2FCxJ4ZC4lbc5FbhuwMd5UUPj1GOt019kHbykWGwlzsCXtP0tFqKLiXfuNMuzOuUjoOHnIcWTll%2Few8KH%2Fgqt%2B48DdkNSzX7sMw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"13c2-19e8af972f2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5058\r\ncf-ray: a10e2cd5cc24723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5058,"size_decoded":6046,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"d29f10999e01d06a9be7f3a35128d515","sha1":"b42749a97147ce02fd71187341762c76740bc367","sha256":"841c2bfe8f4e287ad04f0f6f6f9012b5d2f012b011b6ad8d7d7361eef105071d","sha512":"aace56cfff9e7cb67c880785911151fb1d71bc82b736a270572dd3b23a7b9873d41a436cfdfb095228bd4137659c0abc98218861ad4807e5b8d33b34a26b015a","ssdeep":"96:nAQNdjej+PHZWxbK2WzEhzPyc0++bp1hpFRvMWry/g3WcjEok9:lej+f8yezPzP+9TRvZyqEn","tlshash":"b8a10a96747f818c5db877bb8f72f23a31766d04b60746eec0dbd0eaa6d5114204ca90","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:40.540461Z","times_seen":19,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Fusion_Web3_Domains.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.352Z","timestamp":1782329721352,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Fusion_Web3_Domains.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=80uhL3r8crk5eqL1JZH%2BN3%2BagziWMi1XigMRB46JmeTziKPD0KMyQkr8znLL0DGQzDwuNYpwTLhC4tfW1LXRFaDHBJ%2FVzBeAPyVdP7CSOg0YmST3BN5JSIvA4LK0YfVkk6KpQA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2784-19e8af9724a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10116\r\ncf-ray: a10e2cd67c8a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":10116,"size_decoded":11099,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"85948d5f6285e1c346fd441384bb204f","sha1":"fafbb2e4a132455b3d6a031112a8346504c852ed","sha256":"1d7ba56750542c7db36462bdf817cb7ad60d7bbc3dba35477137b27f4b622e36","sha512":"5bfd820bf00148adeb46b50c05024e3ad5af0f7b3b2d7d8bbbd65a8f07330b3e38a6e8a72a0c20d684ee865f86eb1727b8cd41bcdd531739f050dc3a2f356b73","ssdeep":"192:eGy5cQzGp6O6/+Nir4EJghXM+jmlwJ1705aqEouHScOgi/sDOaNNE2PQxkjhC3XG:ecdm+sr44eTQBZuycRNNE2Wkj8dA","tlshash":"b222af4027434e203f349e5e6259a617b2992e92789cb96d7069735b2839dfec33bc84","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.5772Z","times_seen":19,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/TomoPool.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.758Z","timestamp":1782329721758,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/TomoPool.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FUcUy7wft07MlB5OAKyaYGUvSmCIfFHqb0noXpe20lYgtUpd%2F6zaB2IpROmca0b9RlgVV5cJjBddzuUm4LpjPgkKQeNeG4Pw3s2qJrlPOa31LAAVG0RRxnheyQDL3jkffAL4kA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"33f3-19e8af972f2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13299\r\ncf-ray: a10e2cd8fd7a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13299,"size_decoded":14278,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"7dae3b8e370bb5bebadbf4a764acb9c5","sha1":"e139b8c89eb903d0e336ea7c4dfe48a458fe7a3e","sha256":"4dd6a035469feaf64c36fa7d94930f9a85b18c530a0a0d598dee4203fe9583df","sha512":"6be625fa01594e346da9903efb2bf450ac0d36abe38c1f4ecd907bfd77e6a496e9d2dde7d87221d288fdf8e415ad5ef712b54d063cce3ab63565c82939e3ce67","ssdeep":"192:Up9aZwqCqO6pvF6CosoP5j+dHQAD4ja1NpP5H5/azlgjHZTARyKNuBrKww:BZTNxuZhj0D4EHNaz2vBs","tlshash":"bd52c0402447b859e7f94470919a817848393e29c895b3d3721bf67bcf316a0d936a0b","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:40.628486Z","times_seen":18,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Tetra_Lounge.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.158Z","timestamp":1782329722158,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Tetra_Lounge.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kz4%2FPCxvLluWckgzw7ybzX9Zf8VnUVqh1QaWrn53OwnY%2B4kkYKXw%2BhXtvNAJrr9EDXtMIwb4ivw0LEvdphLIFOBJw5gh%2FUMlpnjZWv7uXNc%2BWxC7ms8v7yjiiRIWVnS%2BRED0VA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2d9e-19e8af972ea\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11678\r\ncf-ray: a10e2cdb7ee9723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11678,"size_decoded":12667,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"3e5bb96ef446091c53fbbb8bb8bdcd4e","sha1":"f9d0b5b52b6efb395305e51ebffe0d3bd702c8f9","sha256":"6b112d61068d688a4bf26c32a8838c14dc1ab9e854b11d94e6a8a6d822944d94","sha512":"2b6e8a5f7d5646ba191dd2777efdb82ee73d52b38c0468e60272228cc5095e594a2563b9a78409114010b3cc8830e13428946bbfd044fed51ed0010ff7826d3e","ssdeep":"192:75oAqc7Ebo7vAOyUgTAcBmXHof76luekaznTnle8/NspqFWjsqkxYJFm7UhQpaLQ:OAqUEbo7vHyUi984z6l1kcJxHFWjsqkl","tlshash":"0132be361c7ee66a36868874d3b080e17fac8b0bd257d2c578209821fdc4528dd9e9b8","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:40.980373Z","times_seen":17,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Base.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.286Z","timestamp":1782329722286,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Base.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wdVFCjxaToMwxzA7f9%2B%2FQTVD482I2%2FVh0LW4Z5sPICBYhjjF145A5WPEWrBg0O0iPlp6o5%2B6AuLFot5edCZiFrWhDvL%2BfaX%2F%2FS9vP2P84VKC6Txi0sZtx8HwHjHotH0rchWK%2BQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"ba5-19e8af971be\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2981\r\ncf-ray: a10e2cdc4f4b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2981,"size_decoded":3972,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"b6588f0ebef9e51a005eac6eca9f2ba6","sha1":"fe4452853f0ba67c588fced9c1bd71bc71f2f634","sha256":"39cc19e3d6b0d1173c8e67704b8f47b69a048ee200b6077d3eafb5e6eb816007","sha512":"b9294577c922625ebf8b6eb698b2d4a9f8def49a0218d4214f18f43e3260712cd32c6c84a56f7c8e6ed238caa877c1d5f6a5bb985c73ebd8bf9a2bd1ba20a3cb","ssdeep":"","tlshash":"8c516d047ad5bd214b893e40d920c33f3f8a55048d3b72943df766f9e6463ac6a40166","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-08-04T05:59:25.976754Z","times_seen":34,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Aktionariat.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.830Z","timestamp":1782329720830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Aktionariat.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FKrmwNm0hhi5yR%2FUQTBHLs23erZNszxX79OYy9t71pFIE%2FjZhzs274Q35qVxnC9%2BczDdfYOUSZacsN1js7mFAzw7lGoQE4zSoF0uDP3BmTm6rXr1XreAkBPJToJYcS6aGQaDgA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"45f5-19e8af9732e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 17909\r\ncf-ray: a10e2cd32ad0723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17909,"size_decoded":18892,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"499ad9e923c52ca192d2ab201c69e66e","sha1":"530b240f57b9c2239f451c0ff37911b04c0f92fc","sha256":"d847a6842d59fbfea73ec8e823f43160c28323a0275f8c2af32c421b10118a80","sha512":"15269cfd98fd95eed93a8fc7ba76af2681b708946b32e60bf988d6854f3612778f7ea0305c286fabab7916ea3ce9e6a2f6c7aabe67c709b9f95b0fb852ac1fd7","ssdeep":"384:YYeEoEJgvbL7MXXWDSvx7hGh506WWQ7BM6pplcyIP:YY5oEeL7MXXoCx7hGhfm7BLpvcyC","tlshash":"df82bfc1380c168fe9af8cf5cee63fc0965f523bde46a6b0a4849485d845f0a74c9b9d","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:40.957786Z","times_seen":20,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Blocto.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.950Z","timestamp":1782329720950,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Blocto.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=glnO7X1LKoeIzfH5Y0NsCGQcX5R5ejnDpJ82fOQeWk9CMWJNxPmgHsKP23mkJdyNp57W%2BABM4EquvPLbAh06WZ1hTGwMRXf2BI9P68PlIo%2Bx6Pu0YkMNWk4s3FGHZbjDL5scSg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1637-19e8af97346\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5687\r\ncf-ray: a10e2cd3fb1c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5687,"size_decoded":6667,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"f1f20e91edab63dafb567e62faa78d38","sha1":"c197f2cdcbd3724814324c5877e1521e637beb41","sha256":"6aa7d3f2b3956796b37069df7779b320117dba52b56a13810d7b3480c00a5315","sha512":"ad9ca385d11531641bd077c0e58452e1010c2dc699d9052dd4cb9a55603eee8681218e8733bad7ba0955274b25ab2698bcdf960687ddb09fbd18e48a61c1193d","ssdeep":"96:TEScK8S8JSmoi0+CoL3jsnRc2J7SQecmnGDFKlinFlwOxePz2wbZydVqEiOo1MqC:YKe0N+CDxSQeQKM7GDy4ONrM9+Sc","tlshash":"b7c18e8dcbe5ad384ce1699c6235601f3760990b74572805b1eacb02cd53bbf97e342c","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:40.657218Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Roam.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.114Z","timestamp":1782329721114,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Roam.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EiKoFut43gFACjZgDSQTsYdEbI3FBGZOFPDoev7cg8bsg0vSH7YB3snBfiDXygMQfI4Dq47Y0qNjWeibv99%2BSzqsyir4JS%2B3I1%2Ft8FFgvtMdkzLQoAuMT%2FD%2BIcgxZVsf8Du8Ww%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"37a8-19e8af973b6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 14248\r\ncf-ray: a10e2cd4fbae723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":14248,"size_decoded":15235,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"b8045b51097d489693fe306812ce2c0d","sha1":"24dbf14caaa1e61f4a05caa8c2ba2f949b9a82e3","sha256":"f0c7fa6df2793a0a076a73de8989ad2b0bec89a6fd6cca718f7746cba7aa9dd5","sha512":"4a079f66a5e4269420f35b8e68fabfbf0d5312adece45518aa480ceb2852b8413d5ffeb86319ed4ebcbaa225ac291576d5af45edebf14afd571cc847d456141c","ssdeep":"384:6du73c4qNCBoUfqklW8Dc1VdFxqjvV72n6a4j3N:qNUfVHDc1VdeVo4x","tlshash":"c652bf7a82c301bcdfc4703fc117aed785ab80b9a1ed3e30b269125462f9dbd8083599","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:40.917556Z","times_seen":19,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Beamer_Bridge.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.329Z","timestamp":1782329721329,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Beamer_Bridge.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kVNij%2FdIZPjp7%2FFn3pFzofRUHcypMbn92iBFZRWYxkAlPzcB0vVqggEi0sjIqJrYUSI6ZU4DaLtwQ%2BLGvejkwaEKJHtN%2FvHZv4nbWCJ2CQFacV17%2B5DvAqfit%2BIlFugEWC%2BTGA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"160b-19e8af971fa\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5643\r\ncf-ray: a10e2cd64c76723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":5643,"size_decoded":6633,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"33c451ddb0ec527a2041fe4c4bce2ca5","sha1":"bc3166c771bac2635ddfceb79ae1ddf5d3eedc1f","sha256":"0a528ce4da9df951f6d123c8767c2135827ed49ad94fd9a6f3cfd45c63197e07","sha512":"4ea860b5743ffe34a241b054b49284a4636c080aba8135f848c1740ebca453368056b73216bdddcad6eeef9c43c5e7cd9c6bd4d4b5304812ec2f7f73957f7157","ssdeep":"96:aq2YO9G2u7olZfWafYqv012uwafb8QrD/xIVZ0C+82baeL5kAaE2:aq2xGn6uafbv0TTBtk9+8+xGy2","tlshash":"a9c12a2ab27ff9305adad20335c55d2b30eb4a95cfc3d851af3968a253775086a81e09","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:41.15579Z","times_seen":19,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Nalikes_Studio.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.693Z","timestamp":1782329721693,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Nalikes_Studio.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xwnWIhbuWo0wMB21T9M4MHR6qUljcpID9UHLL8CO8C4TgjQbQH9frr%2Fa7TFLa2S8t7ZyFRhRN0K7LP8QF%2B5wYdz90cswKE9oaYvtfAbmcmImNnr0bhDIU%2F9YMVTXKldDXUumVA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"317b-19e8af97286\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12667\r\ncf-ray: a10e2cd89d4d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":12667,"size_decoded":13650,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"ef0fd97bdb1eeeadf0e9f7c7cb532c6b","sha1":"49fb809a1ae7f429b5cbeea52843b582c0a27774","sha256":"6174ffac29ac95e6f8686135b7747324e119160bd678e8843bb3431a44f6d0ce","sha512":"ac43a14ace3f93a33831443b8a42c6afcc0849f5af88c09b2f020d9512a099aa99b396a9d12da2ca39365f8421993ef01c0acbb916b39180b31a536e05de4be9","ssdeep":"384:DuSXpJh8x4Wk0nh2F2Pec73x7ip/o/2+qscWj:yMpJhM4Ah2FSec7xN/27sb","tlshash":"bc42cfea8dd0c03fc9978efccd0d3658292f9ebef3927d1b0a738e98a1013655220084","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:40.689455Z","times_seen":18,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/HECO.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.295Z","timestamp":1782329722295,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/HECO.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tyYu1tVIW2LSge7Y4krfm3j9Twbz5CJscURg4qY8LgSA2oInvo8lP0jIqLCvPzw18mSphxdoQdEI0bJ3P8P2AWgfWYn46ACGQGkG%2Fbyo42PviQhMmvMDEo6n6chvFuClFRygdQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"7f0-19e8af971ce\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2032\r\ncf-ray: a10e2cdc5f4f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2032,"size_decoded":3009,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"3dd4ce4c1e096ec89da60a25ccbf773d","sha1":"4e78d58343ba04ba9ce41b25224652c7abe2c892","sha256":"3961e82d319c95351db39104d43d6a539c747775e3f86beaf091a5a18c01ce51","sha512":"65410d217015437446119bb940c97cceda60def4b6b12ef72821d6790acd1df474a0cec62774a8c999754e446ed90e26ff5265daae11e9bb7ad73d3ce6a92351","ssdeep":"","tlshash":"8b41187372085bb8858d12bba8b9c3803013076a4aa9540788d471d9427e7cb3f2cb95","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-06-29T07:04:40.981313Z","times_seen":17,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Haven_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.893Z","timestamp":1782329720893,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Haven_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P0xpZ23prnBP8MuTwl5cwbz78K4iN%2FRNLfOjrUT%2BkNYq7vgYhc4uWX5hwfTjKnFrJxDFGGgJNY%2FkJ2bb%2BpPDziWB7BjQMR60mxfh8yOVMvvhzh0g%2Bn32EC5%2FhWi%2FS8hxdxLXvA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2b38-19e8af97372\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11064\r\ncf-ray: a10e2cd39aec723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":11064,"size_decoded":12055,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"6a51a24d1e03c6d700735b65f1b2a854","sha1":"7aa0b8e8e59ea0462a78249482f118bbaab717df","sha256":"a7e55cdf152d352b93f3dcc107a71f6a9d78e50c460e7ec4edb6eb07c9d9cd4e","sha512":"8a78f5e6c75898fbf777fcc0bec7ebe621dfdbbb76d3633d8f6f5ec36b5039b6a4fa129d053fa92f1103049204039059bb94a4802127816dc7670fc359978365","ssdeep":"192:e6KlJaZEzBXf+xiNeFqwfMc2bhvwCGQmUAxLYg54YfXjb2izDkvfmyAY75r7Xy0U:e6KXVBXVNRww2CUUAxLSYfX2ISVryzZ","tlshash":"c832af4d5b85f152c36dd823cd88173e7bfc223e4a8e0f5641a19a78e0176dc9d40da4","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:41.261888Z","times_seen":20,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Sequel_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.022Z","timestamp":1782329721022,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Sequel_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C2blvM8fsSaGJPfYSk8Xk9Xk3UKSumUkeXhpCgxD0lprGSau0d8rc%2FrC%2FIlPiqiBhmz0JBfJngyJF4qsvePzMPcoir0WRhYLoH1eMliP8TSO7B6ghKy0kqJ8hB5qk%2FSt1b1gpw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"8a4-19e8af973be\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2212\r\ncf-ray: a10e2cd46b64723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2212,"size_decoded":3193,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"4c3c61ac491140e4e020d6c091d57b70","sha1":"088997bf3de82f7c024ae82a3244316d030af85b","sha256":"8f82540bf68ef09fcbf096a1990cb76574d956d574be6f4ac7648c370515e29b","sha512":"f4ae8f794a505f4fc4fb94208e01aa301f2787100ffd09cfc9e13452c03ad10a248d25591c6bb5701c466ee3d435f34804617f0b19433ec97734442b92830d40","ssdeep":"","tlshash":"d44101e542d7c474ce40cdbcefb08edefe5afeea55843886e0551495e37021881eae86","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.747454Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/ChainStorage.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.752Z","timestamp":1782329721752,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/ChainStorage.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WPHZCgfVoBKGbeE4%2FWKPhsjX5nNbZs1nLLb39I62iulD4A02boaRoli6U887%2Fj6DEd4WiDHMS96LBlIxyTDfru1Y1geGO47PVRhvhBE7mfIEhhTO6A8eejHHXmHuHnMuSCBCMA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3ab5-19e8af9720e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 15029\r\ncf-ray: a10e2cd8fd75723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15029,"size_decoded":16010,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"234bb64a3bd26952dd02991fddbdb13e","sha1":"380d9a755edefeab2f79641bf1cfc523c09ca084","sha256":"305342ae85bef67ce8d07d6f18f6822fb71a334ae1de4cd30b5a4ef2406f86c1","sha512":"9b19a4c54de047d0e017bc2bb3093f8a43fa15193cdb5ea20739a51ceec8404928da90ac51b96e2f4cfe5d05c92160246fd2d1534077d24c1637474612c4d04a","ssdeep":"384:CeJZd7lU13y8yelNQCabGHUmbL3OH70XHIi30qAgIH:5JZYNy8HcbGHUdb0XHn30qn4","tlshash":"af62d007a73e280f7b580e142a14e7bd480e097c3193872d5ab6b051d27cd26799fbeb","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:41.245976Z","times_seen":18,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/zypher.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.926Z","timestamp":1782329721926,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/zypher.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YhpMpOmwZg2eo2%2B%2FMfHZ31%2B7%2BWFPzpgqCBo8vP1vq37ZHM2l8Us%2BJQaIqe6zUkESqV9kXb3PIeejHjn11Cg34FOCC35UMXwJWKzUW3oASHzPpZ8FAH8lPIgDLPW2ME0O679T9g%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"129c-19e8af97316\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4764\r\ncf-ray: a10e2cda0e0e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4764,"size_decoded":5750,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"3eb782f04c5560e5b90f94f233487d39","sha1":"112f25e3167bfa3403dc3d2f096bd61d6fcb8e1f","sha256":"805c08a1c1e756d4888bd5d7be4f78fe83085e7e9a246c4de2863c26560753a9","sha512":"19815827984ea5ac76b85bf73fd88f0f2ea196a90efae1efdd05ce55924f736896f5d580ba6d16aa911ca1bec591aa057e84d06bff09dae7ad714d9d9c10112c","ssdeep":"96:EgVCK9V+Buk0LD6Xom5OHmBDEXywQRaLHUeALjFqQghHm8f:Ev24uk0uoZHmpEXlQAL0ecQ7hxf","tlshash":"d5a14cc5b386516ccadf30b8cd12afee1c9829f5cc7ca6e994621096534bb6037b7208","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-08-04T05:59:25.925671Z","times_seen":34,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/ChainArQ.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.025Z","timestamp":1782329722025,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/ChainArQ.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1hki%2F0YmYE72HjGifHhg%2FM2E61WXm1kWuodqILFyTQE0AfkQBSMqrSFCcyG%2FUBEa8HWpTitu9yg1iqMAlbmNDAHdaL%2F3gT2E7MoXhADYodKHiB3n7VvrRTbTULGzU2uqCzsJhw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2db0-19e8af9720a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11696\r\ncf-ray: a10e2cdaae6c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":11696,"size_decoded":12681,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"220614887f61edc0965a48b69bb87a9f","sha1":"3444cf413816a4f377bf81fbaea7be3b879e42f0","sha256":"bd96ad5d671d628b746145a51f970c38e4bbbed325fe020f21ec50b41dd7c6ae","sha512":"cce40b174dabe46e5550df8380bff2b7b8d311cd5c851cb4796c6a31e40cd4703929da0aa893375f0bd220c0f223252b2d820a795aedd309368725c37747e21c","ssdeep":"192:paCwJpoyCdPGBLwDlhfxGiSnZpmJGLl4HnLZ8gV77w/eI3kXM1ttNAPJG1B8io:8CwEyCdeeDlhfxD4Zck/gV77wmjjP0i","tlshash":"d332cf243938d6ddaa163019ee43804d3e6de4fb465ce9c23129f737e11baa36811f2d","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:40.969433Z","times_seen":18,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/zkSync_Era.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.326Z","timestamp":1782329722326,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/zkSync_Era.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kTD7fYDB04hlquS57YTD4rkK0ntqvikDhmGNqKMb7dykDXmKJ%2BTw3e34HbKMoSSHN3KSJ9O1zsBbQ95et0EQoACaH5%2BL04taLPyFOFHK8x5rSzoNDItoYJg41zuaN3%2FjgsdMRw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"4a4-19e8af971de\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 1188\r\ncf-ray: a10e2cdc8f67723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1188,"size_decoded":2169,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"1c0c7e59687d600a9fcc86eb3073eb9b","sha1":"93ad331c8a31ce725c1056e956a9a2fdfdf98029","sha256":"5769cfc426515825162fdef57e57be3b1001a43ff86ce1a19e87aa0c0675c093","sha512":"f8bf020915ae46f38c7b6d1166de59850999df3ac3c28bffe57c24be64df778e789218354cd53df1b1647ebc13a995f0c6edaa02b4fd9cb5d0395c7810b20ccd","ssdeep":"","tlshash":"3021c65b2fadb61e8e946fa807d23c7c30a05c0487c4ac9ff4a9f94a2532a1cc0f10a5","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:41.233438Z","times_seen":17,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Cobalt_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.457Z","timestamp":1782329720457,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Cobalt_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cENsSWndCI6FC66xhGw7FR0%2FaQH0JfCTBZJq0qOMogUPtP2T52PelMLgxS3kf6auluH0O1fuUb87yBKQMPViY082Jzc%2Fu1nfJEIuxcsaM0OJ%2B0dirlyhXtJ%2F3AUFmkgSGkG5zQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"35d0-19e8af9734e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13776\r\ncf-ray: a10e2cd0da1e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13776,"size_decoded":14761,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"273a09bd536326839dcb62a15d708cef","sha1":"330b17c3550b45c5fe3b7444496a8e5734bd7e63","sha256":"afc6b64090716b7b5312f6151032ea5aee69a4eeeceb71e42a6e1a721c10712d","sha512":"721290b2226c243ee1a8e07972379e3dafa3718ea83e47908933b3abc2857b7aeee24637aed08084124efc192c76818b7b7abb2069501278b6350dddbbdacf30","ssdeep":"384:Yg8z9EgDoGLZE2q1tut4jHehMQoTU+YYsZKT/:Kz9EgEdc4DKo2G","tlshash":"c152b067cc2d6864dd1f78eb6b6ac2198c23de70148c81e896f1be5b6133dc5408f792","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-06-29T07:04:41.11802Z","times_seen":20,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Toros.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.238Z","timestamp":1782329721238,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Toros.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q3DBIHo8w%2FRc%2By3Mg2n55d%2BhQE9oiLZBpzryXGb2qbYafwkYo2cmFWIeq0KWabC6VTsJkHm0T1E0Ks8vyKydvWf9bLgdy0MfQ4%2BhvDyDF9TMewRLo%2BcHAq6PSWvEAXcTs4Be7g%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2722-19e8af972f6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10018\r\ncf-ray: a10e2cd5bc21723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10018,"size_decoded":11005,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"1af37d9174180f83081a0ef300f760e5","sha1":"d08bf1deef471213134822df404b44f3c7d91c8b","sha256":"82c4475726fa5af558471b6427ff6ae1378e6ccd8e477e0f20e3433a176cd515","sha512":"0fad54d998faf82f62993ad496422d5eaa4fce89a6179feb4f74bbbfafaebcb17445b1dfcc693d731c11d9d0eb36cfa42c7f743afcf279c1b7e70495bd621a58","ssdeep":"192:IvRATIKaFV87PrUiPx/+sHoOZwxpHCSckPhUbMGoMebPcxvGAc7i:uATICrUiPx/+w7wDCSckPhUb+tk7","tlshash":"2822a01987642c7fdbbd91774897823e107d5e435a9f500164a9b859cf005e63334ca9","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:41.226426Z","times_seen":19,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Synthex.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.301Z","timestamp":1782329721301,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Synthex.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ylsq26GU0iCaVcDc3plK6n7HJ7v7UUAOC1NdxKzGtMgQn7btuaqhgwTJaaE4EsbxZBtxOoi1rhdPnjWD%2Bca9FHdFJf6EwvvmSVc1W1ZM18yrqkaII69GK4oRpw6nwiTjpxBpVg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"eeb-19e8af972ea\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3819\r\ncf-ray: a10e2cd62c5d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3819,"size_decoded":4796,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"f61d51edafa1cf0b89980b365e699975","sha1":"7c33e9ae9c1b59803c49c61cdf320f75aad1852e","sha256":"1ce29e2794505b072a2550339784b47c29fdf206cd5eff0d0f217967d16ef944","sha512":"44e0f4e8273640743f753a59edcb296be6214ed067954107ae795c6656c3a441466a4e2533c49f98bd4258191ef2460ec6008def7a2943559d887fe2188f6b2e","ssdeep":"","tlshash":"95717defb545357fe6db74b7d3620c46cf4612080998b7066940bf210ee382e87b071a","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-08-04T05:59:26.016355Z","times_seen":36,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Crypto_Wodl_Game.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.231Z","timestamp":1782329721231,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Crypto_Wodl_Game.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7MBcApBt%2B4ULWMiChVRI9mBvcenhTgtiGIJwQBqfD9NwSA8oDvKuPhkS4cGOOktYm3HE3qjxmoWZHgQ06mKUqPrzESrB0qv98JzdTFm%2FjV%2FNMwiDFupSi%2Fn9WZVmj%2BNPP9Yy3Q%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"388e-19e8af9721a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 14478\r\ncf-ray: a10e2cd5bc1c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":14478,"size_decoded":15465,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"ac06c13d4dd0c50411e536f3d937c19d","sha1":"3ffefccce6b92f02c3ed99d984050f1c9a52ed7e","sha256":"1bff90bd360c68da36c84843ab5d66caf7a0a44f73a7dffbc4ea626146d059bf","sha512":"3e40c6ccd66d8b48de6d552598a2121196528e0deceed1ee2bbb93c43fb1c6e324bce9bbe469eba9f03f874d89f33a288c8e07d038dfe4daca3f4432d1488980","ssdeep":"384:FVlvayNhAq/dBUMAJeTbYmuh50R5zc6uzjpOTw0JacKA:HlvnTA0yMAJeTbtuhaR5z1UcU0JacKA","tlshash":"e252c0f575aa853656fac4e6a7e73cae268c6e7408386627dcbc31003470c9f61c6c5b","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:41.238791Z","times_seen":19,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/VirtueSekai.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.323Z","timestamp":1782329721323,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/VirtueSekai.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kdgOpR6ku3FH3a%2FsqqNDto6egUufPbLVT6XRfnSKjCFsMg%2FrcwyGmGQSXtFUVGACX9uX%2BNNN0q5uPr3mezHnwnC2qiFGjxb9XyjsOOWbReQYCDxHKpWNiF8rsxwJ%2BvlkAFCGGQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2dd3-19e8af972fe\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11731\r\ncf-ray: a10e2cd64c71723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":11731,"size_decoded":12716,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"d2e119260c11a7f78a9d79777b362984","sha1":"f29997a1d2738117195c837fa6307e1aa73c3630","sha256":"e75d9f6226c7a95c872baefcbea012f28e43765375c10c36777dcd8aa5d2f1e5","sha512":"215a581c221e0148591d629b07b544424f209e55ef72fe825514e600e7ac919c856e8714b131da67dcf19e2d592b0ecb2956dee919ba249b023181c11f6a6a12","ssdeep":"192:QxwWhkmNAk92dbPG5zMLcSQ1nc7S++QoGctw5HyJsbvLiSppakaChlwgrCkJW7Ev:QxwWhkm9kbGdMLBQ1X++Q7KaHyJcvuSR","tlshash":"7c32cf596e11d211eeaa49b063115b0a7b73f02c7b1cef672bf27b06086043e5f11ed2","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.765277Z","times_seen":19,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Marble.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.700Z","timestamp":1782329720700,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Marble.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qQRRH2Ag%2Fk86CS0a1c%2BcTPsckP9%2BdfunNQvZ5csy%2Bd9P8eDCKUPT0bMb60%2FFlChdrUAQrnwzrmKJ%2BG92rL8HZSElH37ezUrV5gBuCnuCtgZ8%2FjONm60%2FeVGS5FyjUNutuD3QOA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"6a6a-19e8af9738e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 27242\r\ncf-ray: a10e2cd26a79723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":27242,"size_decoded":28235,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"a41c1be5b56d12915412fff1d4d77239","sha1":"d9c368aeca59db43b2814baafdd389779bb91a4d","sha256":"fd4cacc0864f667458d5b752d5864cc0919a43a63b1154199480bb93505300ab","sha512":"9aad99f041d961b3e9fe6daf9d9c8601394e998e2a8a114e9a0c6e1e27849fdbbdfbb851aba7e95cb3f52f67b7d7ba00e054cb929ce0d57a56a43b55eefaed50","ssdeep":"768:BjuRA5UEbBI8uTANVlRyZ5L/SfaHwRVUSBi7:1uhEWR0NVlsSF33i7","tlshash":"b3c2e0cb96c30a098cb72f8fd67016f8f5df7855826218201da65a1f3d231a624b2e0b","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:41.055138Z","times_seen":20,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Payperless.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.900Z","timestamp":1782329720900,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Payperless.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oZkyEZqxiR8VzefnNSQuBSjClcMx8r0Cm%2BYHOANWsB89tld3vChChrtdTp9MGtQSOSXhGPLXwAJGYkMPElFS%2B3lfzoMqfy4bTEmroFAS2PB109QT25AOPt87QXZsMpsZOqjR3w%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"4dc9-19e8af973aa\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 19913\r\ncf-ray: a10e2cd39af1723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19913,"size_decoded":20894,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"f98ef30f05f54d6a2c412d67766ef5be","sha1":"6647836394ac14bec55a7eb44f89a5e2f47f2dbb","sha256":"c6d757e0479bf72e0505ce53909a62a3473cfb8d26f975b81180ab7de1896749","sha512":"bd19792913a8d37cceca6f85e5ff936ac7de1df788e2106e25b0eec33d92c869cb2a1ba25a1ca291327f96ea37207ccb1423028f293ff3228f14614039736510","ssdeep":"384:MiHhKu2osivGNFnNH4UrmO5qtknC92Xej7lDDNHOyMcLzW8h4bbU8ofGzE:MiBWuGNFnxZrpqenfO9DDzMZG8q","tlshash":"cb92d16fc0b2522c999ac5cb63b17dfe24fa7174863006a8ed2b4213d1c0a527a5f2d3","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:41.083128Z","times_seen":20,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Shinobi_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.918Z","timestamp":1782329720918,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Shinobi_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HJluG1QmS47WpDTzOIv1dZDIuYMY8hSXQrpnKafK2LinHfGF%2BMMG5oawicNUXS3DHxs6xtG5ohZGije6n%2BZ3Vw4AxtJqh3jMTBv5YZnHSnwYXdRqiPZz21gAEYCjEH2LM6qWJw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2c45-19e8af973c2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11333\r\ncf-ray: a10e2cd3bafc723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":11333,"size_decoded":12314,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"76ef06fc370ec0f1f4ae75ba45fe0118","sha1":"178084ecac04d6bc24be1b625df7d00c7322c97e","sha256":"39dd39988a63c847ef35e2b9300bd9a64eccac4cf2d8bcb6077c4f87ecca2d2a","sha512":"a0e2cb0bb0fd1b5ed562dc4299d6d6801aab6a97389cdf1abca3274ea8a79b73202c606f6a9ef9934021bc47959cd09abe2df22362fd90f5901c8a4c293ec36e","ssdeep":"192:oMPa7WaIU9JXWvfRos5B15LV0xTMvkTqWOo+d0Yq7CwSzK6dW/6:oH71II5Wne6sQMT1OJlqKo/6","tlshash":"c232c0f871979c3712520fd1e9ef1c19cc8fcde96e26859a2b03b861f5e71064d81e60","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:41.2301Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Multix.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.144Z","timestamp":1782329721144,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Multix.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oOtxuBb7%2FBq15Ek4yOP26ARQIVKigPTI58O%2BfyC0HR8EmtpO1lhTCwyJ1AIjnNuuNjbj0TjdLb4gZJEQ5KJ2J5Hk2sUlaJkavj6HT%2FlB1zJZvNtpeCk3l2RlUS6VqlARLFCxNw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"31f4-19e8af97396\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12788\r\ncf-ray: a10e2cd52bc3723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":12788,"size_decoded":13771,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"1574549342acefdb22c1e80aa77b39e7","sha1":"5b373303003a10a5d9759b13e1cd18512dfded1a","sha256":"4795157e0c8dbbff34918cc54573dd6dadc7645d8b5d2ab8d4f89c58ec84e843","sha512":"af71bfde47141b39f881653fa7b91f692da19cfafe2a4ba5de6e056c97a75dce0f36008cd0820cd33c6bf81861b57e90e614d4c27d42b401a7c8c92bcaf107af","ssdeep":"384:MtC/vCWl7a38Of75mpTHpcj8kkragi4QshGl+h5:MqvCWlWsOf8xHgcNijl+h5","tlshash":"c342b0e4a69107ae57f00f2271a39b1d4b83c650ff377f5f8dc886e482857ab8417849","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:41.121811Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Splits.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.084Z","timestamp":1782329722084,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Splits.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fIypKVZFYIXA6evBw8qrIqOonYF%2FeQDO2NPnHC6dBECsYgVaC033VhZhGKLkIfydbUl2BKs0HtiDt7m%2FYg9f3VKot2uznJNdWuFIF69Z%2BTHc4xLPYq6W6LnwuuK8Xygxk%2BqKeQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"27f7-19e8af972de\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10231\r\ncf-ray: a10e2cdb0ea5723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":10231,"size_decoded":11216,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit gray+alpha, non-interlaced","md5":"5e11d18928b4f18ab35216db43b5158d","sha1":"d2396dfc8b4eb22ca389b3ff147291133a36000d","sha256":"8f4ce36084c720ca9d6c1881ebe737aed8c13dafb475b50f9c4989bcaffe8e29","sha512":"d1f77ba3af2b2efe6e33f311df07518753bd186ef04834cefccaff742ac3d88fa00659a6459c419358fb6466d7ce72833df92a1919cd920bf84731727d099a67","ssdeep":"192:agOHqZQyIO90gUpVFhe13Uj48jzY2KGrAj02nO/2x3oiJVtPTNbio30mX01:aguqZQyIO90gQFoJUzj02KGrz2nkU33Q","tlshash":"9a229e7243c7774d008ad4916aa5aa16dcc1d63798afe988ef1f8d38c9d0d3c9463f81","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:40.841006Z","times_seen":17,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/PikaPixel.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.130Z","timestamp":1782329722130,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/PikaPixel.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZtOGNEs5wzRle%2FLsm7Osf4uDaNnLYaHiT1kwcPSG5GCi3O2SX%2FYoWETl%2BfiSUt%2FpNqlAibIdrHbIxDcl%2BuKIsVfEe46erFXjFNnAQ82NgJ0w7DuYOFVI5eJP52ALEg%2BtqTyZHg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1653-19e8af972aa\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5715\r\ncf-ray: a10e2cdb5ed3723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5715,"size_decoded":6703,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"12f4200cc2d341ba551fcd5cc66fa0d8","sha1":"abfbe748342083368cb3fe9e6ab1fbf0528d19b7","sha256":"51c0f158918802d95e7deba2d6cf02f99b12ee83b01bd14f475a9d685b9c56ea","sha512":"66bd7a23e28c50688d7e16f9f580ff62d9a60edd1586560268600b816c25de5335bb12409a6dbd8bc7548dd7b6f8251057076763791dfe7efadbe43a0fa07015","ssdeep":"96:3cR8j7tfSRX97E+A5rdppk5KXJZkSGFJf+Jn5lbGmGGLB6TYfjhOZw3Md+:3cR8vtfWX97KbpkwZZkpFYOPYftOZ7d+","tlshash":"abc16de08b0c6c2ae725a43ea3b6930048c595b472ff53bd92199972d4f774c07de563","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:40.698573Z","times_seen":17,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/idSign.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.654Z","timestamp":1782329721654,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/idSign.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qs1Qc6om%2FpwZcTfGMKvS82%2Fd2aGLwTSvequSNktabWumVkqJOamqLKe35dgUuYI%2F%2BVFpfppqLKYQnYzhHVyD6ozpTTED9Ls4J7qTy9S3ho1bBDsxTyOYf9VcKEA4zDhfujXJyg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"7df2-19e8af9725a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 32242\r\ncf-ray: a10e2cd85d42723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32242,"size_decoded":33227,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"ab7ae357e71a10617ebc922c0120c972","sha1":"5dcbae4c2d3dad3852a35b90ec0ae00a055c0ab3","sha256":"d68bc0943f75042dddbddadfc918fd6499d005ed387279bd14a869648c9606c1","sha512":"fed675b759aadc89562c60fc31efef69cfd734863ba7d06ff0d7dd6b790de09641ace1345a273f15b859f3d6cc96434d3c3a057f03b2c5ed2fa09589e49d3ab8","ssdeep":"768:r+Hnzyv7MfSeKS0wzXsvEN+IM1gjdx94Yop3ivyDihrE0j613S+o:XvQfSeKSN+VgjdYtivyUQ0jeo","tlshash":"46e2c0c5805f9b820ca92c45029dc00cf9d66985ffb6416fb86f5e8bfb9ca97d1911c3","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:41.162713Z","times_seen":18,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Sense4Fit.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.691Z","timestamp":1782329721691,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Sense4Fit.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o4nH3XYXOVXHcrORM%2Bf%2FgjyySnMlgY%2FfosIZuTpc%2FA411EbuoSyLPxTmHQJmN80wrY4j8S7aqYwPp4%2BpShtdiuDKHF2sWTEYXVgut3WE2n46BCV75lMY2b4RM3kBl8Z183jaQg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"19a5-19e8af972d2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6565\r\ncf-ray: a10e2cd89d4b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":6565,"size_decoded":7551,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"f218d6994bfd813d3f4df8954b1b5f26","sha1":"c928e55b354db9a85263028180c869feb4988524","sha256":"95c87b0ee99052810f8d690176d017b8294bbb98a44ca683893219e93c040295","sha512":"7fd619e9840395fcb1b48c444ea2fc23b420c5a21f46a4afd3fef208ba352e10ba5fc8100ed28d6fe9b7add484589926d974ee0d1bad633fb6b0d3b56b3f5dc6","ssdeep":"192:jJE909UStmRr5SZnD/cImk4Tzt5sTmFFmG:GGkRFw0k4TBfF5","tlshash":"77d19e4cfb58be98dd8280742a39a9235d561c3cddca083c79b2dbb51a8a51c1b76390","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:40.863514Z","times_seen":18,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Soakverse.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.717Z","timestamp":1782329721717,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Soakverse.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fjUoeOY%2Bc5ez4An3U0AYjM9hJKd92AA4AZZIqOlUi6gZJ%2BRW7Lrvfc9gmTu6t1gh2OeK11PsUBADsCGfQqd3KecehKvxpUQ%2FhBEB8ZCzmqks1V5p%2FmNDvx8D2jgkgU1%2Bs6m0lQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1a3a-19e8af972d6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6714\r\ncf-ray: a10e2cd8bd58723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":6714,"size_decoded":7700,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"32b85f7dd53616aaf15ca0de863dc136","sha1":"1c4d573b416c99cd57432042d3b2d739148190cc","sha256":"b9afb262439785e00d0e4e762969b30d587a455f6ccc21e521f1911afeb87d41","sha512":"b0ad90d2b0ad02e9acaddc0eee347c66f0045bb00c190d322ddcd392368f18e80c5a08ce1a878459a6848afe0c7582fa322bf9d3df7c5bbf3015718161b3c6e1","ssdeep":"192:HzFsiFZ6u/Gl37ZluxddVHy4JNhOEotoy1+uua36/pZz:Hzqfj6RHLJjdouuuZhZz","tlshash":"6ad18ff429ee18e5e0085bb7ac9655d31f2e2123c891f6bc07228773b3d91d912674e2","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:41.035207Z","times_seen":18,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/ResearchHub.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.880Z","timestamp":1782329721880,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/ResearchHub.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5FclCK6NaE92HJdttEFMMlngwo5szvuxvySKI0PcxQzMCsZTH4GpUFboIwkDlPMW7jClv7oNStTWU5OuZvW6PynAKuh7qz9zH6m%2FyHeWH5m5HTERzEp6APRSd7xqyc97Rvf1rg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"dc7-19e8af972c6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3527\r\ncf-ray: a10e2cd9cdcd723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3527,"size_decoded":4504,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"3205d10df40dabcedffd697d7097d7e0","sha1":"4f595a83e2120bf372b8d1b50522ab4b08271d73","sha256":"aee1c5e8505ef757c1bc2d4ac5096a5f3d0f86fbd268b41b23040cc55c7021c1","sha512":"87a7daa0b8383c7d2fc31b0b7ebff4a71393d956683058175dfbb0a84a886bcaa336a0ea633acce5cffb9cddb7532c7dbd32c09f0d059b48edfa8747f77d4650","ssdeep":"","tlshash":"ea714bf875e13f16d5b52938180c32ea46205a91df2026e332bf5f18576ce7763129ac","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:40.791758Z","times_seen":18,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/xtratton_nft.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.924Z","timestamp":1782329721924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/xtratton_nft.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6GP18MoXDWPnn1QDGwN87VJClkyrX4at%2BUL3RUrt8iKrEwJ5RC%2FAmVS0WrSRGctodygpvEGJnNxoya6mC1Dg91mQ9Q%2FCRqih8HaQrNI3lm8ARv7d3VFjpSlvCU4J4Q4UGo2jZA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2683-19e8af97306\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9859\r\ncf-ray: a10e2cda0e07723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":9859,"size_decoded":10841,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"1d55f4139400f0f7120aa8aa5d9f77c0","sha1":"7b49f6d10371649383c39443206daa88de243d1c","sha256":"b4b457a8ef1963303c500be9ea7029a48f55901766ddb5e46716bdf2256bf33c","sha512":"67cadf71c3ad0516daf569d4df819c017c1d415562450ead68596118fceb62b0cc69b93a8935719767be9cf6966947e316fbac8b29e114035b2cd3746d591e55","ssdeep":"192:5Rmv3Hmk5/jAz1aBrUzc5rfJJ09kXAznyjUB+lnnd94q4sNXqDMP:DmTI1aG9Xyjjnd6XVAP","tlshash":"ce129e97580df4d3d36aea7ee108576358b12b9459c49a838f92cff951e7300720abd2","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:40.713735Z","times_seen":18,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/STACKERAI.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.106Z","timestamp":1782329722106,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/STACKERAI.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mokHZyuxWVjbP3Oocl%2FXenN8QGWbR4v80WQ86ELq9p4yqYk22yZWG5pY%2FNlTmGgCG5yZvLXgzMEMZV40UEXXlw7evYChgFbanOdYCtNezuO%2F9fC5OGGUR99NUDtIBn2tuAhrXw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1697-19e8af972de\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5783\r\ncf-ray: a10e2cdb2eb5723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":5783,"size_decoded":6765,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"e2d3fb9db297e145fd08f43d15b2aa8a","sha1":"bfff85eae3a74d0a8fd31f123bedc080650f9ebd","sha256":"01e18cdc733606955cfcb6ebe4efb497c73f85a4e20d08ab17f39cf9cfcb7c0f","sha512":"653a2690cb731093e2a6ab715196309bbefb5e209a2f3fe35f206f70787883902faa54320e717bafb440ebafb6f061c4b025a40293ca2ebedeb693618dc91989","ssdeep":"96:NF/5bbOGjxYJoiiPRYtRnPJn6yOedmscwV5u5nW/oDsGG5dvWxxR2/:vjOJ4PUxPJn6yOedVW5WADPod+xw/","tlshash":"78c16d7ad9ff4a35584216376a0042a347bab91b4527332c55452ee03c7d1fe42a221f","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:40.883993Z","times_seen":18,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/new-way.svg","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.232Z","timestamp":1782329720232,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/new-way.svg HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LCj1dlC6UElFO2luwHjJkmEdQ12T5VnJckyKxkfPnz14UxqAKPAuabdgGe1CTFjOB8yK4AtGA1SlbA44n5Ohr2dqIaPO3oxuMVC9gVTzUR7H%2BNXmmmxkWS3FbkpQO%2BKgpD1Ryg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\npriority: u=5,i\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"23e1-19e8af97316\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a10e2ccf79c5723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9185,"size_decoded":3773,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d38b45efddad5ce0b656b10274638377","sha1":"08b2a0add65ccdcf0bfb7847803fa5dc16a64588","sha256":"3e4cde62a440fedd491689c378b6ffea9cb8c4f3d751d86dd9d70177e75212c0","sha512":"2537c23209513781d075288c2b1ac2f72bb4d2570cab04af57a9ef318324a46f52c35028ff24c4b6ff4144a9955656492ab7272b331735d676eb962890095cdc","ssdeep":"192:syAR7CZ2ixxPjfzSFWOrsRo3/58dDho4Z0hL:M7W2Qjf+FWOARaidNpZ0hL","tlshash":"611273ea5768227ee497ce6ddf668890130d70fd35b4c8e49a9dcf686047c99fe87010","first_seen":"2024-05-08T09:53:28Z","last_seen":"2026-06-29T07:04:40.581442Z","times_seen":33,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Arculus_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.455Z","timestamp":1782329720455,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Arculus_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=faLrZeY%2FBpC5VpDUFSYdRRSrddV2wQBdLnZmBi2Oc3nLqVwfkvFCI4Rkk%2F3m1DjBrgzoBX%2Bbmxin5OdrpkeQUTTGbXztfSBLtCNkuyBUlhfJ5mem6Jhz2kouQvaCcC09Ht7cZQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"143c-19e8af97332\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5180\r\ncf-ray: a10e2cd0da1d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5180,"size_decoded":6162,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"1f2eda51336dd7ec1eae68fec5573409","sha1":"677e64c4cdda01dffab0dc3e988d1e17be37310d","sha256":"ee63d23dcdd7e1b5b184f93371771514039da7abb32872f89cf43d39d3488248","sha512":"f618949d56ff4b1f58bcfcc6e1059a355ba2b48d4f42bbcb9cc43c1c6905ac964df001dbe34b13305b9db0674b0e9ab92e18780b3f4b003a8995a0a5180485bf","ssdeep":"96:zhs2k/wk2H1x+HByF3esvW3p50rzfeMOaDZ9PKf71mx8rRATM55/:zhwotH18HEFesO3p5yzkaD7KhRAov","tlshash":"4eb18dda2b0ea994ce7b63373c09eadd1329c73f82259f0654763e1960100c570655a1","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-06-29T07:04:40.661226Z","times_seen":20,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Burrito_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.501Z","timestamp":1782329720501,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Burrito_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LlXcPeE2EAubPfrD3G7IBq0fc%2BIzVLvF4HaA8nZM4iSjrYJQ6HskuuN8k7LlvwYTW4AzlX5hYqb9IoKuJiS8lkIFq0zC76BY%2FMclt4%2FZZjGF27WUgzEcc7Ph6N8plI4Gh02QLw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1ce5-19e8af9734a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 7397\r\ncf-ray: a10e2cd12a2e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":7397,"size_decoded":8379,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"acdaa99cfd4349408445436aaa58ac6d","sha1":"b5a08f24899761aa6479810cbc3eedd743015aeb","sha256":"df5e09aacb5a93a3c45004fef5bcc44e918c7de6b5ebdc632d5e62012d84f537","sha512":"5eb2131eb42accbe1207c4e8b4ad8e7f5ebe756ccdc58dabbd041d250f0493088c542a8f5b6981390ad116e683c80e35093191699c54fc169d64e217944828c3","ssdeep":"192:Ub6EIj9pAlBW7n4kXB3BjzWQ2eDr4jAuaOD5S0+/1zqjuB7:Ub7I5ClA7n3RdXM0OD5K157","tlshash":"67e19e8473ef36a9f62985bd46704b600a34726572643e605b817a304dbc371aeae46d","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:40.612319Z","times_seen":19,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Nifby.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.126Z","timestamp":1782329722126,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Nifby.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zWtqCGCS2vGGOQHXRt50M%2BuPDUhQvhm9h2Ri%2B7%2B78A8BBBx3tZE8H8swbRAdTNKuJADUE5HCrDZq%2B2DrLBtXhSs63jPVsiRDxkTTNCbnJJOG53OipylGIYqRvqWSVHOHCBgxAw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"146f-19e8af9728a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5231\r\ncf-ray: a10e2cdb4ece723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5231,"size_decoded":6215,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"1e3664aa9a0f96bfcc10052558b7aa20","sha1":"cbfb4c7f962b6b670f620172029744f4f9c03805","sha256":"55d70911ae7a3e74d46d5ef608c4577d6d601defe560eeaaa541d0fefb63dbe8","sha512":"60cf75dbee4f7fb037496e2d90fb93df5558a67642298d39fc1c5b65ea14327d1a9a6546c014c253007cb9cbd42a804d9ea2b1e4935e0e464987e34f9df66247","ssdeep":"96:pi/UdIBTyqtlGol0gLZnzHLG1cmTE9zdom9T2V8VJXbapVA:pqUinCiNza1cmpjWVJuQ","tlshash":"ffb16b96a3481d60f9c29c3801e02ad88ba8997f1b5a3f379b52c634dc07c93800ba5a","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:40.686841Z","times_seen":17,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Fuse.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.306Z","timestamp":1782329722306,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Fuse.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AFfqKS8rVhrwSSYVxOt%2Bn1oLtwI2L%2FGjmWRHQAVrD0XIJP0Y%2BsPyHyFZ8CsHfTI9PcvTJWg9%2FgYidDzb4Pzlsk1TNs%2FC8jtb61dCGiwaFdP%2Bm5lGAQXnY5r2MufYKP%2Bc7%2FzmKQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"eea-19e8af971ca\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3818\r\ncf-ray: a10e2cdc6f59723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3818,"size_decoded":4809,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"677daaecd54ada16d5e9220e69ad481a","sha1":"4ab93ca2372d9b449098b256e6a4047b34b756ff","sha256":"a47a71a4ae4a8a0f33eba6f0b9e44d26cde2b7f186f4fbc8d8698494dab75e73","sha512":"5b3efc8748d251fe493397c7484e47a3ee417f39241eb37dcbd2e0452b6d2a98859cbb6e8c8e1a413bb43abbc0d2eefdd303442fb754df4ba2cc4722ff22128b","ssdeep":"","tlshash":"48717c3984e36ce89394d434316e461fa6c50101821dcb37e94b3ff623498a60adafd7","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:40.578291Z","times_seen":17,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Unstoppable_Domains.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.411Z","timestamp":1782329720411,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Unstoppable_Domains.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T%2Bqh0d6X9rXQD5XE1neOId1QRKnH7XZ3N%2FjdhfqhnF%2BosSlshzKXUUCPyuojPxLQyChqMDCdMEt4a5qv9E1mRj4LC2EUC6VxN3EYNQ7XofZLnEbIbRSeEQZ8ZDpNgNOyMXZJ1w%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"12ba-19e8af973e2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 880\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4794\r\ncf-ray: a10e2cd09a09723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4794,"size_decoded":5775,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"a659758b982f0b63f632551314e42d4e","sha1":"6fea54761384438ecf820e02e0bcb4de4d9437d0","sha256":"b4b5e342008126935e1f23178412990401ec22b172960bfc12a42878081459d0","sha512":"2bfe5951117e981f708a9f9c37db236a9609898ab195da808b8c4f3648ecbcb798f3709b16c7f31c34329de553ab29c569cbb5ee4ff4cc1c17ea369395ad7f05","ssdeep":"96:ysxpmgTk1Cp+4A3Tq4TpCrgplQPPNPZK/liuglMvLDRxW6OFvOUR7:bpA16+1Ggpl6uDRxW62z7","tlshash":"caa15dd3165d261eca9afff68dba35840c91ac71838d3c17989ed3bdbc1611155033e1","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-06-29T07:04:41.272452Z","times_seen":20,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Abra_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.927Z","timestamp":1782329720927,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Abra_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NtrGEUvMwzSxAZ4dSgC9v0OTKJ3F5AnjzXqF8IcjqXbe6v3QRCLLztQSeHVlzqqPGXKjUWiDTRwHbkHdJvnd8zT8vUrYKIUK8nuvHwIeP6Z5Zx6CMRrH24r0bhLoZtzeXhsfWQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"496f-19e8af97322\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 18799\r\ncf-ray: a10e2cd3cb03723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":18799,"size_decoded":19776,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"d7db39c4499a0b8a79e358f74131f776","sha1":"7d9f9ab93ec910c607f54222cb6cc68ceea7f2bc","sha256":"4c275cb1c367017c284f8323a15e5017b538233fa839514db31437137df92fb0","sha512":"74f85b18c1167d3ada06d3ec9e0109980e763ae93901db8ec1219ca27a33dc63a824fcf57ed4c25e5c63ef0a63f33004595885aa79e1540065870fef471628de","ssdeep":"384:aoVNJtjeCXEK3UImLj7x0ktYn6JrIYqxczWQsCbJusj6XTO:aon/UkU5RGeIPWWpUusOjO","tlshash":"8482d0e3bef8a8eb9d3273a9611691f0d174773bab544d40daa12308197ad4a37fc1c1","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:40.800124Z","times_seen":20,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Plus_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.130Z","timestamp":1782329721130,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Plus_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T5gqrjXtl%2BMZg34PrXuG4Bin3005eXhSaSgwewz%2Fe2wkxYLE9LUw9ZNDQSuJhINwxEtZWEXAAACXsLjxDmLZk7IE%2BQaCzRV43gbXlgy%2FRjMKAf4w%2FgCqt4gK%2FHCUBAXRDWTJSw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1d6d-19e8af973ae\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 7533\r\ncf-ray: a10e2cd51bba723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7533,"size_decoded":8521,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"32f0d62d0094ca1f938bc2d670aa97f2","sha1":"a84f71070b31c58a5b73a63c639475ad9888c0b1","sha256":"2950a810d88cec505853c7fcb391cb0e77e57cc6b5036a5ddb79d934834461b0","sha512":"883454e5385aad875ce4e2720b94ce6b8f3932e8f83c6c6c2b3e45e043531e6075f35a77dc3cc4504626a0ab53defb2f024e6a10118606a76bd921c457300f24","ssdeep":"192:M7vy0QMS8/zfxXs+GxsuhLkdrCVL8QNy3eMM5pmZXQF:MzQMS8LfxXKx/hLcUwgy3m3mZXW","tlshash":"b9f1aefaa2f43b2096b06d8b8977696bc821351a2e85ce72517d83f1f1c5c984791dc8","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:40.903495Z","times_seen":19,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Gaspack_App.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.374Z","timestamp":1782329721374,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Gaspack_App.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g13yTsFmejzKAZjHsLkBy5BhKu%2Fcd3U%2B0xdiez3rt%2B4DVHkoXzCIGmJCoOahXFfZmLQLPqaZnLBffKPsqKCvZtf1gRORWq4UCAK8lT8t2zUWZVFwn6TkB5gIQ4kKPBB2sZJfUQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"30c8-19e8af9724a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12488\r\ncf-ray: a10e2cd69ca3723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12488,"size_decoded":13471,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"d201d0ec4498fd75a05bcb908e9adcf5","sha1":"dc19dd2fb1c6af491f7e3851831aa3c7c14102eb","sha256":"59c47e5fca460a479af5988b3349bef9a12483baf03d943b54e555c60cf3ba63","sha512":"d6d80ec9a5939ef4111690b792e0989e962bc30c7e8b9466cdba47218af3e469fdee84f0c5745850a1616782908516dc1ea581d6de1f12fad3cf35a42f3b1111","ssdeep":"384:uu6XKLvhE5qieZIk32oSkWB4R9JW33woqWtTJ4AS1:uchLiVk32fkz83wetTJ43","tlshash":"22424ba59b975fd4f24f0f22f53a10f8910c951d8c0e3878b1a9f31a5d2e5625a0cf96","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.930551Z","times_seen":19,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Umbra.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.541Z","timestamp":1782329721541,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Umbra.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hp1rhq955sTWJm6ztPFQwpEQkWoY4TR6JjkDvFwyJNEYM6aDWeLOqrO%2BUGTjtc38ZS77G2M%2BEA4rE6d7NDBxMW8OjF3jdjr8ZIOhZUXKa4%2FF9Y4Gd8cr1PJj1eTlX7QmS%2FUjPQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1972-19e8af972fa\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6514\r\ncf-ray: a10e2cd7ad06723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6514,"size_decoded":7498,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"420b553395dd126146034a43d1d9662d","sha1":"9b51db65ab2b52262a40267a244cf3c564abdf0c","sha256":"4a6becfb19d8d18f75ab25e3e44722c7cb381a5ce1636018ec672ef02382bba8","sha512":"019bd15834c13fd826d5e27db86912e42d312edc84f1f5aa7bdba4a17af0619a916429cacd20e325eeb384ef8d0f480554205f0102031429bb0bede4d8657317","ssdeep":"192:p/ahnOtlNOj2GcmBDXO/NgrbyzNCLbO+7r:Hts2GRBDszqOYr","tlshash":"f8d18f828be60be999793dbb69d13043cf26dc6c3d771d4f302ba090edae1114725b81","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:40.890484Z","times_seen":18,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/MultiTrade.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.945Z","timestamp":1782329721945,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/MultiTrade.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ENCBp77WN40ZfO4cEvoV7PjtaWU1NcF0ji2jEZr9myY%2BBPpzJv%2BMMnYNrNC1iU6AWg5b%2BFn8pddYMgH5eLuNT5WcWMiXxIF%2FJddIkEM3Hcww5no%2B5cJC%2FeBomPj3uD7ds%2BbAOw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2748-19e8af97286\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10056\r\ncf-ray: a10e2cda2e28723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10056,"size_decoded":11047,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"a36c6a5bd15d7d4b517fdfb85fc34b6d","sha1":"af7b15b31b4acee3463bfe471fccd80c15c92515","sha256":"8521d4366788a85c17c40f1d479b20b173599f8e3b07b00286d7fa1098f21406","sha512":"fd40b6e00fd98c268977cdf748aed227d8cd151d29160b498624ab088470f55b3844b3349f71f752851f6b4b51c6aec9aedfa33907ff7212d87c98b838544a84","ssdeep":"192:ZKmwHngodW6W76gZ5oaogkucdPduvd3uj3JwzYL0bADv42Cr2:smAnEl775WDP18hsDw2X","tlshash":"e2228f7649bee626c09f063245d5cd8182dc4840880def9da0aaeda1b9245d1fd8fb7b","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:41.014443Z","times_seen":17,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Koincity.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.995Z","timestamp":1782329721995,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Koincity.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WUhS5r9uP3whBFnZpXO6702I0FMqfiewa%2FONgvxUk4Sm9DFpqAspJ4dhcVPGYGc38z8laMOOAQ12Q9ERnjHQP8rA54cxvRGCFFKOSidbyR5LFR5sTnWdGmUYftDE52b0Y4SC7w%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2fc1-19e8af97266\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12225\r\ncf-ray: a10e2cda7e5a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12225,"size_decoded":13204,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"8a20b093fec5023ff87318673c822641","sha1":"4a4c1752e998de0edb9c38e69987fd2619604866","sha256":"03cce1bad0eb9bf5806114be6a32f2cbe3988c721f521000b677bf823cca013f","sha512":"4398254fc79f57336f759a62cf5687198f0acb311ef14cb8be56295e5f95eeaf1bf9d3135e5b09e64439d33018f14d8a277bc5f09baf99c9199e0fedb95a84fb","ssdeep":"192:ynK196N+W7hrpUrzKHxima1MMeRTJrmUNRqNO99K5sl0+bU2rSthhj/59UO/tpiQ:ynK10rpKzKRW1k9zWNO99K5M0sPr2jjl","tlshash":"1c42bf2bf3f60bcaf9a514f758518ab49e690c868f5132fc40095923e9c9ba94d91f0c","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:41.005806Z","times_seen":17,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/SafePal.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.302Z","timestamp":1782329720302,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/SafePal.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c5NqZ2UbE9mk2kcXSBtxSp2O2VJwfRJL%2FoJNVF8anpeX5%2FdsRVmXrK5fFF18wUO1RPnQbJM5X%2FMMfmsxCyYXBPtRIfeTJaw%2BgmrQls3gLpvdgGFC42A%2BbQMrIBn6zj1hf5cdjA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"10b1-19e8af973ba\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4273\r\ncf-ray: a10e2ccfe9e2723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4273,"size_decoded":5259,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"f25626989ee398c999c8399224c3cad5","sha1":"ac4db30cbf26f128e761f7b7b5c764479cc901cf","sha256":"4b72e4c554261cfaac630690de4593046919004a84fb7e48870b5ea17f5d6354","sha512":"bfc1dacb325fc825dcaeb5976ebf30e0468cc88207f96915986464b6683ffd371055d285ed48256206290d6db28d1f3d79d0e37ef13bac6ab517604e2d87c90b","ssdeep":"96:1fVVkN6FErJNSBq7DUfOiZ3PYlyR0+9WGry2iqp:DVksFErnalxglwV1rbrp","tlshash":"07913bd87d87a8eed4db17f1ef094fb3069228b1df924c5de01441478199e562885f02","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-06-29T07:04:40.618692Z","times_seen":18,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Elusiv.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.232Z","timestamp":1782329721232,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Elusiv.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jv9rEIMM6uL9srCI5CH%2BGLDqI%2BDIAPnFvhf0UKmuX%2BTc%2FSy2qfr356E43pfhBYBCjD3G%2F4ochc8hzERkDs%2FFYq81rkCy9fZ4RAtOCtCX7tYb3z7ahq%2B3Lv8qZR3m2EBj%2FvtBKQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1197-19e8af97232\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4503\r\ncf-ray: a10e2cd5bc1d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":4503,"size_decoded":5495,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"4a5690c1e4363229359d3486770392e0","sha1":"ad31d020ace625bf02cf8c7204aab6b8d6e81382","sha256":"e5f77bbdc9ec68bf092d5c0477886e11797d2ef4c77d3d0c36f36a8520d6d30f","sha512":"7b331bc9071bc965a8289e7df4bb172339b311ec549ceffd6f904b3b7bad4fabc118edc5d4f718f9cba7df6862f67cee6e8e9ee264a1dcd60f66cfc105fc8606","ssdeep":"96:wIeFkGvKcKOcSHX5m6UtZm3ro/n4Z/pz4/iALbMa/zzSYEf0:peXvKOpHJm6UkjZ/pziNbXzzDc0","tlshash":"b7917e751d539f483a0e6171df420fdfcc497abae9643ef6c2b1a418126abdc39814d8","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:41.094452Z","times_seen":19,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/StakeWise.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.506Z","timestamp":1782329721506,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/StakeWise.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wroN9kQfB633P47INaZ2nWyhZO7%2Bso%2B%2F%2BMgxclRVgSlwR0qZT5RAgF%2BOcOtgJ%2BQMnk3soVhCVDNlPPVZqTM0YSY7UKeH0i1rOPNlBnBqnEX2zhloZhd7t0jSGx3uPdVI%2FmxkAA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"34d5-19e8af972e2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13525\r\ncf-ray: a10e2cd76cf4723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13525,"size_decoded":14516,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"917cb714aa9231397aec622176d5c8fb","sha1":"d76a32a9775240edabba43513393788ed09ea894","sha256":"3d400767f1304b247b0f8edc431e81e3c3ba98005c3b9eb34087292d2cc0d9e1","sha512":"04aafe89ee8eb6b6ab3acbc6e186e16b71721484814b812e5bd55c967ea59dcfa928d11af5a730bf1d7d7f4e733fa4cab0390e87f2bfa970381af793e6b397af","ssdeep":"384:Wln8gMHldFxuzXEstpvjO49TjZGEegX5gd0SdcoZrVDiA:Wln8geldLuzUst5jldigX5erVuA","tlshash":"1d52bf4ed0e4b1841d66d9c7d9413586147dd3880eb2aca24cbbeebc6fef3a6609407c","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:41.158477Z","times_seen":18,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Fx_Blox.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.719Z","timestamp":1782329721719,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Fx_Blox.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a7Ki5CnSSr5PVcS0nZTlLnf%2FSQ9sDtGF7ZeNe43X6aJbDAYkdHIma9uDKwcBPa%2BViecWE375CI1HlfZfZtn86RpcpAvO53%2B%2BAbymvNzqF3B3V%2Bovcu4BA416n2Xn6qtLVJ0z4g%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"7a0-19e8af9724a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 1952\r\ncf-ray: a10e2cd8bd5b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1952,"size_decoded":2937,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"3eeb4390ea8156abc1b78a0a6e4dd321","sha1":"2e1b1049f317d208baeeb09d14dc7b04ab7c815d","sha256":"36e2b2fe817f9ae58a176c5ebd1111e4257073c6cbf2ce432c98d6f16a498eb6","sha512":"8793c54bf30e4fb1f425fa81191aa931e77a80050c4ff75051dea2e6e3c08053b112381cbe88b7ac0c7f7622c7a83925f52d49a1a99e488a6fd7fa592b7d0223","ssdeep":"","tlshash":"5a41a112adca818af51144732075ef10499f84ee9770bec79c4f586731c7aec808b68f","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:40.689939Z","times_seen":18,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Origami.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.929Z","timestamp":1782329721929,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Origami.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tvvuWN8JHSxnqnyOGIuLfd%2FWAi%2FQ2oNzM%2BckFxSfjMb%2BBvDsPDlGUCNJcqyfQDj4ekurZ5orZOcK%2BSMhlqAt3kb%2FmhGHQx4Jz%2B4fAgPwY%2BkJlyfYhjNZIF3Pse5cu5hD8txNTw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"337d-19e8af97296\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13181\r\ncf-ray: a10e2cda0e13723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":13181,"size_decoded":14174,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"6183b04a044a113b352c9a4fe23162ea","sha1":"0570b118dc29a068599b10a5da0e1304b2dfc3c4","sha256":"eb3cb7fcd3516294a95ced0f510330ec216009f787dfeb53a64a5b105ca16004","sha512":"8b89c61019c6d524b416182f596703a9589d9a9f99246a235ef663e522a9c0e2c5b732c6e85d701d36e290cea299ac10c5c58cd478856ad1d4ecda3760f1ab4c","ssdeep":"384:aNvivJ+ERrP9q82sU/dv1ldwdhY7F+AeMsTUAG/HceG/rf:SinqRs2dv1ldOzMjAWHAT","tlshash":"2242c0a0c6c3264fc2ad25d35b48778a2087eb4bc9397ad46909d63770aa4b1211afe4","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:40.9967Z","times_seen":17,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/EFLT.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.178Z","timestamp":1782329722178,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/EFLT.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zoiUVJDRML9kGD6TpLJySfo05AVHWGEuWkntDQgsoNPr15DIIfdUyEvlXCdFYZIayIQGAz7xspUv5Y9%2BlXDGEMYVVLyI0Hxvo1h%2FRVrPCBtAVHQg6JTGAGtY%2Bjy7JcUnbWDxiA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"27a6-19e8af97232\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10150\r\ncf-ray: a10e2cdb9efc723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10150,"size_decoded":11133,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"628b6d71c50118e43ef19079557d7fbe","sha1":"9aea4d2fd2e0112756fd47729cc3a7e3809da5c4","sha256":"4175b36850ad9f099094886b23a66d06dec05131a0f07416599b6c6d005ef728","sha512":"f6c301a74265d9461aa93008f9ab61ba460af4fc311722892ae59397a2e2c90e7c3e0024e1cbd59e5c9f8386d7c3418d59b326ce0b34f974e8a8a354d74516e9","ssdeep":"192:GSqyP7kkgkjfRC32pl6JTH44q8+FA8jtcE59AhWzhKTDyB:T1Rgkjc2KTY9hPjHj0TE","tlshash":"4c22bfba7fd0d19b3e5b17a6378c6039e06e1646f56f2373809d34aee49027942310ed","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:40.900258Z","times_seen":17,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/BNB_Chain.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.185Z","timestamp":1782329722185,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/BNB_Chain.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XWg4WZecd2v6b1zSY90ODbbJWOIDbjOj6dqzBhDk8BhmVY9E0wIoDS7KBYABhX%2B%2FhgDLVsIFoy0kabiCxf7LScbcj0OBFOTUcviFmL1w1snc2vm1HWL3IwVEwOkv48oRHWJktg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"69d-19e8af971be\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 880\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 1693\r\ncf-ray: a10e2cdbaf03723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1693,"size_decoded":2671,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"be14424f263ddcb050044dc28e87867d","sha1":"4fa496b0c10a71fbec44e280bdf1f0d288488e40","sha256":"a2c6944d089fc699f393baf6eabd932c8921631ca8293b0cd8b768fd8290a15f","sha512":"d74e1057f9641c8ef9315900d80b705c4e6fa14ff229eb18e7c5f867a90c29ffbcb669ad0ba42e13391f1f71cd7271196b657fb0aee4693fbf28e3a2fc66f5ec","ssdeep":"","tlshash":"84313d45ea447ec80e959137ec9d02500c0494fa5c0a45b0cf5b646db1ff1484da2fb7","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:41.103266Z","times_seen":17,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Chain.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.459Z","timestamp":1782329720459,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Chain.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VjiCRDqD4jM%2FR8BHY6Mg%2FVeZIs2pUJFVj%2FqwR0v9mlt34ytF%2Fg6R9Okc4yixCa807dDfl8bIhrhbNoRFzLhzTos3FMzIQd9foGNPurobCB4xlBPhnrUcjOf9%2FT5bLCrayx5xrA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"412b-19e8af9734e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 16683\r\ncf-ray: a10e2cd0da1f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16683,"size_decoded":17670,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"6d61c9587fd8728de0b25b550fc6ade3","sha1":"cf339962246b6bc77291287713e0d4749cbfac97","sha256":"dd3a1ac3d12e554fd35c37fda7b6908896351c40fcf0f61544dc527081e0835f","sha512":"79011b1430465e9d88d6ea2c49f4860271d1b933db79433e6b4df9bf7b770cf8a5beb14b3142ab08c836fea2a3d2ca31537422ed3ffc05f1445ab947a4f42f16","ssdeep":"384:0ScKvn0KjVko772TGpeqMSxMshgfcnUOunAWo9B:03cDlAGprF6fKUTre","tlshash":"b872c05b60898064fc76c0b61aa5ed5b7df6c170c975b02bd63ab9e8d014fad00e4e4d","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-06-29T07:04:41.072625Z","times_seen":20,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Gryfyn.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.742Z","timestamp":1782329720742,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Gryfyn.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JzdYHBSTJ8OGrXuFennjKXdGbiGYQh8hKDr3N9yzgZCf9y6j4HOLYwC6ohb%2F0OwxtFHG0SY5tv4OShqRntHJ8X3hD5SwHb3TBFXKLoAw9e2mfgKXkrFxP3yhwb%2BPkkCRAhsHYQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1713-19e8af9736e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5907\r\ncf-ray: a10e2cd2aa8d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5907,"size_decoded":6887,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"164ee19fb167a82ff28f378314f63eb3","sha1":"3a364cd729b25f94bca8aeb3a02d93dee6804ed7","sha256":"7ff590da202104488985744186c63c07d5541fcf3ef3f5df52c976a0a55068ce","sha512":"ff1ac24ca47f25764497fc1e4dc5d056d0f371ca07688dcd29ae624fd24b5005149cdd45b2976e55664c86409b79661d5a3c93282b1c7aecde221462c971595f","ssdeep":"96:kCN+JaJQSlc8wrqcw2j74OVWAQHT/evJCJXsBDCItFiMwwj0tM:k6FJ9l274OVs/evYJYDCIxX8M","tlshash":"11c17e98de0f4f78d5037a3512555264c97e1d36b82d8333d256b63a0ca4fa4a18f03e","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:41.151362Z","times_seen":20,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/TK_Finance.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.880Z","timestamp":1782329720880,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/TK_Finance.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q7n6SHRxpdszxq40JEgXXlP1UogjHh%2BRglDP9jVbLwn0Yi8asmw3q1vlqtzzaCjf%2BjwSUXRqHhVkZKQeiGSa4kK7q6WlusHdFRtBFdpbqSVPhBN1mbsAuISFblY6ptpqNQvW7Q%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3cce-19e8af973d2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 15566\r\ncf-ray: a10e2cd38ae6723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":15566,"size_decoded":16547,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"d36fcd930ed6dfce1f5138aaf058b125","sha1":"82317ced77b1c61b6ea52adf7ffc858f93b0a5eb","sha256":"7410d59b064d0fdc402dd9bb506fce6f75da70792ea4c162ce4f8d0f202f4b62","sha512":"a2caf5599d273ea55217b66aa136665b6a2b9ba31c3eee840c31992c69b8c8e8ab9cf2a3ec701dfb1aa04edbb16cac792801433f9cdb2889ec4a8812ce955a85","ssdeep":"384:J5GoHMjSGQwq5dP0ChLHXIitqK6OHbQYsMD0ms/lo89kz:KosPOP0Ch5t2ZMoN/m88","tlshash":"ff62c04174d733f1adfa08c12b0b4cc8d805eeb4fa121e327671a99e153ada643f48c4","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:40.687344Z","times_seen":20,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/HAQQ_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.977Z","timestamp":1782329720977,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/HAQQ_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F1UvI1Zpw2Houb4SWQ0qHDb9TeEF8GAbH2DX43NKqn9ua0mPz9KVUzGWTppIbhjR%2Fpq99bzZqfA0FcuDABrVfdhHycDofGmjwc0GnJqwXhs0GImElJ7YJtHhIpkQM0Eerl54%2BA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"4bd1-19e8af97372\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 19409\r\ncf-ray: a10e2cd41b31723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19409,"size_decoded":20392,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"7bb49a685f04dd31fd0d0b19d80b3ee4","sha1":"e69d0f0e6622290b20361f35a98cd83bca63d537","sha256":"63e9f193c4ee10f7c9f7972c5394890a7f6963c56471e6b62ed7e0e3a46ed221","sha512":"6a4440f303f320612699d2a7e894e65f4e2959edcce23af4b9995e1bbcfe57b08e678ea374b467052ec638fa0ff5a4f790b872f78f0aefeacb4b3afd3e4b09c1","ssdeep":"384:tbY1ionZhX4rjV9BA3S+Ekg5ecn4rz/L6dlNdZ:61ioQ71+85ec43D6ldZ","tlshash":"cf92f1bc69e14f5919f032772ae886144400657221ca2b7d6b09ff4efa07bfccc1a463","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.715308Z","times_seen":20,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/HieSwap.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.265Z","timestamp":1782329721265,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/HieSwap.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tDYodzXLyePupQozwak9zxZMkxAQmIYkypBsqwY5Iq3k5L2m%2FLHSJ%2FDcYnzfD%2F0vJ0hgF4xXSgYvFsTa5XrfRxdSSgbH2SPubVLWSp3fML%2Bkc2KkP0abumW010y%2F7qebKni%2FtA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"16a1-19e8af97252\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5793\r\ncf-ray: a10e2cd5fc41723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5793,"size_decoded":6781,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"3b780e2f9c836ce3d5f1e573ec0c5557","sha1":"462bc6eac65c649fda1d1733b4e7436d6391ed9a","sha256":"0ec4f8d91816eff992d9a953436e53e060368829a59b8a8335abcce0037eb9e0","sha512":"16bba0aeb11b59f6a313fd1c927b161b531ac7d39cfea84a9d1f02d5b6a3a619a6e6ee21e345ba72ab13eb939a61e4434b510cddfc30d50ea79c3a5a4f7b0254","ssdeep":"96:LvL8FwKSacR4WNfyArLe7vKX5ZB/aLRmZgHcV9TpuXt/UaXxC+4N6t66jx3WGyJG:LvtKvARycLiyZBClm6HcPTcXphC+4N0F","tlshash":"3cc18fd84354fb1fc54a18f1325a6bf00cc5ed3da9291f133182172a1dd9196157a4f3","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:41.123155Z","times_seen":19,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/O3_Swap.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.404Z","timestamp":1782329721404,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/O3_Swap.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O0TCRRSV1l0RQJjqbG0UADhLwfazdMvk8tGNbPTYZOwkySngr6zrBJzU0uKqhxd7CJ7Kd3Dv2Dg48y0oLChfEpITPLKZUS0%2BD9ts29zCe1BxKnV5TK%2Bjjcn0JeDJQ5l%2FV2OyDg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2be7-19e8af9728a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11239\r\ncf-ray: a10e2cd6ccbc723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11239,"size_decoded":12222,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"ea2417a18426543379e9923651660baa","sha1":"f2ccee6ff34e5b6fc4c95ca65c8fec158c950850","sha256":"2afae9b40f34c0ca402687121dbe3ae22cf73664a1efbae7dd1e817231def3cf","sha512":"29a3047d1f15c7a96fe449530401357c8accd18ae3124fde4eff57c69a56f47ad8802b09f03e1049093b3d3acdefff89cf66f0cb193256800d3324db22bb7873","ssdeep":"192:44oG5LKud6e+g2YKr/6JEQp0eMV8MJ5qdTQrmnIVQK7yUzBEYzPYEvLdE1tgxx/r:4FGhndBeLrwEYh85CTdK7yyNYEotWx55","tlshash":"bd32b07666b40e3cd2946f3c6a883c7d81a67eecdeb4a7870265dc544e85731322ed38","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-07-21T05:16:19.61056Z","times_seen":174,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Litecoin.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.221Z","timestamp":1782329722221,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Litecoin.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vbDmJSi9%2FMiMGOy3QnVxl%2BRD3NraIPzpGYbYFk47Pw3XNZgXDK7meVQpxMrCLRH1EqGSthrxa1rnwUDdvvBd8R7KVap%2FsVJuKWehZjjfUbaeOX2RL0J3z9I16NbSbssSzguDvg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"f3c-19e8af971ce\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3900\r\ncf-ray: a10e2cdbef18723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3900,"size_decoded":4881,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"e697950d303ea56560560dedd4fd2334","sha1":"bd37e6d4130c5bda4ccb8c77e2fa114057887f24","sha256":"3da1bc0d13022561b0e40c517e851b63b87396bdf702e0baa27f36e70c71aa51","sha512":"c6419fc8e2364bb331df724e571fe9862b570006457cb48efa8b5b552d60595c2116aae7c4489191266d846a082cde1b203d43803e9856816c324d75a3f7a6c6","ssdeep":"","tlshash":"67815d3b32229fb580e611faa9a0d468e742c727f9bb661136c56630605337d9cd0671","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-08-04T05:59:26.026944Z","times_seen":34,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Kelp.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.469Z","timestamp":1782329720469,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Kelp.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=30RWhLjdvx5G16%2FJYxU2lnNyzYJR0EgNROTkKKKNrSnOPTCYHrdzynzUGWFxfpPrtgAFfMbjifZX9zpoEd%2FbKfokGJXoxFx135H37ZimmlCHZH%2FiSHsfAeVVrZ9IjRAlJ2velA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1643-19e8af97382\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5699\r\ncf-ray: a10e2cd0fa24723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5699,"size_decoded":6681,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"6a9a336ac5b5be1301032f70c3889a04","sha1":"5340fc625b9fff336b1cccff3b569d8336e30565","sha256":"4a22ffebe3f48f4e54fa3d6b7114e6babfa157bd277f249e9bba63167f0ec9e6","sha512":"98bf6d59f56c04cde6c58943bdd9ffd7dccdd462ffd3cacb25b1e255eda281287dd51d4d094b4f8052117ebd1066398216173cc1c9de9a0f848b61458151250e","ssdeep":"96:oC4RONmkGAFBrJnuhcId2dcL49PkYqZSUbetNdWWXlf3022/oLHjFbsKwyhh3X:oINm4FB9BId2dqCPSSvNdWWhk21jFbB","tlshash":"1fc16cb3d9f9e6cc9e4399f2a561ff13095f72a301c5d507d1acd0ac0121da500e6aea","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-06-29T07:04:40.906859Z","times_seen":20,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Minerva_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.904Z","timestamp":1782329720904,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Minerva_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CB%2FqbHjKuw5kJfsrGxOoHsaHI1G5txMa8LXOEnCpuIf2uKzqpVrZAIssmQnZ6h2%2FP%2Ba%2BiLfTi25UGYe2sIuwniXvIgu2UT6L%2BKrIoebn8QYx0vkrXi7q8V8pdUaaWqfqXad63w%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"5cfb-19e8af97392\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 23803\r\ncf-ray: a10e2cd3aaf5723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23803,"size_decoded":24790,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"c8669c3bce94b75289b75907d001a9ef","sha1":"bff4e5f6057286e6357fece85391296c52619f5b","sha256":"3e40f96b15d54307badc22a7139285663006d8f6fd0a393b50892515d066c747","sha512":"b617fade4ffc9a3516edc44f81054dc514a6ec4da0bf183c4b2fc8996baa4883ce492f411401eeb93ce734810a1802c4eededa82fd0271e4f428ccb1de27f8c2","ssdeep":"384:ivZMI5hhuBwmOzG0kZCpA1zqNlTcPlsZa5HBI0Nn1C6LpdeLZN:ixxTuCJIy+9fJBNN1LLba","tlshash":"adb2e1326595bc737ff519d8420443bedec280e82add19ae09228e61232a9bc53f15df","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:40.814481Z","times_seen":20,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Qoin_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.118Z","timestamp":1782329721118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Qoin_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fvm7J%2B6gFIXYBjvdE%2FAYogH5qG7g%2FBnWc%2FvC2OPVBz4dKpPK6mGEqvxYmsgBgAlR6tsU4V3YQU2jJNdY9RfeGPS0RTRG2y08gpHJvOFGfpwlkj7dl4%2BXcgoAlwu9Hkyeo4uuYA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"6d2d-19e8af973b2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 27949\r\ncf-ray: a10e2cd4fbb2723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27949,"size_decoded":28938,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"6396ca0e6f4ae4e368148e6df28418d6","sha1":"ee7b12270c8b8ba75c20b5496bf7cb9ee739b2d6","sha256":"0493e7bcac780b01597f4cd02ba1206b36de9e647e1827f92a6c4fea258c2501","sha512":"760a63428a2203dd7f1399438d07a0faf7889d8fcd2a3fc306214668d5d49b6193dd38423816d6b5b62f4f37e3da4ce018b61ab39eb267c77fd2d267f27a995d","ssdeep":"384:qBrvbOthVfX2+BvVwFNqQyI3WDb2PMbln4YHG3lfI6c+1t1LsP2IhbBHaZqjkQB/:q1vKD5m+B6F1yIo1l4uglfDn1S/HKg","tlshash":"25c2e125ae1e2fd2d0a7cddd5470d966e83a808ebd807211f9621db0ec5cb5587ef443","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:41.219412Z","times_seen":19,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Xucre.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.123Z","timestamp":1782329721123,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Xucre.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6DqM9lWuESotvgmS1bxq5HubKvGFLedJAR7vZFIuX4vLtSK4xaaw%2Fvar4qClPNRzB3gs%2FmpseYEus%2FbevvTXl5v%2BEWZ085za64BpypvGFssDoJNereON8Tp5oorurtEYAG%2BKfQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"6677-19e8af973ea\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 26231\r\ncf-ray: a10e2cd50bb5723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26231,"size_decoded":27218,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"de51b3a8be779e0509e8f4039265a4bf","sha1":"2a9ead371b7df6036c3aa48a1506c7ce961553d1","sha256":"e9edc256446c748763d2d6daacccc73dee41695a8214e3f6a19614bc431fcdfd","sha512":"4d727ebe34b937344c6d7eef6f426d4db4ac4d2fa41d0cb8ca37a7d2db07d50c9e24c57d55f955cd13c4cbdf97b6227ce47d8eca2d775e8723ab5e7c10833719","ssdeep":"768:sUTJFdCWuavXWCwgUQYsyxBMK8mR8NJieS+yzxizM:tl7CoWrgUQYNMW8GAzM","tlshash":"19c2e15c7bc5c2e55468876e8f4b655502828c93240820b2319d76706efbd1beb2e7af","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:41.17721Z","times_seen":19,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Capsule.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.214Z","timestamp":1782329721214,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Capsule.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cOdaoH%2FX0jxIV1Rw2%2B6HIuU3K%2Bg3VBda4kNMiBwhXH0v1LaYvZ5pgMHiyEL1BssRkthYesMlFpQpF9OUsZkRSXpybbcctQjuh7N9WOnAPeto7m5wGBsFHvZsXZxtj2hefOZpAg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"100a-19e8af9734a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4106\r\ncf-ray: a10e2cd59c0f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":4106,"size_decoded":5088,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"7f5f46d6f54ed2331473fe4cdc2c1f3e","sha1":"e260acc1a07e7c2b36b05e7d40e8f6c565230362","sha256":"bafa51ba8c9c912991e0168b81ef77aea2ad5d2789b742a3f3b40520b8241ea0","sha512":"9a1ab8b05eca91c0b8fbddbeed3b9825d0c6648e0c38c49cf3a76200c5c0abd608233b8bcf11d12d4f1d5ed4158be7ce0678aafd416143d553f6077de3e01dd6","ssdeep":"96:ilxy3TcmdgL5NtXgA4dSRV4Pdpzy+rX614k6Vk7F2mc/XW7F7U8sHo:qMjtgP69doWpzyIqPFYvWFn","tlshash":"13817c7ed528b4c4ddaa343929dc44b77323626f00cd9e146b24412a269be3f06e0b1b","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:41.044848Z","times_seen":19,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Landrocker_website_v2.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.550Z","timestamp":1782329721550,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Landrocker_website_v2.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UslyhYIv0v%2FptfgN73X8yyaUABgtwLaMFrgL3cWGhYlK2A1fW3EgXNCawRATXSMSjPtWEYLCwNek8PaqJhWRe07oamxHDIb0oXT089a1eIC8Um0owJglecrixAX36IKWe5bZWg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1314-19e8af9726a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4884\r\ncf-ray: a10e2cd7bd0e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":4884,"size_decoded":5862,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"ab1fff532e69dfc8038f9717c3ee20d3","sha1":"8504389bc50ce64ea96b740b0325144f88e6ccd5","sha256":"b3f5ee5460ac7eccbaf577089d141f319499345114faa7e7b70b849140269f88","sha512":"d1b7c514c8d3f83439c438943cbc27f68d6aec4271cb90e0e38d74078ce38bcb0f04db43f491d32cc22e8ab3d17ca366b92a7b08be3b38ac77ffe72077e749dd","ssdeep":"96:gJiAhlYwotxXiJ6AOFZwe2Mrw0wqJY3UsM0ScHEPrZ1i3aE:g8emw41NNqe2SEKIMTrZ1i3T","tlshash":"00a15c2e699c2d9a679f9a25697bf520082e8fc34934920240a433dcf1f79554ef8c17","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:41.255332Z","times_seen":18,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Kona_Protocol.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.125Z","timestamp":1782329722125,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Kona_Protocol.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NBtCWgbrOkqCBacEvGRXwWOJVzXhC%2FOl%2BZA4jFUonmZdyqgDcR6MlBWXSifEE1hGVknc3u%2FMexOwI%2BmXtN9tcFJUFP4xxlYc6BBajDphrCYgc91SgscbAqJIc3lXTCKa%2BtqSlg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"12bf-19e8af97266\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4799\r\ncf-ray: a10e2cdb4ecd723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4799,"size_decoded":5785,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"88acba0fd03e3f087cf31b4bcf52e4c5","sha1":"a0e26ccceaeeb3d5bbb27d33da03442d07a1cd9e","sha256":"54dc41c721be1e5d68d89c7b0889bee027f0debbae4549c58504cba2e662f139","sha512":"c450aa01f2b4d90cedb165e0af3484d4b6b4d6d4884fd4c8e8d25b9b2c1fc83935620970a0015410c7433d523a72d71e597dbdb1b1a5c45a7aa03526c7510437","ssdeep":"96:NsoEFotVtfErtFkMST5cVhfce82id7eC2ri1e5XC:JEFoJXMVVhke8vdAXC","tlshash":"32a17daa1d07285de88744f7614a007a86e7d6da87859b133cdd0efcb9c8bcc5093465","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:41.248114Z","times_seen":17,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Cypherock_cySync.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.534Z","timestamp":1782329720534,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Cypherock_cySync.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qIYtXWhLwVW4joXj6owLRYGvzXvcIM0bpBniq6X0i67uqi%2FkACADDElw0sXNTBp0%2BVFsJsYx%2BVT8M%2BxXVSjhu3Hhk7Q1GCHBZNyKP6QMma4475rA8jIbL7zxIrkleJ6cQ%2FazEA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2206-19e8af9735a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 8710\r\ncf-ray: a10e2cd15a31723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8710,"size_decoded":9696,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"ff8bfebc2854acaa59e9014348f2d480","sha1":"23750724816e4dd063913555a6f6a080e7adcbc4","sha256":"d791cf63b62474d89d9c93032cdca624b6fcfd15c62756a16b2295832440b923","sha512":"b32078c4114b03326d1358f30c98ee3d78a769a5a7c40ab1a32040d5fb79c8fc6ccfcfd30be6a5160404bca00f775f5df9511feaed09ff58412f66f9cb71ef35","ssdeep":"192:vL0+aEXRR0uTnWCoRMtepNdwPWy8WTxTPtLIgXY5Lr7Z3rI05TuEKeAV2kItJlD:TRyubWCADNdaxTPpIBhr79P7KeAV2TJt","tlshash":"cc029e85ff9878ade367e84f05c489ef28a928fd55550c54481b30178c8aad0bbb316e","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:40.63106Z","times_seen":20,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/BC_Vault.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.688Z","timestamp":1782329720688,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/BC_Vault.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FUQbGtBb14LPbBlJvu8hZau2dvCVxFY4lgbj4LMnAjgWQ20Jhdn68vBzDK5tCXe1wYcnhhG83MV0r3fIxveZRK2kU%2FJllLncX7vz%2BQvhexKCsxxtYLWEYsv9w8kXGTJEZ9fdEw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"f3e-19e8af9733a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3902\r\ncf-ray: a10e2cd24a6f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":3902,"size_decoded":4881,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"72cf7d8eaa1639eb45be214d55a24179","sha1":"6a3ee310374b07047c7043d7da9172258aa81600","sha256":"384e423a3322ecbe06e00a30db4050cb60cb8933d13139b6428487319e279eba","sha512":"753642576345e5066c48086e9fe166473bf288c89d9e5dcfb8a7a69d3c9a0d8ac26b7f51154f55f36eb3e50488b26247d657396c56582f52f19c032b59737788","ssdeep":"","tlshash":"cc81a5797b1d5b776c7efa8bda7df02562019319208c1b31a3b2f3210635cb2a1285b5","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:40.598493Z","times_seen":20,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/ByteBank.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.870Z","timestamp":1782329720870,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/ByteBank.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w377fpD6b%2BaSJCGjK1LDYRyTL9ZlceHNyKtdYr2FMVvepiyY34haj1Lko3egmFwz%2BrJoEb0UcHM8zvAYAY7jLQwUwqQuzhBZgO5fhFO%2FQpBwdDB8xHvVeMMUZPbJFzIlYK4kNw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"ed1-19e8af9734a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3793\r\ncf-ray: a10e2cd37ae2723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3793,"size_decoded":4774,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"477d79a948cc4bb75dcc0a5618713a9b","sha1":"1cbd1dcd208d3932d57f39196383430ecce3c996","sha256":"961aae5e9319ccfcc0de8d4ed90d8d3f06b50b72ace9009a9115e3a0cd8be76d","sha512":"3340603063ccf2c71860c7cfe7ea6f75b41435df65b6d52e1ffcf6823bf9e24257870b18986228321817f6314885fffeb0d1db73bcac4750c5832bf4f4462759","ssdeep":"","tlshash":"39716d4e1a4a3961e512cd37711ffdf0348fa498726a0f4320d55ed3494e631b66611a","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:40.742864Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/SuperWallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.047Z","timestamp":1782329721047,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/SuperWallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QUg5E14wM3EtVoxtOQv4yDjOOj7a9CAtCfd1rzTtdRdew7H9xjwF8HNxJywSktc6u76SpEPJtkXE7cqpaca7TU7iQ%2F%2Bf13zm9MmZCIztbJjSggEi4VfneaTWxjzXrHtdZ23LDw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"16e6-19e8af973ca\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5862\r\ncf-ray: a10e2cd48b75723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5862,"size_decoded":6842,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"9b0f79eab63b9dc9cc2147f0ae1f81a8","sha1":"cb25ea3a3621787abe934df03c7ab7e601a1c9af","sha256":"c526c0a1386d2d6d7720d6191b0a45bbb949d2c0b2a50ee9205f43ee3e531a38","sha512":"9d8033593efd64b7ff6ac3fa20faf627541909c1a7b72b0585c2f825921cd7ff8dab1ca5344efecb5f20d6d5c17cc86b5e3d65e0bc45ad839ed7dd4f76476750","ssdeep":"96:06GOJYjK0Hw6GhkQj/ZNeTB/2eIt8pYLrLKU6Ql3PznZaLWGbFv9w704oR5Xq07h:0+JYjK0Q6GhNeTB/2eI6pYzN711aLWGP","tlshash":"45c17ce7bd467bb5c7a630c78db616404a0909877a7a3b3462870cfb87de9019dfc821","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:41.03087Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Flash_Staking.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.017Z","timestamp":1782329722017,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Flash_Staking.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BEDAZDEKxavmIGV6oStixV4Wtmgwn6Fff0sBlSCynmH%2B3SbknZD1kYVjFomvRxWSGZsnl6GOwmVL5SgVuGSYliQZh08AfOUgd7coIbyRQ9MOC%2FpbWSdc84LMo%2BjA3uCF6dAmtw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2d25-19e8af97242\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11557\r\ncf-ray: a10e2cda9e68723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11557,"size_decoded":12542,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"4f074ada6640b12026adad0431e4ba02","sha1":"a19f6422dcd185772641afbc01a22696e4480aa9","sha256":"2a356ce10598e6873b87115863fc50a838570b1e418c878e48c2e09c050064be","sha512":"160c7001e0869a6d2c09c81a2db18449422689bac2d20f7552d9d1f02029fbe6646460053bd800e4c7f85ae0d000b4e7e2003e2426ee90be1d907b0d8f3464d2","ssdeep":"192:MJ/nfHwmvaJs4qF7/Dg9JRtmne5y3lueYNLapYpyqP0N9U1Ez8xMHw9uvndtTjEe:gImvacFLM9J2l1ueQaGJsN9U1EaMQ9ih","tlshash":"0a32af5bdc3524493333d6a9e7535304223f447ce602fb1b4a28a74b5a7c72968ad51b","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:40.606717Z","times_seen":18,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Orna_art.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.110Z","timestamp":1782329722110,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Orna_art.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8J6qhokj0Z7h4CBSAZCD4o%2F8tNUEZn3bXD5W7J2rqp3Pe6rhQEXn%2Fgtp9GMBYW7NEQXoiZvMT607SJzqjxneNQChT2hgnDQ8NliTQEePs0EmHJV%2FJ4BTOsyIq2yoklEP8KlTxw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2ba3-19e8af97296\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11171\r\ncf-ray: a10e2cdb3eb8723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":11171,"size_decoded":12154,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"83ae851507cc8b0e30060830a815cfed","sha1":"73eb0386d9e0e7e8cf55539bb779550b0d7af4a6","sha256":"8661320ddbcd9a3d46d6153647e574f541fd7ffd08deb7d341e84496cad24b93","sha512":"accc25bfed5f3fb7b3d0c60b82269d6fc9c824b7b2da316ec3105c714dc435f4c30020ddf9faa2847ae22b7f3a4bfc6673209df1f46012071756dc63c7025113","ssdeep":"192:BlRcyycyAwbtEkNyshM78uB0RRwo80JfCwm9HDQSKEVTtAPIwK3pznOSO/j:7RscMbCkNygzRRXCRd0AQPCxny","tlshash":"c032cfb5d0cd0d6206e5bae6bbbdb0c0ab7ff6d813796d002a71ca0e502c0b1160563a","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:40.655545Z","times_seen":18,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Cardano.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.205Z","timestamp":1782329722205,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Cardano.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xcTEsNXzIajQ858ICDbeGK1OsGVI%2BS83SGPWkKQX6vRFrdYL5Cy1wID7lQTxFzL87HmmZuYUpFETmwnV8a8hHNxdpqjx7TtqKBv4dNmq%2FfUL8%2FP4YJOwg8KJ5YW8BM35DjhSzQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"93d-19e8af971c2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2365\r\ncf-ray: a10e2cdbcf11723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2365,"size_decoded":3346,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"4d61062124207380245d3320565dda51","sha1":"53b470f89c1f21228435e3539632a91a27673f5b","sha256":"51c2a451d750cac86611619d8d94f31dc5642e9ca2e28db437d574d62e53a88d","sha512":"ac17939fa43d8722ca1b4860e6825d4e4365d91bbbf3463d2a268746c9b7189b306ea74a0db57df6b325616fa0ea0a14df1d1e4c59445fc1388443ecb0b8579d","ssdeep":"","tlshash":"79415bc31db60098950283ba4abec63d31de39ec81b369001077d4a898ef5e0aff2133","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-08-04T05:59:25.989836Z","times_seen":34,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Linear.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.285Z","timestamp":1782329722285,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Linear.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gcYiERnwtsUXHdygwlAxav9wO8Qmd%2FTqAhzq%2BgoRX6SYwEGjsNSIatmOqolUJpzu7TsUnp7uyjlnFv9OIqyKr%2F59JJwOKfUvsYjaF2NDw53kXAXSHkFfs4zEe1biYdjbpNOAPQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"469-19e8af971ce\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 1129\r\ncf-ray: a10e2cdc4f4a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1129,"size_decoded":2110,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"7b9f6121675c9c12919983d167dea2bb","sha1":"38b3ae0dbeabea49768587b787eb8bcadc57a26a","sha256":"6869960617bd8b27f2553d3a5282245c285d0db13efa1e90c690de9601f75054","sha512":"19f33504b760fa1ac1fc1a63af48eba749217f069a80ea411259b2db9f0ac08afb4fc988d6b035911503866ed48d909dcc894a6b7b9b0c396231b6306efe833e","ssdeep":"","tlshash":"5c21932099b14ea6cc78e82775142192eb82d5b4c3aeab85a0f0152177e5f3cd0e1ec8","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-08-04T05:59:25.936909Z","times_seen":34,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Slavi_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.847Z","timestamp":1782329720847,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Slavi_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lgZ9ipwbQcQ%2B9ztPtD7JkdswF0nebUmSSeR6Tg9X%2FWwfS2YRY%2B%2Fo8N6uO64X8Hiv3sx3umze9HrNSo65YPhTl6THwbfbO2LQVi0yjNh5VaeNeARSPF67DMCXgHiFHgV%2BQUXHlg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"15e5-19e8af973c6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5605\r\ncf-ray: a10e2cd34ad9723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5605,"size_decoded":6591,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"f262968dd951b31e81d49873de9b1307","sha1":"28136176acd1a55ed51910b509a37184c4627d08","sha256":"3e8676406e73b9d19a61f4bd9297aa7868202b17652b8dd3bb8fcbf4221bf199","sha512":"0bc9ff47b919c5eece4b1185bc1ccf2d08da5d30583e101d95e48736ea90e07795641124ca5e07ae89e3de5132ce39bd5a7d76e2944cbe537f4667b513ee541f","ssdeep":"96:7JdNq6e9AzJSGDnPeZ6ktFOoIrr5ym13kS1N6GM9p1WNcR72b0Co:3NqpAzJSi2ZtHkEm1n6Ge1ILb4","tlshash":"b0c19dfdeb61a70ed5a135fe017ba127e687931d4e40f320794458a8638f4488b0e7f6","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:41.131892Z","times_seen":20,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Puzzle_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.174Z","timestamp":1782329721174,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Puzzle_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ps47ocvjT2Hxt6ncReLhaC5XFIGbSB05y7lMah8oJIha0ZAOOYY%2Bhf2HOh9jZecjwNjGOqE8bgrXbAn51PNJhZeTA%2BuXbFavSWTE345KOK1UYzBgL34e7iNqgdpTkR4fJHOglw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"18da-19e8af973b2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6362\r\ncf-ray: a10e2cd55be4723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":6362,"size_decoded":7342,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"a57133fc31a149f24810f19b83f26b88","sha1":"17dc4c9ef56ae5a73d0f82ab6ced1fcc8af6a70c","sha256":"042fea0b2bbf2bdae568267e61ae4f215af06940b1f320913772ca336dbf23c4","sha512":"58ce653153c46e90dafa4d086ba564d0e047b07f138de672dd6ceea7b7c0cbd33dd1bd470e41e807cae51d223ffc255602b6080d97cc305cefa4855f2f2b9439","ssdeep":"96:+ycUvOyB6In0TmX/UFZwJu2IuG1No3cN2+5dDXhq/Lwb25J/Wlk1n5TdEjx/QUig:pp4qf/UavGTEe26dD4EaJ/WlkaFJwY","tlshash":"23d15cb50acffaf28cb792cd873f25f6159f2639a2105da248af90390c6554e7132728","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:41.074641Z","times_seen":20,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/PymeDAO.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.722Z","timestamp":1782329721722,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/PymeDAO.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xo15j6YZG8cNeSpMxV4lXbp4SULGlKnQ3hDTwlCFSTYEHRFW8yoEK%2BLlTI0ieCpvZHsFvoAPMVNP2sAG8V5uBnsNE56ISVZ739OjhdkK%2F4vgjxRg7qvjqiSSjX7JX1faOqCFFA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2d1f-19e8af972c2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11551\r\ncf-ray: a10e2cd8cd5d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":11551,"size_decoded":12532,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"ddd5dc8f3ca2169ebc667f3e95d02202","sha1":"9f7f86719ecfc42a1b1f365c6cfa6305385a044c","sha256":"88002bea09bab1c2462ab53d3e5c44416768583cd324b8c56262368e046c54ea","sha512":"bbea92ed30fadea8a094aa16b5467a9698c2ce25ef64d005c2d89c686c650856241d6ed252d44e4fa33f2d961260463852837d0ad260b48234c018e89110a64b","ssdeep":"192:nBWI1JLf8d0MLFbeTi9qcA4avpBkqM3Oxx1vI//TYVKG8SQr2BHgshQ:nBpCZ6TiYWGp2qM3OxgntSQr2Va","tlshash":"7c329e9bd1839139b9d7d82227a18406dd2334087f3be270dcb2e45ca5279e86b09393","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:40.635007Z","times_seen":18,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Frenpass.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.918Z","timestamp":1782329721918,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Frenpass.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fj4krR%2F%2BOUmqT4GNtse98CsfSzGKmFXGJmAY6Cunhn15LVpKc%2FAmvclr3FDQS%2FLH27fbqHE9W6ciZFIN5eCN%2F1%2BjLiPruZu0HlxPu0SP9kAczU7fRfiLJsa%2BDyiueh4Kz2pPfQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"aec-19e8af97246\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2796\r\ncf-ray: a10e2cd9fdfd723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2796,"size_decoded":3785,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"c47a1cb97d16815dd272712c6890ef61","sha1":"9a3e08fe4877e84b8eff4d15bebad5436a441f74","sha256":"e5309d889931cf872380454c45b8934f836f19613d39a0af06b515fa8a53fd83","sha512":"a56a477d3ef6c0145d12f509c20f122a7e30d4bc731c0979b1b00d0b3c5cb6c9711390c162aee303659e85f6a1ca9ec207cfa1b9089fb06331e477ee6472d815","ssdeep":"","tlshash":"fe51718a7503271fc49ed9e7fd89cb67b9456825d884f3e8c10b620df88998eb1508f3","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:41.165519Z","times_seen":18,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/elyfi_v2.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.313Z","timestamp":1782329721313,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/elyfi_v2.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PkyFJTWSjsSoUOLyfT0xfhrWINJCKpWftGNmb2zGLl8tAWK4SQkJtSxT9ZkWXrPeSOxVxfgkcCT4mXPM60nI8hB0MJdmJxW3QkZvoS71c%2FOZ8Ecv4Sr%2F45f65fVwJDRqWGcb8g%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2914-19e8af97232\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10516\r\ncf-ray: a10e2cd63c68723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10516,"size_decoded":11497,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"0e05609e7da46661376e4b869be28129","sha1":"571816944ebe950290c371f57303ae90bfccb993","sha256":"8ccb8006dc207d7b914f2359dd3924f3ab1a941a5790f10b557920664a628131","sha512":"d2314a58f3b852ba013863edd949ae31935b933cd8d86819037dbe7412b368702177c35d289848da2de8223d2baf544cfb27b80e4db61379df2b1e97d8fdfe06","ssdeep":"192:In6wEuH3OF6he5jinT9n4Ck+dYry+B09ygJEYdzGlm2OFcnV9SOEsdooC1HOueSO:Kiux4wCCNYyYAEhqQV93E8ooC1H7nM","tlshash":"18229f14cef7c993c71381a1576789e6b43096db361e3317f0d5101319aa5765a738f1","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.550637Z","times_seen":19,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Tranchess.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.422Z","timestamp":1782329721422,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Tranchess.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pdyU693JDU1ZEE%2BLIisQ7DVieIYIWdcLE92rowS6bjtJu0uT4s%2B%2FKRDZHU46p%2FGYjJSKxxoKPWU1g%2FnYmnPFbdzGqXbPAaMCZKjqQZm4cbfJaTp2PS74z53bemMCtTu9NCWGUA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"16de-19e8af972f6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5854\r\ncf-ray: a10e2cd6ecc5723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5854,"size_decoded":6840,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit gray+alpha, non-interlaced","md5":"c48e556180d65830d30d762c6e5059b4","sha1":"6aac346b9bff16984179f4e6e78175dbe086a1b4","sha256":"7414a5eaba72dd229502677a2d4166cd41302f842ae0173c2b8045e67533bda2","sha512":"c48246a93dd2cc747a71ce65e7a20f0a608314ed2667660fdb7befd43ad4359dff5a49164f5c300a6ccfdcd1ed3b0db79f18d23b273be93acad51e822c75711b","ssdeep":"96:DKRQ3h8V202X9G+WqVtZyCmUK98KOL2RDL7vjKcXRo3lXd9IzUKb0+G0f9:DwQ3ySX3KCmUK9bDRHLKmR0r9cUKb0+j","tlshash":"e4c19eb601381f0dce1ab25c4749b96ec27611a617d20b8498eb7d0415bc303e5f72c3","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:40.68136Z","times_seen":19,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/MID.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.802Z","timestamp":1782329721802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/MID.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=funrjx1Gj9TD8PnomhrGBPyih7m9FRXyVIrZ74ZceU2ayUvLR4Ce7GPt0nRKnC3ECmgqjjj%2FzuR2Fy41EUqWtGW7RAa%2FR4LX4iclKbKSerouHWU1wfegaBmbL36tLWhZZhl2zQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1091-19e8af9727e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4241\r\ncf-ray: a10e2cd94d90723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4241,"size_decoded":5221,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"790ba524b9f9942a35231547fda21380","sha1":"8f4e81db1da6f900c4101ee91dbfb0c3ccc159f4","sha256":"880f9022a9f5eff4ffbb96e52d0276ee95d9fdd5fd3f33e78573261fa2f1219b","sha512":"9109ebfbe8bca47a758a299943967d94cd5155a77422f633f903e8cfadd6b2c187900330b97fa330ac76ea9d07cf346af65cceb2fe7ad196b34aec245f28f0e3","ssdeep":"96:pHU/I+gGoTlQtuUJ3IVyZGNkqU9zeeGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGX:pU/IeoZQTeyZKPezo","tlshash":"4a912a78ba1c43b20d7ebbdfdd7cb9a0ab40db15200d1b31a3e6b25a4571da1b12d170","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:41.045639Z","times_seen":18,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Enosys_Farms.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.936Z","timestamp":1782329721936,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Enosys_Farms.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MDZ9Ol0kQRNmKlflQb7likCsF%2FqRMg3nReRu6OmT6%2BSak9jMjoxMAIO1qxY4oLcN%2FHg22YdOerZjaIAagGPS2CoNxltfJFa28zKK%2ByjimN0oTwso%2BEBKH3GksBn2DKyiEWPZWw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"192f-19e8af97236\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6447\r\ncf-ray: a10e2cda1e18723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6447,"size_decoded":7433,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"b13b5f200021c41413bae6c6dd3dd3bf","sha1":"a4dd532826f5448fa360b718fb13a93e5b8288c7","sha256":"712a35709fb7c95267b9e668699ec262169b7068fa7d2672194b27a09f10b703","sha512":"c75bf700b2d2120813921aae333663f2b1bb57460632c617bd4b516bf0a112dceaacf8edcbd8f34a0e01e45f72599f5cd96df4cf0a298611cf530de8c595b18c","ssdeep":"96:asjXhbwTD8NAvgS2DF2ruxgVUMmk/QkxdWsYJiJH+rMX6iyCLITzl30zVVvezwnn:BjXaD8NA4OCumpsj+AqihE0hVvezc","tlshash":"f5d17d8105b7e8b2ce6f3c79904d6f775a475cba95caa908e6700c7c19a0fad10f89c1","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:40.730257Z","times_seen":17,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Dash.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.248Z","timestamp":1782329722248,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Dash.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jH6C6LwjjoZwv4HljkyqrVvl1IhC%2BM2pO7Al6I%2F0H1%2BcVT2NHwC8eFBv0x4ESHDiYtzhSqaZyy97f1C%2Fq3g464JSu6EeMijusBymWrUJZM%2FWsVEPncaXn%2BzFAWAUdfskyvWflg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"90b-19e8af971c6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2315\r\ncf-ray: a10e2cdc0f2e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2315,"size_decoded":3302,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"87b3050b8cff32cbcfe8765b69c97203","sha1":"feddc555d1cb2fde0d064deab4805f43f40f205b","sha256":"c1743bb2531517ec77501d6a9824cc4c8da56f0a0963129725413e3030a4f6ec","sha512":"f31e267d5b781d08d8ddcf817f9330dca89bdc8f9765b92bdb6440c4084a7ed795df27d7c670a5a6630239407fb5e79828ddc5eb2f2db3548440dde52ad9e528","ssdeep":"","tlshash":"a5410839a46e0578cd472fc45a3101e17e1e36ead0f6d185202733be09571b8cda8b3e","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-06-29T07:04:40.768793Z","times_seen":17,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Spirit_DAO.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.448Z","timestamp":1782329721448,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Spirit_DAO.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DoXavU7kMAdKHpCNIY3yo6RNXV7mlocZpTvU45W7p6NMZUKLT0Vqcu0tAAGjqJ4PVjVB%2FV4i75UKYKZPh1IqC9F02DTH%2BjDH6FcgpjOBxRuVmacDDNTmr%2BTAPN4RV0UAnKtB%2FQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"5eb9-19e8af972de\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 24249\r\ncf-ray: a10e2cd70cd5723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24249,"size_decoded":25234,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"9771839dcef67d38f6aa320829a311c3","sha1":"5ac4096830aae19b835f282031c9e1e1fd64ccf5","sha256":"58802b643813ddb485d08e3b947236f3553c993c581ae15906bfada9267c08bf","sha512":"d51feca91bc7faae1e21bf6a57ecf36a20689397e597527bab4cb7c07fcb7285ac7aac47215e627cf2f1c1f48ef5a4645913378d9eb63ca98d1181b11d663bb0","ssdeep":"384:Q9Vpyv617vj8KEjl2KtuubV9FvEkuJuA2hNBihe5Z6bDgBir+Es9Z8wVQOvzOuZp:Q9Vpyv6ZfEjl2KwSfFPfphN55Z1s+3Zf","tlshash":"6ab2e0d855c4e92e81d86a4151e7f39159cc9b1e9d0ce27b16278d07d873cecd9cd360","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:40.802551Z","times_seen":19,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Fanbase_io_Website.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.583Z","timestamp":1782329721583,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Fanbase_io_Website.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qb2rq3zWVuJHyecMXL8rQvKw1qGTNCsrF6Ex2liEyRAAmxbfyJbEjA6pF0k36LmlgpGrfW8R0B9TfNsXFey5v2Gt5fK5JwbAFTtIOseHGiV%2FCH0cQkvKTF4a6H%2FPuF53ppQlDA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"337b-19e8af9723e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13179\r\ncf-ray: a10e2cd7ed25723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13179,"size_decoded":14160,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"0c55cddfad95c07900c5615802ba0494","sha1":"bc0c364170a43dda5625874b581a77a39c2efcb0","sha256":"4cf21f35d9e16d533daaa8ce6259232f7d6e8f4641caf959da53cc787e5c221d","sha512":"6fc05e03ea595363101dd67ce47e14740325b0b247bb6c8f5b31985b8fd3bec863baf7cd6ef8fe530e80543ad5c7922f03a43585b119b4dcf45f78251d723125","ssdeep":"384:cST9+/BfdhaPb+NW72v8GFcLk/E+ubeOxna8jrFi9:b9+/Bfdg1Kv8RiVIXQ9","tlshash":"dc42afe8cc42368454f93c1835a983b716ee8d3972b269afd2346775082afd14b68ad1","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:41.005139Z","times_seen":18,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/3DNS.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.859Z","timestamp":1782329721859,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/3DNS.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JDgMb8BuRIHg68yZDyZ9u9dI7U6cw3nHystJv5YT%2FE2qbVft2Y8jpqwZF8IHkZLwlTPNiNcJiCMlkL3UmYC19rL4Y2Mb%2FbkF10AE0fqJBbzR0SncuRpIzbgDn27%2FA5yW3jbhZg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"aae-19e8af971e2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2734\r\ncf-ray: a10e2cd9adbc723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2734,"size_decoded":3715,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"02dc544d2be89acdcb42bedbe0799b8c","sha1":"2d24886521aacc732e9cdfe2ff2bbcb9b3602acb","sha256":"e290098b34acfbe68431c8a74fc1b906d44ec0b48a1762d3a71236a97d43d636","sha512":"86dca3b5ad0eac0e9f974340cbd5d200208d793864aee0988712d5223fe5ae8ffeb1f1568a84c9e308dd645a495cd9974bfc1023bc83396a3708a7854dcc99fa","ssdeep":"","tlshash":"4851598043765ca1ce923477482d92ab46be26d06b4fce004e5c828d3b09a2ef3093e2","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:40.805784Z","times_seen":18,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Stasis_Webapp.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.102Z","timestamp":1782329722102,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Stasis_Webapp.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mw3NWSaZGHGPkhs6ysQa4XZqjeQ22nP9lrKmVPnXKxkq%2BaMjFyqCJe1XtryGAOPWcOXnAQYHJVHd0HSKqXZ8ZD0%2BlWl1x9f6qNS6iy%2FNu3nsjtAg4yKH8r5UOHipquEZYNknUg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1956-19e8af972e2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6486\r\ncf-ray: a10e2cdb2eb0723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6486,"size_decoded":7468,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"368d71b34c154b702c1043ecb5743b2b","sha1":"9a03c1f3daaa3b4d64690eb2fb6347590e60f64a","sha256":"f04d57536016cb100cfe6ab05eb2b7d80ec3b790ab75c5f533a4caf67189c9d6","sha512":"643a6355857c87b215f3a67d1f42051d66979ac241fab724b05ff38a3da8d7982f29c677169c75cd12a4e7c93e9f147223ea957b24eaec45968be52a6b1ea885","ssdeep":"192:Lpc80VkLVUbekRrpCzhzMfSv4IWynpaQc:Lpc80VkLIRduMfSv4IWT","tlshash":"4ed19e844210facf1c7ed1c76cf8c648d621f636d66c68e751aab3c00cbece25471149","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:40.583115Z","times_seen":17,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Frontier.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.294Z","timestamp":1782329720294,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Frontier.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qfe013JxN%2B5GxB%2BgMu8PYmVABb%2BIwBwtYOo3BqKIu9UXgrjfdkLRjOaL%2BJoedPe2Wza30kuMb9vcuuuBEevxFXOh3GXxmP0EUmgoRN9SGmdHZr3T%2F2iWvSFF3h9y6St0%2F7nnQw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"32a3-19e8af9736a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12963\r\ncf-ray: a10e2ccfd9de723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":12963,"size_decoded":13952,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"154b64fcdc192ee08091d7a2a42fde32","sha1":"b3df4bb5aaaa88422f3f266cdc62d784a1bfe746","sha256":"52e327ce03c614fa46fd831fae4ce721635e0f4ed797dbfa05c71c2f36b68bec","sha512":"53ab57abd879f44c308278fa48003aa4e0985fe231981e4b80ca9ad99baa0e6a8ca9d4bcb43c58e3a8e25249e563615e793bdf1aaf0807ff8cf104426b75c859","ssdeep":"384:vA2iLzwtOInfgj+D7I0OhWTDUpGnWag08z:42iooZj+D7I0OhhGnV2z","tlshash":"ff42c0a0a0bd9e72a69d06f7589252db21d068dfd71f701f734a4e3cda35178f4482c8","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-06-29T07:04:41.009004Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Unido.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.025Z","timestamp":1782329721025,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Unido.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b76oiARd2JddCjfd0QCNO5TQaVpV1p2DaL8wLEb4wZmN8iSl6LCjVcoe6%2BG9p3ArVD1H1%2Fa%2BtSytROnfyFHR2hHOplzmVGw1S%2FOsa33%2Brj88Hcjow0BxONNpu9ymdkAa7PAiyQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2362-19e8af973de\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9058\r\ncf-ray: a10e2cd46b67723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":9058,"size_decoded":10044,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"6d0da941f181e6e026f68ef472f4de54","sha1":"8ce97e83efb5e09df3618b08e80587db485243e8","sha256":"93fd1e5a4ee66c5e3e122571be15b5ea267139b4f6f36583f878728a1678b1cc","sha512":"ab388a4ee4ff2ea7e48235513abc4289d52dfe321fd0be62231145247ed3f75d4264b9e4d5906daf0fb298eb24d9f14b45df05eff441e15d05dafc79b2d97b88","ssdeep":"192:Nl5B172OeRFjkSlhksehaAMjHnrcogvOID8NGQC6W28ZtLon4oc:lB7+jkyhkUZbrcpvOID8NGQwpT8no","tlshash":"6312bf56da8864f76efa10ef015c2256b5d4ddf96c87b38d0c32d79885d7d88c954034","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.866478Z","times_seen":20,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/PEAKDEFI.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.145Z","timestamp":1782329721145,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/PEAKDEFI.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oBEVsZQU%2FFSJiQfu3HT6WMqmMkt8PTx6zagbA%2FjCIZi8kif75viRxNyRkSFaJ1NsUtOI%2FwfRjc3Q%2FCpC%2F78vpKEUiv66yiwV4vxk4oXQEql%2FmKz%2BE%2FeFeI%2B9MSI2mhYx1YzasA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"5043-19e8af973aa\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 20547\r\ncf-ray: a10e2cd52bc5723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":20547,"size_decoded":21542,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"14422786711925f25f80c7bbfa072574","sha1":"81e1d3cbea4b8f47bc12ec7b6f2a4622b0d24187","sha256":"758028b6e1c256bce0d778231abeeeace81deff984b90392f1cae5cc13753517","sha512":"1e18b0610fd9388015b1172f674d28da2561befc22c1b1e4e846ddec37609b682e74b1b9f821c1777e1a5a556b8a22c394d0abc5ddb6b327f7a83defb43417eb","ssdeep":"384:YolWLzLMK77g9nuPavphzOQFOJ8MvlLrVhQ9fYCi9aaaaaaaaaaaaaaaaaA:YolWLzD/wn4WOQknlNhIfTG","tlshash":"0e92cf0e7a084f7042769e4be0db0ff6d9679dcd1387191c962ff662817d484c92be68","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:40.627438Z","times_seen":20,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/RSV_Club.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.877Z","timestamp":1782329721877,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/RSV_Club.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kPlyPMrjkx%2B5pZxFXy26RES0CwpaCH%2BOE45sEk52IBet0shrIV2C90yeyfRpcHT%2BG2h%2BtBUhXG3X1oCnPM6lYGwcMHCqMolGlNeyvT%2BcWABIyv%2B%2F9bCBkoM0eBzoi6M2BiCcbA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2752-19e8af972ca\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10066\r\ncf-ray: a10e2cd9bdca723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10066,"size_decoded":11057,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"bebfd2b87cb9b65cc686835454168a9e","sha1":"4cd4da486f94fb9c974e1a3d8bd58fd975a1fb5f","sha256":"21928ceebd6b10cf23874ab9f67a36bede3d0f9f7edb551a6a3f2d3dcccf8d5f","sha512":"e60753f22719246a288eee424f61b2c9066b7503b20b49bedc398a2726d7d7349852d13233494f1a013b416f9b4e9713248c8d3efe73c9bad86b5a3c93213dbd","ssdeep":"192:mIeCn6xc9YDY5Je4hQVEwz2Xao2namVepJse4iovpMZeZ78nsST2:le++c9FBCVDzcahpVZe4imiWInsST2","tlshash":"2622bf1df81bbf6feb803432dd1010d0b649d2c0189beebe07636c92759e1c252ba84e","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:40.865285Z","times_seen":18,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Crashino.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.175Z","timestamp":1782329722175,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Crashino.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=78OTC8yxCAUkrHkr2BhVGgG03vvHz%2BQBWucsVr1i3rUpeTJGJHXni%2FUObzLCDbrpAw%2FpTUZNmgRjEAHncNXJ5u7e9z3Pgsh1oYAvIujLvp8p9OyKnG9wzI0j1ndxBtC1rXNQNg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"344f-19e8af97216\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13391\r\ncf-ray: a10e2cdb9efb723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13391,"size_decoded":14374,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"e62c7a55cd1c67ff4a7b032931cf6746","sha1":"83ec76f98bf32ae3a3213213bd0429c279b9e5a1","sha256":"7f0806e717d758b23979243525a51ce21cfcaaa3003332cee97819635d1b4b55","sha512":"9f59d913e094f2fa6ec2f6ad43a8966446c019bfd9e116851e324291d53ee836db0b3c66bb9868e2577f8e9358e658606c7535da21de0519604aeb28d47614c6","ssdeep":"384:NER9sE6LcEfLdA2DU7J+cgPP3WVouvXux1kWs:k9s9LfRRDU7J+ciCoYM1K","tlshash":"a052cf5cf137319d1d792dcf0513efdb7e7b3d0264e2e80888802a899459a6d1f8ae5e","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-06-29T07:04:41.117086Z","times_seen":17,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Aurora.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.308Z","timestamp":1782329722308,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Aurora.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ORSBHHehsEtQkjxYdmH3DG2f74X0fCGiwZDjyr70%2F6anHr%2FiMnBeUb2EahlL51gr0dhRcsNnX0qES5pcUmVsb1ryXKFbIFQFJ16r6YfctCrpNPDgB6b53wtBWmWPCaV8SkBYtA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"62b-19e8af971ba\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 1579\r\ncf-ray: a10e2cdc6f5b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1579,"size_decoded":2558,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"043b95a7107c17cf312b8359e2f7cb6e","sha1":"fea9aef92955d2c1824c2723cabcfd4585006649","sha256":"077a9090ee9f884025cc9991c67a293ec95675e9bb14c4dae63938cd27881246","sha512":"d0e83f935183cbe605690d08582fe2e4259fc5979179bc06ec652e3c7e2349af3b002183ac00ed08fc9043740233b6dc27e09ac73dd2f729fd59ade7ba98c65c","ssdeep":"","tlshash":"78312a45c7929e3b8da745bb8f02dfa89dd8d3483d28454140d101ac328a8abbcf144e","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:41.266844Z","times_seen":17,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Liquifi.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.284Z","timestamp":1782329721284,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Liquifi.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9lUR55XyrJs5RpMDvubi%2FWD4Ms5svRzbvZZBvv7%2FjLRgsNn8a1qx320MOYJ7EDVvan7%2F7%2Fk8kA7ib1g%2BcMIxVuF7MC5VZTjaCL6vx3VLbxgJ3FvVR%2FS29XVxute8Lzl1BaCziQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2500-19e8af97272\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9472\r\ncf-ray: a10e2cd60c55723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9472,"size_decoded":10460,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"d0892abfb368685e02e240e4cf3d53be","sha1":"58928dd006418ea44e6a5c1f8b1779bfc29b6789","sha256":"952ad6046491bda2d73a7b4467301765a2b1e5fc480076982245badb98be4aa1","sha512":"b03c1317a51c5d86251a529b5078efcd5fb64aeb43f2f1fb511857c348c8b93736c4c4ac10681f9e7b3d7354f67ef4609e8d62316495d47cee99536df2440c10","ssdeep":"192:nwjuUE25Go5WKeEFOpLNIe+MSwXQbp4eucd2Drgl:wjeCXEvADwAbeeucd234","tlshash":"4312bff62dad270e5e3b9286e5a4357be5ce6824193068572c3a14e7656fe18ec20ac0","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:40.576655Z","times_seen":19,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/ChainJet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.370Z","timestamp":1782329721370,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/ChainJet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hsrlnb9PgfLFnjCs5wXOTOkgh72w2E3EpucxaRFQagsCYzLm5E6BzwDwlgHmnd7%2BOP%2F8aql5qscCGOG%2BoeLUIJ2tLgpY4ByAghoXqHyj2XM8MOihwq9lo%2FDRIc31RM0PJxsbcQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"31b1-19e8af9720a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12721\r\ncf-ray: a10e2cd69c9b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":12721,"size_decoded":13706,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"f8badef1ea390af061ad3f55f8a22567","sha1":"fa78da900e73baeb8796af93c6aaac7789746196","sha256":"dcb2831983731d44fe167f8d91062cbe1b768375a9c401bcb2b1b12ac7becff1","sha512":"b210269acc51f692822bb0fe9af7cf8909ebb032723b3cfc7f82f282ad362824f56270e4c8eb72e4fb7a59e3417149655eb33eb93ce873b91f9f33b4c50a5f5d","ssdeep":"192:7XLgMeq7e/bTI0t3Sj4pImW29GXR+Uf5hgz14K5C5HG+j2hjw:7X1a/bTldSj4HQRjfA6K5U32hk","tlshash":"1442afe7f056e212f1d64347eec67052a585fad839c4860d2fff053e72a93181754296","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:41.097407Z","times_seen":19,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/MEW_wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.325Z","timestamp":1782329720325,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/MEW_wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4g4IILUNHEGwIkp1pMiCdLHH%2FJztdc3b5kjUn3wVHZFceAgpYGf5GLqlUoUQe5dF8SQgKjVg5JSbWV3X9yoPL4eZ0MEGRgSdZl9s5%2BPRYBGMZTz3oa5WUeGSdwL%2FboHB0a1VQA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"45fb-19e8af97392\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 17915\r\ncf-ray: a10e2cd009ed723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":17915,"size_decoded":18898,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"05cb5ab0a1b4b48fffbe454928898b5c","sha1":"96c6252720668679dc730d4c832991d3ff03eea0","sha256":"0828f2447656bbeb552af683cfece664a0211ff8fc1041d511428e54605ada86","sha512":"ba7f12c17c2e21fd5eef67f7b1e880f125adf98697e974ab63a8dd28962f4ba4a160214c94d74278abc33bb75658305f02fad9a0a3a90570dea2f56058ae730b","ssdeep":"384:uM6mYkwrD8o3Zs9SGdm7D0j9cRhxMSLmoWnMmE:uVHXP8opNGIx7xMSLHpmE","tlshash":"ca82c0e0b7da9c43d8c7abc6c6c6a053132a52a5b07d1cbab246751d72e1be30479873","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-06-29T07:04:40.773044Z","times_seen":20,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/AlphaWallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.328Z","timestamp":1782329720328,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/AlphaWallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RMhIKC%2FLv7BylzdxeOcjrkgJcqggHCarKRHQ7AhvrEqWhVWSAWb4py4jvdYVkVDD%2B2EvWV8Qvb%2F2Zny%2FBi4W%2FApapX73IVTYVxFpFY%2B6gqaLm90df3fr8dnzRLkjUyCJwwK2cg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"c65d-19e8af9732e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 50781\r\ncf-ray: a10e2cd009ef723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":50781,"size_decoded":51770,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"5460dfcdd458d673261e80f149423dbc","sha1":"b87c99076c60c1a2befac70f86676b0753e8af38","sha256":"554e5213bf5a1ae104996e02f40b44682803f40df634342b37795f1f354a3c2a","sha512":"761b8fb903ef4e3a2337c155b08dbfd48daf69978d3ee7a3016bf92089e88c3c4f39a0933da588edacfda394a5570f1ab0808726101071a2abbd0cb5e08a80a5","ssdeep":"1536:RZw790+mDVn0aTqAtXYp726XpRnblortWp7YLO8WW:Ry7En0a4VXpXortW2O8WW","tlshash":"f633e0bb3c46634fb35c96156b832ebb0129056f9c50353dd96638d7b0eee00578ea78","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-06-29T07:04:41.17657Z","times_seen":20,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Card_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.838Z","timestamp":1782329720838,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Card_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JSpJhnRv3WiKsZAw54%2B%2B%2Fr4EQCp0Lx%2Btj%2BY%2Bz4%2FEVybUb3G7b%2BqfUuo80xSZ6l6FqYwZx2XL2KVZScxs25BSpsiHQk6i4OKcQyh7t7GnYSygXkcsnWW2rf8UoXjCHlHL4K7Rlg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1900-19e8af9734a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6400\r\ncf-ray: a10e2cd33ad6723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6400,"size_decoded":7392,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"36bf94994b5ad9135665cce2679819ce","sha1":"3c0e4075cb68073650a76ab5f7432118ab5019ae","sha256":"a157622511cf08b929ed5e3482dd0f1428802a1eb358c6f554cf6a7039ffca14","sha512":"52f68be6b5f1a707500cd83cbfb5663ee09a94c2b69e35a438025e2a874f065140995f543f8229bcd255a5d1b69f4f4f27c977d7e16237bb48e65fc39e91ad26","ssdeep":"192:KtMs/8c0TaYMRUmO0fIXm97u2P/RDFQ3LEXanyl8DU4C:KtdH0+YMamOiIXmDpu7jDU4C","tlshash":"58d19e6fef56390619219845f88fe9ed0b32b1832773347a04ca455cba1f2be647634d","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:40.714742Z","times_seen":20,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/AmazeWallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.038Z","timestamp":1782329721038,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/AmazeWallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gn%2FREfhpiwB5R1Psew3AxSHn4cxmld0xP%2B7uKKo%2B04zSzKyr3nKME2eHSUggWGvZCvghilmO%2FL4HCWw2fROHuxH%2Fpjo7AN7vszc0BanSfsbBdvckbcB2UDVlPvn2sY0X4mcs0A%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"154d-19e8af9732e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5453\r\ncf-ray: a10e2cd47b6e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5453,"size_decoded":6439,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"4d4dac184931f4b31f648c982c97dd10","sha1":"0a346d0317281f37cf1ae82978e3792ac95249b7","sha256":"ae40e38012ad73ae6210486e6e2bfb7aff0058083529e19fb4d28918e5de363a","sha512":"264f4052927e2aa129ad8227d0abe584f012fe0dd403e18a1593b4d12992fcbf8b9cce3167a04161dd18611538d4adec548c18b0a58df8c539e9b90a3c9f3a23","ssdeep":"96:YTQOGdIdULyF+LY5qWRcfXJp/eSv3yMI0jDfq7Ub4iKsj+NyK:WDD6Q+E5q04XLT3yMI6DfqIER","tlshash":"6eb14c936e3cd4369e302438ee5562925c20d7f6b3b64644c283a8a1ed7c558d853eee","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.830169Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/EASY.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.044Z","timestamp":1782329721044,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/EASY.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AoDWkxV9t%2B63KxYO8MzbhrZgjQv3whDoBxh5JPMKmZSOUC0n7kXm7qcQv30VV4e34QZg%2Fp8CWR7DrVgP8%2Byiz7eMy6g6KyzWJCtW9RFD1A%2Fd2vCyEuhNn5jhlJ6fscHPiNa1aQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3e4c-19e8af97362\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 15948\r\ncf-ray: a10e2cd48b72723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15948,"size_decoded":16933,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"84c0608dd46eb3950e0c7c4ab03c3fb2","sha1":"072c7dc772680e003e53fed1cbf044c32fd3fe5f","sha256":"696b23ab33d69b3be883f019c98eee528cc623f303933a6dcd7f87427691b1d4","sha512":"cf88bd7d180956216286bc6ed53ac2c389c061d7c7c41e4a5db225033d8f6975b347bab4df42544a78dab160a1a72cce093965929c125661b21b6ca6edfc6a2a","ssdeep":"384:9HNuK2zz1CIeZNFx8qyCl/AjawxfApWbPgoCtkNRd/SXO1:VjizELxbFAOwZyWDgoCt4dWO1","tlshash":"2e62d02d7839e8da6ec3f186c708642ce964a68f08cfd2d853ac31efd0d5a5051bc819","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:41.049244Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Cartesi.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.741Z","timestamp":1782329721741,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Cartesi.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CNT0jhGvrAT5Jf9ZR86Bohw89MFGU83BRBgXwV2fzID3CGEmagLcnAA6EgdoennjYSIxshIruB3eCsBFgyL8e9%2B0lPU294QRKp3WQbLzNRnLgGPxPLCto%2BjMyM54KhfNXpzo1Q%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1174-19e8af97206\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4468\r\ncf-ray: a10e2cd8ed6c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4468,"size_decoded":5448,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"57cb0f9d0b434054c5ce17b4be3dac82","sha1":"38324e647192e412bbe56d8cab1c567527b81c50","sha256":"398b81d37acc9859dab886135312bdd885dba7528eb70079786aa2c9a6d98477","sha512":"3e7322b3560abfbb56caa1c768f15a6366505f29c713ec74edbb1c7d8c3c3e84c183f1f6812b27c8be562ac1290f4176d4963a2a7bf438c97df9938962027dd6","ssdeep":"96:9tP/y7Jrxs7h9W08axhX/vuXs+4HifWss4iWHquQK:vK7JrO7m0VhX/G8+4SWZsxr","tlshash":"76918f8221d0d8d5e5b9fc35c6ff738ff6a0a5208d610263ba195a1cb37308528aea15","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:40.609553Z","times_seen":18,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Infinity_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.423Z","timestamp":1782329720423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Infinity_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4DVgCxfw%2BC6Cu5wDmMEMZrBtmuTIAwO2X8Y8cQ2zwd5cpTLEk9QvLOShYJ6qxZi%2BrwYoJSgGhGU9HVHQd8g8mXrmaoF%2FQIFV2vrav7q0WlKOmI%2FZ%2FnTU21YcKggmFb%2BB5yeyNQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"348c-19e8af9737a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13452\r\ncf-ray: a10e2cd0aa0e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":13452,"size_decoded":14441,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"2d5d3efaedc36b84fac3fdc5b8640ca2","sha1":"818a9c31014842115cdd166362532fb7377bd193","sha256":"619b677dfc3e81aa802e75a97342aaa6b87296e283ada8f64441267619ed7c3d","sha512":"225f9ddcc86e77591f63b7540156ae47d475e1ba07d8014c7c612d56a28ff4fee781b801dae2a725860d5a581544c28857f072f846ead00919d509aa16e78dd3","ssdeep":"384:xuPB+gTU7dOM6b4IKVwiKAYa5idPNBiUU:xuPfTU7EM6WVwibWPfU","tlshash":"d352afdef1e22ef2b5403f068f75503168318186d4f26d9a13e6d604fc5cafa79a4e89","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-06-29T07:04:40.635964Z","times_seen":20,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/js/index.js?v=11","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.180Z","timestamp":1782329721180,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/js/index.js?v=11 HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"46b4-19e8af973ee\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 1670\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ExLF%2BgMHUZO7iOy7YgKXldhOzDvAwSBIiuTppX2Rnsla7y22RnY5VMsWBYThni82g8KRQZxHlL3MgunHVWUupuwI7jIb%2Fs%2F1EMJxjkiP71xgJhVCB9%2FAZZcskCp3q2FPT6Py6Q%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a10e2cd56bec723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":18100,"size_decoded":8969,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5880), with CRLF line terminators","md5":"8956c8a7f4541aa0602cfcee34246dd2","sha1":"c9da51f95da820e819862bd8e4396f95d6a7a395","sha256":"3b60d6bd6ba0a274f644a8f30765681cc71a01ce23bd284a4a279329ac74f39e","sha512":"a1990ee4f47d4b5a9bd9e19341e7d365636adc33d4fd195d8b2c4d6c8f581ca59fe2199622849f61691b3748aa7410fe2b07d77db6890256d243cc66b5da60b6","ssdeep":"384:XMfrXDgnMA/7e5XG3/eiCi3dyN5KtMytnIg2Gkwx:XMr0nM67exG3/vr3dyN5KtM+IgMU","tlshash":"0582d66aa5781574c07f533f63e79aa8f5f0005b35418a027e6c88851f39c9269e2ffc","first_seen":"2026-06-24T19:08:41.900128Z","last_seen":"2026-06-24T19:36:12.505083Z","times_seen":3,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Lens_Claiming.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.287Z","timestamp":1782329721287,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Lens_Claiming.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TSE66GX%2B5EXKQSM1qc536BMkN0dipjUoWq8ZhDq08LZpYkbQ07nqyBFXRZtbZqZbQ0DwUnmMEbENP8ztWW3L2Ee9mdv7g6MjhYxnYscQaLM7OYb63pl1bhL4dJ3nrwtnEUSF2A%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2e0a-19e8af9726e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11786\r\ncf-ray: a10e2cd61c59723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11786,"size_decoded":12765,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"ff2340e8566a5896624d36a04f0f2e32","sha1":"e2d9b0d238a0a955bee225015a45a80b1be56105","sha256":"551144f56df7b3e0de026855aa6b060dc5b56f291c6e60cd52c26e1f73401443","sha512":"287ef1bb019f4c211baa8efaadda0b858ba50db5abbb27998dda668af5ff9efec521d69c7874a85d9aa3d071ffc94bda9eb5ccba0cd336c5f51bb5b546da3dd7","ssdeep":"192:7XM8cAJJLoqG8Khv2VteisF+N8wF3Dl60a8gF/ps5dUfAYgT3IK4H:7+AJLon882VsBwNDU0a8gFxIaYYQ334H","tlshash":"f232be7b01e46992ce31b9a50ea472735bcee56d26224e3f7067ca74c9c009a1d19bc1","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:40.642322Z","times_seen":19,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/lifeform.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.543Z","timestamp":1782329721543,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/lifeform.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l3ixe8Ky37HPAouPs61yLjJzM7ZfJ71YuzP1kE6rXmncoBWWz%2Fvgoy4q1uUGq%2FL28v5Y4uoaUvUr%2B%2Bde2Z15r%2FBKDm3JIYlPErNXMb5CnF3TydfZLdM8ywFstKL8nqvHLjxFFQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"284b-19e8af9726e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10315\r\ncf-ray: a10e2cd7ad0a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10315,"size_decoded":11302,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"e3dfdf15ae9f21693426d95fa40c35a0","sha1":"9f607fc77b0a841a036176e10cd40012bc157cac","sha256":"ac07f5c014f487061a4c8f1a5cf690efd1e7214cebadb5640a8c5c00d28a574c","sha512":"82512b66165ef82ac4d46002fd1a07da2bcfe089b870373da0a76d79d1806defa3b402f2fef8bdac3bcba3c0d64c82a8fa57f31a54303ce159005b779427f115","ssdeep":"192:3xWy1gQ2Q7I5YXxOGu/OZN/k6qwlmIjFZjcddO6vuyNgsJi1:3UmgU0YXxOGu/OtRYIIrO6vu8FS","tlshash":"ca229e5ee5fc16a098c93733509382c81378d49b0218cd5d9987b43d6c1267f931817f","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:40.665063Z","times_seen":18,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Nexus.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.888Z","timestamp":1782329721888,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Nexus.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ib%2BqBA8qAFB7wEL7ZsnQ8G3xUtvLeTPQy1Fp0J%2FCMWe2UQjhVFV3UrpfFfcFX10TEKxt48NflldIS50vcGW32BwWJZMpmh8OJCHcK0cl1VBi%2BTu95zwtZNqmrSmC8VeWRdPhTQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"124a-19e8af9728a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4682\r\ncf-ray: a10e2cd9cdd2723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":4682,"size_decoded":5664,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"14ab147cee2d482f513e71a4040f1706","sha1":"84463880fba6251a698900e2e2ea675fcde8fa93","sha256":"45156174bffe12d31a31312db25497be97426f6a101208eea601cd2b8765a720","sha512":"6f0c707ba02c07ec09061cbbc66eb4fb53798041ea6f18d297699de091e257ee1a1e63079e95f5db294b4f8cff0106031523e97f986c4d210d54e08b4ff27348","ssdeep":"96:ueABloTgyFr29OVg+LcI+Ti9Vs0vo+YstkQYSTCXNRp4/WFOVYEI:juibFrI6g+LcID9VsoLnTiR2+AVA","tlshash":"d0a15cacb3a368f8fea4f53901a6bd1c44216620942d3e4d4ae66584ddb601ab7d8e07","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:41.240601Z","times_seen":18,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/EarnTV.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.893Z","timestamp":1782329721893,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/EarnTV.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9LLKmyFPcu3dEotZ0lZL0LLTrpXShRUX2g0Kf5Mv6W1luTfbNyB4mfJYEhvrNaux8BiGpogOeW8lNqvXpQ3s9Ll60phUjwOxnpV6AMz%2BRMac%2FrGpskfBCM%2B8UDhrlRpgUqA%2BCw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"295f-19e8af9722e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10591\r\ncf-ray: a10e2cd9ddd6723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":10591,"size_decoded":11576,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"f594f9132a43431fff86ea4f82304529","sha1":"060e4ad5b242d2c16bf316bd89e1ab7a95112d09","sha256":"70da88224955ec8ba88500fd8877d4f17c111a2fcf70252ce88c990f34b0244f","sha512":"19b3cef7088c69c742b9a708265bbc7392518df5e11d446774c2635a9cd4a25960ee9bfdf7ba47b2c0a0780dcbf0cf0cf33f82fad56e321622bc12fabc2ec9fa","ssdeep":"192:NKl1pfm3835rMBQyad7WYwwCAtJDH5fYD2u/AfovSaszFeIb:NKl1pufQbYVJcJDHqD2gAgvSaW1","tlshash":"2822afc9c4c3033b9b989c76bdd56aefcfddc144c1766bfd9ac05a08040aa9553845d9","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:40.729548Z","times_seen":17,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Vesper_Finance.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.957Z","timestamp":1782329721957,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Vesper_Finance.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MhJZHcBYQds6C8pF9cnbruWkdeyaZ4ZwSB08yIY63ljEaH54fb5KX7K9y3oacx6hcQphVeGXFge594qNhDqSI5cMOmz8GvR7UYKTk77MA1Ik8UkiXMzr5QoQe0oXGW84oqg0HQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"14ea-19e8af972fe\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5354\r\ncf-ray: a10e2cda3e43723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5354,"size_decoded":6330,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"4976531bdbafebdea74f44cc0015fcb2","sha1":"ff29b9bc04a1ae83d2df786b76f890c1425297b0","sha256":"0c0c88abebae3457358e704c153ba43b5689b20ab50b375009a456a601d08934","sha512":"6fa6055e2ef649162097584a9827dce71d01479b817a3edfccf9529e3b4799835c1b5eab8c6b2e619e70527cce3fc8058e7f63f56b920cb380fad393fad86bc7","ssdeep":"96:TLkccscccBAcbraLB07+SyYrFzKHCgM9e/CJmJnDPRXPd9TWhE/SujtxC9vgZ91f:rPS1Zzde5nDP5Z/S6Gc1vgS","tlshash":"12b17de98e847dc44055b54d84181d36ea9d838d025fe0cfc1e690c85f5b6a2ee3e6fc","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:40.967685Z","times_seen":17,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/WASD_Sandbox.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.028Z","timestamp":1782329722028,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/WASD_Sandbox.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CWMxvX3NBtGxP0Z25%2B59uTsgvXlR5OAh39qMv7P80tKbVJu1yP5XkJUqLd7sje79ZiQVzIpwEYodnW6XMLytoYzRKUGd2K9q2yLXDUIR0MiPTQNa2m8wzu0%2FoY%2BPkldExlg4OQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"11af-19e8af97302\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4527\r\ncf-ray: a10e2cdaae70723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4527,"size_decoded":5509,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"959d90094ab9716b4e5f740b6d5c8c61","sha1":"a19ee2fb5f0453d32dfdb6999194b43817f24b9c","sha256":"c356beb0f6c01d397176a06a18c8393036b3992e61a6a2873c18db9a7e01745a","sha512":"8deec796511c4e23dc94b14c7cc50c7e925ea193b00726d1ce103430a800c3711a07f66ccca11ee0c439a732be02c23769c3da1d59ec5db6fc952925302d6655","ssdeep":"96:pzgkRxf9raPivErwCVRmNKr+rh1H8fqINpLfBmL35fPY+zbYy5:p17ErwyRmMQh1cfFNpTBmjq+Z5","tlshash":"b6917cee1655c079f68cd17cd2c58d289e92a81f7767a30864f6e820d06fdae26d2848","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:41.090974Z","times_seen":17,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-24T19:35:19.985Z","timestamp":1782329719985,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://skyroon-claim.xyz/?__cf_chl_tk=spPIa73jbcVxgayMT3JHUvpK2AGA7G7WC3kcs2Lr8T8-1782329713-1.0.1.1-7bS78dYZqN0yP3aqqp9DWsFxILZwhb_zdFRbLJgI3Pg\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2093\r\nOrigin: https://skyroon-claim.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nSec-Fetch-User: ?1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=0,i\r\nage: 1671\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kt9R0I2ilrNphyodqNwv2bVWen3dHNEA40DKvRTqtIxV6T9XyXaYkegtj0KpatVDMXvVnZfWgKp2jJZrSn22XwTCJwmZR4od52OA%2BpR2DvUFiZMFiV8KLCJSqOFtD6GeSqU7ag%3D%3D\"}]}\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a10e2ccde986723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"EmailJS:4","description":"EmailJS is a cloud-based email delivery service that allows you to send emails directly from your client-side JavaScript code without the need for a server-side implementation.","website":"https://www.emailjs.com","common_platform_enumeration":"","icon":"EmailJS.svg","categories":["Email"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":252466,"size_decoded":34438,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3575), with CRLF line terminators","md5":"9e3356ceea6c679b7624845dbbf424b5","sha1":"bab73e473e4e4afd7e6745f10d560e2f59cbb274","sha256":"3193139ba7b30e5235696f48435496ef72d59a0a9d2a4602d5a75f39894ed602","sha512":"b0ced327e9c08edb8554ea6c0e4fb121dee07fb41570a90b465207230f951b2e40288cd01ba58fe4b46fc3fc51695353f929d2a51b3a7e6c895cffa60d7199b3","ssdeep":"768:JQSOWgUzajAx/Dkml4urP/AA7hB12DBg34bE6n3jvDRV30nM67e9XG3hJZxT3k+4:Pzakx/Qcnj2D+34I6nDN2OUZxQ+nn4","tlshash":"7c34f5607e9c91aa231b12cba5726bd5e19fde34c5138216b2fd733a42c2c61eed7431","first_seen":"2026-06-24T19:36:12.509099Z","last_seen":"2026-06-24T19:36:12.509099Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Keeper.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.766Z","timestamp":1782329720766,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Keeper.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xaYxk0IGiDMgrVad0Hgg1zG0ZU0hT%2FTwat2lkW0Xjv2OQMv18ykhblC2xpjDkcdgXl8fOcIGyaxRNrun1ewUf6DheuVWxsB%2BnhHKFCz7XLPf8ueTN2%2By6O1U3nMKF2GkCt7Cjw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"30bc-19e8af9737e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12476\r\ncf-ray: a10e2cd2ca94723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":12476,"size_decoded":13459,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"b5bb5ac5718d9851fa25d3195696efed","sha1":"b4c6bdc4f3ebb8664f5fa6578f52a44428049e6f","sha256":"ae8af5e6293e6b823daaaba29e98d7f38de1b76c89e36f8076bfee8829627c16","sha512":"d18d808a60552fc9b67142d38312eab6f6fe5efbb0cc8c734fd07182960d867bfe787f2a3e863950ca60617c26876bf6def78d8a0314b7ee69947c77119d4237","ssdeep":"384:OITWLYk2CL0nplFOI+Tml0kQFEY125s1HL:OI8D2C6lsLjEY1+s1r","tlshash":"8542c09002805b1d28972e3d93bb3166aff5d9c7902bce647139a4645e5b140ed3dd2f","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:40.769963Z","times_seen":20,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/MUZA.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.019Z","timestamp":1782329721019,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/MUZA.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0diut2aosevCqqa6rMbecxdvWL6L8pf52szTWZ7o4UpHB3Q4oCoqHfgf4gCeduo5aB%2ByItU0UXR8k%2BpqrYcLWSZSxeEl6Byd3Px6ViyKESln700yWViSDVMPyT5pTJZWUJrfuA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2aa5-19e8af97396\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10917\r\ncf-ray: a10e2cd45b62723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10917,"size_decoded":11898,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"8a19e53eaa5c8d2b374c43490603bb4f","sha1":"805834b50fbf657b6974f373c7aaff70418a9cf4","sha256":"c22cd11270708ef929ee16ad97f233894bfeac6cd4c39d5957240e9828aa1c49","sha512":"f0d88c382d717b577572a250d8e286a2994f54ba43c6a0bba40ef64e7ee358e7bd6c5774b6b73c2acda824263afbee47da7590db3240c2e0d70e96a59f83cdb2","ssdeep":"192:8D4s0xbiUR/BGmljjdmAtoXV5BfT0UIhkF8c1tGWdTxb+zQ3m46:8D4/xbP/kmlndmAtol5Br0XkM6NYX46","tlshash":"28329d98c052748beb461c1464a5d2bd3d320fc9c71b6de182734e58a9be25b28bf273","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.761284Z","times_seen":20,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Gem_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.142Z","timestamp":1782329721142,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Gem_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iZ%2FkNAGfo3Jtuj5tpY6uIU4sL2vOfZRLXqY0DWTs2doil2%2FBY6CIFCSk1VAEie4eIJ5KmAP6qLrOjyJ0DJ1vvIABA4wprQnH2sweCA3wYT8SSpyjdv5xBKxhWNgiL5qhHIhxUw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"11c4-19e8af9736e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4548\r\ncf-ray: a10e2cd52bc2723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4548,"size_decoded":5528,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"18fe99a4ff4a29a86d0f1d67422c7c95","sha1":"6efeee8706f7ad59a4cfebf6b2461b5f13ebae3a","sha256":"a2f2985905c018579ddffea2d6eaa018d55e75f914b84bd1310bb50250fcda0f","sha512":"ac6f18d6938a8c8b3ed613e6a790ac44bae42c9aba9edd91bd9986559e1f01c99081c36ba28c4ad4a54313c3641703b046f9559af45b003fbbf743d3d9ae721d","ssdeep":"96:A9+Cl+fm1I7II4JIFbfWq5eRgSmy6edlWKCrasv6qBczu9vSLwZSEGPUw5e:qxsfm1M2IFneRgSX6edlrDWBcqtQwZOC","tlshash":"a1917c01e3a34336f1929472faf1728e543aa2bdddce0d80cc2a6d551d4ac3e41798a7","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:40.600198Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Uniswap.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.244Z","timestamp":1782329721244,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Uniswap.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X5FsZmUwKIuRV8BbPJpStIaJL4GEWp1ffpnyRSEIMNkw64r2Ba%2FeCve7JpwerYsoeG8KLnAlzeMZI7eJu5GBU7p8YbKbJzktbXH4nBfHXnkl3S4yef%2BJp%2FQ7i4Zt6ee1hUoORw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2955b-19e8af972fa\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 169307\r\ncf-ray: a10e2cd5cc29723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":169307,"size_decoded":170292,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"1b0687ec3c0e11fac0d8cfff5d740e68","sha1":"0a670575bbb94e24f084fa38f15c4d2caadef848","sha256":"3a82f7a7c4c0842814188c2920247989ab5b47d138258afb968a34531650ab8d","sha512":"3c84642e987d40539a6ae10205192609eff471d1186f5408f0fec7c67ad92565cc67fc2b396c4636c6daf3be1bf04bc279f616521c4694a98385ae5e0c20d80e","ssdeep":"3072:ISA7zbDz7vnOTxIBcVgrFGkADzf6Bk2j8q2Hat9oHYTrkhp3VjBkMVSQN:I7zbDzrnqIWWrFezyBkPq2fHArQVjB5t","tlshash":"91f3122319eb760d01727079a526bde385170023ade915e83d396bde4ad9c618f13cbf","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.670975Z","times_seen":19,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/payinloop.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.312Z","timestamp":1782329721312,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/payinloop.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FabruWFvqPf9NPXAmMiyM2PP8AZ%2FEheYR%2F5to%2BOStLUABrbc%2BCCaqq%2Fd5JuBplMmgj%2BoimO6uyxyE7UlXliFGO3c%2FBDTAyIABPAQ7JKVTeoh4y4x%2By7OqpUigjScfZAcYeDx9g%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"129a-19e8af972a2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4762\r\ncf-ray: a10e2cd63c67723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":4762,"size_decoded":5754,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"50671b1535d5800fb508b17bfb82b4f7","sha1":"f09d91df42ecff4d47f51360e20e8e5475c5eb87","sha256":"5fb9552da7e571d3161838a3ea579c338c5061b66a573d4982ee9ee87e10c3cb","sha512":"6fe6ce8742a744581c0f0bf3b60edde513e87b2da795478653613bcce995f9970fac042ee5d1a7bd60c828118232b9cd5fc5247b8ef8ce77ad214138ea070141","ssdeep":"96:NIO6MxCWWwKdGgSGTSj6ylmnv7hTEn2LJINxwdqgfJOXxR3mZDXfRl990Im:FxCWfKdGgS0lyItC2ExEqgfJOL3AzRG","tlshash":"bea18e6b43ad0f06d8e54cd406bfc13791887a704fce5ba8ad8cd4c86eaeb814690489","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:41.153501Z","times_seen":19,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/ixir.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.363Z","timestamp":1782329721363,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/ixir.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZI1LLk11cvanqJ61O%2BcoNeipia85ltuHd73xmFBGaY8VjfySn%2BbvQ3glBy2eY2JgPfJ9Oae8lunsMYw1RMGagVYjmNpqDgaV7F3SbK6wgdzhqpWMFy8iQgAJnHZPDir62RTNaA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2337-19e8af9725e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9015\r\ncf-ray: a10e2cd68c95723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":9015,"size_decoded":9995,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"c2bd21d3140649c0c9056df5b8039ebb","sha1":"884c030c6be477c545dcb787923e29f021b6e670","sha256":"1063082d1fe6b7fd1e976ab1fd038b5364984bf9e8f57cbded8c313b4abe1f11","sha512":"3034c0b525ae369f95b9959c9b98b291d5fe876b3ffbea84f77fcff431cb4b4aa2ba0ba24c2816036689bf3f13dc56328570668b202e5a46e61876adc957e4c6","ssdeep":"192:U3YtCCBxAfRuZGRewxIXEinQslfLGldFcXr8jFKzHhobVW66Sg968:EIgIZQbxEEaxBMgX4jqSwSg9p","tlshash":"0412bebb619920a3d25387760c227c88afccc113e3b8463d19f777ae52cc87a1678e41","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.645576Z","times_seen":19,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Crybu.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.508Z","timestamp":1782329721508,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Crybu.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3teZ%2FOm3srnpZzsloWxThFv%2FgHCxg%2Bxb43%2BKFv%2FkDOoAgwpb3YX9LE07kSdhrj%2FDHZmpJXjfwvLL7GVcUOR9MsLa0R8uHyaBVU02ztxq5FdtKkzvbOTyZBQFc%2Bog9SZw8uP8BQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"d43-19e8af9721a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3395\r\ncf-ray: a10e2cd76cf5723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3395,"size_decoded":4384,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"af1440cc3a279d32da10f85b5ba1e831","sha1":"92f176ccd1d9c228b7bb8cc973a6edc27e270bfd","sha256":"94755b536b4f4c255c4fba67bfa725d080d1caa97cae50d5f5367dfffb28ce7d","sha512":"b16e27393611a8fd51f4977c6c7ead1d790f25b16e0cce7b68ef9261c124b7074f365194642ac38a9e542e3a329e5a48023b38c9ed430e2669de69615b3cf818","ssdeep":"","tlshash":"87610ae42fa7dbc6cf16326e5f524536201c4d2a48a507aad0b0402de8aa21e2da8d6d","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:41.14734Z","times_seen":18,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/GameStop_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.629Z","timestamp":1782329720629,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/GameStop_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WVqhCFRLyVMF04hfnsyw1nFC2%2Bh9gqkVnLv4I9WIapKH2srAa9nu0ydk8qcGzJ7zINJFKLbTwNjxXrtl5TrfhETxcDM4E3CSMpyKNdOLRJz0kULAAsB2O9PJvN%2FX5qDdpUm6TA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"bc4-19e8af9736e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3012\r\ncf-ray: a10e2cd1ea5c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3012,"size_decoded":3991,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit gray+alpha, non-interlaced","md5":"425c6f77c863bf3c7cc328e585747e5c","sha1":"17f77f485ea891f6b593d51a044a2450093ab723","sha256":"b2840348f7c76f4e254990949ed5130539317beabc91ca4a9527e7df0d716150","sha512":"d5c583107f4494eb86bb3698df1139af3e5df1ba8ae4a4367cc65518d5a44ca251443cf96e351dd19564bb29d5305ffb45d19b3818f75fadda476ca211315a21","ssdeep":"","tlshash":"5451f5be9b0b2bc366388e47ba7b5a603653dc8f7467655714e0f918a3d1c24ccc620b","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:40.997549Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/BharatBox_App.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.187Z","timestamp":1782329721187,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/BharatBox_App.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A3MKapmldFnc4HZ1lddrd9aTwEb9hxD3m7u6zSsCglcgqGORhoRswAL6A8qZrfR7c7OS%2FW1c0ETIVyDOPTVtwfiA13bgwwdx98J1Dyd23o5sgAvxlxkcOmMFvc7V0LVh3rGiVA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"16c7-19e8af9733a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5831\r\ncf-ray: a10e2cd56bf9723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5831,"size_decoded":6809,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"53d0f1656707cd77685b5bda654caba8","sha1":"90e35d0a503b8493f7b9ddfe1a9c92b41306d428","sha256":"2044b1dce56566042c7ac392cd566ecc200e67e20ceb71eaffa85e453c4fe971","sha512":"6be142efa4f396e727ac3099bb12844139410fbf4be2eccebb2d28a61ba6a1e5e8d243cf2f8b83d3f587636234b7e2df1fb7e9ac109067b96aa40144f559713d","ssdeep":"96:naGg9M2zA0V10dlGXenNcMs7EpPgxZEWCT49MQ/pLVRYCbIJWsjSMSezxFAT54lw:ay2zVVOiM+4RuZ4PQ/px4SyvAGoovRHs","tlshash":"21c18ec35707c5e7a329c734cfe34fa498d51a05c52e771a74a1518ab7ad2f83b95180","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:40.604896Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/DeSchool.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.389Z","timestamp":1782329721389,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/DeSchool.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MZVb5oc%2FUZJcLvBsAD4rEnsSYB6FOM4xOBOdOEpEjwz2k6fVt4cs4QeKF7GWjB7KqSu%2F%2Ba5p%2BKWkkzbsPQerIA0uwCVA9rP5xuCBx8846bI46O%2B%2FHSAakrB4zFpKYmm%2B%2FQ1TLA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"6d6-19e8af97226\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 1750\r\ncf-ray: a10e2cd6acae723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1750,"size_decoded":2741,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"c88238fd1a27ddf53161d369ffa18e1d","sha1":"6854dfd3f5cf9183ca2f5b9f6524ccac3154bca5","sha256":"5b94a42cf894903efe1ce2f12c0ee65a7ebffebc5e11a7c2faa58c6f64a2847b","sha512":"bfaf4b957caacfab779ced487a2f93756d1fe4771397a826a07a03c559f22a96ae46fbcb9a681fb2aa8688e12e1591a369c43d9a4bbacbb7da2bcd264e2d96c5","ssdeep":"","tlshash":"c0310d9d93261ef8d112ea32b53156f90e5c88e9050f410e368d6f3acecf5432d92163","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.7454Z","times_seen":19,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Flare_Focus_FCX.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.414Z","timestamp":1782329721414,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Flare_Focus_FCX.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mWZDBadzXgruQnFY8BTOtALDH7QQd4qSVrxMJaQB5MnkvD5h5mV4des%2FYk1ZaTrGj2M2qrLGkzQ2CsvGc8mWOen4pQ4tlbJGtK2EWKpfoiebqVJpbYoJAM206lIiW0Ibr3ZEQg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"24d7-19e8af97242\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9431\r\ncf-ray: a10e2cd6dcc2723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9431,"size_decoded":10409,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"6d5b2f84cddb415fa482a5137cf5f7c2","sha1":"862ab80f4f4840d4c693405ad90363b7b1f84045","sha256":"0ac089b4c1bdd4d0406a6b995fccb906b023fc4852a3c9ba0632247f3acd9968","sha512":"5bee0bb988d15045f04828d3cea08f95d36e8c3e29bc30f95bdb4b3f01cba39d9e58be28815a64b41d17c7447bc0a6b15d31e7f0367a18e2e7a6e79aee13fd86","ssdeep":"192:mB4+vPxwCBwCzyy7PG+gPYxsOgz8KwmT+NlPDu74IYGzfD:UwCBwSfUYxGwCWF27","tlshash":"4b12af2d0ccde0f82238e56441867945d307c2a8b937898dd4dc6a748f6af64d92ee36","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:40.544655Z","times_seen":19,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/ArbitraX.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.927Z","timestamp":1782329721927,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/ArbitraX.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sGl9%2FdpTXU2JBBdcOr5rLZqhkdNHIHsnkZytHYpk42WjityaVArkUpBdLZbSqjp8MSAEzAJfmoDexXjx7kUsyfZSL32jUeMqGICyHrsebs64h4r87tPq68Itzm%2FiNj1F%2FJGltg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"10701-19e8af971ee\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 67329\r\ncf-ray: a10e2cda0e0f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67329,"size_decoded":68313,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"b921a1e9fd3637cb79deb652b70b633e","sha1":"e58fee7f7c9a9b16a038052b6b04d0a16d7833ae","sha256":"eefaf59edfda98e08e43356289578c82823cffb98001413da34c1ffe585cdb8b","sha512":"c42c3a1d89fa24071581b6dcd1ea1d3f9a526c4844e2d04e5fdfa8478392ba29cbcad697f613f342f85d12bd513c0ff0df07cbdf9d513007574e521d3ba72cc2","ssdeep":"1536:ndArufvPLRMoSJjTYA/PJeFFUMeXgr9T8vuS9y6E2UIz5X:nqCHPLOowj5/PobT8vTU8z5X","tlshash":"e56302e8e4bb9640f725da6e57d30cc11be8a953c7ab25204d370e5685332d87f2a70a","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:40.812795Z","times_seen":17,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Pomelo_Bounties.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.073Z","timestamp":1782329722073,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Pomelo_Bounties.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6bHzJCx43pEvS4%2BkquGKL21S6jj2YZo6c9FInbqZ9DlPZWh3xX1mq2UnewcSsTrAcssMYFmstzbIP5vVNX4MjY0x7xrziLfhERFAtabGxP4fAknoBLetKHNe4QkDUSRmTtVhIg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2eb7-19e8af972b2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11959\r\ncf-ray: a10e2cdafe97723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11959,"size_decoded":12938,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"1bb78785bf2fdceabc91d7f65c3c8e3d","sha1":"c5e6bbe309cbad9d3e8fdc3b09c68d24dbbe0e58","sha256":"36b29c3c485991bcce6ab449e1437db3d94424f46104c9578c2a3f2da16d140d","sha512":"1336607194ae9c77b1473665de41248348f72c0bdd46e7486c0ad7d4f1eb766658f0e49a7476cccded07eed53f7de5c8479278baf6cc105ce6bea766e15595e5","ssdeep":"192:J3CXxqDuZLzcJO7afeWaI9dLeiGpRc0GUeR+kIfQ6F91WECMncVs+IBrU5/4nPta:sXWuZncJTNBReTpRc0w+kIfQ6FzWEPM9","tlshash":"3532af387d7f0bf39a7d6014e2993bef5a52202d6014fe4eb5c88a3d1154a02f41e86a","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:41.260664Z","times_seen":17,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Blox.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.146Z","timestamp":1782329722146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Blox.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g2LTEw2kH6eHQzj3oQcBzYna5amuc2zXM%2BP7bXXLMdvT8%2Frh3F7q4YJjUKTG7Dm3KHMDoZdQV%2FTLg%2FL3hX0x1G%2Fglq%2BsKyH%2B3ISVmI4PjFOSsgajAMbdWcYlk45WtQb6mBOJ4w%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"aa5-19e8af97202\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2725\r\ncf-ray: a10e2cdb6ee6723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2725,"size_decoded":3714,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"81d6e252789eabddc022771faf2459b0","sha1":"10ac64674f8c9b4853ee11cb17d8c2ed23212709","sha256":"32af0b7ec5c9dab1a318db9b499ab588f663fddcea0f2762ef0b7a4514081834","sha512":"539c66116e9b2bdc7bf206b0e1ab7c692d1b00f37daad5f37d9812e16b45d8217d537e0a6952ad3f06147379d27dadfb2a0d540404007512255baf35bf572ebe","ssdeep":"","tlshash":"3e5109c0b12c0c45db7030f1c93b6c818e749e82ba168e87d5608275f8bc5fca0b79c2","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:40.963476Z","times_seen":17,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Neo.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.239Z","timestamp":1782329722239,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Neo.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fjw2xg9cNeU%2FVEYXUJDiZHGak5F%2BYNgWDcQ1upx%2F6JkzTaz8cUV1fasiQBVlzQLuRn9B4qW2Ni4gSH74XA56X9Rmru02XDO3CA8Dfg7CIQO9JXouCiJtSurRNyvVHlEptx4EAQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"f56-19e8af971d2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3926\r\ncf-ray: a10e2cdbff28723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":3926,"size_decoded":4907,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"3158e17a362f0bcdea9311ac64471a31","sha1":"c5efff54f60f443c3e3912cb77065c58b468ef47","sha256":"afbb957bc3dee35fb46b00884c081964142fcfee51e5a5bb0ba8ce477f3aebf4","sha512":"8307f105e2af9a3adeb2953227490eafd0662b34eada38f95cad210d42913a5797546820a98aaa772d78756b1d139a0bf1b0575fadd858d32258d925884b4fb4","ssdeep":"","tlshash":"8f816d95bef894fdbf64e069c01424224c1cebfaa8612e9c812806bf47357f51cfb246","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:40.915205Z","times_seen":17,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@emailjs/browser@4/dist/email.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.143Z","timestamp":1782329720143,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/@emailjs/browser@4/dist/email.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1557\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 4.4.1\r\nx-jsd-version-type: version\r\netag: W/\"f65-QgTrEmUi+vs8zc3Zl23FlAXhF9c\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230077-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 5752\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j5lgZqt6d9FVOZTX51UcinRB19fxjZ5yk7vWqL4u7nnj5cXRSG0%2BA8MtUf%2F2%2FKgCLO2m6xjy2BbjOPokETpnrROWTnz8oiHY1s5Q%2FW4jRW0%2BLuSeQbTwhBByL7zwZ%2FBBHIU%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a10e2ccf1f8575ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3941,"size_decoded":2657,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3941), with no line terminators","md5":"271138733214648bd35015f2e3186107","sha1":"4204eb126522fafb3ccdcdd9976dc59405e117d7","sha256":"052f6916a21ba5be140366439e81b84ad11363c84dfba2a06f208c7b4a6f6d5f","sha512":"2013c798d5b24a5cd3e5168f9a529af2a5a42188084feb1ba433a6d83898b5623f18acefe412abac24a2902f54fff70824115dbeb3fad2df59d063541730a4a9","ssdeep":"","tlshash":"9d81b79e02e260f25ed21b483c6d8616e13780ac7c5dc5e1e3f25917244fc9b837aa97","first_seen":"2024-07-21T22:23:39Z","last_seen":"2026-08-18T21:08:17.25952Z","times_seen":1004,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":3,"connect":3,"send":0,"wait":15,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Nitrogen_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.673Z","timestamp":1782329720673,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Nitrogen_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z1o6BigX73R65nGKlaWwuPh5%2By6ipinpnIIWWrXfS6L%2BUDQYZoateG2XP5Ii%2FhliSDIVEefRNl7ybg7eQ%2FJQX9UL2AX8kY%2BX4%2Bep8aKPAD9%2F8WiM4uan73ES%2B54FLJO%2FHgMdhQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2972-19e8af9739a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10610\r\ncf-ray: a10e2cd23a68723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":10610,"size_decoded":11605,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"157933a6cbd0a8bb45ab675a56fdf9f1","sha1":"a6a4c09e70338653e5a86750e67f7b90842cb9b3","sha256":"71d58b9c3c6a4bd60b6cae098bc3095457439ec51fdb6462b50f68b46335dd46","sha512":"7dd5bd2e0ddb5a3ef94ce8261fb9d0804cf4628e28f4f194b99e8bdac32aa36d32f35f59b8f8746b3ab12c5ac7a3dfec1268fd9567092d8e61b617c9a5c8d11f","ssdeep":"192:MUZVFkY91u6S9DppkhIQYDJyx0PCJPBJ2eSA6XZK7kqSLhdnkmdADcDw9Br/lY:MUZwYc9HQq46C9B1p6JKefnkGAwaBrO","tlshash":"e122ae6d39f62baccd0f2525a13b3a31395f241a4f3dc49d0981e29e07ab5e8f49519c","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:41.197173Z","times_seen":20,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Airdrop_Gameswift.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.484Z","timestamp":1782329721484,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Airdrop_Gameswift.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YnX6YgVPKYfsiULGs6NBDzL55zfkYUB8ntzBpIb%2Fm%2BPG9Yf0iBDjGaHhh7TH7uC7kskBUfWkeSgl9FKzV1kMUaKlWD0ztX25yqZmEG5ebqKiaNXRA6aMx5eYiFazZHFRKLJ3Xw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"3308-19e8af971ea\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13064\r\ncf-ray: a10e2cd74ce6723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13064,"size_decoded":14045,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"0c60f3c9cf1fb2f4061674e0d0e310c0","sha1":"ada9b3969e289d5f13ec036ad9950a60e7ca3a12","sha256":"562161db11e1a1f9e4103b8e4be69bcce06c0cc4c34a2b6c1a6b4e8e71b4c424","sha512":"bf2e95882ca969c28c398699c327b5d7b01c9eb7bb8cef1f2e23d59031baf78b35ca6f34f5f3821f94967dc6531be188e461b380b3bfa508b3bf9bb465d979e6","ssdeep":"384:Bvo9+rqOtztKnQ1T8y7ZveWhHF6Y2+xRCy:BwwDJ1QQZvFHcY2+TP","tlshash":"44429dd462f6ce15d8c62dca58ed409c78b4f98c5c14aaf8d9c1d4aa027feb3a349384","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:40.909269Z","times_seen":19,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Anonymice.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.534Z","timestamp":1782329721534,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Anonymice.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O9jUzb8XFoyzLACpIPKUgKJKB%2FvHQ1s9uWChXxy%2BwngoJpO1K6YCMU23DQ1my6aXO2K926ei3nX9JOgdC%2ByH%2Ba3u08mFqv2csZmmDUTZevbvtElzRoftLU6RqtRxODSs2fIUtg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"645-19e8af971ea\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 1605\r\ncf-ray: a10e2cd79d01723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1605,"size_decoded":2588,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"623ab85b217dd1cafe2d9021a5960999","sha1":"fe54f4fbdceb8e154386e14801149e1c42973417","sha256":"6aa6b35bbca65bda31d4ceb053b6bdd46805b6584ef2ada19aa74f6ac813f890","sha512":"4f23684bd742b0fc19fdb9226b56f427c7f25c1f152a44e4f7a24b2844aaffeae559254bc87a22f0753570498defc40c7c6919c8f8334a1b8b48e858fceb0489","ssdeep":"","tlshash":"eb31f1d59632469ac77c0c38a87c48c6a7163b334d93790199dee37f6f60e26c892343","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:41.050412Z","times_seen":18,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Fuse_Staking_DApp.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.761Z","timestamp":1782329721761,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Fuse_Staking_DApp.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IDnAHXjn81eMyFG%2BQlWHu%2FMYIExhB7NOSUW25gnNygUZQ7JEk%2F99vDCWg0Iw0znUac6vop9N0QRtCJCns7OloqmmD9U6DHK2KFWg5t7KeRAH%2Bm03Ty4f6PAZx5OV5MjmFMVTSQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"24ce-19e8af97246\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9422\r\ncf-ray: a10e2cd90d7c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":9422,"size_decoded":10406,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"07e97ed780cdec1e49fd53041d70f4b7","sha1":"6ae716ad245f85abf01c7f109110d2b722a9d166","sha256":"0e54f42d779f8f9902aa928a6a4a5f59ee234d76d1f43cd1cd3a2a56ecc0397f","sha512":"96ac8fac1f22a76b20fab578cdf97e7025b34dba3fbcc5c8f3083e53757a74cd927b1816453da65445dbab65321881bdb62b72ed3c969be20f338f1d4d58ff50","ssdeep":"192:+GkXaQpv5pxgdnB42iIj3senF/c11TqSd9i2AK8bciXNenYOWxaO:+GfQZz3hIj84U1NvPA1vEYTN","tlshash":"2b128cd0a28e4440a99cce3063bc5ed73d3ae5355984375deac37223384d98d309236e","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:40.764118Z","times_seen":18,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/PrcaSwap.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.117Z","timestamp":1782329722117,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/PrcaSwap.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z9tL2XfPK7ZfSWXPGNSidlYacjl%2Bdq8P6CQYgTy8BifZXcE8KLrEo3%2BqhfSxRTwh3ZpRMYQ8koGX3TYEZqrvI0lQ6R7bzWnQQntZz%2FV7AJaaMaNbbf4wcDWINx8%2FyDOeMiDoDQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"27f4-19e8af972b6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10228\r\ncf-ray: a10e2cdb3ebe723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10228,"size_decoded":11213,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"a75bd5cf9f526e1f377f5231438faec9","sha1":"baefe6233e0aa5bea4c6584ee5311dbabbaca857","sha256":"59aa0cf67e1176bbc36b4a93515ba366c7f9e6a0c141d24961b6b5cf7377ada3","sha512":"ec7f467ab14aa69806d692cc66bd1c07c49958e972ecdbcacacafe5178101cb4ea7811aa2841db728cc6485fadf18f145185ea157e88e0967e06abf62efbdc64","ssdeep":"192:K2S1cPst3/o306iWFWDRCO/tvzsKzqdoJowIKGGfKOZF9BSv54B:rElL6iMW9Cw1gP9kCOv9BSBu","tlshash":"db229e85460a89e049550c5f97a7fd87baa317498a22f16cc2ef3cb0dcfa5376353426","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:40.579916Z","times_seen":17,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.341Z","timestamp":1782329722341,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 14:31:45 GMT","end":"Mon, 17 Aug 2026 15:31:39 GMT"},"fingerprint":{"sha1":"B6:67:6F:5A:BE:B9:2A:B2:16:10:49:96:1E:1F:99:2B:44:AF:EA:A6","sha256":"63:A9:BF:FB:46:E0:B8:37:95:77:F3:63:84:AE:78:22:46:11:85:5E:DF:87:F6:4B:EF:F2:2E:24:D5:74:70:39"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://skyroon-claim.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::vhhlv-1778775055415-ee1be01c049f\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 3554664\r\nlast-modified: Wed, 03 Jun 2026 02:11:42 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aF4CMF796t9H5etPli0ZTmm9smCcO5I1hTsWFWiaqkfDnNvICFxj3buJq1mYkGLgKIFrURd8%2FLRSXy%2BBm%2BdyI%2Fi3iynOdgZI1ezelN6leOmlx4eW2cUmnGYDVtdWCwSPb6zR%2FQw%3D\"}]}\r\ncf-ray: a10e2cdcaa044e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407279,"size_decoded":127121,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-18T23:39:07.735689Z","times_seen":49830,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Xellar.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.990Z","timestamp":1782329720990,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Xellar.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KmjyaeNO6R65UUNEE1MiUyzWqGFGhyJYPDY25OymavLLQrQmVNkBRToM8F62en0akrTwfYFoX7OThxAiQ8PRm9qnQYuvv3SlPA1PM%2F9d%2Fo1aZ%2B5KOwdt66%2FKHKCIVby%2FnZYw1g%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"c412-19e8af973ea\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 50194\r\ncf-ray: a10e2cd43b44723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50194,"size_decoded":51181,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"6da82db509bd72c2dea8ceb535e0fd8c","sha1":"c1c28f2b4d6e1758bbeb19ac83ce6dafa10696cf","sha256":"845ecf8a779990f0dc41e8f0a6466b6f765f6e3fab87329b1b1e88ec8867d63e","sha512":"75985695348960e9cb6ebc483a8a83fb863475f489d43c6a160d8aada654f8b38529ad9abe2947b4703a5869684d1210b94f30b49c4ba4e3a386d4883f9b496a","ssdeep":"1536:6EyQvLpSU/7Q/NE3WpFVVFEbc5M4/CsK7gXovE:6928U/0/AWfVVqYe4/ZK7g4M","tlshash":"f03302d5427613f334a2cd5ca10f2625c466047a1e878dbcd639b6410a79bf4a6f3f36","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-08-04T05:59:26.023419Z","times_seen":37,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Cogni_.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.201Z","timestamp":1782329721201,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Cogni_.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y0b4l93YMSkNogl55KgqCv02Is%2BVo9WzgbXJGxAeLhHA0RbQHDqFHzdXd3Pyae46%2BRctpUNyi1e490ufXvmIqGfkQt4udVtmJcmwMdrs4CNcFfzaoUJamqdm8NBCSSwULVeW%2Bg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"10e9-19e8af9734e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4329\r\ncf-ray: a10e2cd58c05723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4329,"size_decoded":5311,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"dd125d0e48bf3e444fb71ad54ecc9551","sha1":"ddb60fe74bea110ead50c652d4c69b0d75820bd4","sha256":"0db491a0f9cd1ed5b5624846981411bf6b40e19042738b8eee6b380fc32b26aa","sha512":"21454f6f68dc0afe199f687e48be9030d77475f815b269c533904ab77c2db687b8c5931030b092c39e7247ddd8f4879918ee108bdb64e3bf478a02adac347a78","ssdeep":"48:y3xuyLdgDSSQz0DHroYVWbPmV2Jjl8sB1JHCfhjlOtHTQlbE471wfoTG95k0:QxBeVQz+VWbPmkJxffByjwtHkpVOgTo","tlshash":"1f917cf6c2a13c28d6afa5f700f587b16ef90f04261d8ca4d3bcb107e1248d05e979a1","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:41.122499Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Kaononai_Project.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.235Z","timestamp":1782329721235,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Kaononai_Project.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nATiZdR0FMu2k72%2Fx5ALQhAvOQaWyY2mOkro3v0cv2eo7KZMU2AUo%2BDEPlGjJda57xEDEkeGHVQ6z44n58xdMrvx%2B3plIIlVTT1Y7nfslswMSXnoagmBCMfrlvR4AxPvjgbMvg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"c14-19e8af97262\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3092\r\ncf-ray: a10e2cd5bc20723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3092,"size_decoded":4073,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"b3ed556f7b62edfc5e37152129697dd2","sha1":"04fc7013e0e7c3a3cee74546b5363cb0ffa4d31d","sha256":"eb36bb1467436eab923a77a565e06478f88191464d3a2f8e74ddd01c5695a415","sha512":"1e856ac7045e28c8343cc6ff1f50031d81dc8363d349fbeef318e6cbbea141f3f4dfbf75d0a1d56fd7655d650030eaec5df9282adcc872f8b156c5a4b29571da","ssdeep":"","tlshash":"48515ad373881285c464ffba5656abfd4c21238b21584776e81b0f29dbccac068c7982","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:40.570787Z","times_seen":19,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Roco_Finance_Payment.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.432Z","timestamp":1782329721432,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Roco_Finance_Payment.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X2B9nAj4f41jS3%2Ba%2FCRRORALMQiHm3zvrJ0vHrw5itIztLMbGxvWwt7%2FEN46D1JUFWB20%2BQB0WTGrGANuyEA8QJi6e21EXEENSr2HgK8CVNx5zd2FvzS8v53ro4wRX6SxpgIvA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"11b9-19e8af972ca\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4537\r\ncf-ray: a10e2cd6fccb723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4537,"size_decoded":5521,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"944f6fd601e986050c390183dbae290b","sha1":"1da80d830fadecd2b8a41ac2c11f77ecb0f018be","sha256":"8d2d4af4bc8caace10e7c18e75dd92e7daef50cc07ddf80f00da2faf4b4651c3","sha512":"dd053a7a7e24cdcf4b9725f87b659a3a9c73584b90ca25426db7352328a628a0fa673bd74cff441e52208b9e5d0337fb13df6ab40ea003b53aa02eec5f5b84e8","ssdeep":"96:kA2Zkcu75YiF1aOKsnDmI4kWRHwNczqvjzazsUxs:j2uchizaODiRFijzazsUxs","tlshash":"e6914dd8e47718d6c1441537af6110925f7d1a1e69c8f114957ff8923dbed940308aee","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:40.976133Z","times_seen":19,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/curve_dapp.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.516Z","timestamp":1782329721516,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/curve_dapp.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kp1nDl13SCfu%2Fdhhqk3wc5Vz9fiC%2F7IlJ4nxClEt7xa6sBcvP3Bp9ZXkQW8MVuQzEltd2l72Xg5YXuNq4uT1wqdkeo3XLwnR1VKYy9KAMMpUaRSI%2FCc3cYXODeMiC2wRkL1B0w%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"9f29-19e8af9721e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 40745\r\ncf-ray: a10e2cd77cfd723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":40745,"size_decoded":41728,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"c4ca041eeaac5211ca2cdfaf5d3f1a80","sha1":"db4d235aba4a145594965069887566bfd26961ad","sha256":"35cbe9c99fa9be18f1f9b64e20d92c6cb325e7698751202cc6559d25ebc0c5e1","sha512":"7cb96682bee6e45b379ca527aadf22808cb2834398635f2895ee3996119e1fd6038e78e6142b7a85170ff559403901c2cb3380235ab68aa569a8ffaf99d00201","ssdeep":"768:+Fv2UHaRcf0fz0S0CVSbJU2ejKann4UMwaCUIkx+cPqIX5sXzhYNIS:+EU6cf0fYSoNU2CKa4UJaUk4cCpVYGS","tlshash":"5503f15631867e4b1b126582b8140ab5f94c5e3603f882f87cb6b4bce374bbc2d9d319","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-08-04T05:59:26.007113Z","times_seen":34,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/lifeform_market2.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.823Z","timestamp":1782329721823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/lifeform_market2.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U%2FLzYzwdzcnJQycOcfBkPVa5mUop5nqdLuISW8oWJ6VORvgs7xBRufUeAE2VSAd0IL8WdCL%2F1Mxq7BVFxfsfeWptjlVfjG8J3EcZfWm8UB8XGwe%2FzH2BwTRzT7D4LbUk2qkmHA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"284b-19e8af9726e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10315\r\ncf-ray: a10e2cd96da3723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10315,"size_decoded":11298,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"e3dfdf15ae9f21693426d95fa40c35a0","sha1":"9f607fc77b0a841a036176e10cd40012bc157cac","sha256":"ac07f5c014f487061a4c8f1a5cf690efd1e7214cebadb5640a8c5c00d28a574c","sha512":"82512b66165ef82ac4d46002fd1a07da2bcfe089b870373da0a76d79d1806defa3b402f2fef8bdac3bcba3c0d64c82a8fa57f31a54303ce159005b779427f115","ssdeep":"192:3xWy1gQ2Q7I5YXxOGu/OZN/k6qwlmIjFZjcddO6vuyNgsJi1:3UmgU0YXxOGu/OtRYIIrO6vu8FS","tlshash":"ca229e5ee5fc16a098c93733509382c81378d49b0218cd5d9987b43d6c1267f931817f","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:40.665063Z","times_seen":18,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a10e2ca3ffb4723c","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:13.401Z","timestamp":1782329713401,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a10e2ca3ffb4723c HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://skyroon-claim.xyz/?__cf_chl_rt_tk=spPIa73jbcVxgayMT3JHUvpK2AGA7G7WC3kcs2Lr8T8-1782329713-1.0.1.1-7bS78dYZqN0yP3aqqp9DWsFxILZwhb_zdFRbLJgI3Pg\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncontent-encoding: zstd\r\ndate: Wed, 24 Jun 2026 19:35:13 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a10e2ca4c80f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":215363,"size_decoded":78203,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"77a2dbab9f5522c292acd6d9b68a4341","sha1":"5a5aae49cd5dbd6ff2e6f55981c8a52d0b5f24f3","sha256":"d00cf08800a55a0dfd9a8936fbd6d2a7e7edec0fbe8d58ff2c4510b2d5b31d83","sha512":"2d13ede21cfafbfe278e20e4abf24b3b8e519534c3143d2bd80ccb879f3352737918cd540d27f6e2713ac01756527907eabb09bd239c2326b93a81460b8d622f","ssdeep":"6144:+43hnWvLj4IM98THz4tip3A36CFR6ZsTP0Fe:MMG5gcZsTt","tlshash":"e624c58e75c6bb36038ee4b8503f3b4a72bd6894149c981cd253d0e9fc72f5ad466d28","first_seen":"2026-06-24T19:36:12.528016Z","last_seen":"2026-06-24T19:36:12.528016Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/a10e2ca71af2c759/1782329714165/214647806b85a06116cb5a8537b2885fc47786bc9c14ea06ac4e0855d6995fb9/VJDuD2aknrOafoa","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-24T19:35:14.536Z","timestamp":1782329714536,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/pat/a10e2ca71af2c759/1782329714165/214647806b85a06116cb5a8537b2885fc47786bc9c14ea06ac4e0855d6995fb9/VJDuD2aknrOafoa HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 \r\ndate: Wed, 24 Jun 2026 19:35:14 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 1\r\nwww-authenticate: PrivateToken challenge=\"AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gIUZHgGuFoGEWy1qFN7KIX8R3hrycFOoGrE4IVdaZX7kAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAi9TgoLKp8Dh4Ur6kbwL134aHs5mzxT460gMtj93cOLJweF_XeuYRIDaQdSKKfqd1o2MJRFXcCOgZNXQqMYwDiFA72S_BMwV3Wpw_MVHa2c3MDsvaa1VBIFIkmX8L7RTL1jRY8iwQNKnl0kr8zAA_ijpIG1eRluJ01kPb-6uiOny9fxaN_XDr8nIxeQnwle6JDZLvoJG1eOefnIXYcb0gGzs4YyCvKCaB65vFtqQeKkhEd7AEC_eObif0BuQ9XefDMyIrVVaOfb1PDpZ9gt0ebTUo7YCRmNyLckyAaDKty-qfAjXzUmwi-q42SSmKrxQ6E-JFJHtPrY1bdJl9wC_JTwIDAQAB\", max-age=20, PrivateToken challenge=\"AAIAHXNhdC5wYXQtaXNzdWVyLmNsb3VkZmxhcmUuY29tICFGR4BrhaBhFstahTeyiF_Ed4a8nBTqBqxOCFXWmV-5ABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAsM0Q9MnygIFl0gZx3w9LhhcDl_7YDbmNzAMUL7Xnp9GXdfWl2k5SxpfB-K_QfmiV_H7Cj8P94IMqoWL8MDExqPL01M2yoCDweJGMNAm8hGbJvLjBAr9mXOZEx9Xd_a1oM6VTL7hmfywqDKr7NjnZtoftBNM7aAcQ3oFunMqwu32HSeDNBFCR6cLq3N_eldve-E2AWzdWXrQfBQ-vNheECU-_SCUvXG_5xxdQ2AO6mpnRaaSuo-pxQhD2t-T8yKziV-ecPidkSrDvocgKAILEibz6aNYuH7U8kF5zXOjI4xRH1FqVs43TY5dwNvmfYjI-w8NNqKpoa4azpJqv3m2DVwIDAQAB\", max-age=20, PrivateToken challenge=\"AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tICFGR4BrhaBhFstahTeyiF_Ed4a8nBTqBqxOCFXWmV-5ABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAsxviSI6sjMo3EYekYTf-dIPsJKZ5cD3xsEmHYx664Sbocwxx4OVFCyBfqccoQRmEX0XWSEj0hYyxpSGEz2i9yhmVRSjkqknoFfuOjUc0KcblcHhVGtTIWERy01RB1YmfcngH9Znt-Z--XyaRArOXumCFBV41ZLC7--LANYHBuhSz34fCGCIFKJsbk8ggBIemExpY3f1t2OZNs4mYLHE-7DhMSYP3Yd171ZcDGvSvtW59KNqQwgCwNcjSY6crHCr8mc-vyzSJFS62lUdla7lPGnm51ne0hJTiFcfY2rDXKUBERMhEYaNuHy1itCEsHOinnQKV89W6SPZmavtQU2h-QwIDAQAB\", max-age=20\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: a10e2cabdea8c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":2171,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"ff44570aca8241914870afbc310cdb85","sha1":"58668e7669fd564d99db5d581fcdb6a5618440b5","sha256":"6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5","sha512":"3c266c0035de59eab2a0dd31b3dcb4a9dd157b310289e5db9ab4f8c2fddb7433466d48f25da7ad735a1cb8f2935aa612ad1f62f0efcece3933ba9979082e2304","ssdeep":"","tlshash":"c700000000000003c00000300000003000000000000000000003000000000000000000","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T23:44:53.560066Z","times_seen":509232,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Xfai.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.445Z","timestamp":1782329721445,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Xfai.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XxjHt1%2B1jqVhWNg5KPFhM%2BHXlQVt%2BI4lfUgtiUMflBBlmGCIjfRG%2FkbsGDH%2Fl14w7daGJvqBZIXxolDJbz3KCxrtZH%2FM5kDzJpBjClxCchb6dC08741C8ZPOhcLZRMNd4XRHeA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"f9d-19e8af97306\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3997\r\ncf-ray: a10e2cd70cd2723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":3997,"size_decoded":4984,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"d0b25c39e4f17f439ff623b29ef4330f","sha1":"4cff7d0990b8287e808d553044716205de13e01f","sha256":"55ce0e79af1cbef60843ec8cc9ba27fa9c3901fc94c265d5f69e623233091fb6","sha512":"a0cc23b53983ef817a304b9ca6d2d406b5690cbd357894ff1b6ccf45d168d207be828e0da7789ab9294f6461390098934511e63d3adb28ec419ef6d3b57cd4b7","ssdeep":"","tlshash":"07814b962139e1c31fcb1831ea388fd7098b222c3be57774cc16a1da72a7e941b56c95","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:41.161907Z","times_seen":19,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/FameMMA.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.839Z","timestamp":1782329721839,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/FameMMA.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QnA3dBijwoNCdR51hHh88B07ioh2A6lB41HxnJUflHxjPoStIFRQLWpepQGbShrzP%2BxmHpVVrylbvucQ2Yggm84kjVmfLEn8pdREa4t4Yitv1x3vwsIX9oPfxoUCN5rW6LbPWw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1372-19e8af9723e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4978\r\ncf-ray: a10e2cd98dac723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4978,"size_decoded":5956,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"a48acb3af67ce8eb551bd7a7d211f598","sha1":"875bdd5a4b8058765c98c74c226f5bcb29947d06","sha256":"e5242fcf3201667c207f4e1f78b47dc6a656d87c139c82add082798ee491e4bb","sha512":"290a2f95a387f33b6002e54096e603406f7be715df727bfab1504bf506e4113181c446ef40791d31d03d7853bf2b081fcd645802d4feb2822c9baad93797c8e2","ssdeep":"96:6CZ7tqeGLiMSwaI/HxpZB/P1fz1MpvfPK1xFPodip8hYeNfxfF/oNH7iWfLYDl:X7kDiMSNIvJ/EfC1xLeNfxuNbiWDYh","tlshash":"31a15d95e3f39925ff9128b2644142fcfda5f43b9229035ebc582a816b2b5671313c92","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:40.82304Z","times_seen":18,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Rainbow.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.245Z","timestamp":1782329720245,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Rainbow.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hE7nQb9CM3ADwEq9GiLc5LcZC%2FO%2BINYxx9DTllRZ1XJ6mg9i6F4oKrC2jfkRVtUZvBXw9VrNX3kcrXWyB%2BSYFyB1YSFEXEg5Fq60nq1fXeKCJj35MgG0PYm5LZqGAg9KqWOXjA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"4b30-19e8af973b6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 19248\r\ncf-ray: a10e2ccf89cb723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19248,"size_decoded":20231,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"817f560ec788dbf4e103990bca918e19","sha1":"318cdc608d82666406d8b52dab618685abd1d0ed","sha256":"1b22f86c209e9db5c83f6aaa9b641829096d3d9af6e842f66009a98712add4b1","sha512":"f509021c11f665b023605c03e67bb2b42a7d39a593deb152596079d3a00d1e7b0a36aa29820c21be9047f074419055578ff46ab7c2de86974eda59e51c556f6f","ssdeep":"384:MNahirHY1I51gxzmwRWWOFVD1oYk16eoAPcv5czlRZtM4QAIc5Uwj4n:oaQbYqwRWZFVDtuoADNG4QJmUwcn","tlshash":"7882e1b4c8f81eac867de270c698704eb7546acc4df2cbe4f5d6ab5c0528a70813a749","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-08-04T05:59:25.950315Z","times_seen":192,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/CoinCircle.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.617Z","timestamp":1782329720617,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/CoinCircle.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZCiUi%2BlM8K0eS5kfCIkntjSzaQZJhZylYf0SWptwOCe%2BRKoVsbcVspCta8Id%2Bdkk3cLyUV5h7j9u0rL9%2F3tA%2F94aJ1a4kkNaucMjSe2cwZKAmQHy8NDceT8M%2FhHoVo23PMzPVA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"700a-19e8af97352\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 28682\r\ncf-ray: a10e2cd1da58723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28682,"size_decoded":29671,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"a0817d7ef5a6a6ea7b6af385dc0c66bd","sha1":"a79e4b782340936c5a45bf6ce3806c09518de1fc","sha256":"fb2c0ad8c046bab90888e40dc0b15f2e48fd3a8068e709466da021b328ab4926","sha512":"20eb23f3ad9b97074f256913a5c5d9ff77dab477a7cdb687025bf4ac261285b7ec87899b455b3d0d263d5bec07a0733f86a7cbf109072c139648cbab38a82cd1","ssdeep":"768:mILiH8tU/o0NXKk9+bNah69pSApnlT8ez:mI6SUw0VV9+bW6vSAplTBz","tlshash":"a5d2f16dbb089137a5db7ebbbb2580d041c2055a2f46000a88732a7fbf9c87e155f069","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:40.885649Z","times_seen":20,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/XFUN_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.811Z","timestamp":1782329720811,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/XFUN_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gWRWih%2FEQcdyE2JY8z9JXA56WlODcGreYA41R%2BfOkRxzJEENO8UQneDU9ObEFzltjTl9K3meXWn0kP1c5RmQtk2LHT5rBT07PCL2mRf%2BtE6RqRJQhEeWgIhX5%2ByHMhFfO5qvFw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2579-19e8af973ea\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9593\r\ncf-ray: a10e2cd31ac9723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":9593,"size_decoded":10577,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"b04027b88b554dde4cbff45fec4f0b19","sha1":"2e6ba3d70d16b7343bc21f9708f1279a1f774368","sha256":"01e32f6746f8aa1a21e1fc99e85137f8032dc8150de1ef7b984301f4cc48cebb","sha512":"e38bcec3b46de0e4206b17aef32857b11363bc322adede4b26560c713e29140163e4b69ab83465086cf1429924999d2a2a1d57a16a204cfc027d35bff110d911","ssdeep":"192:oNNQwR5R70kvwZ/gJV4LIDE2GZOsZV3qM9M/oJYQHZ3vAZCyE:oN/3d0d/gJV6Os/3qMC/oyQHZ/4C7","tlshash":"be12cfa283869c9cbf582d71c5c092961dc7cdc19e91c987454fc2e0b8ec5362d983cf","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:40.575876Z","times_seen":20,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/AZCoiner.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.160Z","timestamp":1782329721160,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/AZCoiner.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ujPrCjzKfvsqQTB8w1MyOqxT6Lxz5Zru%2BSGAMNbrn3wyrzKQ2sDxw85UDZFL0jLDXzHAUzlC5669ik%2FkWcLB5FL3%2BcCT1cVX%2F6VqTMXsSFECJczLbPzlAUC54fp1iFJkhzMl3A%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2551-19e8af97336\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9553\r\ncf-ray: a10e2cd54bd6723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9553,"size_decoded":10537,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"10f36bf6d9e0a46bf7153ae2d4238478","sha1":"7b8a4e9fdfe23bcd7f4682f95b7e9190e956ab48","sha256":"66633c58362953fa126c9c998a6ae4085058643cea00829f0aa3c9c552257e5c","sha512":"fd18247f163c15855f7b87e56224aebe3e4ef0f3a4ffefc171bfcc3d45c4f9857427746b3a63116cd8667548c54c70fc577b79d8898358100907f484bbd1383d","ssdeep":"192:2kZNcqY8vMGUUAQlWku4DX5qQHmXD38CXraeCTGz8VtgC+Ewjt:pZyPOVu4jxHGrhCmG6t","tlshash":"f012afd6cd3a4c0c498d5fb580f4c6ad1a8a171d73dae9e43d1ee45c2f42209cd44ed2","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:41.004508Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Velodrome_Finance.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.688Z","timestamp":1782329721688,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Velodrome_Finance.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V7jylmtCZRAWS8yOxIxZDZETeMT%2FBlTEj5tuX4QWj0pszznltJxw8RdXkjrE15BP0P6JXbprcSlF9h6fVWt7fJ0TZAFWOp3fQi0wZdhD6%2F7p%2B20JjU%2FKfB1LuKC05d9ZsxkByQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2f97-19e8af972fe\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12183\r\ncf-ray: a10e2cd89d4a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12183,"size_decoded":13168,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"902c3f7476f37339da5c5325d28e2215","sha1":"3154eb4a525f4c11b0afe57bb30b0d29e93da40f","sha256":"9756f1187424ee4932097cb44bcaecc7477c4d72360de0f0185f4aae8f592c2b","sha512":"e3906156ff5fb875f43edf8a536d558e4b321e2e7844aac94e12df4fc8c5ae06be3722c443c53c81fc8ee9e4ac3e8a673d2d709e53e3c9772550afd8ccebbecd","ssdeep":"192:IeHw1EPP6ySy+iYwKrhHFMM6R/B8h0KmIymnwZzdvJzCHi+PVEejVu1egMEFgf23:hQIZciY9FHF76BB8FyLzD+PVEKCpMEFV","tlshash":"e242ae9658d0db5a1024653333e07a4b8b93cf094437df1df6587aaaf632227b103e52","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-08-04T05:59:25.926654Z","times_seen":35,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/SSV_Dapp.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.759Z","timestamp":1782329721759,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/SSV_Dapp.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=84f469OlvU4UbzczugbI6EGsGf%2BS5rc%2FTm1KZE8yEwslX08FbeKEPUKxzn6xkIe9PJOPw%2FR4bWaeNGLWSvk1gLZzLqjpm%2FLg0ZJTO0JWJwOTA9rwA%2BCOklxxT1RLCo7lG7Pn3Q%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"ddf-19e8af972de\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3551\r\ncf-ray: a10e2cd90d7b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3551,"size_decoded":4536,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"21e93c14a8e8470b0f955e7fbf28c0ea","sha1":"aaa598bef68b90c2ebb26be71dcaabce07b108e4","sha256":"34206ac24d1ad3ceca99c9b192ac2a518460d03fda945f53a27ad5144c2d5720","sha512":"acdd0c44e7158e50e80e454e4a0fd632563ee8cad9dae2e224fd0a29ac095f2a81d12de30a1c17e61f42736fa55cd73b95a3a59fbe4f663038c47ecb6b6ab86f","ssdeep":"","tlshash":"d7712cc9f019deeaf0089b30d3531b326409316d5f7d7e6d38b9af167c5ad451883109","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:40.891643Z","times_seen":18,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/D_CENT_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.775Z","timestamp":1782329720775,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/D_CENT_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cHCWfMKjK3yiMn884aoPm%2BylWPqWLN26Vv8XvFr1wvUrE%2B%2BuIIOYroJFjXaIXSwzZlOdRWFR6VIKFkytB%2FHxqDXBV1ECi6H9TEFmBLHEhUjjPjDBPJbL8ZgRXrlKGd%2BJ9I8djg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"4c55-19e8af9735a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 19541\r\ncf-ray: a10e2cd2da9d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":19541,"size_decoded":20528,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"10d8fe5924edd9c52855216eefd1047a","sha1":"a5c2001c6442ff7b90f330aeee06f5a02a389e0a","sha256":"ba314d3e0ac4132c1b25244b37c6007c11b4b648d63d034064233e1f86afc128","sha512":"0c7bd7e3ef6ddbeabf9c76389ea91b0c9e4d903c274c5c89c5ffdd2d553ece2f199cc787a575cc4f0451e0c44b4e9bca380c82e1a2551558f6321ddfa2e9e64d","ssdeep":"384:O8eVqiHHoNK5jZ2NE29BRO8dKKYSFleqroJ7Wq9DUgBDfZOEa:cYewGyKEF8qrY7lUgBDna","tlshash":"7b92d1c04f96c4872fe6e1bb88e19595e4181e694039005ff52392ef3609ddc6eeaf29","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:40.770548Z","times_seen":20,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Rovi_Money.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.204Z","timestamp":1782329721204,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Rovi_Money.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=veFfZZ91D33xaiXLh0bDh9GyFte11vaTPBSFQNu%2BxoXJvJNLrH3pKG56%2ByL26nqi%2BvFy08MWGbHceSPV2eEwFdVyM%2BCOexgo5Au2LEyvhtnjtdk0%2FNa8w9vs7SX7XJcZE28mkg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2b69-19e8af973ba\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11113\r\ncf-ray: a10e2cd58c07723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":11113,"size_decoded":12100,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"d554007d633262c5f00acbc28a3ab0a7","sha1":"f6314ef103253b642033e196bc022478a6b0c22e","sha256":"1c49ac8ce4a6aa7631692cb7af9e55924b296ef0db7223fecbee7c08dd6cd124","sha512":"6632c0ab6617edc1272ffc48b310ad2bb9463e9d01a510e6f055331b88d7d37258cbc0c3cf25d1cc35845eec9f82d6d21c0cf38d8cb30094cea63f80098e9fa3","ssdeep":"192:73FGR489YvMCkYsz92sf6uMifCki8HqluMbZBI0+oUO7Gp2zVRRiuN:73IRvavo72xuMifCkiOcBI0mOGQ","tlshash":"fd32bf08c4e3d8f3586567aba39c02d15c829cd1e9f8e5d5df17be6588bd244d083bd2","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:41.275325Z","times_seen":19,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Pirex.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.885Z","timestamp":1782329721885,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Pirex.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=je0j%2BXCnXPlNyBYwpxQ3QZJCVYOvAZRFC8WtvkNrQAvIqVGzfHRiDpuSCSXPDh5xtVjQtD3gpJ9tJC6T4vvIk8JLc%2FKCB8JBFprwx0T1Q%2B8x48CLWiYtt5gMBGzZKvw1MBJSjA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"e06-19e8af972ae\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3590\r\ncf-ray: a10e2cd9cdcf723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3590,"size_decoded":4571,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"e808c1e3b8aaeb0d478b9cdcdfcaca7c","sha1":"5e221bc89061b21afad042d4731b015fbea4d481","sha256":"2134b9f2b77ce8ee1a757df0a16bda4ceea87c09adc3f2d93a8ade4630c47c1c","sha512":"8b2042fae14a75f9e04fe728d1bfade781f726b61614fc13f1f4a281c147e8b9f4a2c003f8ad74fc0bca9197e89211e40d673aa47e1cd57c59961a4e915764eb","ssdeep":"","tlshash":"8d715ed71e50b634f2c93137a464aea1136344ad0f6bfac74c0e8563a2e31e0462accf","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:40.610273Z","times_seen":18,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Theta.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.235Z","timestamp":1782329722235,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Theta.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Tpm04GCdUP64fvIPajSxvJwoyd7xgGjQzzLmqdhoTek03y1ybXMi%2BCErd4l3LXLEXY2iOa0N8bb5fF85xkK2D4pakCM3keEEfyN7lwyIlx3idGfs1W2WcHSbMQx1lGIJzSyHQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"15be-19e8af971de\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5566\r\ncf-ray: a10e2cdbff23723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5566,"size_decoded":6544,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"0075cb57a761b4cf9edf3bc06ac67b4c","sha1":"3396550f8469b8ea2fc30af4cfbdabacee802bbe","sha256":"80985ee30a596e9a73e8953375b3162905d8fb7fb36d98205eaaf37de7fac127","sha512":"1383c29783ec069cf9d9871bb02b4d568a3d78f642876426e51f2434d25d3537d16f64805478e3dacefc48a01ece7994d93f99b64d8c76d9c715df4676334e09","ssdeep":"96:8H5A2pk9wgwmqg5cQZUsxg2LnCuf8sNB1ZfFuLiEgEZuSm3ia3DYNtq0L5stPAmn:8ZA+AX7cQ6s22NEYnBFtEgEZuJ3iEENI","tlshash":"dbb18f16ccb740236d1bad1c2719d6eae8c153789ce7cec5e182d5c3d18389d3adc805","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:41.241943Z","times_seen":18,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Mantle.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.288Z","timestamp":1782329722288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Mantle.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9k376uagVA%2BjfPZd9g56s%2FQ9UwtP1uurOap412VSlXJSFeqpXCs%2F0%2BtymWkME%2BDdl5Q8iyZkoED62UfIBWtof5V2KmamE1t8U8hCHkQ26kb8d22zP7m9Pk%2FUhP1EjbJne6gZmg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"bb7-19e8af971ce\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2999\r\ncf-ray: a10e2cdc4f4c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2999,"size_decoded":3986,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"46dd609f9150881366d4d1e3576981af","sha1":"98bcad9ea4280477d1b3ca8d0ef893243f54a27e","sha256":"7d6b538643eaf77fad56d84d662b039d740f2cf212bbd0084efbe6c281435458","sha512":"71f9599586e7d86150a27ce9899389fedc45bb5b7225c558f93767fbe6a8d519b7e40c24086736472602cd89e831e8e06e4452992146c4c19865445c551acf50","ssdeep":"","tlshash":"67514c21c4d91e60480e2062868c98a7b8a6187fb47cd73df53539a8dfb0516456eff5","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-08-04T05:59:26.004815Z","times_seen":34,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Flare.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.319Z","timestamp":1782329722319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Flare.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nIpHsXM3JDKBLnSR428%2BsXURdPD8zcbstkV8P%2BU1dhagp4JlTOXG57sTvWye7mbacVSfGQfZf7k6QFOGhMxv5BLxymo2Fl8fcE%2F1LSrN9gsPhygR7Sc8lPOAE2kQIXIZuFyKBw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"4d2-19e8af971ca\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 1234\r\ncf-ray: a10e2cdc7f62723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1234,"size_decoded":2215,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"c69d0ae55d62e6ff443ccd206c240d20","sha1":"76b5d6c2a20b7450fe5812da71c675ab74ba2621","sha256":"e9acc1dfafed3eb9f5f5e49b177b40d065a3255136fd1481f635812bb38e7582","sha512":"30487dfb671dc2931c6a2b0f2d6284e26b9ebe03ed3de910ad3b17ea7700a3e122f38a4cbf236259aea3d8644f840d3ed25cd1fb9d66c4ae1b32cd210ab8ebdf","ssdeep":"","tlshash":"3621e71b778f036600f16d1bb7a8b8a08e9a479c82fb02917d5a51002c4ca390ff34e4","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-08-04T05:59:25.951255Z","times_seen":34,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Cling_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.472Z","timestamp":1782329720472,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Cling_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oXV19j7Z3teqLmVmFvgfN%2BbTX%2BuPUEqc%2Bai%2FNmGRdYPn5WctXep%2F1ga2LaeFKlXKs7pmMHsr9zFu2uGBA7tOYZSl61uiqav0x%2BHVL87L6Ou61c%2FhhMqag%2Fk6a3i9E3iZq%2FRWiQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"542e-19e8af9734e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 21550\r\ncf-ray: a10e2cd0fa25723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":21550,"size_decoded":22545,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"c06f6a341e187be348fe0ef0ebe5d9aa","sha1":"241749d1512216650470a52add9fbe24e75ec41c","sha256":"1f75464cab6d44ce20b261bfe55d3a0099692f30c43919c11781b9f6d943dbb9","sha512":"f73ca96605c32e6be17aa33dca3e164dca7e7251b9367a9f959f14bbc871080baf273ab5a2674ef24ac3ac82bdd188a84103fab0d1c12bff8952803ef2c3b5d7","ssdeep":"384:R4V3fg10vr24MiQE5KvaTO9KdHy5/uSfZIESgZbGobAJkPsm:SVY10T24qcUYMfZxzlsm","tlshash":"f7a2d0284b5febcdce1b50b65bff4f3daf742561a55b0a8a3309e19d6011ad4ec8c422","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-06-29T07:04:40.70791Z","times_seen":20,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/ELLIPAL.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.002Z","timestamp":1782329721002,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/ELLIPAL.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FZbox7i6qIGIAzZzJP9v4H1eKCCm1ea5yt3rTRgbhV0wRXBc3l9CxBtb4kFC9RjclAv2LIa4VURoC%2Fr3bqLe7Cr1Mwa03gO3uk1vOAlCePfzhUmG1%2B6U72YSXy5uKfH1Y877Jw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1831-19e8af97362\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6193\r\ncf-ray: a10e2cd44b4d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6193,"size_decoded":7173,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"8bd1b732beefa829363014e1ea998a42","sha1":"b80717de61b9c506d62f2a68c7dd86e18b62c0e7","sha256":"b9e97c01fff88b45b626255bdc9236e4c2d7fd25b6cc968b53344083adedbe2b","sha512":"689bfc4b557c7ddb98c17470c6aa165c76c75c2b71c0d924f6de785dfc0415b7cff6cc4a4630842adcac586854b27ed0aeec1245b0a1bdc954cfe1fe99d37e77","ssdeep":"192:J2wIe44444444hrE1yCgaKs3zbWFoYidDSu244444444443:J2De44444444hrEo6GmvdDSR4444444g","tlshash":"45d13b949e0358f6c70b0ec6be1244c4e7bab3b5eb000a9da50474d83cf8957166b9bf","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.88235Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/PaintSwap.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.452Z","timestamp":1782329721452,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/PaintSwap.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3qZ%2BuqAcBarXkVs8nkwgqtDUAZvQkscAtDHU799j1CCmYARYUqq73RG%2BfyoJbPh8diqz2o9uSXLfTYc2Rf4MfTaqbIg7eLKrN7b%2FNYkWXhkMgN2wy3abZY5Xj%2FzVv%2BQ%2BDAPT5Q%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"7f98-19e8af9729a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 32664\r\ncf-ray: a10e2cd71cd8723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":32664,"size_decoded":33653,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"102f10e08dd01db74cda5df177a0f0b6","sha1":"3a63f17d2102c6c4214377f8b152c1263b765d5b","sha256":"cd751199af9dc53f1681c08af880c020e0f46789c1d3479ddfafae606c21f938","sha512":"ba7f2746b7020305e9a3e9484929d9ae2017d27681dd916b5ce4642600efa3a7afedaad044c351d58a75ef554f9805b5d8f87609e60fb16e5a9ca3d0c3fd4256","ssdeep":"768:y27T0tpWX0XzEVuy4GrsaolmtJXAaL7lb3Pky:yKT2i9nhsa6mQaxPx","tlshash":"78e2f1cdc4304725c89d9b84c5496fef59cf40d8c7779634a64a049c2e8ea7ed4af60e","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:40.572226Z","times_seen":19,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Meter_Staking.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.790Z","timestamp":1782329721790,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Meter_Staking.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EEY%2FCVbYipC61%2BpTnBg%2B7vBg3sg%2BrBP8tfmQAa61kHkNqySbZytCMUk84gZq5hpE0Ab%2B95AcxO3MNo9arbW99klhGd%2BLRyzfhGJbevkiO51%2FN7aCFfbJIsGUqKEGSUVyHfCTag%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2977-19e8af9727a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10615\r\ncf-ray: a10e2cd93d86723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":10615,"size_decoded":11606,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"e2b1f6304d00ab65e652e08d44797433","sha1":"2f8bff85aaf7f77d340f2bc6efdfbf7037553116","sha256":"36a763b241751efcdeb8bd6766e0fae40f4375e72186a61dd9cb5fdd74721f4f","sha512":"147585e05e8d30e49e26363f138df7a5fb9e1c6dcc28854aaa32d3083f939aac560eda6b69deb7c71d851ea4e92496ebcd1702a6fbefb06780c5717a46985ada","ssdeep":"192:/Bipw9I2q0ju/T2atqUEKfhbt6Ox1hIakRXdRpbLH6GnlYljbJlkg:/Ew9Xq042wEWhV9IaiFbeGnOjlp","tlshash":"f422c048ce65c636aef70b6dcc9923d7da0c643f6c5a0613614abddc432522f08ed14e","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.690989Z","times_seen":20,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/AidiCraft.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.052Z","timestamp":1782329722052,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/AidiCraft.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BDrBpmxd1K81VlD6kjpg1gI0jck8o3cW7KGOuGGWMAPXpwShdnbEuCRaL8TDihP0QzSg9eBy28Hj%2FcCaGrjds69T5JScAYwQzkIvtXZWkOVHttqTQQvI0leLb8oCHirjbXNZFA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"2e39-19e8af971e6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11833\r\ncf-ray: a10e2cdade89723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11833,"size_decoded":12812,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"714438f0fe312531f87b0ad2201f2e76","sha1":"9f1e0b02224bbc038e1b798aa1c04ae6dd7e4cb6","sha256":"c9c9af6c8134e0a7abc8518700e38e5c014b0a43090bcba904b364bea66b64c1","sha512":"6ace2b9f6694a489d4e82fbf3d5ec615be8371dfed7e7f061f658d8bb26b0c903ec1f29df469b25a05f79ba7fdfc80e5e239f8dc0d5dba833694d252e311f764","ssdeep":"192:ssk7HdIj1obFFVpj1WYUQA8nA3k2HZdm7bWfPeI8PjfwB0QjrnW2FY1xM0gH:ssVj1oXVp8YUQAaZum0A4rnWTGjH","tlshash":"2932b0aac323ed947cb804555b3dd0cc56d4166be4b73a66a334f212f044ba8f23b943","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:40.553545Z","times_seen":17,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Ballet_Crypto.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.632Z","timestamp":1782329720632,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Ballet_Crypto.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JesXbI%2BgRcroGk5cvjUxCnyTu7qCWHnzeALyQ3zyfGMC9OoOJnxyPc7nu7CsRLqqSJSqBxbDtMyvx5IFoMPe4YCQAF5IE7mY5HDFaJ7TSStHjR2DzzVseqMmBKbQWG24OjzOWw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3295-19e8af9733a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12949\r\ncf-ray: a10e2cd1fa5d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12949,"size_decoded":13928,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"0e8d31856af6540715f0f4ded5365b41","sha1":"f25d96df49f7cc6d267a2d84a60ce2b26f8c008f","sha256":"09280e4818fab8a235f2f86da35ff7f6972b933bc50bb72ad9269e6a4d5dc9ae","sha512":"ffde39955a2ea53bef76efc8523c7dd92eb59014a69f313c60abf798e467736cdc3773e00b9c17c62b650f0f19f578da4dd7b520b28f6f2aba68fcaa3d33a45c","ssdeep":"384:V79AvvMXUnTIM+MMW+ddgOf8Pb6QkyGjXFyZJ5y6S4f:V7FXUnEFj1Gz6QkhXFv6","tlshash":"7842b049a71387a8f7db7fc539a31700077196cb5e70871c968a163f343047586765de","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:40.794295Z","times_seen":20,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Tangem_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.988Z","timestamp":1782329720988,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Tangem_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ab%2BWRkFkgjX9p2WugeWJ3IJ39NFB%2BfxldVeSsy5zL7WrtYytCMF7aL1KbUtVnzjyThQhLhXlpKcROWuW9Jopv6ANWhoIK5PGm8ecrouphdUPjhWBMFmvygO%2BxLcJxvPO%2FUWNXA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"9ac-19e8af973ce\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2476\r\ncf-ray: a10e2cd42b42723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2476,"size_decoded":3459,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"a150deecaa493a6db516910b39663a7d","sha1":"2f58c403c55755533f5626c388398543e4f7c41f","sha256":"f4e5eb096062797f8f0953f3b5a7e99c433a5a27d6e8d6686940b52a3ba18e83","sha512":"8b58172f7163e4c753912b5acda082fa3e7b16c808194690e1d8ed25a9b0dce324d24dc6445a4f8b5b7d1dda1bc9326d574c05da5a6ff63ddac6f8b819008df9","ssdeep":"","tlshash":"2651a8cf0605f62327436649cf226360e27b7b1ee6c3c985624b60ee853d8853887bc9","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-08-04T05:59:25.998758Z","times_seen":37,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Deficloud.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.074Z","timestamp":1782329721074,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Deficloud.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zXTYibBno3DgmWzD%2BDNMunHEX9AgljKudaeEvP7drHK2FchTf6P0tp5pg7d7ZVg0Lw3YTdC8qAi6CFwc%2FmzErplZkOiBldLKPbcl7Bu1zrGMQL5qtp493ZE8MEDgvNHNrGMSaw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2201-19e8af9735e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 8705\r\ncf-ray: a10e2cd4bb8c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8705,"size_decoded":9685,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"615bd90de23febb8023d974d6c644861","sha1":"7e5de753490151ea09128913273c3fefa59609ee","sha256":"e0cd1c1d30c0574abd8bd2fa94accb65b5b246933a5f52a63005f06b9fdac2e4","sha512":"3851281a2866f4ecb18bea059cb40c461498b33ad1da1030e0efcba265d15f74f669b5a51717a7788be692dff4492d998caa028e77af13b44538fc0bf269699d","ssdeep":"192:+TTowt62P+51QPBtj3/pD9ks4our+G4rBgxOkEupeaUVk8C:+Tv62W51EVgs4FrfOTuYdY","tlshash":"80028c0903cf8a01d83c16e6791df365a10e67aa55efedc0c18c7963b89a2de8ccb354","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:41.011333Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/RentaFi.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.328Z","timestamp":1782329721328,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/RentaFi.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eE84tTyVnc2%2F%2Br3rHYjBkGXcEyy3MayK1OTEa7WHGVsOHzVOZmi2qzeGNPHK1FoDN6UGDSdfcjVjhCEqrOOOjUERahk4Ti2pH%2F9crGWEuZVvL0egV8PTWdFhVMq7Yby5bJwyvQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"26f4-19e8af972c6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9972\r\ncf-ray: a10e2cd64c77723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9972,"size_decoded":10954,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"2b824b96113ef5a0eb4ce1f0c7de9238","sha1":"f9ca32add57086d5bff071c5573de0356b6e704f","sha256":"cb92cb89410b6a073a079021cf5f39be94d909c6ca3790de6ad8527dfd694d9b","sha512":"7e91479df1a77241217e3efdacc2661f48cce027a1c77734d411e8381c0d5423c3b68f52ffeedb60a7abc84d5a08cede3013fece4399e37e6fb49ba322e5f69b","ssdeep":"192:iPkTLLmTUFUPKK7mMQ8sN1UYl1br++oVSuXC1qnOBMfQ4e7OAN:fmDydNyMx8VxXC1qnOFrp","tlshash":"7722cf899a6f36f5fb9028b7ddafdc712d70aa38f603516159b4c207b80c0ee851d68c","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.765949Z","times_seen":19,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/osean.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.430Z","timestamp":1782329721430,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/osean.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JpWrblZ5NjX2K8DRuq8TzGaW%2BpprfDfnj%2BfaQIfiFq34JSPFXb8ZTXPXdyWqhO1B5YWNbX4nHvje9vPZG15SW6920jfrmfz9e3BodRxm1TrbGtVPf5AySYWJOeR4gLaypyeCOw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3170-19e8af97296\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12656\r\ncf-ray: a10e2cd6fcca723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12656,"size_decoded":13637,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"aadf92402f40d7fcd1979f2532b83329","sha1":"54a55d1f6981159b35ae7a68b4b694e77dec58f3","sha256":"28d01c76dc1b3104d34da216b22a4b1ad8c2336834dd0edeac068f95c7e91192","sha512":"d499765591b30d6f2872f563bed18a9a5379da87589b4f1394655b5e42a98f579e190e394abd7539388f074423b97f168859e9e017dd0a4e8a9d2d632a78716d","ssdeep":"192:1rUYbhN1S9gw+LbwXpGbtpVvuKwKJ70SON/8nwCikxMuP2J8e/tiQ00cpY5nqYn3:1XnUgw+wZ4VGBYe8twiQXcpYEY8SV","tlshash":"0e42bfbbf25bd27ee3a60563475285b27d70444931a15c3af4a502531288d3a8f90cdf","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:40.545996Z","times_seen":19,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/escrowsg.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.471Z","timestamp":1782329721471,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/escrowsg.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tJ6DrINYZH49gWWPPONouq9mdHcy5ttb%2FDEBmOe7aA8xcz2zJNTbgoChBuieQb3ck77G5EN3Yei%2FUe7a8SBmwaljc%2BR5wC6BgMGb4pjlDSsLl%2FlIeoAXW19ankAFNnznmnbICA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1a68-19e8af97236\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6760\r\ncf-ray: a10e2cd73ce0723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":6760,"size_decoded":7744,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"1556e93d15a360b858d27b6c3cc5513c","sha1":"c005d1a241ff2239198d3502a5809131dfb2d3e4","sha256":"0f563a57200631c76ca8ac9584cb867c43668172a661008f38f73063e2987899","sha512":"9e356a797bd4c6f8ffd4bd996c0a270fe4f8d87d5d5f4aca52650919ce2eca9da8885ccb9a477f30bb1f6369bcd2122e9afeaeeb3c32d1a970a1ceb8a1dffbfd","ssdeep":"192:iXbSh5CuWcKeKgbPvEv1KGUjHisR9bF7GEWssbo:AWHCugepPsv1SzJDGIIo","tlshash":"a5d17ea76ecedd9bd5299ba1497c51570814ecf443e6c3ae04b06ce94f8cb11d2ba04c","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:40.868432Z","times_seen":19,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Revv_gg.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.101Z","timestamp":1782329722101,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Revv_gg.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Edsh30j1axwAHsDJIEq7DgSnN%2B1nfO1GbdkHa%2BHkY02Izh8NyUT%2BOP%2ByJkyUNSupsiVCGZ4BwiPOz5QK%2B3Tj4ukLjAJeAOCJ0NLNIAGVDoxqeeDt7JY6rNNrdMVGUOXXndj6bQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"331b-19e8af972ca\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13083\r\ncf-ray: a10e2cdb2eaf723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":13083,"size_decoded":14070,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"4f423db1a04973663417f367ce22b770","sha1":"61c2faf9c1fe316a54d9edff162538286c627827","sha256":"9690c7051aa3491b0361e1d9de3dc0884579ccd9e0cabbedd5f543386ae013bd","sha512":"655c4041a96a47e7e0cc2253b5ba5f8f8dab0a605005052538b924ef589571afcf7fd33be1da330e6c443bd852953847a1a8cab44fd89c734f38b99ff299386f","ssdeep":"384:PLY8qdikoOi15DCXitBqeGyptkjQDfNiXZcl6dFT:PE8qdId1bDRkjOmA6DT","tlshash":"0342c0f81ab50995076feb50e9538e98c02f0d4979feb61bc0936ca123561fc1853dee","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:40.781971Z","times_seen":17,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Optimistic.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.296Z","timestamp":1782329722296,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Optimistic.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5q6nZNvNtEkgnwYUH3GdTJMDCQyi%2FUKdV%2BttF7jlldsK4olf4C1fMC7FylpM5vuOOQDXk29gbmiARE71ei5UsH%2Bko7zWFouCvcYDqzcKKaFZxojbcRfY%2Br1iQ0cH%2FGAF%2Byco3A%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"66d-19e8af971d2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 1645\r\ncf-ray: a10e2cdc5f51723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1645,"size_decoded":2632,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"a0fcf2cc296e4cd57623c8062332aa15","sha1":"40f8afacdf89875171d069fd36805c5aa416938c","sha256":"775877e1d88160237a5b62abceb6c7ea553469a37f51e47b885e2aa2a2238fe7","sha512":"adf61db44e8914d97e1626b9d068abdbfea45ea517a6dece1492e0794e0916ebe13e6ed8b5e8dcacf641cf454b5620ee9684001c978f8427a3e036ce14e22cb8","ssdeep":"","tlshash":"4a31c6a420f21d1df96a08b5d3306c69e394247e0f2a6949cdc0e896b92750cf1c9dce","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-06-29T07:04:40.700488Z","times_seen":18,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/cdn-cgi/challenge-platform/h/b/flow/ov1/3363425500:1782327627:B7rhnsO73ZdEOAjFxjcW-lz3xkdrC4W_NDRCjfHMJ5o/a10e2ca3ffb4723c/Llvoik_ngNjnS5KJKdmmSoxqj9loss2ERrz6zqyCZ_M-1782329713-1.2.1.1-zLc5oxuHgK.whkPylsomnME9iChY3eikbXVsf.5Vtxka5WuAS_VrElv2d.fKESMZ","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:13.714Z","timestamp":1782329713714,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/3363425500:1782327627:B7rhnsO73ZdEOAjFxjcW-lz3xkdrC4W_NDRCjfHMJ5o/a10e2ca3ffb4723c/Llvoik_ngNjnS5KJKdmmSoxqj9loss2ERrz6zqyCZ_M-1782329713-1.2.1.1-zLc5oxuHgK.whkPylsomnME9iChY3eikbXVsf.5Vtxka5WuAS_VrElv2d.fKESMZ HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://skyroon-claim.xyz/\r\ncf-chl: Llvoik_ngNjnS5KJKdmmSoxqj9loss2ERrz6zqyCZ_M-1782329713-1.2.1.1-zLc5oxuHgK.whkPylsomnME9iChY3eikbXVsf.5Vtxka5WuAS_VrElv2d.fKESMZ\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2263\r\nOrigin: https://skyroon-claim.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: 5t1fJazCUVjJlZyNumSQH6jEa8y+YV4gDl8UspE9bbE=$rySjhqmikFiUL1BVyWw5FQ==\r\ntiming-allow-origin: https://skyroon-claim.xyz\r\ncontent-encoding: zstd\r\ndate: Wed, 24 Jun 2026 19:35:13 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a10e2ca6b85d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19196,"size_decoded":14869,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (19196), with no line terminators","md5":"1b92bf7beb9a3bf7edcf58c42be84407","sha1":"05f10c4b1185dd0727c129d5353478cb18c89ca6","sha256":"5c5ed249d0c8c9a874f1ca34ffe1cceaf3066ae40c50b7be81e60425adef9b83","sha512":"f7cd0f74b3b716b8e512fe493648db244e89cd9ff1e456e53c1f5bbd03c8fff34010f4b80b54d28a8e2b2bdff154526864c5f613f2eada7e057444e081a8f3bd","ssdeep":"384:H3SaKL/59OuURbq8xPghwrKAPMhwUASTvWa8dkLh8njIHCgGGGMhNeTnX:HHKLPiRbqQPqwrKAP8wUASR8dkLhilgU","tlshash":"f882d0bfee5987064205534aa097ee1831adfc8d503ce5a9f30819ccf5ac64a69065ef","first_seen":"2026-06-24T19:36:12.547858Z","last_seen":"2026-06-24T19:36:12.547858Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Obvious.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.417Z","timestamp":1782329720417,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Obvious.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BfMcZitjz6ffj6xDnpQ8kpW2MIlOoAyhHOKdEO0xWeWQAEtgmowb%2F7wJikzC8dugIjmcq2T0LKEWcTYNKMMCjs%2FaKIuiL0osOs%2FxJuxdb6cEFNZeDd%2FYsCoBKyETaLMo2%2Fpj8w%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1874-19e8af973a2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6260\r\ncf-ray: a10e2cd09a0a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6260,"size_decoded":7246,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"8ee33de3da3f761c2ff2ba5620a87a51","sha1":"74ca46b9453481a69ea16c9d5350ebd9ff8fcbe9","sha256":"1ee5ace5cac82adb46b64b610cb7bb9b170ce15a2f4dd2b1c7288905a1383a27","sha512":"5319e5bb190e4b8f78a71ab4e84580d7bbfe5fc3c4222af7196850ccc7fe3aef627b792ed77e41f1a31d983c549773954fcd668aeaa45058ae00a55196accbe7","ssdeep":"192:M94arGI8V0tKMocpn+ckBkoph4C91m6oCzD8V:QJGI8hMocfhophLo83g","tlshash":"9cd17e95ed345126db637df3a678d885e4fb576b86398eae0429b0cc73001b54323517","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-06-29T07:04:40.951484Z","times_seen":20,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Enno_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.643Z","timestamp":1782329720643,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Enno_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j66Ls2zgEEP6E4sbRnxa4X33eWTuOOvO%2FTuaGR26PmdYzCSHyvPsulvyqmcIsR9MjydffeJYs7CtwfpCXt7RuVFDWhrkI3ASk%2FpI0ouCNsVU2TKnJ0vKONXE9l24fcB%2FeCFGrQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"433f-19e8af97366\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 17215\r\ncf-ray: a10e2cd20a5f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":17215,"size_decoded":18198,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"0bf9f792ec5b19a144524fb93945e3c2","sha1":"0df1fd6f10ec44bf41fd2f9c5a2955ec4102d8b2","sha256":"670f8e9cfc6f8f044634a11aff9cb250075178f5061b6004fb02433fab30091c","sha512":"2133d94098b5559013519cbabbfdbf8ec10171367008e6c87d7f32f6dea6e7b927a94075e2db5a16da21045b66212ad616a252f993f2dd6ea8454d971c9c4ca0","ssdeep":"384:dvCPkdtBG3Kf9jkFTHVULLqLC41ZHN1a7zTHqlZ8rPO5KVCmK4:tokdq6wKLLq/DN1AzuF4Nf","tlshash":"da72c0c9f9006ed2c1bd86ef4e823bd113c5864fdab7f32458d1e3406868682b6d5bd1","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:41.234111Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Arianee_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.844Z","timestamp":1782329720844,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Arianee_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BVHz9CobZrvQJ2zHwbhn%2B3ynjHAsvpoPwb8OL2yWlvSKjq%2F9ZCH9huvmtr3wesv%2BrQcG24JUe1nj%2B9RVrgUzx6ef%2Bhy%2BZQwPkd31QTcoBhUG%2BItbkVNtZLtJzD7cL0x24mCc1g%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"4d2d-19e8af97332\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 19757\r\ncf-ray: a10e2cd34ad8723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19757,"size_decoded":20750,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"bb0193396efd27d7441fb1b0f2ccf26b","sha1":"8c73869e1ec30de47aa8d7bdde80ad5163dd4887","sha256":"40c23d00aadbdc7cdd661ee868f72ec6844753dd3f37472fcf10834901034ec1","sha512":"966b740b80adad0090d7ca2ca0521fc60bde6f0562bf6f49e1ac707b2d4bdb82636f6593866900ad9fbf69a631f746cb9c2086903fe15b968f4496cf1a0a3e62","ssdeep":"384:RQFcUov+lUGPEkMMfHnA8cv5G2z31Zp1F2XDpdJgK5rGPVBCaT6:RQHE58cvNJ1Y9dWmSPD6","tlshash":"0292c08634f6d484cf170a7081b56f2f6d67e2a85fd8ad7cd187ea0c2e60ca59e50911","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:41.145043Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Binance_US.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.017Z","timestamp":1782329721017,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Binance_US.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ToZ0gyYv6lJBWm%2Fg1G2b3U2Tap%2FB634oafGGUHq2xgne590LlJYbmOvqTu9pedrZ%2FdAzIXVFV7pyXs8VOnXUAyv%2FbqXFSLwUZn89byye0k8HP9Rk2eneINVjwY6xQYcVuxxGDw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1f82-19e8af9733e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 8066\r\ncf-ray: a10e2cd45b59723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8066,"size_decoded":9050,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"55a06a3a9972340a04ddc84b56d2ae4a","sha1":"5b86e3049c4379f882f9305dcade41d93bd078a2","sha256":"a8ce08ff240504ab1d9b7acadc72dcc8ab7957223dd95662e4d4106595ce47d7","sha512":"32dab09d0f9352e078c87b64430e8c53094945fdb4158abba7a97e5ed6473fb1b104af37874d44954a328b7a090eca07e8061531c63fae1ee4ded9dc573392de","ssdeep":"192:lCP6lyik4ys1Il+Xgv9D/CU9trG5LsRf3f4NOlx:Yio4yswIst/9t6Naf3A4L","tlshash":"39f18ea8520261844177a7d4c1dbd35560a8ef7dc8c3a8b567bb3b6e5408cd916acbd0","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:41.010689Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/SoulSwap.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.221Z","timestamp":1782329721221,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/SoulSwap.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bn%2BbEw08XgzGEWpNLdjVY53H9y4iUnw9QnQXRYZHbb%2BM3W6QFfDhA8KKhp%2BUajy7%2F9Xhww0tUwGdMWkcHYLY7cM2D7dd6sllGL3dtOOvwBVzkF0XLkoHfSdyhxuTHHB2NNof6g%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2dcc-19e8af973c6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11724\r\ncf-ray: a10e2cd5ac13723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":11724,"size_decoded":12709,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"b9bcf99b9ec6cb0f223f3de4a662b9b1","sha1":"4056f4087b95cfc5e6866798f4b79599d6f4d185","sha256":"15e3143715d20f0d36cb7f478f9acd8f178d086b01557a451715092f66475de6","sha512":"30d8cf2335f22bc0db1fe83e80e2f4ed332778f51e2b74e7925f0b98020671433b98183633f93e4669afd4f77959c8eb3012afde2df89358d3374a27f3de26f6","ssdeep":"192:NBL6TlNc2YvA8jW8YnxjoohRQCHe21+ageL7CvJ/UOe5OyupS7UzOyvC:nL6Tncry7nxmP2Uzi7uCR8yugwxC","tlshash":"8132bf28f743df14e4ab90d5aa72bc4384d84d759e81d3ad79e8e2b8d03531c92a1cf2","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:41.060063Z","times_seen":19,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/MoonFit.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.248Z","timestamp":1782329721248,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/MoonFit.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b5iGSPVa4QkteaCoqWhcI00yA34bBKXtG1aVNE5gorULdnRumH38VDH7b%2BrwEAKVJ8GcQ4ez5f8QZix%2BgcDyZXYQ3OOBRj9xUnoWFcWmObg02o4IbJzc7X3s9seTam%2F%2FbIIgxA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2734-19e8af97282\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10036\r\ncf-ray: a10e2cd5cc2e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10036,"size_decoded":11021,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"a2cdb41cc92a7d6f493ecff9b465d350","sha1":"f2018047bdcfe83b968b3e1c7dd915d9e6bfbce4","sha256":"a5997dfec1b067f2b03f95e5f874f47d2bda0a1a44afc1ca907f074b5e841a1b","sha512":"7a686631f5382e8741dc368126c8842176092c1fbddbfac0a29f4e62a1f73bf231134f095a5025f8a29931ced595b7bbc89abfce595bc34537c3d06865a48b3d","ssdeep":"192:ZZbinwLUmzk6V6Odf2OXq079wQyogzb2GtzGXamwXfuUzVgTLSAb:ZwnwLUmZ6O7X5nY6cGqnfuCI","tlshash":"6822ae2a49e80d3847b3c57607e39b46f19a15ed0bdc0895228cb6f4bf13c3572799d9","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:40.820081Z","times_seen":19,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/HashLeap.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.280Z","timestamp":1782329721280,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/HashLeap.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VCcch6Poq70HdeF0GadApKoClpZGXS36JWcCfBSHX%2FhdSHbJpjTY1PdVM3MXQt4jV%2Fmb5jA3OpwpBEGluNo9djKU4iCioqY3UQJOVU8RmVwlgYWD%2FSZf165cjeSj17aAlacIaQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2755-19e8af97252\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10069\r\ncf-ray: a10e2cd60c51723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10069,"size_decoded":11052,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"606807286a746e70aba6fc92818a108e","sha1":"00bba3b581085dea792be653b764457dab9e1b3f","sha256":"71da5c1ebd25a23cad70eaaca76ee0c8abd8f74cf2eb854fca8bb007b8cc9fcd","sha512":"01e0575feb40c920a9fefa44728d985242afc9193b2fdd571257c596b654f9b32ef803058c3c3b51285cfc8d8763772862cad0ec5ae8828a1fa2d39d5c05d478","ssdeep":"192:nftcSZ5ELKiLbV5UZ+mCteaJw+cz3TaFiWs31mrlK2NibzI5W67Q4JbkGUkru:ftcShuVRmCteOS3kJs3wYEi45W67zBkl","tlshash":"ef22b086ea2de14516ec4c3eaf9c807a8342ef4bd524341552320556dcc5144fc7ec7c","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:41.258901Z","times_seen":19,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Talken_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.992Z","timestamp":1782329720992,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Talken_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QrStcY0adK2atfPR%2Ba%2Fx1lV%2B60GD816xrI3YM%2BG3EJ5Qsg1y%2FYqF%2BD4d5hv%2FEHMw1aBEuESc3R6uygjmY6JsUT%2Bfa6M%2BXMnHG9VEXYMPc%2B3lF6ezJm4V0Dx82f1tNbm4HLxjWQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"5797-19e8af973ce\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 22423\r\ncf-ray: a10e2cd43b45723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":22423,"size_decoded":23420,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"f9f222672574c3b3b90a7be8fec0d40e","sha1":"9cd5acb0509f1638c19f05263a567401a389d2e6","sha256":"f00e82dc930532694eab43d76fd48c5a72c3833179299caa7d290d4f574c4128","sha512":"44c8e0173edc2517e27df0ac0c7d054661330394a9fd7416b64c9c1e4f71dbf74d4b5773deb90147610b45ec5bd874f30232f22a18bb7e272236aafe183d5608","ssdeep":"384:umLErZAtATomI5jCxjnXn4iEno2XEYIgzys3NOsyeaUy56BrxIa:bUZA0jIIx741o2Xd92WRJ","tlshash":"4ca2e1d67afe4b54c0798c41f78ef9cc36f280bf16ec391a4972eae1aa49c4599053d0","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-08-04T05:59:25.944202Z","times_seen":37,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Zapper.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.306Z","timestamp":1782329721306,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Zapper.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tehcskboXKzOc8d3jUABsEyyU9czUi7gOUED4FAJ5PT1YNv2g4W63Z2zOBhn2z%2F2DqJis%2BcQ4VziGi7%2FCOQKCBplIjDj9PhZfJFGN8aPqsmPWunHqOtvND0m8qchGnao3vmTnw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"921-19e8af9730a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2337\r\ncf-ray: a10e2cd62c62723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2337,"size_decoded":3318,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"8104be239c8d499da406256d6d133882","sha1":"3eed189b2449a72b69407e94767dba97315997b7","sha256":"d6d70935e692ed0f4792048805850ea2ffe51e8caf38f4ec2461d63320f09cdd","sha512":"b6dc85ed1825638812ccd48e23a1cbbf9fbef0e6986f34186b0221054a88809964cb0a044e993e45b28494c9eb378797d1994224af122e31402d668f58d7d88d","ssdeep":"","tlshash":"72415bc44230c985ddd212b0bcdeab80c1ea655275f1b608bbd910701c6c26994932ba","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-08-04T05:59:25.988738Z","times_seen":36,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Rainbow_Bridge.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.378Z","timestamp":1782329721378,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Rainbow_Bridge.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5XHBlDPvH7vAAnmdn75urN%2BrQz9RT9TxgcqUV37T6UFApO7g3qUUg9v4O9vsX2duAkDwIePLillYbBUO%2BNuZmmWAJQFcCrWHOEe8TO2DnyCyuLnsu3umlKFTsVC3GoPYtfCjtA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"aae-19e8af972c2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2734\r\ncf-ray: a10e2cd69ca5723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2734,"size_decoded":3713,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"05ef80b224685deec02c0fd2f87439cd","sha1":"2c31d9e420a6bc0839e7d1353027db776b2b8d46","sha256":"f5d480d8c2b9b6bca4485f4c0e954d985d78fda3691396ca091e5b7fbc31f38b","sha512":"5384803d7cc7873bc9ddf5ddcb44038d65981dac42b67783e76ea6a7b144ce909b5f5e91e38e2a13fea1a8a1b4cff77554fe031eea80e908520cff43685d8bd7","ssdeep":"","tlshash":"9e510aad27dc3830e5ae1e712901091f64304e4f97c2229828fdf7457d768955cee615","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:41.090196Z","times_seen":19,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/XRaid.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.726Z","timestamp":1782329721726,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/XRaid.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=enogo6NbmOmanmc3SkwyfD9ZCShCawGTuLrL9eJzb1ku76RJuycnrFw0SEoMnXKhDn2vYtkV3EkhkVn9ZuXpAHz0Ifia2u1QAo6FJi57eq3HjK7v%2FxY4lK3ybUHa%2FjbDHhXuYQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1bb1-19e8af97306\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 7089\r\ncf-ray: a10e2cd8cd5e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7089,"size_decoded":8069,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"1e89d8f90698282b29ff31440715d2c1","sha1":"c29df22b4fa7365e2db52d85bdd3fb979305b875","sha256":"1bff4451bf0c438476940ba40ba011e727e1d1a8486601ac3eb595078dedf255","sha512":"134413e621dd5c769aad53d1cd825f7a73b29e606333da6673b531b5eb8036185355ec765165eee96b929e8c4feede536a5923622f98a8ef2bc1d913366e29c7","ssdeep":"192:6euubt+ylJdsvKPSc22zsU1/wmdMv7OWGv:jlt+ylVScjsyooyOLv","tlshash":"25e16d786a3e13d07b6d4b3f6c93706a71316be3a501e5aecb42be721612c784b4502b","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:40.653811Z","times_seen":18,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Kuma_SwapX.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.749Z","timestamp":1782329721749,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Kuma_SwapX.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IPDNhnTlu4oKb2NKvOg1HIlKCxCZzblpWEkv5dhL13o5WPKhflr%2FbnSKfk13LiAWBvCsA2JRzWF%2BpW3hDZhMxaJG%2BnF3XlB0x6e343pcmcMQ5GnjI07IOZw5QqeKwZqAreBeMA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"136f-19e8af97266\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4975\r\ncf-ray: a10e2cd8fd72723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":4975,"size_decoded":5957,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"9b2293b2b6972a0fbcd5bbfc63ad3743","sha1":"5f25ad4cfd3e7295bdf92c28805c2d308887cb83","sha256":"7600fa6fddd3d9c17228e7ba59c168d1e859807206279960f557dd05a0c26fda","sha512":"19625f55422a923c968ca4d113dbcc8a48f107681346c4a3a8a3a93171399df4c7e4ce64bafa2f997ae1cf85b673a0bee7ee9873be9d8d029126b8ddf2b5cdf4","ssdeep":"96:tZR6lRxAtm5EWpknVhIwRkVQEMwHAJgNZ/LKjfwRZN/O:tZMTx3zkzlKZA+ZWfwR+","tlshash":"40a17f802878aca1eb748cf33b6691c38a5954cf26676d4db331f161f44f67ba10a5e0","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:40.654726Z","times_seen":18,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/verso.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.797Z","timestamp":1782329721797,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/verso.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3XxBRIAjkfP3iHHeEsM0rgKISOV9pWTbAfHeHqZ3M2OTUCwrZQr295L4KU7PF0npNrO8hfgWOBN%2BuJ7gP%2FD0Ossr0gSqcMrZDfeqoqwKvyY6F97ODKxIo9NuefNqLsAkOr0WSw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"c1f-19e8af972fe\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3103\r\ncf-ray: a10e2cd93d8d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3103,"size_decoded":4082,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"baae0a843a53b170ef3ad73da34af68a","sha1":"a099ab4321e9b7f3a299aac451d7cddb40445f90","sha256":"cd56ee36141fcd6079dd08dfbf52259fe8ec1374579960f457f3cc7f74525ad7","sha512":"0f8a5f550271ffed5d78e95cad5efbf64875f08bc100371590baf15a3e1669c85b64c55c9eca12f47788d0bae95749cd8694a008041c97335180b5ad95c26c94","ssdeep":"","tlshash":"e3513d98b2ca3cf7d8ff26b56580f552c8ce4e6eca12930909756938153c6245738f25","first_seen":"2026-06-24T19:08:42.580127Z","last_seen":"2026-06-24T19:36:12.556779Z","times_seen":3,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/TeamToken_App.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.869Z","timestamp":1782329721869,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/TeamToken_App.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=476ToCVNPSz5ucqvNBXUiS8JizmX1NtD0nwKbwKBxPxHEwp7WiLstl%2FCPCjAOphGVkfq3S203VpSH38boHPNh9xYoyZPaIe3zH15SzmLJaiI%2BCvJmUz6nhhZaYfYVrrxEMl0Pg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2698-19e8af972ea\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9880\r\ncf-ray: a10e2cd9bdc3723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9880,"size_decoded":10860,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"e2313e16a8d5ccff616dab6fda36ea0c","sha1":"115b260e5e982f08378788ec274aab684c8caea8","sha256":"29857a76a438765332084b1639a6ffb76a9c8c38d9f0e83d4ecefb266774cffb","sha512":"1b92aeb900e3aec5adedbfed771214c70cb78738c7e5d6117f0f2bf5b440ac9a736e82747876c20244d5a8518f3c435ecc73f5e309d8912726e7d3eb9300eb5e","ssdeep":"192:5HypM2TCIKMAMq2HRc2FKg5ZyinWHU/eGYQIoaKW1zTZAR56QUNch0aiJkudyU:5MM7d4cEnTi2JYQIlzNAR5oC0aiJ0U","tlshash":"7312bf394b7594b4a3d16672cf2ed5cc92fa75014a58ffceb252a322ef4c728c61c510","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:41.175251Z","times_seen":18,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/KoinDX.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.898Z","timestamp":1782329721898,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/KoinDX.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ouuufHovfl0ATfe9nhLK8dNlMFccUg%2FortgpsNeo0NaDPZnHV5k%2B3NCD56wSLlXYCRv%2FBTnqLcNjI4I2GWv1UCks%2FNePSZQIWWej%2F5PSFhFA4OLcl%2BlHkjjx9AP%2FBwEPm9Dasw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"dc3-19e8af97266\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3523\r\ncf-ray: a10e2cd9ddd8723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3523,"size_decoded":4512,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"33038a15070ed30c6a47037236efbc8c","sha1":"a2c48cb1f57d88e56854325054f376c57536a187","sha256":"1669539ba73b514dc8e05da2a7cb2c2d50788d09d8714bf94defc5d2c86db8cc","sha512":"9357fabf2bae923a444e2faa0abb9b909e4156ef6de39a81bdeabcb411e8a3cf6aa5e207ce1a22736bc0f77fe65d6ce16ef9d078ff54901cdb30c7f865d9246f","ssdeep":"","tlshash":"f4716de66d84cc7cc81899376f6ddabfd03c165f3387ae18742af260c9c258609433a1","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:41.148074Z","times_seen":17,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.131Z","timestamp":1782329720131,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 14:31:45 GMT","end":"Mon, 17 Aug 2026 15:31:39 GMT"},"fingerprint":{"sha1":"B6:67:6F:5A:BE:B9:2A:B2:16:10:49:96:1E:1F:99:2B:44:AF:EA:A6","sha256":"63:A9:BF:FB:46:E0:B8:37:95:77:F3:63:84:AE:78:22:46:11:85:5E:DF:87:F6:4B:EF:F2:2E:24:D5:74:70:39"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::r5w9f-1782329088022-33c3db91e56c\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 631\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lViIfhRmP5T%2Fer%2BycsCzcmMxU3jYewwyfCACR5M2P6pSa5m05Nd9RMZEkOTe1M%2BFTgiVlU3VzhnwsubjOa3J%2FoDw9c8D2jBNIAI35n33ZA0rJfvtxgWlWekyVQbgqPJbMPWn4qg%3D\"}]}\r\ncf-ray: a10e2ccefdee4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T23:45:00.487881Z","times_seen":17963874,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":5,"connect":1,"send":0,"wait":7,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Ethos_Self_Custody_Vault.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.128Z","timestamp":1782329721128,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Ethos_Self_Custody_Vault.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hz27Qj3IcbEprfqsZ9O%2BdDhc8VY0SCYyolvD9rlZQEnKM%2F0oYZhICZCloMaoA0MGpBuK6mClmv4KbYAfawMvcU9nduGKY1yDFeVE4aZm6eBzRyQFySpLRXut2ZlyZmI%2Bsn4uhA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1a7d-19e8af97366\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6781\r\ncf-ray: a10e2cd50bb9723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":6781,"size_decoded":7763,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"221950a7fbc1e4e6fa25f47a57ba3bfc","sha1":"06620f67630e58e1b86babb8362b8abbdaaef8dd","sha256":"0ba0b528c39dcadb2f883260daa96b93dff68a76eee344d60deac837aa8be03a","sha512":"2cf95b9b1b710cfb612244615e67f06b1cca4ce0a1d4c07f7955aa6058fafda9e24f7c829d3f04388ef6c13ea656f665be50c7473c000695b7532738f786d567","ssdeep":"192:I87fpAymAy3F30r+UZ/APex1g5J7ps7kruG0YjDdE/M/4X83srT:puyOFSvZOeE3ps7k1nG/l83srT","tlshash":"42e14a9ee33431b0dc9446fd46d9cb6edbd14b9fe572898708a3214bdd281e64561098","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:41.258302Z","times_seen":19,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/faucet_aryze_io.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.872Z","timestamp":1782329721872,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/faucet_aryze_io.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jsJ0BsimjWe%2Ft4b8jEGhoTeS5OJF5on56BhLwVCzvRJUJH9QAKHtalcR9apbtJZUvs21VZ7KvvXbd6sNWM87oHrOhiBl3WrQgakmR%2FDpjSSNF9aUDnZCAu%2BA3rF1WZEID3n%2Bzw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"f09-19e8af9723e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3849\r\ncf-ray: a10e2cd9bdc5723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":3849,"size_decoded":4832,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"b9b37a2bf4ad27da6855153d81fd2151","sha1":"124c321c47fde9b2e80e733719ddfa50b977969a","sha256":"93745e01d39ddae1ec584bf86a73b08ae9cc4e97e31e80d243867591f2edc680","sha512":"51c2a4d22038131b7b958e9e7174ae13dca020bec924374079c6018ed25e13a1dd1d2cd316e0e46b8e6171a1a83b1681c76ad49aca3a0ec8225817456c794ebd","ssdeep":"","tlshash":"2d816de8f412ddaec3bc18b10b18c9aea9147035eb40261ba4318f263d1c07c0acb2f5","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:40.984082Z","times_seen":18,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/citex.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.930Z","timestamp":1782329721930,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/citex.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7HQoO8AKvf%2B7SdBELr8l1Aekrl%2FTzlN3i6NhGnDhiD%2BruJk%2Fpwy6xAgVCqI5Jq3rCk6Jw9XWmEVaLCHwhCBe%2FHrvRZyXUtwc3DZ2eY0%2FLhuLJPtVKmDxvSR72vs%2BYtMBsp%2FUog%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3051-19e8af9720e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12369\r\ncf-ray: a10e2cda1e15723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12369,"size_decoded":13362,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"441edc3bb27ccc07f739794ac8648f9e","sha1":"947c2f98ff2122f93261e5a72884db727427316d","sha256":"ca85acdafc5ff9b6ebdea11c1263e9359ed8efe743544954a5fd7089e85a3d93","sha512":"377a37a5a9103553b8b999f2064b73f8b26510016d7be486fdcdd7cf452ad296582b268694d707451257de0ec6b7e8a96aee7013c6c45c147e0e2a8edfdc4aeb","ssdeep":"384:3jIRlvBgt7UGtUtf5VqpzyLh1aU+ueevP:3jSlvKaGt+f5V6zyLh1aRVsP","tlshash":"2842be6773e798f2cd9a02b1b343002396158dd1132dd2a6fa94707e586adade823a43","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:40.61106Z","times_seen":17,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Pheasant_Network.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.174Z","timestamp":1782329722174,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Pheasant_Network.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=18lHQCh94siJLgyfSib76G7cnSd%2FmcAloKAca%2FT9GY%2FwhIpq8V842kvSs5OGJ%2Br7%2BvvKt%2BV9Dyn3XJkVDYZSl8Wia942gh4P7DELq8NwnOQwWZK30%2Be2s6PtAwpr8px%2Fhy0%2BDg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"34a9-19e8af972a6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13481\r\ncf-ray: a10e2cdb9ef7723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13481,"size_decoded":14476,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"3791ebfed13baa9dc67dec570c60bef6","sha1":"7b16b1f4ece3fbd4a41971470e29e0dad120ca0c","sha256":"5869a1df851459b2905cdd2d9c67c967a4fbd0e928ba57fd7be4afd77b73867a","sha512":"b7ec59e52bbdea533fbb9bcd40f1b6ccb580556f27f6b0f7c934b438dea43b5b7fe7d4f94580e343f2dfd74a72660b0ce3643906f46405130d7afa3b4c691a99","ssdeep":"384:7vUMVgBm57jKuTN+jTgknzYVEpfIrhiRYmHZXR:BNHT0j0uk+fIrQOm5h","tlshash":"d552b04970f8b895eb963eb0e9b504a506dd0d9f4829e73ffe1ec408be08561858479a","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-06-29T07:04:40.665938Z","times_seen":17,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Absolute_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.692Z","timestamp":1782329720692,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Absolute_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lWNUEaZ0r2BOHadBPP4pxX3TgrzxOJ3d8biRAqg8FXeFdmiaI9LMqXBRry1Bmtobv7Dy3hHzpH46mQBYAKYgdOJawmoPimoejGO8FJgRljngPxhC0%2F6VVBfsg5zmTYSyGswVHA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"4b38-19e8af97326\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 19256\r\ncf-ray: a10e2cd25a71723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":19256,"size_decoded":20235,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"7f679fa9a38b896f65014e00fd8c1a9a","sha1":"1ed38b28d722b911a8fb583c397493768a12966c","sha256":"e2260b330f8030a14e5440960e5666a3f14d8d2a166cc5e33e1e863156526854","sha512":"f18f80fdf61a1416a71697850b3f081acc5c2968b51f845b9546ba1d4c5ace35eff6ec632c1e8b5892be6d11bceb9bc472e1611c9482a8ff19ac52cb52b256a5","ssdeep":"384:yNibGsr6byp2XGBB/Ras79r1qclqklxNoa1ctannOhGDegN+/:3asW0SO/Ras7zqvexLuanOhXF/","tlshash":"5282e1094bb0b86e3106b597ea56562a60d809090305f7ea9fcac7b0ea279b31535cda","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-06-29T07:04:40.860767Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/SCB.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.159Z","timestamp":1782329722159,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/SCB.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hQ6RjTlDScphLBjE7BObcmpekotVi%2F53sjkCUhNp5i4r08RkVbzna%2Be7IkNA%2FuvIiC7%2B6R1YNHUi1UZZMeV%2B36V4O9xfOaelWrJMRfDtUreWK0P4CBRolRWd4VqHmBzb1ECrMQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1956-19e8af972d2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6486\r\ncf-ray: a10e2cdb7eeb723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6486,"size_decoded":7472,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"368d71b34c154b702c1043ecb5743b2b","sha1":"9a03c1f3daaa3b4d64690eb2fb6347590e60f64a","sha256":"f04d57536016cb100cfe6ab05eb2b7d80ec3b790ab75c5f533a4caf67189c9d6","sha512":"643a6355857c87b215f3a67d1f42051d66979ac241fab724b05ff38a3da8d7982f29c677169c75cd12a4e7c93e9f147223ea957b24eaec45968be52a6b1ea885","ssdeep":"192:Lpc80VkLVUbekRrpCzhzMfSv4IWynpaQc:Lpc80VkLIRduMfSv4IWT","tlshash":"4ed19e844210facf1c7ed1c76cf8c648d621f636d66c68e751aab3c00cbece25471149","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:40.583115Z","times_seen":17,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Betiro.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.167Z","timestamp":1782329722167,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Betiro.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p4C2d9QFb1aNi0bFn0O6cTKTXWBaIkYFn1lCH2vq2%2BPXDBocju69PZvIw0w%2BGm%2B1fc7DeaNsxonmmqzwo1PMpUMyIClpCsGBpKHwZ1F7ZsFWRQUPMmpff2RsNqaRpZFFTHkJyg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"de8-19e8af971fe\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3560\r\ncf-ray: a10e2cdb8ef2723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3560,"size_decoded":4541,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"6c6640c79912d107df47cd62f4b9aa42","sha1":"684ab4b1bacfef85b87f3f19c999d7567e05930f","sha256":"73c71e9d974be7fd4d3860cdde3fd1afbd8f237d082f3f563d1505d2d9ef9af4","sha512":"15a024ef49aa7852d28a32acddd080d2422d383bb92dbbfe40e916e793f5def723aace0ecc4ba77976763d3de03b503b8e158e17435e32ce8d87c1c91272cf41","ssdeep":"","tlshash":"33713e49d29733bc24b9bce77f05a824890db151a7a7900a316a3d35a81dc575cb3f37","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-06-29T07:04:40.877559Z","times_seen":17,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/PayBolt.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.842Z","timestamp":1782329720842,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/PayBolt.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rfvMx%2FtMmbvm%2FVcS%2BnfomSoDzgZBXE%2Fs4UXWYNLhjBmJDnvbqeiRH%2BSDNw%2FOO%2FTzUvFk6ARPxpitJ6eCaTglo06EwA8hWF8jtD22TL7S6LxCJ%2F5JzMbl31Wvv92PMheP8pPV7Q%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2d3a-19e8af973aa\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11578\r\ncf-ray: a10e2cd34ad7723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11578,"size_decoded":12571,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"868ba34a4ab42d6caf99925238f67d3a","sha1":"8472336c99ddfbf4a74dfa84c92447fb182c073d","sha256":"f9b6232d19bd3b926fb22c4d51bea05de0dfa183c9798d9cde39db8c52b2cce9","sha512":"225b75384ee7a2554f6d20cd07d46608ea9b52fcf5a1292f1d5710e96ccc6bd845d1cf977e020fe549c745a1e98e2f7db87da7b313632e37fe1579cc4075e98c","ssdeep":"192:crDmkpXaZdGhkbJ3mIYbuiFw3gN7i6/1Y9sCcTTkztj5uO3pA9PVskgxGbIgZ:cvmcXbc8IYbuir46/69s5/2fuO3p8sNK","tlshash":"2032bfe4df4063d72e2d853b6e59e8fdc28201be33a6164ec04e92a64f1dca65091ca3","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:40.619378Z","times_seen":20,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Polygon.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.217Z","timestamp":1782329722217,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Polygon.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0wsjVxRyRXUGGbkfjhJqJg%2BFAEQs5RVEce%2FpQFZDY0LaqF2ur%2B4AZGccEi7maRu42kFOLOe5IUoQDoiaKl5GPSic7QA1Y9TCRgeHNyF7jWqGQX3fdy%2BS2V2rHDuuxEDDuuhfLw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"619-19e8af971d6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 1561\r\ncf-ray: a10e2cdbdf15723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1561,"size_decoded":2544,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"2d366a42d352c4f53815bf352313f40e","sha1":"35612bbbc5104d142bf304fe81865b3b54921e1c","sha256":"cfb6cb92265f73748f6961ba4c702233db3f79b00b026180f849c4f9ef1b95bb","sha512":"2ae391f3f69115e0a285b1aa335f3d4e366df5376eda07d2bfb93ce974297c05e1481f6dceb96b139794772f50a8643de0c0aa7c898d9268090be78d610fa86f","ssdeep":"","tlshash":"0f3107da47b62c73816b80ba512c0e84b27e607c1aa20c32d5c88cb8452963888e3706","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-06-29T07:04:40.699527Z","times_seen":17,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Ton.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.329Z","timestamp":1782329722329,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Ton.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z%2FEH%2BTJaoUB9D2oGuqMEOZ%2BSTdQjUY9NyVlJzOBY49kuXh9IX%2Bsq2Ora3nuihu8a8jNbMnkAB4DoqX6zGuilXyCjl6T35hj6ehEIJ%2Fe1xsJk4IWmN%2FgGGzN%2FABlZOb5sYu%2F7Xw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"9e9-19e8af971de\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2537\r\ncf-ray: a10e2cdc9f6c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2537,"size_decoded":3528,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"a1a54c584dd77fa14e3dd4b428d62d4d","sha1":"fbfbac145f955283907d9de32bb360f82c694e91","sha256":"8423799877499c7e91f8706588098113f52b2fc5ce8318f46de29c3e999cd772","sha512":"adfa5f3436abd67face4bf6938c1df83e19553d5cd6f8e32af6b626f5aeadb0816009d31e774fec83593ae01885f6936c82cd4f6ec692e80a8824e1d2529acea","ssdeep":"","tlshash":"9b513c53cbf4c9de6584020d3a557621ae134d2761ecf815db0547bf17ab5b702d214f","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-08-04T05:59:25.997852Z","times_seen":34,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Ledger_Live.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.322Z","timestamp":1782329720322,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Ledger_Live.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oeVLTMDasHWewj3WJX0n453fM6OEPPHH844LyE92stpDEZvn4veliIKJgQ8d1GvjvpdSwSz%2FwbzRfm3n%2FrsfmxS9x896E9xqrQp0CfjtFoz15BjO4HCdcSlmMOmL5A2qXk3lMw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"e91-19e8af97386\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3729\r\ncf-ray: a10e2cd009ec723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3729,"size_decoded":4708,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"b13d91aca76207a56af48dffcad445cd","sha1":"86d943d74726c4ca895fcd99d0fb9cfa2c49d9ca","sha256":"00c64ec3a9d062acd60fa139fcc3920e93cbfca38848db9cd3e10995e3b80e72","sha512":"74c5af524b6b9da854a2e076daa61679c06bff813436e75828405a02d046bb6010b1046bdc385a3dde995c7d5dde357bc16940d531f87f2b402a30e236e4dbf7","ssdeep":"","tlshash":"957162b3206dd086c16f5172b018765eb190c7944bf24e54eab5382361a8b6acf13dff","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-08-04T05:59:26.013767Z","times_seen":193,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Plasma_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.849Z","timestamp":1782329720849,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Plasma_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IPhq8sIcOhIMsoUtw26jCxDfZatvGc%2B6w%2F1hmttj2k%2Fm5ce7KkNWOw0pNZBP9BqCiGsQ2JK%2BmrPJWcSaNlOM4xqmZ2QLE1cAO0J%2BJjc%2F1oqUfP8x6G9jZHY%2BIh3bS2kyuHdSfA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"49e7-19e8af973ae\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 18919\r\ncf-ray: a10e2cd35adb723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":18919,"size_decoded":19910,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"50bd72644fb124f9edd9ecfdf9f066ee","sha1":"9d6646dc0a317647ca4d1a208f5758de722ef69a","sha256":"2333c2b49960d939f039592ee3e1e0a05f7b5f03aee3a2f48a69cce5a906f77a","sha512":"619d2b59070bd043c874dbfbf5626938aeb6c42aef157c0c9b8d85a91b013476d3a3df83e0e73370e6b9c316e481c5225e977b54c44fe72130eda3bdf02db295","ssdeep":"384:0JmsrJZfaiY40V4mZDI/tJZ1IW5zvDMk+AnD1zRRgIS:0JtXfjLZmZ2DIGzvDd+CB/u","tlshash":"4c82d0910755de3be85ea1b08b0af9df0eb9b77b40f4a4d21344b187899b918d0cb335","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-08-04T05:59:25.946132Z","times_seen":37,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Slingshot_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.933Z","timestamp":1782329720933,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Slingshot_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RbYKvMbycmmiymL2LHsfEO5wreYzvlLFzO6BsEGcrTNPrKF6ct9wA%2Bq9Y0nlND0bWrhmUrC3w4Eh%2F%2Bepb6vP%2FLS56V1s9YvLd04ACwowdWiS5hMlTlj%2BkSEM8gsQp6qVXRp2jQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"41c9-19e8af973c6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 16841\r\ncf-ray: a10e2cd3db06723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16841,"size_decoded":17828,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"345aa6aebd63d29b806c411e36c2a042","sha1":"2219ee3bf4adf1b7126ed8bb152a806c7d38a44f","sha256":"27a797b0b407801920dd1b84b1326d4ee9c5009c343398444d20651a4426ad75","sha512":"6cb27b27c98de24e28a529fc979b540faa274b48fecb96fce98f0198697461b38d676d8e65f858164915e2b711c023e8c5023936419695a4c0ae47d160a464ee","ssdeep":"384:TsubY16iKFdaRbxx+6dTAFtj9ajBuCIh6z83H13fIKuUV+oZe:oYiK/8bxc6d0hajBTIv3H13fIK9V+8e","tlshash":"e672d0884ea8c5d31cfee136ec11be5979e00994a4adf0aa5db77770d7e5873d108d04","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:40.800934Z","times_seen":20,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Bitpie.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.026Z","timestamp":1782329721026,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Bitpie.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4oGP6i7%2FcvMA4ui2qAWEoUa7GARnhdxmpyvWocC3fDp3c54W%2F7BFUgsqLJFcqRJ8TVoGDoT%2BzSk%2BrApZQDOLwDV1tWLb5QpGU0JpSH2tmsiKCmGpHFcPxibvKWqvqUWRnNPCCw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"61a3-19e8af97342\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 24995\r\ncf-ray: a10e2cd46b69723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":24995,"size_decoded":25980,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"04823d0cb6c32b201f91d40c545d250a","sha1":"ed637d9efd7ebcc8b7cd5418585561fe4fc52526","sha256":"6fba9c342a46165b16bd660441867e499e0f4c280bf26a6e21598d8ca1d29c28","sha512":"43c7e61ab2a97e9f2a134c8b88f6da33d5892482fd47360a2c6a541da0566af6f7788ed802d760f8f9f6b556fd67ea4e97457a2cd1f16b29e8129ab0016004ec","ssdeep":"384:yWM1F8FB61zHf+yAy/QX41QzuE8ZnM9eafu4bf2r2eO0tH7yoAqLlkANQbnM9tGB:yWPEUg44zZzauKk2X+H7EAaA1EtT9B","tlshash":"fbb2e0658b460ccc6475d593eca106cafb386ee4abe3780408b5f365d92ec4f83d564b","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.727446Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/NuFi.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.043Z","timestamp":1782329721043,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/NuFi.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RpUbSfvPcA0wznn0LDe4xSs8XHdYNt0Q92Kp7p%2BNQ5ztpkjbQbtmHRGKcxymJfZnjO5T9jNeRIQQJbJUmq3e%2FCFal1ChKIGJnPaSseAouJMh1fk2bJwemDOqGa0dmPrcH3uKjw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2f01-19e8af9739e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12033\r\ncf-ray: a10e2cd48b71723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12033,"size_decoded":13014,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"1dbc5bfb6002b11793ccefd185fac662","sha1":"1c016fa041fbc53a91154953adf9c5b2936356c5","sha256":"95ace4707a5571641039792023fdc4acba0f93c32749cc547f4cdcc55bb64383","sha512":"6b09276197f2a7dcfd952ab8c1f1c5b5fb199c41745fdd30e8170ef4c1133eaf646a38b730fcd0167800bceaf0fb90e288ec8f461d03a4f31906cfda5ce3ce77","ssdeep":"192:7kndo87V7TUTy75daXgu0M43RfPqs5mt0oXcBG8zqvLp4s6kYJtFk44vgaJVX7Dv:7kndo8Z7Oy4g5J3RfSmm/XcBG8zqTpWw","tlshash":"fd42bfe297caa424eb2d470ea5bc3daf0127d615544974aa6002de02204e51befbeac1","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.808387Z","times_seen":20,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/OIX.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.304Z","timestamp":1782329721304,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/OIX.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EDbTJe3TZF9ZkbfHhmYWYJ23YVDqRJSgCfPo2V%2FlO9oZM4KiOWE%2FcM7Lt80FRwxKlnrOE1hIgyZ4zJUeIPcOBXL%2B5riarADFmwSpdCfKczp7H%2FpM4QX9N1jKDY3m5xWKXPpZIA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1372-19e8af9728e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4978\r\ncf-ray: a10e2cd62c61723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4978,"size_decoded":5962,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"63e75fcab4c112cfe482593e5ee798a5","sha1":"277816dd8c7beff54c6d341ea1aba15267a100d9","sha256":"a06d2a858da20d07e9d0d6ba9e33e8a6e17cbd1b3e80b0e7c537ea1d9a175c98","sha512":"777bb2b5c14b5b036bbf5277c9dc8579948fb90ef19b5a1802361abd8d4f4d39badd73f079d89e4117d39ca6974cfad9a8a5a29d2b17fe01a1a99cf6385707eb","ssdeep":"96:P5fU1dti+ckt4J59kT/C1rYlm9PRNU9+AJuWj/WikHUsvo:K1WhJ59O2slm5U9TrFUUsvo","tlshash":"e6a19ecdb21ae63dcba5c0bcb1c06952809dbb5d352a68d8ffe582bca4a3105d87414e","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.867544Z","times_seen":19,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/ThingsIX.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.401Z","timestamp":1782329721401,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/ThingsIX.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iBfAO%2FongPHcgmxkbP545AKdtECBl7EJBQIkQBcqN9LfwdazG4Ao85O0mskYzB69iYu%2FxilrivNVyKkngBoq%2BseCSgVcUwHMX2aUQNawdA6cKC5OHuPQNvxI%2BxGgT7UmLDMs8A%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1a36-19e8af972ee\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6710\r\ncf-ray: a10e2cd6ccba723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6710,"size_decoded":7694,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"fea755dd1ab4045034b642713fdffaf3","sha1":"da343c1ea3897a488b7199c6fa0e63a2dd89e1a3","sha256":"69ba5b98cf84ebd5a38e5c1bc5b14471adfdf1c5ed80fe317739167b042bcbdb","sha512":"8be8c0917c8c46d25c900f76e76a5d15863a3a5b53ac392a6379a661d7cfeb185077a93d6cd4814f73141bc557ea9bdf96ac5023de16c56aaa58c755c22de6a8","ssdeep":"96:dQMoHQq3J1vJELCGIbXPF/fsOOuX6F7SzZmK2IegG1A09ZPiv8uqHWRJXQ8s:27HQqZjiIbfF8/7SzZTRe51j7YZbc","tlshash":"e2d1af50454a6399f3486f71c4682a5aca8ff3c5db746eb601900ee279497f046790bc","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.904293Z","times_seen":19,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/YaYa.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.503Z","timestamp":1782329721503,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/YaYa.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jukCn0XRusM4AsPzz063iXY5h3TsPRl5PorAn3%2BS8I8bYvIu8zAZ1z9rL6aULynEU%2BxR%2FpQNlbCDl6e%2FfBO2J3tVi%2BWMTdJ%2BqiD%2BEuN5g%2FYgTI0Jkytq%2BtGkK158xoFTw%2FavrA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"180d-19e8af97306\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6157\r\ncf-ray: a10e2cd76cf0723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6157,"size_decoded":7153,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"a6384efb2988ceb68c41f575bc085ea7","sha1":"359146c15d83601cd7191aada714fdd4d47cfdb2","sha256":"4a17c4a0b1595a5988beeb4e46e530650dcb63e3a648db7bbfaf9ea69c9171db","sha512":"a3798c6e3257364c8fbaddc9a47e135dc7d61986e19d4c4f03473e54adc1a70072f76322c205415ae3b12f62bd88b516911221729151dd5724db118c5ca0388f","ssdeep":"192:6fmNsZcdeibeSMlvRy/guWtKv4NWHu1y3CW:6XiKSioBGWO1QR","tlshash":"d9c18edefd8ae009cc11d473d91d5bf8ea2281ebb85456908663d28d063e2d45c52831","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:41.277188Z","times_seen":18,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/HyperPay.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.122Z","timestamp":1782329721122,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/HyperPay.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SiVoUo0Bh74sclcHWjeUXRD6z4rWAAVz6LZgpoJ5mtVMw99Yp9aT%2Fr%2Fpd%2B1%2BNtdqaKt3KxxdSLVgEjTb9EAceSHOnX4JAXHnhfkPDUOPf1XfGtEW1gcLJ%2BmM4LIiyRup5hG%2F3w%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1875-19e8af97376\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6261\r\ncf-ray: a10e2cd50bb4723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6261,"size_decoded":7249,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"8e3b5025baeba47624a37d2e89d6cdd0","sha1":"a6224f2f033c2d812b5c3b9a90b6953bff3238ce","sha256":"0d5387e06d847fa064416e0cdd19b2e5f10eff7514981675df1cd959f893b6eb","sha512":"2dd80d58960dee27d3df41ed0f4227cd3d9e283d6160039a679e203f6e55b868ea9a2744ff3708c3bf2d94a94422eaaf875e6372ac588f7c693ce31767b48404","ssdeep":"96:LER8SJM4WMIaeGBO6Ui1128p4BHXtUve19JEbQh/oats3O0uLCsqXCMB:4ySJEaZBX1128qtnEbarqDcVqXDB","tlshash":"7bd17f7ad94077a0d03fcc07c85311f0e5670a71b1a856f2867387faf429867624ef66","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:41.172373Z","times_seen":19,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/dropspace.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.505Z","timestamp":1782329721505,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/dropspace.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LCPNRLXmRgrW5xVRGJA%2F7AWhdqJe1l2VI4CHXpaffFYvk6zmKqjedSU%2F7WRV4EhiU2RfaKTwqKjvp1QJWlMK%2B2GEMTHzYCKu48cdxBFzHy%2FXcFmF388QXExcIjzMUSjRTe1fjw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"9d0-19e8af9722a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2512\r\ncf-ray: a10e2cd76cf2723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2512,"size_decoded":3495,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"a7e8241980f4c7e12254b79f4c0c9d58","sha1":"cf6459af1cf0080fcd1f4ea667af26bcd5412645","sha256":"73c343383c6dee0fd5529e23543837fba5c4f9ffabf5b5f81b9e698f22731843","sha512":"fc6e880b5a3d583c18a7c2b4d91883bd903c991722710c998560791497e789bdee3b53f4f5894eb061da82c3d89cfb25d10c0d9d730bb55d129f23f40261ead3","ssdeep":"","tlshash":"d151a78112e62822c6ae7631da18424fccf0213051253bf975de7d2ce36b74aee0d69b","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:40.880796Z","times_seen":18,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/CLR_Grants_Ethereum_TGU.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.658Z","timestamp":1782329721658,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/CLR_Grants_Ethereum_TGU.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VXtUQxEd0zQG1UCuVbSGEpY9nOLLGmu%2BtlfL67fzJhDxk%2BL2TnTbHjadhDz2vaB%2BrOgrWKPR%2FZrA2206pbYR86QlwwJLe26fg7pmXICO2pw9Mf3jqYBC%2BUai2%2FiIOWUW57ee0g%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3513-19e8af97212\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13587\r\ncf-ray: a10e2cd87d46723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13587,"size_decoded":14576,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"13f9c8c6fe8dfb80a172064a5d3946bf","sha1":"ada59def5aaaa4f7b03c06f8991a242dfc9a63bb","sha256":"152407f98caff5404b626b195cca707a601876c3ada85e644b40f80204b2f286","sha512":"025c74e06ffc061a5325c86321d97734cb54c86052c972c480c07b38234b77e76bf22bc8a33e99e8677cf1c0eac832c2a4a29ead54c415316ef35261fa97a1a1","ssdeep":"384:m5qTn/yWe6cY7UoexF0PysljKVTzVA0Z1voynnt:m5qWWbc0UoeEysQz55nt","tlshash":"b052bfb0b6786a28e2e5037ce0cbddfa5635a2062445023f661f94d528bafdecb11291","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:40.594558Z","times_seen":18,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Lux_Explorer.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.128Z","timestamp":1782329722128,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Lux_Explorer.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VnibM2owXjUH9POHI3V80F1xlC1zrMxHssqNnbie5b4aWzfbCuT05txYN7ag0Tj9a%2Bcpxc1WSNnXtu1qkXp9LoroLh4s6FbnVwjeo13WtKWHgc6sxNFhnRCKoVFzzUVb59K85Q%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"10b1-19e8af97276\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4273\r\ncf-ray: a10e2cdb4ed0723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":4273,"size_decoded":5251,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"3ca91d5b93fb8769745d2bc7d93faf9c","sha1":"d4f5b0accb6b32efcbc173d7e79a97982a0184d2","sha256":"7f713f558890089ff775bcd4707d2073c07e287b07a197a1b5514e7542eee4c9","sha512":"7a0a23fcb527b7a575c2b4eef04ca6c64dd7af731e34869bffd9077c047ad00b8471021a3238450db8b5e3a5c5cbe0ebb716451f942f60b33ccae05c95ccd6b4","ssdeep":"96:/p3PNg9rClNdSeGRYuK9KdGu53KUHnDsFoXiqMw:Hg9r4NdrGRbGo3xHSoSW","tlshash":"03918db633104f90eb94777ea5a547983844ffa328b154a773804b15d48bce7aacfd20","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:41.027218Z","times_seen":17,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Velas_Domains.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.176Z","timestamp":1782329722176,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Velas_Domains.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jJkAGGUTeXDfGfyGTDaa8wF6rT424gtfJdACqAvt0OAplnUgxKqhA%2FlmMAs5FxGxSyPM%2BK0KrmdZ9tsEGS1SIZZnYsPGcXGKCWTK1SEYkl75neDMTsTFsgDNO6GvyteWqbhcQQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"245c-19e8af972fe\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9308\r\ncf-ray: a10e2cdb9efa723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9308,"size_decoded":10288,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"e3fab30e29198730f816b7afc0e5e28d","sha1":"a84df603f56442413a59e9d440b5bc4db9221023","sha256":"b09f6c6bc839225650fe2a36f913a71664fa90d8d850eb49ef57e0d304dc4aec","sha512":"5d02dac5c1bc2e2e21716a31e005d92f8fc9d3c7ddd3864a80364e41233520f123efef96f5c51671bf20046dc0c91353fa6c2e76ca0caeec67b9300469313d50","ssdeep":"192:I98t64TFX86sxx74eiRKQeEQsilTZLbdbrL99G0a51p4:LB586sbUrRPelsiX5brLO0az+","tlshash":"d312af958e25b2ff0ba57442e3967bcc2a592f33c8a1e1d342561c7f4b74a9013a9b03","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-06-29T07:04:40.792591Z","times_seen":17,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/2942752374:1782327629:65HhKOO0Whg_TZN6wSldL7IBQ7NF-FSLEAoshlObDAk/a10e2ca71af2c759/yIxCxBQoavfo8XEE9JCD33nqtJ.xqO0MsVOtjAVQHGA-1782329713-1.2.1.1-qj1q9WEU8jfeGaIspm5tCIiUOyrxM6wfuFMr4IyQuQODB9F05mF4mbS_3vUkwn2A","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-24T19:35:15.579Z","timestamp":1782329715579,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/2942752374:1782327629:65HhKOO0Whg_TZN6wSldL7IBQ7NF-FSLEAoshlObDAk/a10e2ca71af2c759/yIxCxBQoavfo8XEE9JCD33nqtJ.xqO0MsVOtjAVQHGA-1782329713-1.2.1.1-qj1q9WEU8jfeGaIspm5tCIiUOyrxM6wfuFMr4IyQuQODB9F05mF4mbS_3vUkwn2A HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\ncf-chl: yIxCxBQoavfo8XEE9JCD33nqtJ.xqO0MsVOtjAVQHGA-1782329713-1.2.1.1-qj1q9WEU8jfeGaIspm5tCIiUOyrxM6wfuFMr4IyQuQODB9F05mF4mbS_3vUkwn2A\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 88311\r\nOrigin: https://challenges.cloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 24 Jun 2026 19:35:15 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: T2wbK11gjzgA28p+WgVMXFDWT2GCbavvej3Zl2MMtdnhtBZbxQk1XH3/9U1yJ5lP$xovtiOlbdIoN1pWY6mRzEQ==\r\ntiming-allow-origin: https://challenges.cloudflare.com\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a10e2cb25a45c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34380,"size_decoded":26260,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (34380), with no line terminators","md5":"f1fa917e23db542dbc0d6bcc322c173a","sha1":"d0f3c4adf572cb7ac48d0a63489264eb915bc5fe","sha256":"2accf273e854ad9df8f0c9e6261faef3d58fd4b4b00b4fe8a112513cf9712b7f","sha512":"9bf4c017399b8a35c73e048f369de0805319f98cbf01bf9bed8b2bcff0eb9b6e8569c24f400a750ced0c732f1820f54e1a4dbf3aa4e3469ba3d8c9d0f01e95ac","ssdeep":"768:uQN9PdGzzZm9GM7PKWeHW6zkC1sDGY8G0QbGrVlHQSo:JJIUKWUWU1OyA0yXf","tlshash":"d0f2f153b96c0bef414444ab352b1d231f058fa7157b3c4aaabc28cd5daaf2079f0983","first_seen":"2026-06-24T19:36:12.572612Z","last_seen":"2026-06-24T19:36:12.572612Z","times_seen":1,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Omni.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.306Z","timestamp":1782329720306,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Omni.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TeWuBuH9m92%2BVy1bC7b8Vqhup7uambtTfX31C%2FrhImNqKtHd6UxjVwxqesbUHVVc2wLwZgyeOMVgSjWx13zohIB7qzc0kbnBG26FnlPuaZIn6cQm2lBv9QEZnxyvhlBi2eRnmA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"f37-19e8af973a2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3895\r\ncf-ray: a10e2ccfe9e5723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3895,"size_decoded":4874,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"7d26b6a2e1a415b963cd346497f4edd1","sha1":"a9017cf0003163446b0c1c431d35e856458fea35","sha256":"3e6226c7fb1631236e24e2ad585fb110bb634c7a9ebd1b14a796b5dd1ed81620","sha512":"c204078a1b9c6bc7f34bec50772178d80a706fb3fed88715ef5a5d07e39ac9584edcf98dcc8a29ac77ad6c4e2b3f8ab02538e8567c61f28366af9c616dfb13e4","ssdeep":"","tlshash":"c8818e48ee14b05ec43276f8e12669e36b6b750b2730129c00c2c0b15da0f89a097b0d","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-08-04T05:59:26.020906Z","times_seen":37,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/LOBSTR_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.336Z","timestamp":1782329720336,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/LOBSTR_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CIIsN1egBr80T679KwZlV1l%2FneykbjPnlXcPiBV3X9MFX8Pj1A4gEnoM9dWKTqRSrgZ4qsNKcQvOK6aMv7iwTa2qIedobaxLeDcAu%2B7GGfEjyskrD9wxPYGNdkSgS7AlMEUUIQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"10b6-19e8af9738a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4278\r\ncf-ray: a10e2cd029f5723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4278,"size_decoded":5258,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"632d05f172ba5e49f36b9d2f23f7349a","sha1":"aa8e512c0738f026ec0b53139402e301ac37b6f8","sha256":"abb7be6ef4853d7f8540312481dcfbac56848112a34e75b86441ca99345c6ef9","sha512":"84221c65f5ae01b461b793e6159e251221a5a43511a5e738eeb5d85797ab40bcc4e95a048a55f3bc6d622616951861f71044a4a75b45e67053679dcd3d0c2d3b","ssdeep":"96:Sig0wi2F7cF1N8mXyAgp5rE41ozn3w428xb1se:Rg0v2F7cFz0vjE4+3h2c1v","tlshash":"2191a3092e1bcd92620b9371ed0ae4e17401174e82754e0ba39b2d39925ba9ff50ffd2","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-06-29T07:04:40.579045Z","times_seen":20,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Modular_Wallet_Prod.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.468Z","timestamp":1782329720468,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Modular_Wallet_Prod.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ueE7Z6A83kmnTvavfieJHbpUj4oM0swTnGXD%2Fp1y2ktCwlY097fr%2Bqvtcwxf4qFvwGWRBrA4EHskzK4ti8k8Zm31s9n1LVqMF5V17GL%2Fe%2Fu%2BgJsMAzB9wIg2fm759sPhsnorWQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"85a-19e8af97396\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2138\r\ncf-ray: a10e2cd0ea23723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2138,"size_decoded":3123,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"eeb4369ffe4aada3fc28d4910c89a42b","sha1":"e3f2bd28f7c96a393d5acc2250b3414573d1cc95","sha256":"29cd4c6eddb71108dda9c60106cb107ae8518cc78dffeb550bcc2b0f7482efec","sha512":"db6ee030c88ea35c1a2b8616658b4b980f25f5326f68d95252adb0c6fea19e6689921a6cd794d59507afcf9f263b1c3e3aaf8f35f5a51d1d20c5423d7b0a7ff5","ssdeep":"","tlshash":"e14161574f01ee3f5cf906dd4a348de70cb68220933b8be338d9173649a25148a5a2d7","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-06-29T07:04:40.700987Z","times_seen":20,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/GM_Dapp.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.262Z","timestamp":1782329721262,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/GM_Dapp.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bjqJLx0ygz5qO%2Fs7I%2F2%2FyB5t16IYXwROyR62hdyikE6qoEcJIhqeb2KGsoYwwl75EfPqLoL5pZ%2B0Viyju%2FabYG6uhFbIhfoLdV3EBifRCwMQnRttfU%2BvGwi4WJ2ZNPMqLbVbIA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3087-19e8af9724e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12423\r\ncf-ray: a10e2cd5fc3f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":12423,"size_decoded":13412,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"50fe6163ad9f03f2b97f0a9cba473474","sha1":"28d3e85398de439f90fa8f53fc0cdc4cfd9716cf","sha256":"ebfc5b3be8dabb8b797f3b5455d1fc30a9949540ab0915138d3e8453efed6ebe","sha512":"c0b6e40ccac66f0a1dbf8b1ac62c3ca3ce1c101ff284e3dd15403b064d26691fc957e3fa871bb0516dddae14be8d1039ae28a095e6e36006618aae58e242abe9","ssdeep":"384:b7fuwKKEeKXardWimsYZDhm3K/n6lijNnU11BgxTuYB0S:/uwpTrdWnZdYKPxjNnUHmKYBZ","tlshash":"8f42bf8dd3e6bb44dcd8ba968dcfedb23b0674b94409219520d1511aed48e3f6e1804e","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:40.910852Z","times_seen":19,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/AKKA_Finance.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.385Z","timestamp":1782329721385,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/AKKA_Finance.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F%2FDrFHLYwpZsrOs%2F7aHDLGtsVHbQ7qSSv5vH3dJeLnsScYLpu12%2Feu3zC3UnTOg12%2B4ewSxV%2Bk6AsPoVlY0JrTTlLQlVrX%2Fb1y%2FZdKRtWPS1MP%2BBgQ7vj4gKqRuNRzfdEjl9NQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"26e6-19e8af971ea\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 880\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9958\r\ncf-ray: a10e2cd6acaa723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9958,"size_decoded":10951,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"605e063ab01dbbcf2daab05765597f1e","sha1":"3977755af81c97e46749c93370869da28c72487e","sha256":"22247cbf721428703ef7930ecdcf8f53f13dbfc93c895861bb2cabeadf08c936","sha512":"a30b6e969f0acc4397a5287680f33f0dfa7bb35708d323a65964857d2ef285fbd4fab12c1774663144c017e50852e35cbf0454b97a43c38e033d72c6f231438c","ssdeep":"192:ROFDSfa4FC13juX99C56w5yRl4T7hdKz2/WztqPnmynVTjdkYF9:ROFDSTCxYfC56w5yRlErKSoQfvVPX","tlshash":"1022afc5cfadb1b6acf0931d44e456ed33ce0e6495c64b846780b7b5c6b228a91b6b03","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.763061Z","times_seen":19,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Ethereum_Classic.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.228Z","timestamp":1782329722228,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Ethereum_Classic.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BNPtwsIStATV1H7jgRGPjdfI1oTL5LTlrBCzhXpWld7mdnVdDla%2BCC4K5KJaNeetUY9jBSrJ3QA4Cr3TgO0zwZkO4%2FBWzkHBUsBUVSX0c0yFODx0wd78MH59R3yRlg5Z1nAQtA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"968-19e8af971ca\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2408\r\ncf-ray: a10e2cdbef1d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2408,"size_decoded":3389,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"737fbd2a9c3b62a18498af04f29c4de0","sha1":"509efc7c57f905164b078df061240e3b6b921cb2","sha256":"752fa1e071a142e6f2b8060c8b8235e9829eae18c512bd391025534dd5c20c32","sha512":"4b79595e1e9da28da6509aa04a335b764f2618342cdea31159e2bfc085548bf380a96674b436b3acd6e3d8376376e152901ecd1aa29785fe0d606c71bd97ffd6","ssdeep":"","tlshash":"41413be99afa7dd7a3590371e17831448c66cc3c9eeba8c844caf288407480ab57181f","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-06-29T07:04:40.798491Z","times_seen":17,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Stasis_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.969Z","timestamp":1782329720969,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Stasis_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rIt0rjd1GsILwGkvIiG6Ea8AVl%2FTSySIWUtXuc5xsi6t35qGoqcqnez1QfcQiGGRksWppcDJG2SCR88crcBK7znAyiSVG4eHgF9rKNg2fzqnK0DNfpGNyNvPU0ACmfgk9fx10g%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"24f5-19e8af973ca\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9461\r\ncf-ray: a10e2cd40b2b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9461,"size_decoded":10439,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"3a0723d4d6bcb5a6d326da746589f0e3","sha1":"37a46177188f868fb13cbee05cdd273f440daa8a","sha256":"0bb77f3689807a647485529e93f7cf8a34804119fe4f37ef2630cd44ae05eac8","sha512":"cce13288298702db7f624b34e70378aefd923455084bbf77310a2b902d89ef0280f3e146f0c4bd3faf7cf496880f2ec31ca6ef339cab0649ee7601daf3ab833f","ssdeep":"192:UJIFJiYFtcSO97XRjvnjn++FJDzAyP7/u3mz5G9DEVkzRZz7S8pGA8F:NJLAT7XlvjnTDsA/u3mzkDwWZ3HGr","tlshash":"b412ae5edae7acd1520a9a9153a0adb0ee0b74ad0357f22e165ce00ff85ba7d4c801dc","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.652374Z","times_seen":20,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/ElmonX.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.473Z","timestamp":1782329721473,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/ElmonX.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1xu4mDEkBDf%2FO%2FXhufB%2BhR0Z1ER%2Bnsg9ZkrSake0nVRWlr6uY38qbV54%2FM1DKieciKqCdiytJweAGl1H9rox9iMvPhQcLuyp4MLoQBiFQEKnMmsnV06Q%2FqWcQtmyD0yjlhtmWQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"ec4-19e8af97232\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3780\r\ncf-ray: a10e2cd73ce1723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3780,"size_decoded":4767,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"2aa13625eb353155b380e6f19647e160","sha1":"a4221c08977a28886d0a43a21cc123267addb731","sha256":"46f348f9606f0720354553cb556331a84a0fada257087e19bb67d99c53a15749","sha512":"b28749878df4f2db3261833fbce9036ec58534897650bc82e48161171658c17f4d177719a5d3ce5e08f89ef4ff16af892d4116be1abc30adc5d99697d560f939","ssdeep":"","tlshash":"9b71c211d40333fc04f46cb27f85ea09ae0edaa1e61294617b8bfc758c9d90708b1b6b","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:40.668202Z","times_seen":19,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Bebop.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.474Z","timestamp":1782329721474,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Bebop.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H7I3ZgRiThttna88%2Bd7N4lhORMCtTfmwupPIyz7ZSxQOKMRCKfzI4EC3f0CyQHdPCkj6wJ2NvuT7GdbMwZNzoM2PQW0xSfB%2FtzOyvfa9zUlcEQW6hzenm7FsJBY%2ByOmhEZI%2FgQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"f16-19e8af971fa\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3862\r\ncf-ray: a10e2cd73ce2723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3862,"size_decoded":4845,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"0e96234d38e90ab36e5e4bad976fc776","sha1":"21fbdda177748e15ed0ad2c122fca47c0cc67745","sha256":"c98b6cd8d2ae0a1a46b56b6ab8edde2df2cefe25f305815dd05ca59176b5ef47","sha512":"54db11287d2f64a842b7990eb707d7813864d0ea1311b7be97d36070f137b8735677452d624ee013b9f6c3032e1c1aa962892b979376fda65335a9ef939b2bf1","ssdeep":"","tlshash":"05813aa815256948f0d7c0f7e1c466e6336a64ef20ed8e111147acf652ccc7d6b2c1bb","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:40.75246Z","times_seen":19,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Baby_Doge_Chess.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.510Z","timestamp":1782329721510,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Baby_Doge_Chess.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xA9ioUGyEJbPjS52WdNa9t7wGdNJmX9fFuVJfhSk8XF9Qpjhxw4BAOGaJn9plzA5ysp85ZBqbkFGRSHn1gtFMK%2BkfrInW8eZOADngtybLwa7u%2BTvT2dd7Zw3x%2BDeqznoqB3crg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"5bee-19e8af971f2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 880\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 23534\r\ncf-ray: a10e2cd77cf8723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":23534,"size_decoded":24516,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"42fc5e9da2427e02048ad6d2c3c6aa7d","sha1":"19186c60fccd19052bdcc1bdae9288794d2a92b6","sha256":"96129640e7c07d79d9c4999ae718758fe7617ad522e7725a92c47a856a1c9e94","sha512":"e499fedf9cecf4dc33698e8b1c9d86b5a5b858c617e2171c422fd9454b801e987d89b506deb3fd3709b409851433fb2469ce958abff76813cee50340278e37f4","ssdeep":"384:8hzrvEJIV+xZKD20hHrJW0pTiUH36CVPGtVFSOphSOVjadn1jJ8tBvUri5kg2ZOn:8Es+sTHuUPOdSOpMOVi1F8PMU6OyGr39","tlshash":"deb2f031775c463ad830c0ff579a9b3b67d618273a7c3a12dac859058ba9c3f79b0921","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:40.602102Z","times_seen":19,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Stems.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.548Z","timestamp":1782329721548,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Stems.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j8m0C%2BDpTUaymgMLAjv6fa1LcF%2FF5a2OJFa%2B1C4YDv6maIAr4f2%2ByyTbznRMlBPkOtPuYY%2BgvE5r47d%2FoC1OHNoP9Xz%2FdfX02R06P851GDq%2BKZLEbdR4qHfkCGWMcGopLzV1PQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3520-19e8af972e6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13600\r\ncf-ray: a10e2cd7ad0d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13600,"size_decoded":14593,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"cd64e7509f3f2c1b72db3de65f7c7ded","sha1":"1f1886cc1b657d9580f5b96c3174d8ba2a442ed1","sha256":"5324cb1352b34266a0ca99894ff026cf316f488c7b3df20ef0bf7617bc336e99","sha512":"df6be000b892c09efaebf108b1b5385ff17601f99f3f0b7b66b775815c5ae16488f4407a3844850e0a36fad39c393dceb95ffd62b4d56a00a9be01f213fe524e","ssdeep":"192:l3mgF+bBvbWB+XqKMZ/4XwnHG3dg1UVOyH3Prec00krFRFU48NxhTln4AjFGEt/u:ld4BbA+fgownkymPreYk7Fx8DpRQ0N0","tlshash":"9752ae81091f4627e64358e0c3333a36b34d8dfc24b1165a10f7abeed5a1ee0de97498","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:40.560473Z","times_seen":18,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Opto_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.878Z","timestamp":1782329720878,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Opto_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=enKpJFCF%2BQ1FadecdoBjpvCRhrrkIIMH3FaRfQOjXVZfLdkRODEMGbBjsodooXnhtZkYg1pYJYKdQCp4%2BV%2Bj8fW5hgWEJNU3aUCrknhTFNSbgrVy0Vx2tfpDf4Z6Kj9NgV4Jaw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"37f4-19e8af973a2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 14324\r\ncf-ray: a10e2cd37ae5723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":14324,"size_decoded":15307,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"f5f4196ee665843d5152a99ee3140729","sha1":"1f1199e0bdcb02e9e0c473314a1e18d511661663","sha256":"273b4fff3c8f5e7ec0e81a4be843a6efadb2f5b0c9070f2c480f129ba5a295e2","sha512":"16ac4e2cb9fc86759257e48e031b947a19cbecd7b600a58b9514c2fd67ed3b66e0037a61bedec5efd39171c5dfa536b0f681ce43a98b0125ae57812f79b12f16","ssdeep":"192:I1KGKx8N1KcA8fnkcYqsqwb96BDYvZEugWEV0Fz+DoYMs5zVlv7F3C9AS0eqVyiq:oyXDfqsNwBwfYsUhlvZS+S0BVy2C","tlshash":"a152cf6fe07ace80dc14d97199cf5b297569f20fd311614c5c8bc6992628f9c09b8bf2","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:41.134022Z","times_seen":20,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Ammer_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.015Z","timestamp":1782329721015,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Ammer_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UPDf5tNmfaVXZ%2F2jMuJynQLPuDb1sWKSp3OBylM1EZsK0nulBQFcj5TLJVnlpSCHvmuejtGY4WNMR2%2BcvCKafDkg79YgdPGqPQgqjFEuB8xxUaVp1BnofTZyNT7ustt9PmIsrg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2cf4-19e8af97332\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11508\r\ncf-ray: a10e2cd45b57723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":11508,"size_decoded":12489,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"935b6a40db884114c40f39815a0b2b62","sha1":"78abcbe3fcbfde0cff209a293d7c22ac771837d3","sha256":"56a700113e7c3e168bd882ef89d95c16ee1b8b4d0d43aee66629527b3c26d866","sha512":"714ee92ba6ffa4f7de165a35334beff4ec34994c36026946d527bd74e1d7afade351ff7881703f873e2ac53eb7a025d4ed548ea468f31910a7e3e9421657978e","ssdeep":"192:YNcqtrI5DfsJ7FBFgUtBtZvPh+cvBMBIiczTcPThKNI56ObcLr0of4:McqtMiricZMBwohKN44X0of4","tlshash":"4f32be833f2dc84cd335a46527d8939ebf7a0926f4240993d6f4aa5ba182f7c8c64dd4","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:41.002409Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/AT_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.132Z","timestamp":1782329721132,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/AT_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QdWgwtj%2FdEuuR4Le4PCXAKse7GyYdT7geAf9VEEGfB3w7%2BjQfMi1SreXM1XP%2BbLoO3KabKXHdXrJhyESyUeOyI%2FHDKiOOTemkn9HaXE3%2FMCn3RVX8xiy5ohU6KhwNnOy419x9w%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2bff-19e8af97336\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11263\r\ncf-ray: a10e2cd51bbb723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":11263,"size_decoded":12250,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"246a542539ad98473a9e2475c49b388a","sha1":"bb7386131d37232ed92137823ce5f264e79a07dd","sha256":"e9787408346b375770bebafd12e9468af5d01a56c1010a35bf419f2e8e99cbb2","sha512":"7a6051c228fa190ebd64414c387456adbff0e4f0c530524194ddb8eded77ac237105ec1ae9fdb9cdec2f13e5ca2f010164bcb0bf96dd319ed628206a78d4ed46","ssdeep":"192:ZIU3Kjxs1c31zGpLVRqkbgmxe5AU/uv/FnF0dn0v+isTKFz5LKAlC9CtORlXq:zK1ngRRq6gmYMFg0v+dTwRHgW","tlshash":"e132afc9e6e71ca5d71d5a04e1a9a6f48a578f20531f39a02db334c7fb361eb0168b31","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:40.62627Z","times_seen":19,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/NoF.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.208Z","timestamp":1782329721208,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/NoF.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y0S8dxmrZHnjJ9Fq8tdbrL3NhQQgm1Qh%2BaipgXTsw6y8cdDVYEByjuAplPAyDhS%2FXSWBmG3xTHuYd4hXze%2BwMr4%2B14IFFI1h5GPyba%2FY%2F3j2ebZrMbggC%2Fi%2FHWegPd%2BBBHC6dQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2191-19e8af9739e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 8593\r\ncf-ray: a10e2cd58c09723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":8593,"size_decoded":9587,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"884850d1e9f68727c5538c5e46371316","sha1":"827dbca860ede66472b06041a63d38262fa9b587","sha256":"50c79f730fe81b821c9df380a8f8af35836e9e640932216845302f74e5deedd7","sha512":"76d417d701bcb165fcf2867178f3ee3877f0fa87c7fc83f95ecfdbc1042bf9a576b8ad79c8fc5f8fb6777de1fe0966d69358e29b21bfafaf6f5b396dd1b78e99","ssdeep":"192:IQn9rQm93+MKjkzsNbAE/ThWPD963hD1cf0cc7uC:X9rQmJ+zKii9ix1W0cc3","tlshash":"4202aee7c716a86de98122b18704fd368b335939fb14e1452c5b895489979f7c0c3b3b","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:40.632633Z","times_seen":19,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Bitriel.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.270Z","timestamp":1782329721270,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Bitriel.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D6qA%2Fuabx8jEeF2tspxjWAzTDhkcCSiqGIWBdXj7MMZP%2FZfU9EcIh6X1JAzbUVtRiQdqfxTTu1ImwJ9mDvYg4%2BU0AsKEOei4Hi0kwHZtv%2FIFQwdBiW%2FzmzZA2OEM8Af8TiHqKw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"f44-19e8af971fe\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3908\r\ncf-ray: a10e2cd5fc45723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3908,"size_decoded":4893,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"3a38d96a5ebd36ffde4fac5387c7d4f4","sha1":"b33e0bc35d789196b8cbb057b17e026e637c2112","sha256":"d3bcec866fbfd76a1011a8e1fd65f19359c830ef556323f49c8e99384a1c22f6","sha512":"de0019b77a7d62a64c9c201220324c3ee0a517dd7717cb5586e14d44545a36107fe8091a851874cd722215be03a2e73af850403a8a0cf5146ba31b260e44ff9c","ssdeep":"","tlshash":"ee812cf513f09dd44201e80af1a620b17b1a122de7e0b947ea7d3e1c95fc6165b4abe0","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:40.959406Z","times_seen":19,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Loopop_IN_LOVE_LOVE_IN.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.278Z","timestamp":1782329721278,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Loopop_IN_LOVE_LOVE_IN.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7D9G3aCnq6ZZTNK7zWWS5oIjLdu3ENxQiXo%2FuCRPTyNFZUmxCF5ziD%2B0Vx52IIEFDzoIEg%2FBqaqB6o3jKmCyl83FMHgEPDdMmK5JGNzuKedLlzS6%2Be3G7Iy%2BH3UjMw6r3TAUNw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"18dd-19e8af97272\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6365\r\ncf-ray: a10e2cd5fc50723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6365,"size_decoded":7351,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"8645bb7600768390fb26ee3737346682","sha1":"5b80e635e3c10b59017f66826b0da5b0e2720b05","sha256":"82ea0744b5aef9dae69160788dbfaff2e2ee3a229622c1bff63da18b957b3b7e","sha512":"44ad54ab87c428127e10da5ba207fcd9b587e38709ca4c6298db876c8bd9a9b86c2d22185ce1abc6d409af557f758b1a04a9d5d21da698f93220b8ee69eb93c2","ssdeep":"192:vcjskW3DYAYNj+aM+9mGfzu90ME2k8Sc94:vcj6zY95+a79mGfa90MEiSU4","tlshash":"14d16dbe5dd7485ec92211f58eaccabed7f38b0b857230af7c00d421ba257d0508b291","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:40.703315Z","times_seen":19,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Tokensoft.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.647Z","timestamp":1782329721647,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Tokensoft.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cz%2FjVNf4y4MZR8VRVGcnXCCyLmrSIwpdMn9pepixApjD1dMo2niXCraoQIWBxR7xmzEDYjrdtRIycCun26umO9e05po%2BZVGvsBMzbCrwWZnlA2mB0euDKagCN93VCKUEt6uo3Q%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"18b9-19e8af972f2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6329\r\ncf-ray: a10e2cd85d40723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":6329,"size_decoded":7309,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"0bc89a5e795e83872038c0a929acebc7","sha1":"685c7fb3e34e16e5b51659f94636325ee36eec2a","sha256":"be097ea653c7a5d4d8753005d952a0369d03c9b4c20c4b921c48fc2cd2d5c1d2","sha512":"61bdf45ff76156782269d8ab110f4ae4549e0959b08ab6538a102cc5de2fb6361bfa702378eac2c9a6496ff4d453130673ba34a574ce998af6cef33a2ea92a45","ssdeep":"96:WZo+kVEMWQPs6MpcaKCAWLWULYhMHfSnOgA5ZKHwZVnpDhLVspt0b:KkVWQPeUCzCUSrAXH/3Bs6","tlshash":"0dd12a0d31872bac03ca8aa0f828d889b7833d6d7716968ca447bb1edc5d5473366b31","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:41.013473Z","times_seen":18,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/SPACE_ID.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.134Z","timestamp":1782329722134,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/SPACE_ID.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UTP20EzcBG7YYkPl1%2FKAstn0CkUuxwLOXqMkrHxWAY6zA9rWHnDQRj39sl1WvTcS%2FoP%2BiuDefK7D5eM90qUmc2qL9dtIN%2B3arP3iSawNPUlhw0uk2Bhqw0duOwjPsSZBoXBzUg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3251-19e8af972da\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12881\r\ncf-ray: a10e2cdb5ed7723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12881,"size_decoded":13866,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"09c5ab5837de7b34ace34b7274412162","sha1":"c80753c08558e42f15d09336021e56862cd4c868","sha256":"8d1e54e60d29bb0e478c33ed6d47dfc269cba293fcb6a393348a3c3aa1de6095","sha512":"134c34917d5df6d3a54ad33f3b7775e64c6468e80fc2ea587ce0a35334efc5f4d9da326fae4e39429631586023d858ef3192aa30ee6510426052ca8fc4d6f6a4","ssdeep":"384:qSXmiDM8Vva4MuPtEpnI0eKlcydA1EJ2xerrSTKocf:qSlVVvPP0nZeZyqEJ2xearcf","tlshash":"7b42bef3da2b6e21dad8373a94df981592997a0be1e3dbd8a03183e10d0f4d1e413d19","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:40.596456Z","times_seen":17,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Trust_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.238Z","timestamp":1782329720238,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Trust_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KhBQKSKC3wuCdUmHHTMJSVEP1CiFdAWxk4FtXh9HSjafRbz6qFUnPGaIbmJTUYLKdi7acU7Oz0sjb3kQ54%2B1YJLNkB0i8dBtqimjdECJCgEjJr%2FKkESuMlMWIXZMvWpRtsBMgQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"21db-19e8af973da\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 8667\r\ncf-ray: a10e2ccf79c7723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":8667,"size_decoded":9647,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"d4aad163a419d74b4894997f20d9307f","sha1":"9b29c11c6afb3aaeef30e3b81f41818a1db34e2a","sha256":"3dbc3e48e149fee7a73164c960ade400b4f8362b32655726c0a1202ce398d5bc","sha512":"7d4f9df028401a20d9de96a3948f7f4ee7ea50fb5aed385b1677588fc13e01ae8ea5369cc55b4a830a8c60d945b9199eacb6dd4d625562a445a558b5e69eb671","ssdeep":"192:23SjXU8jA+pq6Mi17yoNk3Yh/UmBaZIXCI7bF7sKQ:2CjXJM+7Znk3IX4ZITy","tlshash":"1802afe25085b7c6dbc435bff7b1d8096c9dcd76097207e15a2a339718f0506f019b92","first_seen":"2024-05-08T09:53:27Z","last_seen":"2026-08-04T05:59:25.941259Z","times_seen":206,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Akita.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.500Z","timestamp":1782329721500,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Akita.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TO86OflA8zz9Ol6J2sL5hlHTHPyNTkgMsH6cB62aOIJSyKmy7S2VwVzNufHCRoY42eytHZbvvN%2BZiI0tURvs8HVhSLr%2BwIsq8V%2FbSoWJfc%2FZjpWX34e%2FMAgzMi1%2B5X69Kon%2FPA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"19dd-19e8af971ea\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6621\r\ncf-ray: a10e2cd76cee723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":6621,"size_decoded":7611,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"e64f86fe761164a9c922c925376530bb","sha1":"e0840e8cb4371bf3a9dad9d065b1d84b75c50800","sha256":"b9a1cdebc88d1f9b675413a0252a58b692d1b8609be28b83f30761179eab0739","sha512":"e3e8995f37fac0d6b3ae777c2a08c2b8bf8af5ff5ccf238f2fe19b809d9e48af6c30b4459080eba8c2e336fbea920910f996a09cc3e9e09757872a534f79f5d0","ssdeep":"192:UfTDTqadQRs9gt7ybJ256gyHzFcmXyezJJq:STHxis9e7x567HzHyWJq","tlshash":"fcd18f3c91d2942caeef86cbd97744927b3c04971294452493cc60ed1a9b2ff60756cf","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:41.157854Z","times_seen":18,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/The365NFT.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.714Z","timestamp":1782329721714,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/The365NFT.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8mDJJC4%2FRxmupw1rXduL3F1ttKjqkVNGZ97awAogKGvFSB4Hiy9OhptAmuMOHgjP0TXkL2qAso66s2BsLIUUXy2TGQDB52wDTRyHTZrgwXSDT39lqsOLbaulOYiX3xMLV0SL0g%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"32d0-19e8af972ee\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13008\r\ncf-ray: a10e2cd8bd55723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13008,"size_decoded":13987,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"75e3d6267d2be094f7abbd92d1493829","sha1":"65c2ba0cc00c0a68b69d2cb03f741d96ca88ae64","sha256":"d17a43ba671557ee6b24310fd0e171ba49e0b9917f5f28e40e310fa1fb231617","sha512":"8a9d668b194e4e156c3e617576dfab1ae9abe956ee1149d2b2d14b6f1f035a3558e4ee810806fbcbd1ff212ca14e7a86c70549f2164db3011925b0ab084cb0ca","ssdeep":"384:ZZ3U5Bs4dblTpyais4vuJ21xsVBX5RBB9:ZNUY43kaiC28VrRD9","tlshash":"c442c0c502cabbc20b1d1d752a1b81831bf6c4b4585c55d0014ad38a5aebdfe62decef","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:40.547229Z","times_seen":18,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Zcash.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.247Z","timestamp":1782329722247,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Zcash.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CWe3jDSTWzVSfjx8chHqCGRHpDoDoPZaErPDLWTPlSaveldlDYl9H0vG%2FRLzn22kni%2BpNLTxGnlLGpxV7TscjUxL47dnoEJ8FGuHu1CfCQf9MT5KurohYMg9tdvu7mKM6zEbHw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"c4e-19e8af971de\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3150\r\ncf-ray: a10e2cdc0f2d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3150,"size_decoded":4129,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"7575be8bb8455d57c2efda8b617a7d5d","sha1":"f7b1720b7910a0703474b5bdee94acc14cbfd805","sha256":"d99bdd8fe27e610fe94b12b4cdccd2236248ea08aa1da652986cc5dc42a82653","sha512":"b4a876e19a69ced2bb4e053f00e7cd3c5e4084acba824809a8a4b132c290b781917fc772f43b45bfd5a1e7a539f2110b9ce1e3961e5c09320f09747b160d7292","ssdeep":"","tlshash":"94513b8e5ce30b0ac01b0037c48adc6d6a4a194a62748de3366c0f6a9c45bdf612d8af","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-06-29T07:04:40.666854Z","times_seen":17,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Ownbit.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.707Z","timestamp":1782329720707,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Ownbit.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GrRb%2Bz2VRbFXAf%2BxgUcnnNS511NyPbejvi24XsEGC9CnJD2DBfyClgD2nFJ65ymS7VY574EKZLMHnql%2B4F6NpumEKxIwR5mK%2Fv1yTn2LDsu3Bvu5y4KtJ9eicpYtCqJcESNmow%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"500e-19e8af973a6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 20494\r\ncf-ray: a10e2cd26a7b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":20494,"size_decoded":21479,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"0617b5731cd202a8b529af53d83ca37f","sha1":"8072b01e9d4b95fb7f72259f0f9013d9b126d79d","sha256":"a8593b032ce9f7685ca0a4643e58e1d5b79a68638a05d4b2a51d1ea07fe89ad3","sha512":"9b1043ef91ab4859a67716104ca7dce2252f42534fdcbbe55bda6580aae3b5bdd730f2a48269ba24edf45b321935064d07378a949cfb1c066408328b7ccc8ad2","ssdeep":"384:tvG5iqhmadcfto41m0l5+I6LN7Z9a7tZjzaQ0IrUsiRCt4xU9+Xp9:c55MVfVlwVN7Ha7tZjzaQnUsvb9+L","tlshash":"7892e18b90f7d4e045a5de435c62dfb005b7adff805834b25666782235f0baa0c5b22f","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:41.236284Z","times_seen":20,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/RiceWallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.814Z","timestamp":1782329720814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/RiceWallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YJDcwdFtItjYHxdI9tA4HlE%2F7jWwvk5AXB1IlsYDlFqzd74eR%2FMOSN4CU%2Fy5UPhcX2fbnhr4Js%2FnqXp2l6u%2BXCYk3ZVUDNPvwlqF4ExT5v0PwBi9sjhOWrWGpL2U6JJB1%2FTprg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"184d-19e8af973b6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6221\r\ncf-ray: a10e2cd31aca723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":6221,"size_decoded":7209,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"722484c75f95ec2e0015a2de1f5687fa","sha1":"ae2aeb9fcf701bc7d7c9b404eb52c4a8828ffcda","sha256":"8d4932f6487765a061ed07fc483c98f14d1fb70cb3c1624d57cecf00b0874026","sha512":"b398932b20201daf43196b2d694bef541adcaf90204b3e57ce66517972b9288b59f65e6efe1313f4eac21520f9873586207f1a16f296a492a3e2fb5c21ec13b9","ssdeep":"96:1aqbtDoaotrxNIhDRi7EMxRpiD4tRgpgvHKlTs3QBiP1hQ/pjcvjfB9Hz9kZx:hbJoao7KOTg43NSlw3QBU1UcL3zGL","tlshash":"a2d17c4e85e8ec81dcf4dd7b2192396103289a37df448a5eb4597ca2ec951be034e4bf","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:40.77839Z","times_seen":20,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/BlackFort_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.184Z","timestamp":1782329721184,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/BlackFort_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IgC8pY8IMWHnCr2gDdoaj99GQT7ZsfYAVBNcuXmMbx%2F0aQDsw5FFLMcipYbumYVc5NiAQCcoST0Ns2vdh618qk4MAp8hZpJ7dsgYk5gNuHg8ab2E7iuF%2FZNrtpsUH%2FQVjPlFHQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"9fa0-19e8af97342\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 40864\r\ncf-ray: a10e2cd56bf2723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":40864,"size_decoded":41847,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"856a3d14ffc53af600a45df358c88cf8","sha1":"06e4a0f3a81bf52a82ec28b069adfc5c0f0601a6","sha256":"8f6381012ecb258b16815c0eb194d5a3e7bbb9c9f0d4cc714c59c5419899543a","sha512":"b3354e822d1de0afd97f836fd4ec372ef5da4227d79ff9504576e38c740532914be55065be9f7c6f18f1ac4120a566554eb4cba75365b93b975e3d5701275d1f","ssdeep":"768:6tIQtkDy26l7ysgHAyg8S/nh7jFvwS5lP5UUINrzLRsrwW:6tIVDKYg8S/nh7xvwSLyLRTW","tlshash":"4903f2abfb12b701345b3db612df0d35105aaa1fe769181dc4d03538daf34ed2267aa2","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:41.069207Z","times_seen":20,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/MCapital.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.444Z","timestamp":1782329721444,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/MCapital.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XhSxYn%2FPjcnpE%2F989PNbtC7whhJYJ6DRvuHB14PSFnmEUhrv1YcOFFkefldOx6QEqB7KpQ9IF5rMXBqnafpuVxylTGXxJGUg7tIE2oa%2BsrFslg4bpCfMoFUC4XcdS8N7ELDAbA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"9619-19e8af9727a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 38425\r\ncf-ray: a10e2cd70cd1723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":38425,"size_decoded":39408,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"1685fc3837481a4b57182f6589bb2de1","sha1":"1838e9f4478a2a98e57b8cd7e1758110b78cb793","sha256":"8e5a614d238b29dff23d1a5d8ba97a0a2c2547d76ef21e71e47df715c1f8bb6b","sha512":"2f9b43fd029940195acc6c82919bbf502acf87599387551da3a895de207b63691e8fb6c9dd407526b37f46bb6cb2aab5198ffe54c9c65d639d2ad4d9a0ad9b2b","ssdeep":"768:FqK6q49jqP3UEd6VsSs85wiwATjamBtzsgwIZokPoUurSqKl3kNOxXONjrLj:FqK6pqPlWZT56A46gPraUNqsPj","tlshash":"8a03f1953012d5b2cd660f1ad31a6a6898d07c87cfd9fc839651b33d6bbca601a0eec1","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:40.71836Z","times_seen":19,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Voltz_Protocol.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.727Z","timestamp":1782329721727,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Voltz_Protocol.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xnd2HWJq54l8gu9ZtHpUUOLkrdy7AnIJkc1Jeaq7IxluLJhOLb%2BSF0IygDtweXkxrjrPHvt9Ho2Ql6FwsmMw76PHYKBV9XypdT7iPJhQUg8yGrM9YrZ7%2BQ7HBIQT%2FVsumDCmfA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"fc4-19e8af97302\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4036\r\ncf-ray: a10e2cd8cd5f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4036,"size_decoded":5017,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"8010fb9167a284db9b49e7dc849d541c","sha1":"312c9122355afd2e49c1ca35284f543b3a555c66","sha256":"05adbc516cb6b8e41c6de1d63906df60e80aeb12c97aafec4db0ffca90651b31","sha512":"f69eb2a5091fd0609eaa6b4db4f8db83e048004954b061f66b071d15c2f8e1dc157510c766201aa28cf69090c8e4cd7b7cb0a18041fdd157e5fed30ebf7ccee8","ssdeep":"","tlshash":"8d815d3163cf4954da9680b73b62bdc0707cd7a73b165578d4cb177420f22c4975a29a","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:40.784226Z","times_seen":18,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Arttaca.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.952Z","timestamp":1782329721952,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Arttaca.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7gneSc5GOl9pE1RvS6bEuDlBfoGgIjXO0E6wvVHqpt067XdN5s5Qabl1NLXqK4GfJ43w%2F9JUIMJ9w94YfBA%2B0uhQSiN7auTTPD4RvnJ2zCsIIB8A8mbEx8rsznNaGxpEDdt0yQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"1a6e-19e8af971ee\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6766\r\ncf-ray: a10e2cda3e37723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6766,"size_decoded":7746,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"5ae1821a507db2c8d8eecc30d7b545c5","sha1":"2a965fee2e8b9e6bd62564463377eeae3b327a0a","sha256":"d31a7009e6ab13639f905792c7cb27bc027a24a709485d8e8b14d5727cabcc24","sha512":"cecf41d3183f9a61e655cc860a101a639671f390944acf8e48bc2895a88ec0348510a3991e288468e81b4aa64fe382e64649880725f95a91748ec8762e6b0897","ssdeep":"192:AcgIxaU/4661wFiVyJIQTCo6q8Pz/Vq7bPKrdo:AvCak49wFOy2o5MVq7jqdo","tlshash":"23d19fe57890478ec9fb73af040a38a86672c027cf459e35dd57b8415393ea3ab19316","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:40.89934Z","times_seen":17,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/pier.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.747Z","timestamp":1782329720747,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/pier.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GyOKL0Cw3cy7L0C2Uc0LiXWkiHfxNpbjExkWAOEGblKHXhTh2ZD8WHIdwxGNXvwXi%2FuBq%2F8RNtZVS4BY%2FLEUaLDzcw00%2B6dFny2Zml1a7rDqSty3SZQLH7effbMmUHvUaxRVwA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"11e7-19e8af973ae\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4583\r\ncf-ray: a10e2cd2aa8e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4583,"size_decoded":5567,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"42263f31cb3a27bbe3eac48917e37f5f","sha1":"a008a875ec16979291cd8758f8b3ca5e4d93d67d","sha256":"8836871b0a3c7a2d488244627a4941071b5ff9689766df3f02366df720629258","sha512":"7f5c4d1367024eb2ecc1dbf73050dd91f8e43c34493876e5cf5e9747eb2d49546436a4e1ae69c395ab7508221926bf5f630b548d0d04027b248c04102fd72f1e","ssdeep":"96:/rNXcGsdJXhye+XZ9eIFJ36+PhyHjL71jmNtey9rB42iJjC6QzQ:BXcGs90OCJK+PqX7ZmNtvO2i1RQzQ","tlshash":"da917ec4d7600d5bf6bd50b0da7622003d7d8ef81ab5a1d748ee7da25902ca04f5a742","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:40.799299Z","times_seen":20,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/thirdweb.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.102Z","timestamp":1782329721102,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/thirdweb.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i7dDQOOtfLIYFNA6dHNGIqOaQv56o6QckMN2zKXl3bCiUgerSpNeX0EQ7cl3%2BH0PhSq87gzoDl7v4pb2iqk5jFmc9ScZeJHpugQWmH3cUhDECjLxyxxFAicwqgTp%2FkeCgxLRuA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"22a5-19e8af973d2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 8869\r\ncf-ray: a10e2cd4eba3723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":8869,"size_decoded":9849,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"7c6fb99a390ca5e2a95d53983f52aa86","sha1":"4510423455f0f4b345243322144548cb2e07748c","sha256":"81075dac20faa61a21cecb342f800b3d66d215ac987ffe2867927092da5b6328","sha512":"68913f139d463a4c56c3515faeeea43064d8cf124adfdc629696f092d66844298906321d26eb6cafb261605cde645a98f4813ae1fe315fe512f4e5ba97cd4026","ssdeep":"192:fZ0nDiny6Z4b4ipcQlpajIIvwur+0Xmgr1NvbZ9Rss:h+3dcuQ0IIu6qF7vbbys","tlshash":"f9028eccc9f2abf71ee802a795fd40081fb95aa76455c06ce2ae3149bd9527d860054f","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:40.613778Z","times_seen":19,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Savl.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.218Z","timestamp":1782329721218,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Savl.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rWUljq9P32DUL6qkwP%2FNdKQvU6l7x1vQaAHyGwu0POqFGgExlt%2BrgiY55wjVtSP4IHf%2BIyrXUnjGvwdFcI%2BOZ5mhMcf2eQUBicehKSkYFeSRl39Bdbf76CSgXoa2Dv7k%2FvIqgQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"10dc1-19e8af973be\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 69057\r\ncf-ray: a10e2cd59c11723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69057,"size_decoded":70045,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"126ae7c33053644f3b46f6513ac030df","sha1":"cb50675919e1ad1960e6441405d2a27fbaca836e","sha256":"d0ffa5d3e3620b9dbcf40780ff0331dc64efe1949350f74782a911a03ea8f73f","sha512":"fb53e23c010abb6d615f070d1e5f94005c56a5b42944095c7b258e2ef3c348fb8c95a09e3953d4db94d9139b84914cb0dec66ead87e5e38b4f354db6d1cd511d","ssdeep":"1536:WPbjHps6Fhy4S5+0ci3/hzMCxBO6UMow8tEqNV5dIGdqj:Wjjtyh+o/9MCxBDv2iqhuGG","tlshash":"6763f2f25f7231bd2a4b8be330f01eac55dcc63d08c9b115e566079d492235aa2dbf46","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:41.152908Z","times_seen":19,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Panaroma_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.224Z","timestamp":1782329721224,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Panaroma_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HuiP7nSwWKtbWS6QDZEEhChlGneJIhitd7O5mhoJR7uU7foBk196Tz1P3rpo5315qSa%2BWvVkU7Dn02vKy48ZKiKJ1ADkhbhSDghj4NI2DItSjmJFcZKKloD%2FVRaAEAkPlRnbjQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1a3b-19e8af973aa\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6715\r\ncf-ray: a10e2cd5ac18723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6715,"size_decoded":7695,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"8feb79d6ebc55f290ebdae691831f922","sha1":"a8e599be5a7c0f183e6be64733ff263f9325ee17","sha256":"0f1a645ffeb7c2b8f9cfba6f1cd2b0ed8137008d834cf4c1ae6ac3063fa3ce23","sha512":"0e103a42300eef7801249aef194c5e2a7dda781db012feaacecf02a48d3f2275b4ed266a549a98fc281b506bb98df9c7f95088a7acf311db290ae5068913730f","ssdeep":"96:L29htkQhyyApXxXwXtidr0atKGhgZZjUXb9t/5kc:iNxAcIoohgZG99ac","tlshash":"28d18d406253df3ec575177f2fe30d3c98649a1889e3d7e25710b751baeaa398418c90","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:41.182298Z","times_seen":19,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/LeisurePay.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.341Z","timestamp":1782329721341,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/LeisurePay.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ja9DQF3Iq12qICRwozvBhRAoxo%2FRqsbS%2FM8GHmPEBiDEaxe1GB2OCDvdrVP1VO5Y1bOB6UgdjLFSqvNyZYKe69twaeabl%2FhhaCmF0Z4SmAoR%2FyP1iIglcjTQcLZrOzdu3Xc%2FrA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"14ba-19e8af9726a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 880\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5306\r\ncf-ray: a10e2cd66c81723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5306,"size_decoded":6291,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"616d858b734963e86ef5ce3a220ff7db","sha1":"bd2edbcd0c06007883dfd4e65d8d389467e351a1","sha256":"84f77438ad4863f557f8cb08e770a9764573606dd3d6c80b04cb9b82b3cc04aa","sha512":"c71fc45c9a6fd41343494d9fd3af73814e69e7c5f205ad25ff30499b9cd0ec9b141ad4bf38062e8a2dbd4ebd70c6ca24d8270f1882cb8fb8d6d063e18d687600","ssdeep":"96:Bfse+h6JMHoQ6sO25+dAWi+Y9+j1FfwMfI2oWWNL342ESlr90KlmHdexVFX:3s4MIQ6sjv4j1FYMfI2oWeL3OSlr9Zlf","tlshash":"51b17d6d61ba0d606da992f30400a4477870cd7f4194810cf6793d5b65d8b74daeefc3","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.838973Z","times_seen":19,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Bulksender.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.405Z","timestamp":1782329721405,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Bulksender.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CNJOrrUwfOg76eU2Kfq0g44NffpAkQ1nsauepg54tazXdhq2qoN%2FbibCSGjIO6YO3f9ghfxMqTk3sr%2BFaHROk4aez17cK2LpzrSgQIL5u%2BKsim4WX9XL86w82QY9wIyam3SxDg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1a20-19e8af97206\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6688\r\ncf-ray: a10e2cd6ccbd723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6688,"size_decoded":7670,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"074a4a46956fdd1c42acf630ddb41559","sha1":"e8bdf557ed74ba3a20b4f358e480ab290f0c7cad","sha256":"14c29f19ed681d71c8ff5120c05996e722c0013fe1a7c545356c6e5032195e86","sha512":"7ac3fd196b678e015f14b997ea29694eef638689fee4ff1f99070f1addb6b007967ab4f34872561151061d22f0ce86927ca49eed56b38d6437abe24b51a595f7","ssdeep":"96:CvDsY2fJmW3NOkymKcYeBXbyF+I/mzL2p+F+hBZX9Nh/8LwBWMVLEGQRAYQl:CIfAWdO+JBOUcmzAw+hzX9b8LwIMFExs","tlshash":"03d18d15a1766fe7495c86f85806701a81116d3c9711a3230f097cabb3ff3c82f16ab7","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:40.911668Z","times_seen":19,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/TKN_Token_Name_Service.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.489Z","timestamp":1782329721489,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/TKN_Token_Name_Service.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pyzPCI9Qph47CSHffwbz6ZGhEY1oLsNCvd3ryHS%2BsP73Qzz7KOS8F1rpv40jigd9QOCnoCwHStqAw0mryYyzx4hUnutyKKWcOL6uSNzgWhc%2F%2Ffx2xVspHmUoPAWqrkaJyUIv5A%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1776-19e8af972f2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6006\r\ncf-ray: a10e2cd74ce9723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6006,"size_decoded":6988,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"9fb969352ff3af9bbf7acbd30915fd33","sha1":"7b43ec614da0a18421e2edbd49759f58dea47381","sha256":"3a20370c725cc684dbb7414a965c6df330e40dd5626c0142ac09c71e25511077","sha512":"d5219f2d6fca6b29093586bfd6a69d536f9f0393d8f000dde684815708bb09a71692ddc53e40e464812998f852a2a2d24d26f8b6a4bd75ef42ec7b7bfdf6baad","ssdeep":"96:V58BzOdKzh94Reb4SE1KZCxcgyyFi4DiV5chrf5uEQi7AY081u7yPbvfG0MaE:nkC8hK48B1K09V9uo5fMk7X0s1PDFRE","tlshash":"82c1affc01e1ac19c566ad7f4d97e17f1a6d34829904baaf4fe20124a082fd6c2037c3","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:40.821548Z","times_seen":19,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/ADO_Protocol.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.631Z","timestamp":1782329721631,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/ADO_Protocol.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aYRHurRD5SHY6EfhJTlwKI78ulYa2I1uM29TOgNjpvT36eEKkn3DeWtxn9thAF7LStrV4ll8dEqeKWHRW5n6a5XQiAcJlYEhpvagA58jLbgfWZxt8LlCDcBQw0TjzYyQtoYc5A%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"9886-19e8af971e2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 39046\r\ncf-ray: a10e2cd83d37723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39046,"size_decoded":40023,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"fd921829c430a51bed222f03dac3e116","sha1":"a9b516c46b1cc4d455528e735299fde218cea392","sha256":"7884e7463a812bb8e01c334919078ab200e268eb477aee65dc020017ce6fc71f","sha512":"222ef3d190bf4f99c7f4ce0b483b59b760527efb8706195f6b770628dc381a5ba6987d5646c3a688a6c199de115fe267bec0bf7e9f7e9f1c510fbb17631c6016","ssdeep":"768:/FWSGwGO7TVIKC6MOhikU+fBCCX6Lb/KWjyecF2BMtHlp7dloCIRhbEJl1:/jGQ7TpYJ+5D+7FjyecF2BSHlRdlb2hu","tlshash":"5d0301534e35a377b1365fa61e60b2a5d44e8f3798f0074eaf15b06d427e61028b3da3","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:40.8985Z","times_seen":18,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/MetaMask.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.235Z","timestamp":1782329720235,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/MetaMask.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q8AnnPYMX5Bx%2FP%2Fx46gJFOwmLzyD26yStlGblwAP6OzGWedVPV0c1dXIRP7HykAuodW8BY9Xb%2BAjVQY7Huuzm0uI8LZaBgpXOzzDPxJKZDBz4Ywk%2FOyD%2BBIWQGB02aF1r2YNWQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"8914-19e8af97392\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 35092\r\ncf-ray: a10e2ccf79c6723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":35092,"size_decoded":36079,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"61958abffd3b548a38436be936785c48","sha1":"12cd1b9c407530d716f6a49072a1e42e7a9a67dd","sha256":"7d909c25e2b613ada85c6fa33a26f2ad519ae129753734b6a43850dd0513b296","sha512":"d80b1ab06d35ae8f9dbd780c684a8c13594b183164ef7379842433cdda1b091f747e4c21b81e26515843c4b83bb430a2af8d0eb78d6c6e0dac09cf20390f9a8a","ssdeep":"768:1bcwzJRSxZ33Th2TFruommFCkLPCB+boEjnHuc5mBVvskupDrAhqa+LI0z:1VzvOTh2gGMsZoEjH5m3vzupRLIk","tlshash":"82f2f1bfa0187c29ee1395112676f0dc2135268f1d40f68e4b8f1ae7daa28f87074643","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-08-04T05:59:25.924524Z","times_seen":193,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Cere_Bridge.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.536Z","timestamp":1782329721536,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Cere_Bridge.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6u2tl4NCTIJJBsPe134%2FXicVPZpgt%2B4LJuZqsZcvKn%2FOMXLGNpXpQ5Pw%2FCLXOxOLWMJNvUeI05HH%2B4NmTPIqudxPtNCHcXX1EFc%2Bw11IHCPF%2B934k3hmfy%2BoCHmhPqHf4GL%2BoQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2e98-19e8af9720a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11928\r\ncf-ray: a10e2cd79d02723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11928,"size_decoded":12923,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"1bd18aa7e54412ab28e93b86f8e9d721","sha1":"d4481c1463bec6eee5a38351d97d28eca61c5a41","sha256":"5a1a67fb31062d68bd715c5c41e96b0364aa1c33d76762ccd2161f2047d8935c","sha512":"e788bcb0605ac1ceac583a6441e3bdf9268749a6e14a2ad27e7148dfd5a187b2cef6844e8c55478d2029110479e9d7d6d014326bc42349bd26d7386e98eb8b07","ssdeep":"192:2iu4SaL41Wo8I0i9HcKMoNfuQ2jjVaeHE/UP7HtbQNoTW1nFViIr:K49LdcHD0Qovk8DNU+CZvr","tlshash":"1332bfb2cc6168b5a751917ffb6e669d890838e269f5810271accdd1ff30a64ede3500","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:40.593464Z","times_seen":18,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Roulether.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.750Z","timestamp":1782329721750,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Roulether.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BUa%2BTOd5JkXOTsarxqOmYMqgTYHZgc7Ql3q45tR1M0gHBFbPB98hqQ%2BnQ146YeBxt%2Bdxef3IFu%2B752diUgWS0B3xtIUXXLIVc9DZDGS7n0Wwc%2BDbG8hWlx3vGd1dqqG%2FKm%2FyPw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"27c1-19e8af972ca\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10177\r\ncf-ray: a10e2cd8fd73723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":10177,"size_decoded":11168,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"6ae7d183268455285e270971e51fb30a","sha1":"d415cdcb4a8af54539f976fba052d68cc1cb5cc0","sha256":"77bb89ffdc4e27a61a86725512f065555edbf758661d226511d28836de041610","sha512":"a97f8e5a0e59f16af59d411affcae1af20e418125a745b04f4591b367281d1dfe5abb1906295e2c0c629bc69e1819746c38ddf95dfa5d1251e93644339b940e9","ssdeep":"192:ZQ0LHBV+PyeAmn+1oqoGoL/k5ZIYkLsVn1c5nVwvJRnG:5LHyOTFYAZIYrn1c5VwvjnG","tlshash":"f922cf210d36b20adc1990c116096fc2dc670059e5b13fab7d27ccb24c1da3906b2df2","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:41.135256Z","times_seen":18,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Tealswap.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.112Z","timestamp":1782329722112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Tealswap.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MgLFQSqK5vCcMVfhE%2FUkXinNxHVpHRbnAnbKcVk0lUKJnqvuVjhbLf%2B5YEpznxe%2FCISrAz8KlxQeKrq7%2FXKjZWb0zkGXU93FVVMSsadjXIgXe%2FwYe2BQ7y1RrOpOhhQZA8KiVg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"bfd-19e8af972ea\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3069\r\ncf-ray: a10e2cdb3eb9723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":3069,"size_decoded":4054,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"e847eab5835deb9937f58999bcc2e6ee","sha1":"ca3ec0a7ce1142db29d9ed17d059b8fd72cb234e","sha256":"6a96eee3dc2106514736a0be494a392df477a910865d2f61e9816b7a4b75c159","sha512":"7991511d534c24b0fb59c604cba4553c8cbcf629bd465d718efc6a8c0b32caa102f21801f29ecabb807083e70858572aa9cc2d41f952228123710c3839b22aef","ssdeep":"","tlshash":"c95161a6862c85a2c13e4136f15a720ff400d3a58bf70859a2b1284760fc71e8f57dbf","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:40.722467Z","times_seen":18,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Fantom.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.238Z","timestamp":1782329722238,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Fantom.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KnuDBEyIUbYfR%2BDALweBQ09gZT0w2M7rd061q9X4sMIbKLVvmUxBvUD9VYa3V2tFP3IVRmGy1%2BvOdiuPb9jqM%2FqU%2FHs3yXV8B5hdzQoH3q0D79C4mSSOyRtyN5%2BcVT8N6UZoNA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"78a-19e8af971ca\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 1930\r\ncf-ray: a10e2cdbff27723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1930,"size_decoded":2915,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"acef1564940a84b92d2a84302af9f579","sha1":"bd9b5557c9749870d2a33544deecb745d58a31cb","sha256":"e4a0aa6eb576510db9502e6e3d6877845fa31d380332a7a06f5861597307c598","sha512":"bc59f38c4575b05511e9be67d5189f97458b4e7b523c1f719c8732398ec4263ef464cc7f0ec30575a2e37e7c0a6d65533e42a7b1eb972249bcd5028bf966211b","ssdeep":"","tlshash":"9f410ae37da79c2c92cf1585c674e86761a00702201d4f88e65bd2b961fbaa1c178147","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-08-04T05:59:25.961155Z","times_seen":34,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/a10e2ca71af2c759/1782329714166/elsPajvR0RTnNMr","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-24T19:35:15.364Z","timestamp":1782329715364,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/d/a10e2ca71af2c759/1782329714166/elsPajvR0RTnNMr HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 24 Jun 2026 19:35:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 1760\r\npriority: u=6,i\r\nserver: cloudflare\r\ncf-ray: a10e2cb10ca6c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1760,"size_decoded":1981,"mime_type":"image/png","magic":"PNG image data, 41 x 40, 8-bit grayscale, non-interlaced","md5":"b211f40583cf1e199e5ecc5c0669afbb","sha1":"fc0c3e41faad03e63b963929ea99524f96fd19ad","sha256":"40bc2c049f0feade6d788540e8e20fd6d68fe6ae7c6f3e6d2d5fb0e543549c59","sha512":"6a4feed2fcdb1088a6a5f552d040b7446d08d4071b96f684434f11cebcb136ea58f8835b4bee2a5788cbddca8c326f3f1e41c8c72ab695e4d78bc56cc9c68731","ssdeep":"","tlshash":"c83112c7f111c829c01580b700204510d41c4257121143280002c8758054c0d4248242","first_seen":"2026-06-24T19:36:12.602537Z","last_seen":"2026-06-24T19:36:12.602537Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/ABC_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.449Z","timestamp":1782329720449,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/ABC_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Snr0Shpq6CdJH2ddSGbICvLtPBx7tqJxBN%2FvXNpbeVsTeEiNjThMXbI9jxc72x8woOOQRk73EKtPrtcmBUBazrahLXgEGq7BcTvtx9DkmOUIcbQgB4VJFo2eRu%2B0Blzlwcdt0A%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"6412-19e8af97322\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 25618\r\ncf-ray: a10e2cd0da1b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25618,"size_decoded":26599,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"fa4c1b7bab95d4fc95505d58526876ac","sha1":"27c218ff0afc12df81727f2dea63cda4b9274178","sha256":"36401097c6aa9b3fe50796c0abb4f85f645834646c30bdb7146aee128e4fab18","sha512":"e46ed1c19391668167cf99220b3dd62e12adbb097ed2d733bcb508b6404ddbc4828b47a0ad6d073a5e3e40aab381940add9c23f6e1460caa3eae008bc0566f84","ssdeep":"768:4wjtLhFyCPiGnAGSbmyAj1wKS0i5S1rl/IPZAehKR1oaRcG/l:1JLXy7GnAmj1wKS0iAploAehKR1Np/l","tlshash":"c2b2d0e2e6884c197a809de64b6de0cd732eea17dca3c84cd5ee4d10965d0b47a06ff0","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-06-29T07:04:40.769349Z","times_seen":20,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Nabox.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.698Z","timestamp":1782329720698,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Nabox.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KrD1pKeV1eHBmKFkX8%2FOLSmJsmrktqNeYDtcY7pq0vMjAfb2XTEgiGU90%2FtY0O0qYxW5uztnfEtTUXnta7pBJwnT9FCVS43qp%2FFeUlDBP0xM87Da6YTnW77HUxLteZCnaKuXBg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1a1e-19e8af9739a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6686\r\ncf-ray: a10e2cd25a77723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":6686,"size_decoded":7668,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"228ae30b44bff35111a77b3b160aae63","sha1":"2e129074b6fc06ef062d1574e9361b8e5af33210","sha256":"f32a68e39afcfeee205622a09930e37368841ed863f1440406aa9df2443738d7","sha512":"866fc14d9912537a29758cd3b746114ddb7cc4e5c930c981ffc596e9d5b3afec79e2cb032a3b0de9c5452dee223f85cb5880d3be83f3ee3161423164eaf92fdf","ssdeep":"192:3xp2ylHyZoend7J3BrfL5j7lpgokVzpp5wA2DhWV:3Zhed7tj7HgFzppeAChg","tlshash":"b3d17dbca951ced6f21cb8bf0a9681bf8365933c0212621e211471e3583ec39ecc67e4","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:40.982256Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/DEXCoinApp.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.373Z","timestamp":1782329721373,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/DEXCoinApp.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t9AF%2BHCFv%2BTUcjoJhicqcQOO70DoJOSmDFXVsK7bxvzmK5kal9dWZj61slAtL8u4Zo89ShiHcbOOV5030LI5eTcjY9SXj1PPsP1pYUSkfTSicXfV6%2BT47n%2BdobzbQwejZ%2F4%2Fhw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"143d-19e8af97226\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5181\r\ncf-ray: a10e2cd69ca1723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5181,"size_decoded":6169,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"2f8774386c2f3089901b742e68dc88be","sha1":"f4e7756cc3389971973196ac054f343665c90796","sha256":"fd609ba21c37917bdd2fa87112596d1bfc05a9235d1f19b8ef435b486a4d01cf","sha512":"1d3d369c34ec5c538a5d5ea98e568627dbd5fac47c22865c8e14caab2398007e48f42b66d1f77119cbec08a0eca381fb7e890eb816da22864018d50327bfda4d","ssdeep":"96:2uctSTYXd0cu+9AZVB9lAWHdVQxY7wwGgdUd7xFUJqo2AzfmLMfsWQZP:2uKUYXdXu+w95/ZEwG88xFUJd2xIfsWK","tlshash":"f3b18f2a063294187017a73fc26511fe11f97063cc77880e6699bef7a614b7753e21d3","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.601603Z","times_seen":19,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Kriptomat.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.558Z","timestamp":1782329720558,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Kriptomat.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1BRyMlIbfiwrU1zUEfvxOXowL1CizEiCeOkpsKaGaE5nhbHN6O8jHExEvkWJEzLn6Jfk4pCXlZlasTjgUehYjJjRGfHlC7qZMdKCL7yfdTqGyfoRJc%2FVLEWzWqVyvrojJ%2BCO4A%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"30f7-19e8af97386\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12535\r\ncf-ray: a10e2cd17a3e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12535,"size_decoded":13516,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"9fd14f7ec901add0c0588998028c3732","sha1":"7ede6878178ddd13416802b88d5a4f611283f51a","sha256":"3072d3941092366781e51320caa191abd966b5806b51c69d17c3ffe4482945bb","sha512":"cdcbf82abfb5e18fa12c637fc4de07feed37a63660169fa746394f24b4a7f20502b588a7c3761aa8bd7823bfb7a37244a6c52f261cd90a50d1659e6eaa3dd995","ssdeep":"384:O30ZOSBTeRJC+q4V4qAEQ3gabfsxF7WCpD:O30ZOSxeRA+dV4q43zfsxND","tlshash":"4c42bf62d1372df41e879735b8565be2db7a216105688c07ccadd038934c5fb47ed0b0","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:40.992496Z","times_seen":20,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/UniPass_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.066Z","timestamp":1782329721066,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/UniPass_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b%2BCCw4Rb7KgUQRSxgJ9z6v8%2FOER2OR3ucAqj7VVWifTOtG%2FfZ%2FXDXbIzyeSvbOhHAaH1KbMPzLAkgFZ4Y3f4PVhELF6ajKe3xCxmXkiqVoCzXeyuEas5MKV4eM27W3U7HbCzqA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"5489-19e8af973de\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 21641\r\ncf-ray: a10e2cd4ab7d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21641,"size_decoded":22626,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"29f499988993a82203bad089f0e434ea","sha1":"88bfb34a8cc936e5ce4a690355fb881366b1abca","sha256":"4121005de23a52d812d0d097d2f9ecff9a43ee88f9e378b542811fc09cf8cc7d","sha512":"697e7b62c799246304436c7b78419b92ced0e8ec665c7cf57a42a9765d8dda86b4447527e21d8e00c26637c264499467cff931f8e9d434bfb789ca3d7b5f6369","ssdeep":"384:lcjRVOTB3dNSNyeMOu0UZapaNQcKlwK+sEIM32MoiiR93X8qz5W4+sJRxlvQusVy:YO9DgMO/MNQcKlw4ED3tiRFXNpousw","tlshash":"37a2d0befd843d8e598e8e7c0a30ebad8b14743037657b7e46fd894b52109a49bb45c0","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:40.678844Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Runnow.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.586Z","timestamp":1782329721586,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Runnow.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4tU6QPWI6I2yDwFv6xDLVUPKvWx1YQlBdmSmegvXhigc8fy8xo3beX70aRwp5kXXn8lrOYu8mh2WjKSXTDW6LJa56sTf5CyiL4boZNzMZ0agC3jOHyzAGcaFMkv5xtK05v331A%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"12088-19e8af972ce\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 880\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 73864\r\ncf-ray: a10e2cd7ed27723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73864,"size_decoded":74841,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"acdabe670bf5ff7b8516922cff308fbe","sha1":"1ad8b604b9fb26a4cb817092c4b4c6a8b1e3752c","sha256":"c67b99c7df447bd5d52ceaa1faf5d1bcef9f3ffe0be4f7a0c86b9fdd4e1688ef","sha512":"8331ffc4b0db67803a316cfd897c46678626230e72fd86ee8f29157d2a3c87417505d0b0f9b60590adbbe276a4d6bf0a751c78e0eb72b18677e5edf5c4e9a14a","ssdeep":"1536:6V5QSIHvI5JSm98TKocZd6CkS5oFqtH3d2H9iBe2KDgu6+4lrzo:BXgF+TKo4wCMmN2d1+uR4lrzo","tlshash":"6e7302de8b6499930fc48ebb46ccba13857426285f4d3a6f1ec542f1f2973bd6125062","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:40.790973Z","times_seen":18,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Moonbeam.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.259Z","timestamp":1782329722259,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Moonbeam.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CahWX4TGjB%2BSSJJBvijIbPilPnRmjxFMhXybPTz7l3G5kLtsm2lhvGajG63qeUIJ6XQgreyiDuBs%2B%2FI1DP0KQoXXdoNppp2k%2FiUMBa8hVNIegMSJ%2FkeDzYVwRsnMP78CuNq15g%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"36d-19e8af971d2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 877\r\ncf-ray: a10e2cdc1f35723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":877,"size_decoded":1861,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"ee35e53fbc63797e6481b96724e63e18","sha1":"d2926829986f84cf675892468ede0d89a83babd4","sha256":"4505114fe842ea55d8b9d8054a7ebf7c27afaa1f0549f742841e82f3c61b7a39","sha512":"fae0238869cf742d257bf90027efb62dea5778782fc2b883ff17bfe3fb7eecf5fea787bba9007d45075b492879fdd2d15efd205eb9bcdf23f0ad2c5d27649e99","ssdeep":"","tlshash":"c41196a7939128ffd9ded05f6e37a230c017411c10dff9910c9881e0f136055226f4e1","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-06-29T07:04:40.749393Z","times_seen":17,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Huddln.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.461Z","timestamp":1782329720461,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Huddln.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kxjsgl5Cin4jdjNtBGYgOy4j%2Fv16NuLgqOy45AKPzCHXG1miEP9tTQmGnfnaB5yXcLCszuP3yP68mdxIAr5aAHjf%2F5k6wdskYNdqmXxEqF797waNMAOOruBcFLKIMK8bTJN3MQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"41d0-19e8af97376\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 16848\r\ncf-ray: a10e2cd0ea20723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16848,"size_decoded":17829,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"7d43f88a8969cc1d9fedf4443c982a30","sha1":"683d7f6d1da58913be030d4e2f249d18eb346d12","sha256":"d90b4121c2f817e6ed2326bd0b893c08723bba870abd6c32e20b1db0422957cf","sha512":"f518ba2a0e3973778b6cbe6eaab940e0a33fb8802f84619b173aba95a8b9d780dfb605e5e6ba24854ee0ba533094dc401a00ee2994d89dc3b42a58a17d2ab39b","ssdeep":"384:h85mUDdYaSk55zdDTX8eB8fok3MgjnkOT3oNo/K2lq/XmZXKcVOhs6Ji:oUkVDTVBYMgjnkm/q/XmFKup","tlshash":"0672c01ce1890a4a0a0a7f35ebddf301c5aa0845676fcf3894c7d61ae4b92e371c795d","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-06-29T07:04:41.043633Z","times_seen":20,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/3S_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.898Z","timestamp":1782329720898,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/3S_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ap2%2BGwhyEmSG4dEPhZ5YMuKKTbpagzjRRCnHbvUg5oEXRxLRJ5n06k%2F37PqiIotV%2B2Z8VbUHmic03BLFmQIENFIicMMCdnZe%2BRb4s2AZm0eVmNZ6I%2FFHLCiaC5n%2Fs9TB8E7m1g%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2ef4-19e8af9731e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12020\r\ncf-ray: a10e2cd39af0723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":12020,"size_decoded":13009,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"dfb7c60fa95f18775fa6340e6e978dd8","sha1":"c7a524f6bc63284853df8b6f00ca4c1ce782257f","sha256":"2e108b8a4c9dad03f98b8994d7f88fb13965586e60e9f9faf26bfa3b34430356","sha512":"a2d14b5995ed9d34247a0e14e705fc8b0413553e5f87f7e2f230e74e6b3c220359029b02a48314c665b8a4e9e8ae00b4784c6dba8ade18f09e45c958b72ac114","ssdeep":"192:GLEM3K5KvdolrIpG2cQ8uxmMW74o8WKIly//p35r2H1/sAF5WnIw1/Zodd/6q:8EsK5ModIpB8ulW0oHKIlOp356Op2x6q","tlshash":"ca42ae9393ee1da491fcbbc73f5dccd8490c590c129e26153a4a0062b9b9865bb0b7f4","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:40.952879Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Dropp.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.106Z","timestamp":1782329721106,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Dropp.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=421oPWniXURWQcgAamflyQ4FPScSrl8PxUEhSQPS6Z4%2Bl%2BqTCX2JiVVFq95wi40cwJehIeKSyu8xcbocQQAqWnv2QIuDwemTBJ7qKQg6Nv7%2FX%2BGObjHo59ROolUWvemT0zWajw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1cac-19e8af97362\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 7340\r\ncf-ray: a10e2cd4ebaa723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7340,"size_decoded":8324,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"f3bd2071b8a3915a875aa1fc3abbd75b","sha1":"317b209621f50370493fca351a774da67fa5abca","sha256":"b13ab93465e4c9854a0161c54c417b8ca8688144ce7ccb7086faae9de0232158","sha512":"a73ae92eb1bd01cc38acd03ad83ff9976af74588d900fe540277b97b6273159bf4d56c8958def6e3525cfe9b45822b2eaaac26be038db13d5f7b4c549f0847f3","ssdeep":"192:X8MnVKoIfDLZ62uXVhP+1vxqTAWhZdUxCpQ:XWRnudnhZdGgQ","tlshash":"e2e17df26e6fe91d84a333e35a44a550834e1003ed52f6eefd0628e6839521b9371977","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:41.170804Z","times_seen":19,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Balancer.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.324Z","timestamp":1782329721324,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Balancer.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VlhQX%2FrjyVlmKjIK5p%2BYr6Y6wVOjT55GHCEZEBTGMLaiCnisPD2CUiXiquMad3nzcLWnSF3P4v2y8i8Yw2ITBFu5wRgWB8RNIOZhktommcHtoX48Ak3TJA177YRqB5M%2FVHEGXA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"196d-19e8af971f6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6509\r\ncf-ray: a10e2cd64c72723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6509,"size_decoded":7491,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"e05379c90fd76351971ad16cce718fe6","sha1":"aadc89a9c79a64980370b69566d2c8b325374d3d","sha256":"38b1dadef8d50389aa2db47629be9fdf353276a02b92692405bd195303149447","sha512":"709ee24b8cf6e64b3decbd9dba7174f0a45614b557a7dbda4068e6a9751d1a6e979af57e76ddc61637a48b1342a49f1fec0edb7cb48aff2669c18526bcebacc9","ssdeep":"96:fdS5c2FkoDNlSayCXr9AhIBTA9yLcrxXIQg8ybRkC7UKBg:w+2FNDJ/X6h+uRxg8uRkkUKBg","tlshash":"46d16d73b0eec30cc99f1836a511f17f2e24d7ef7d1e892506eaa51b28412901213fc9","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.716521Z","times_seen":19,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/DecentraDB.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.029Z","timestamp":1782329722029,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/DecentraDB.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FprHCCxKobOr4soPnZ9ni5nifOEIjUiDtiQZIXiNwE3TWet08BQ9FY4vAZ%2FXjZhEkjDcynZl1js%2FiwI2YDuYaZy1NMTLw1FAL4%2BaqU%2BleDuUzrTLXmkoJWVS2DwbcnrjMK%2BfMg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"337d-19e8af97222\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13181\r\ncf-ray: a10e2cdaae71723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13181,"size_decoded":14168,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"35250bd4d0a0e466e414b9bb363dc395","sha1":"38a0573234d35a02187e25ccc4b5987c23a84652","sha256":"3ec91cdd1afd64843473edb45132616562d6480e379dad794bc7ea2ec7526467","sha512":"a1a12840eb3ce8835803acd61acfbbc260000e6170806e9ced41c425faecbf5319b1a25964a5830eda15f69b4f8079c7d049c575d7a31897b3c0208c6606f91b","ssdeep":"192:3YM668a8NtOEgVyE4kxqDWx7ZFJ5sfeQH4/Bo596RcxeyNMCZMYQVa5Mi7/mgjES:onay046q8JOdy60csRLlaugIxkyEzITM","tlshash":"7d42af18cb95d807d380b4b7972476f6ae335e60b70c401a04f25893b419eb76e8ade6","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:40.748741Z","times_seen":18,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Nervos.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.261Z","timestamp":1782329722261,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Nervos.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vAnzf8ZnxtncKr6nxLUQPmfZSWgsBuDGswynibVuBYG%2FDeXlKBbrMWerxgxF5qQp0QHhxosaP3C3XCY%2B3aIQFBaa0ynmzyCYhR2YUka5zTYD0LfOk4AIsv0FVbAFzfwUmkMswQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"4bf-19e8af971d2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 1215\r\ncf-ray: a10e2cdc2f37723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1215,"size_decoded":2194,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"4ec563b07b6aee17bded9a133189212b","sha1":"8b11a01d81c7e2942978a47803d4b1922acfac0c","sha256":"a57c142c79c3c09a80413dde587b42c43aaee71e1770bb8fa714b5f3793af454","sha512":"5c2d1588550d30ccd545a22d77ae04dc24374eee4aa1b442514da38ba69d4708bec409a93baf306b00b3518339463886c442fef7efc246c111e8cc0b71517c5a","ssdeep":"","tlshash":"1d21b7b405283c5af24048951635e4134c93cd3fb0a788d0b4f1397c5abacd072960ae","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-06-29T07:04:40.603014Z","times_seen":18,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Metis.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.307Z","timestamp":1782329722307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Metis.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XbIllfxxyCSwSnsX%2BRpMPmp65X5xplkJ2Nu18%2FZvDXRWPSBZfBfsKV6zy2xHCA6qz9XgL30tE3LZv1Vy2MvwDD3aC7jGGebDQD3b17wIKirM0HzxX9Uz92WNAithsDZHnnVFRA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"d24-19e8af971d2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3364\r\ncf-ray: a10e2cdc6f5a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3364,"size_decoded":4343,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"c9e32a50dbfc6bcbdb52ce354ae10735","sha1":"cb5bcbcb1a0e6a49f1a221e25bd2d7a3fdf5b045","sha256":"3bdafd98b5aedcf75a72c3f5a1b4c64ae415a261d2c613181d490c02faa96849","sha512":"d4a59ed374799462e9a848bd82ffeefecd491317b8a52338ab5b6d98cc34463be19e83920a20903d344a2c5dc6441b2ffe615e8e76295e97661e6eb38502f6ac","ssdeep":"","tlshash":"c4614b08a275dd70caa239e373034b99d560db135fa7e82346edbbb378e287c69c4154","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-08-04T05:59:26.003864Z","times_seen":34,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Polygon_zkEVM.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.327Z","timestamp":1782329722327,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Polygon_zkEVM.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rXL8aVA5UqL060KAmEQ1IWzy320o3EfefqSuIWGNYyoyaZc6e%2Fo4NF7tMojVdfbJX8u8S1Y0vqNk5z00QZnI0oDNGzQ77bXnmdQ14PjAknWP9hKckfByQUahQl2qXps%2F9DhlWQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"1380-19e8af971d6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4992\r\ncf-ray: a10e2cdc8f68723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":4992,"size_decoded":5972,"mime_type":"image/png","magic":"PNG image data, 121 x 120, 8-bit colormap, non-interlaced","md5":"baf675216259a20a4324fc7fa8c89d5a","sha1":"a72078ee94bc2851feb4afb63fbe0a5764fdaf33","sha256":"3820ae3e48b75311b75b1b874cdb7e48844ac8513d8ebc140ad17589aff12154","sha512":"bb1b25110dc05ad8479199e1e7851109e69a96f4de7d21cf87c2537f1a5cd8cee5332d277279a82665b749fdde65b2f606d51c84c7e5ac70492e652a3989858d","ssdeep":"96:TZnk3yIKvDtj/OclllT647UdIE9iA/0FCZl/94tN5wzxsBdQdeI6j:9n+FIDwclDPQ9iM0EZl/9435wz2Uex","tlshash":"76a18ee19581fc9f3b0f8e55c8e2d5340d8f07a94d18995dd4f219fb241652a28dd633","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:41.14231Z","times_seen":17,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Impersonator.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.486Z","timestamp":1782329720486,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Impersonator.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BVWDg5y0R5Ycd3y1XaaryiFr7MFOYS%2Bu%2B1sJZvwq%2FI8o%2FKfFXxyst6j2M8G%2BI6oxhpC1L6QlC%2FB%2F9D78uy1MlvbVexhOdAGvpbKVNDxL696dVzEumS4hJyOPmtgYkrKsTmeeBA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3c71-19e8af9737a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 15473\r\ncf-ray: a10e2cd10a29723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":15473,"size_decoded":16466,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"05ecb9e6cbc231df29db31f1314ea542","sha1":"eddf64cd4ffd542b965cd5ea25be85247fc7992b","sha256":"788b29a4bb27826c81437897b0468a00bd695bbcf5a71d9ce1a6c7f2864be36a","sha512":"b83497af5852e802705237499e06d4e00bc0c7beef3e4b20f4e8ed2e6ff86e2ceb2467122a4edad8d18a8175fbb1029f6054ecdf30f82bc7184ee94e9f2ae939","ssdeep":"384:xscXpiDoACtu8O/3G32b/4mji5nnoeRVE8SsYe0NWv:xLXpoou8Q6oMEBsYPN+","tlshash":"b362dfea829dbb92dfd7c4611a94b570b80c69901a4fa3436f4bc2e1dbf0d570a47133","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-06-29T07:04:40.928839Z","times_seen":19,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Krystal.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.965Z","timestamp":1782329720965,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Krystal.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BiiM5qhw2pxqf0S%2F5DE6%2F1GvBf5SyCPQm5OV9dAReMWXapeJHdgqxtY9A7jdLDFZY3IxSRymAXvjvwx3hzNhHIm7LjHwqvLa6NdgsgHbFJ5oeNfWZMggBLxNsdShOksc0NJOZw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2b57-19e8af97386\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11095\r\ncf-ray: a10e2cd40b27723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11095,"size_decoded":12078,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"1f8541835bb0912a590acc93b461065a","sha1":"02c956c91d3240775e97f17f94a32634a3cf7f85","sha256":"9a4048c9f2e9b0107acbef348d87146ecf6f2cf7382cb253095588c7222d9e14","sha512":"5e82ca2f856e7bb0bb82f61605f534493576cea5a91712a92f6234f48de42e360113c1ef1998a55e273cfef145f0b6f0160f0f1caf9aaf10ab89ec05bb78a5d0","ssdeep":"192:1u6jgNUD3r6ZeMjwgFkZc7bsOuyNe1fRd5hELcaYUEHWQFb3a:PgNI3WBMTZc7lNe1hS51KWQFLa","tlshash":"9832bfe336aecc36f9d392ba1618c51f301d5a0db59fa40cac167679e872c88b9c50cd","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.815305Z","times_seen":20,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Coininn_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.034Z","timestamp":1782329721034,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Coininn_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xiaoU1%2FVozkxDLGpIalqeiS8JtLEXwLYwvsDKxWoHbmzLHF1D2tFGNvxVbgVb62i93XgF2YNonu03GW1pjC9aSurs9qm3653I7HYOLOaP4ixJKM2S5zHk5ZLuni82MozGRX65A%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2452-19e8af97352\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9298\r\ncf-ray: a10e2cd47b6c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9298,"size_decoded":10276,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"575e6d13edad231f4e3a80c73971fa7e","sha1":"77a154a85c00e03800fc1906e7c592bb29918b09","sha256":"293654a32dd180340195fa8b86afe16e2b648d71429510b2d9c9359e59f4a0d5","sha512":"83db61705442ac0ba0ed031ae888a415521c0a5f15be5869599254b5aa8dbfc427f1dba053de4b8c0c3ade72bfa8f0e7ebd4aaa1f99e214bb3fa8ac59a53da0f","ssdeep":"192:fDHOek/yokB8X+utHLRZz7IE9aH2GQ9Bu8iu1Eoo1K5Zn:rHWkBoPUE9aH218sEKv","tlshash":"4d129edec0d666578edd837b6e14c2349f6932882dfc2d4022b651676f906fc1044dde","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.991127Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/TrustKeys_Web3_SocialFi.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.099Z","timestamp":1782329721099,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/TrustKeys_Web3_SocialFi.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I4VnoY6cvFCegviRN6irNXj%2B0Ba0VvXRAlsU2skSracgQ2%2FdI%2B0LtubSEMAc8Bfzg1pnOHhL1P1gtpnPGZklZ%2BU8rBt0clSejInR43vCdiA0ZxDBITLnDjDI%2BdPBjbYPwuxg5g%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3cce-19e8af973da\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 15566\r\ncf-ray: a10e2cd4dba0723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":15566,"size_decoded":16553,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"d36fcd930ed6dfce1f5138aaf058b125","sha1":"82317ced77b1c61b6ea52adf7ffc858f93b0a5eb","sha256":"7410d59b064d0fdc402dd9bb506fce6f75da70792ea4c162ce4f8d0f202f4b62","sha512":"a2caf5599d273ea55217b66aa136665b6a2b9ba31c3eee840c31992c69b8c8e8ab9cf2a3ec701dfb1aa04edbb16cac792801433f9cdb2889ec4a8812ce955a85","ssdeep":"384:J5GoHMjSGQwq5dP0ChLHXIitqK6OHbQYsMD0ms/lo89kz:KosPOP0Ch5t2ZMoN/m88","tlshash":"ff62c04174d733f1adfa08c12b0b4cc8d805eeb4fa121e327671a99e153ada643f48c4","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:40.687344Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/DexTrade.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.230Z","timestamp":1782329721230,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/DexTrade.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7tBbLVMV1xhvv9mcIorFSw20TVggb9ooYy6JwSu6neo5wfda9906d1BT5kOygKvYOO9kgx6zLdrpXmsUKYtWr3maQlKzILX8wNBAN%2BRg2i8iA9VKNMuC3qb1tfgoSyzyGle%2FBw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1064-19e8af9735e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4196\r\ncf-ray: a10e2cd5bc1b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4196,"size_decoded":5176,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"bc91d02b6aa580628e137aaca6f9978e","sha1":"51947a0a75a153d310d93ecd3b0154c35f08e7fa","sha256":"efcabbab2ffdcea4301b3c2744f758989b69374b00f7bb4000ec5fb270ff48b7","sha512":"f13ea61d160266e70489fa5d958f0bc07226b5af6aa4a05ffb3bb858849cc739b41276c571844467cea9a1053fa019c74c40d2d4406bdb39b005cb1861621172","ssdeep":"96:pDuEhPSWn3BsQUnfEiD2WchzPxC4mPJ8tlE4kCaQ6MsbR:p6EhaWxsQUfNDGz5M+lVh/DsbR","tlshash":"b4818e0aa1a82310ed04847a8498b1e1cb5e038dd527ebaf7db542ed463e02bd4ca7b4","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:40.559501Z","times_seen":19,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Decentraland.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.615Z","timestamp":1782329721615,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Decentraland.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ownR2FF4zCfUH1cAw9g%2Flfci0hcobK96GH%2FDy4AOL8ITmZp4MUkg0T6Mkb1H7%2BHSEc%2FvzHDwtfIye1udLpkO%2BbKAy675Tcq9PZ8njuItpJ5PPHwfvgP4V7KOnPLbU9o5wu03SQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"66eb-19e8af97222\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 26347\r\ncf-ray: a10e2cd83d36723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26347,"size_decoded":27334,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"84ef8502a15f149561cdbd6c2bc6d20b","sha1":"0cd920b71e286b1894c0fb02e5c8cfc887085ca5","sha256":"c344b57b820600b1185bc237cfb0bd0392e1c317648e3260201cf4a22e168bea","sha512":"88d7f484c1ddcc3f0c487b69f6eb6a0ca7070c634b6eca1c262eee1213ad9eb597f0c3d29058b4f2f9b3b14cbe70d3a615028cd7de519e48122db02b3af56ef6","ssdeep":"768:HG8BFwteAWBqlWpN98X3ig5cO24TbYrGrqUmcjI7GriR:HGw0edBqSNeiVhrGdmcjI6Q","tlshash":"6ec2e1fb0d244c9d869495729dbb9b23d532080ae9682084b8da58d7a4bfc39973e231","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:41.245261Z","times_seen":18,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Tron.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.208Z","timestamp":1782329722208,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Tron.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ID0uWhpzVjJwO7a5E%2FOBtUOst541ekv1WiNbNhPVHrGtBaE6Eo23mYE5yqvb0vSGvfvJ%2FQAuCldW3gLHkFJhYS8PyOw0KrGrDGDLMYeak59R3deGW3YETtduG1zj%2FtGA9uELjQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"984-19e8af971de\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2436\r\ncf-ray: a10e2cdbcf13723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2436,"size_decoded":3417,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"ecc968fca12dd3be764a1a090e44b53a","sha1":"385af331fbe3ba4d58caa9b9fb7f31fc1782532e","sha256":"abf2015e572d5a410e9bbec8a3fdf3983d830192abdbe7b436de2fe1de313464","sha512":"900be2b806e7c452ce59bcc866d15b3f4c9ed6edf47f3dd3adad6ab6b33d5c2fc0a13cb495a14874303fe84d3daea457ebf35396f36ca5a5b4dfdf9aab17cdb0","ssdeep":"","tlshash":"b4415b37c520ac54af7a77bed0eeb1140da0878cf4ae4da77734705d9f24051b189b15","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-08-04T05:59:25.949297Z","times_seen":35,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Coinomi.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.475Z","timestamp":1782329720475,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Coinomi.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5g3%2BnbkS3hAJBTEzCZwN1JPhC9hJttfZGgWzQpQmii2Y3Ll0ltfAjomB6va%2BHUo7eaakw9gZpqEIOnX7l%2BwrFnYBOPQnvfHGgHGieL28Wzse36az9zfF8RY3MGLBAyo2bv5D1Q%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"56c1-19e8af97352\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 22209\r\ncf-ray: a10e2cd0fa26723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":22209,"size_decoded":23192,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"af196cb74ecb509fc2dc14e9f42831c3","sha1":"8169d9cd56e001d14a0a7e52e4a6ebedc1006a62","sha256":"c9760876de0fda52d835a756291f1419a13e2f2ea99feedf41f3a97284098684","sha512":"b9b6bb516e81ebd6a8f3d958e9ee8fd6cd01153529b530032e8d21b6c796cffe3b1a448455617e22beeadc831b321192e89c3095a0eb25c8fdf5bb877e3959b4","ssdeep":"384:/IvhGeqS0hTmGWLWHYqMrQ2GbmxShqqdE8OKG+o2JBilAD+iFB:/IvhGeHPGMWqkVixShRdE8OEokBilAD9","tlshash":"b9a2d0ce7f84e78848d0ded6b81c76191c8146720fe6179ca39da46cd4b86fa74be18c","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-06-29T07:04:40.746093Z","times_seen":19,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Leap_Cosmos_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.584Z","timestamp":1782329720584,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Leap_Cosmos_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sV4tCpSmkVtlWPUn0iWrElLoFj3Ekmib%2BeOt7kbZlKOgVItg%2F4bj4dHMXZWB8TRV5%2BohfmYsFZnHuOwSYfbKRClqCR0jpkKnsBbzN5%2BfBsRjO%2Fqon22AsuQtQ5xE%2FxG%2FXXAaBg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3815-19e8af97386\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 14357\r\ncf-ray: a10e2cd1aa47723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":14357,"size_decoded":15348,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"7dff8e0c4bb6102e11d9597a9aed7bc1","sha1":"abc42e7e3d119b39df5c90be58f0c10728e7fb47","sha256":"ae9210f3a9b9c4a8bc89c913b3671d31a175e8955a3f6f2c0559a9615c5cec36","sha512":"fb1aeaeab84d0fba117bed00f75baae8d28067d41e1d1a4dc2b077f1f5632bb3a41fc1d7e963dcbeb5410bba602c0992856c6ee0ca50a67172260f934f8cb34a","ssdeep":"192:bG5c/Ve3YB8nxOlVZQioJEBdJf8mDUd0PImKPi3iBFFRYiDOp29TUuMWkSYVlPud:bG5wehxOtxoJGdJ0mA0Sd3F96DbuQcrT","tlshash":"a852bfd5a121ba2c01cd532237b828396bf6fc26680ccd509bb7b92d5ee614d4b41a7e","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:41.200397Z","times_seen":20,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/FILWallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.613Z","timestamp":1782329720613,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/FILWallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x%2FoZLCOwOYIfOLkNiz28ttZ7hu7XwZgByqMYwIeUxkMBN2da%2FhvwKKyl47KqiVZyS1RIgprnU4ynvXyxtXAuVjqnMicJLXQRgDs8E5T150JXFgXxJxexdWGPdTvyJYH%2B%2BH9Wkg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1922-19e8af97366\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6434\r\ncf-ray: a10e2cd1da56723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6434,"size_decoded":7418,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"dc7260e6929782093d27a0446cbc56c7","sha1":"545a435f3eb57f2f49ab6a7fc787dd070aa56085","sha256":"a26f8bbadee923df05d7e4038636dfa67b6b2882245214f7277ba4550ef947df","sha512":"bcc0602e89ae0dc5896568bc02c5686b6cc4b53ced470c00e7bcc856170a150a8b0476d96ffa4371168454fdcdfdab798116f0d2e2d86a4fba93cf146e42f5c3","ssdeep":"192:2EI/pawQgsB9QlGr30BZPMnNQ8lnLqhM34uhKFFtc4ww0qLf:2EIRzQgsB9Qk+0Vnl4uh0sqLf","tlshash":"41d17d88f984ca05f832bf3221b75ee1c1b2122e17e75451b31aa92df57da1cd4c4a7d","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:40.75599Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/XBANKING.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.260Z","timestamp":1782329721260,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/XBANKING.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff, nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\nx-cast-cache: STALE\r\nage: 1670\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GyjWRecwPX%2FDtCpNlMY7yAHpbgB77yojxS2JKvdNje22xaV5zefhn8hzURt81TO2SD3flJMk5A%2BKnqK5KcgVjwjcYRcRLhm5LQVYHaPnxmBXrCIGG%2F0yy%2FHMvGvltv1kMHzoQA%3D%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\ncf-ray: a10e2cd5ec3e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":174,"size_decoded":1131,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"3316fe0740804fe397a5bba9e2152389","sha1":"22de6b45dd5e82ea05a83e44cbff39f14d6a6d41","sha256":"ff321ad78ccf5c19c54341062f980704117bc56db273a7e64e687066f7a41ef9","sha512":"7920a9c55845face9492449f5ae37240ffa22e8c00d9aaeae64f3dfd500a5d196512702b79134c880d32b96143d9a01a263ed24422f49e54bc4a9bdaeae36483","ssdeep":"","tlshash":"90c08059150115460b20e7443fc122542597379e35d7c6046785d017f8d5577c597169","first_seen":"2026-06-24T19:08:42.813376Z","last_seen":"2026-06-24T19:36:12.625108Z","times_seen":3,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/KaratDAO.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.700Z","timestamp":1782329721700,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/KaratDAO.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h1KCsiUOBagVuw0KlHHPisNJp1RgQdytzMWuy%2BW7bU%2BstwOL7iGZcZejygh6e0VPv6JdcGWb%2Bmq3YaTUEIZlQQN2zu7yYhMiGVFjuBNDdODxccbU%2F1zKeFPJUIzuYqy5%2FiVRVA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"196d-19e8af97262\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6509\r\ncf-ray: a10e2cd8ad50723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6509,"size_decoded":7495,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"c11486fffc6bee805d306a3cdd39248e","sha1":"b43c51a9507d9eb9376188495379e8ad85a15a06","sha256":"c857c3ffa5443fdca902928e18ba27c196e37753e885bb0d18ac7c838faf9dfc","sha512":"1e22e8f23113862921320a10f0507e70ec9a87fdec74630dd8edb9042f2052304157e8db8bb362eedfa2f9220fbc9b3b0f25037c31839bc13ebce5bd4a672c7e","ssdeep":"192:2CWgud562+VSE6toG/+N1LfY66L0g7xuV3QW/yqax:9BRoE2ILpw0wKyZx","tlshash":"bbd18d5a1cfc3c32c42b1e35c64b69cf09b321816a5f7f4865b76c7668c67869bf6110","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:41.221154Z","times_seen":18,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/DyDx_Bridge.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.982Z","timestamp":1782329721982,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/DyDx_Bridge.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hr%2F4F5ENML5QsrGInypycAwUV143cLJlq4f3hS3uAFL5dFI8oc%2BYMZkKPBoOY4ZHpCRltMrHD3ml6sKEQiVTicbpHrJPnEdYOC1u%2BhbOIVFbOK4KnaCn9PRswPS4EWexF0ffvQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"f1e-19e8af9722e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3870\r\ncf-ray: a10e2cda6e53723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3870,"size_decoded":4851,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"82278adb60aa5ae1f70e21e00bff5799","sha1":"5bcb252c4f75696165b70568430cb6c67583cc06","sha256":"66e155451bb13d2b636aac9b3670c982c02b21f47d4d9de64e1714448e80e805","sha512":"23051945e74413478484def6db6097ff6be7021594d46f6bb7b0c853c03e147d07d3b0c64401cabfa464f1c2ad6de5d2c343c79923c02d3f7697747a7a8f65eb","ssdeep":"","tlshash":"af818e7dd7711996dbd381fa90da3d03064f9723c2c997158260e77393bc22d9335284","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:41.053256Z","times_seen":17,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Klever_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.801Z","timestamp":1782329720801,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Klever_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mvbb%2FRMgVqi3Gp7PDJxlXZ7aOHCBato8OQvGCTZhMdpupRnH%2F5nclX8xS%2BJWzOWSHYYvwQsIMZ5OT1wSL8NoEmJHwi30E4k57Qzmf8l5OcG2%2FD4fgM%2FUDfbtdo8jK6LlejWLAA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1b06-19e8af97382\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6918\r\ncf-ray: a10e2cd30ac5723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":6918,"size_decoded":7904,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"d8c2d1c4cd4cbf3679fb017db1ae3d66","sha1":"b09d3ab19c340d1b11dc85c894b7d7050bf51287","sha256":"02c75631a8b50e6e4bffaca1dfbfb3f55a1c04bab16909efb3480c1a769064b3","sha512":"bcde53b88fb5d5ecfa83dbc42377584a93753e6e4670addfe7c6e6bf1aad5eec64a653df3bbead1194e212b1fd85b3073c23ca3b0f9f642bf8457eb215db50f3","ssdeep":"96:hedRjIxD5XRrRc06/xREm7G8GtXweTp+cqJT9LwL6pF25E7fj2BOenJ2cqOaHSh:heXjIN5XLcf/vG8oweHKBwmmu2oeqOh","tlshash":"5fe1afd425663d35dd6a5338b5d4a340637ba4c66e304c4b606df932b8e8ce053ad1d5","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:41.267978Z","times_seen":20,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/SaitaPro.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.943Z","timestamp":1782329720943,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/SaitaPro.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EuNIYoaek21KN02OesbUB%2FnCQfe5bP%2F0VoK5MNXwgBmYTiechYVdHaBaIcb92%2B6lgrDWYny%2Bu2%2BwUDV0qXX0f91ue3sDxkketIY3G48rLEMIyRPFgkHwV47M2qdC1hjB4uGEXA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3437-19e8af973ba\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13367\r\ncf-ray: a10e2cd3eb17723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":13367,"size_decoded":14354,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"8fd6934e9eabd270e26e04e8e71d2a2c","sha1":"7de6e75109a5ef5392e8f138091d0fe215e1ecc1","sha256":"647844380a9127baadc81427055c0d00f9c3f713e056126ff030b489b45c66d4","sha512":"518c1d6fe4c18d57296ab661fc97c673cbf1578229d286294facbb75c5b2351d5f0833cfb0a0cf420a787fcd388d4a1cc328f3451c5940813e35c27f2e6fb733","ssdeep":"384:AAK/CWsjTByswOuDxzW7nvihmjTHgXKWSS:xiCWAyswjxWvjnS","tlshash":"e052df911cfd87329c91365b178b88f22e3bf419643c098b13f199bc544dbaa7034cd9","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:40.710055Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Stickey_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.960Z","timestamp":1782329720960,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Stickey_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7FsSu6PIOXLeKYZaEibyfy1e92vfBOqB%2Fs7Egb1XuGJDjmVj5LEDjBW0ikxVfoOVh8iXnDE88YDUz9BFTeQPsjh5dWn3IhDp%2FWuLFyNQnQOwWr%2BgSZniUn04HS8frxh6CBGseQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"312e-19e8af973ca\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12590\r\ncf-ray: a10e2cd40b22723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12590,"size_decoded":13573,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"273cab54f7188bf02c4f87d96cc344ed","sha1":"4c1dbdadda8af25b0130ff591b25543a7368bb6a","sha256":"baabfef059bae231088a5125a78270997061e3cbf69db8cfc79f4d8de403aad9","sha512":"d01964872371ffaacf3996a4be459b4569e951bf035a920072c49038ad3efbbadce6fc26c16b14650c488c36650bbe331add91b06e7a7e7d93584462e4e2f4eb","ssdeep":"384:WWufyx16I56DNXC0r5byi1D9q962oo/jY0:WWm8LEr9yiDliY0","tlshash":"2342b04056871b59fb9bd63f953b44cfe63e7b744060a0a4500539cd122ceeacddf998","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:40.568906Z","times_seen":20,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/DGG_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.072Z","timestamp":1782329721072,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/DGG_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HX7yfHbKwxDyK9JGtWiPheKKklea0qQBNrDmi9IO5RgkwjOV2JFATwPsSoa3s9vUv6Qafir77Cc9%2BlKLkZ6ZF%2BbkJxaBLWIFVM8KtXDRmHQfHaFlVnq7sRxPTYdvMiK9cOvCVw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"237e-19e8af9735e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9086\r\ncf-ray: a10e2cd4bb85723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9086,"size_decoded":10066,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"8e68c0de50cc550e9dcda24ba34e3d27","sha1":"a37d0602f56f6c5c0303d0dac86dbb7cc50fe35c","sha256":"864d5567dc1bd18d2ee0342676a0f05d28c295058d78eeffabacee7bab595a35","sha512":"c2d45684dfeaadacf3269108e47e8dd4d338a76407765ae170a1417ee1e795721b1aef51e237d32889a2b20da895c6e897f14e829a930b772db1125ad0a69d14","ssdeep":"192:I1MAEkBBBBBBBBBe0h9VMtHZJW0Nz7YA6fPL2aW1yBBBBBBBBX:wu0h9GHZJhubb2s","tlshash":"5b125cb10e361afadbc42ff3f9271985629aaa53e50ff54483c400eb81d9308abc7149","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:41.123845Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/My_Cloud_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.117Z","timestamp":1782329721117,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/My_Cloud_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2SG2ERaCH%2BjrMlBFsk7GEyDNyVY6HSOAk6IYKUrEaTRFDALjH3%2FsxNHn1KMvXZPp1zlspM7dY2NG4%2FhiwycEXDskJ8t6C%2FsXXjxEDvQSbjYVkIOdtunVxiC51gAAmGN9wIit3g%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"5366-19e8af9739a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 21350\r\ncf-ray: a10e2cd4fbb0723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":21350,"size_decoded":22335,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"de1e993469290277238026acb651f66c","sha1":"575e4da45abe6726e694b43e0db3ba91e837c098","sha256":"ebc0be26e778614b773e7fb3612b40b35030709832bf43f26def2b55918ce9b9","sha512":"aaf18c3d29af8984fabb4e9df547b2520cda78a61a4fa67c260d21981475afc3ac33f519b570a29df83a6e1aca1e191b8dacf74311c1bf99b9bb740f950076e6","ssdeep":"384:unpDjyctzuLP2bjOl9mrmvJv1b0kGUDN2Fp/XGm9WW16mPo:uxwPermfA4Kp59X6mg","tlshash":"51a2d1290a7bd3da6afd193799b738c62449f4b91ac10a038b8b51848f7f9db3813017","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:40.687832Z","times_seen":19,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Hoo_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.153Z","timestamp":1782329721153,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Hoo_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7jwZSU3GmYGqukDy8qHt71zdesNHzoFgt6WPh0F4Kg0DI18pFibvFS3lUZmISc%2FaUtvd6%2BJ63e%2Fxase46mdrm%2Fcp86EIf4%2Bcs%2Fn95ZT%2BEGpx9B8r%2FSdLJBAHqMdq%2FXMCVPfNrA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3e15-19e8af97376\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 15893\r\ncf-ray: a10e2cd53bca723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15893,"size_decoded":16888,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"9c32c96011f0331fd32a2adf48dd757c","sha1":"d2cb969e3df6c2b4ea72803ad78c8ce12069ca32","sha256":"963b4c1efd891f43c2dfac6c07a3f6a120e409403011377c045bfddd523aff0a","sha512":"972d309c7715803e10e9c5ab66b9092400b3059f6a92aac56dccf71f4f923c0d1510886968beefba0bea809082d63c4134499fcbb5323248bd4f3add5b3e30cf","ssdeep":"192:wkNBRMPDJKzyXHEoTcjsfZTtOfZHT5dJbONkfEvmjGlsTwxXAaFHM8Nk5kbqrCgj:3NBiJKQE3+OxZi/eq6TwdHM8Nk588","tlshash":"f162be0adeb1c806ff1b4b4a975a107b7f32d50932e6a29409f6441ba1383fe9d54bcd","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:40.818475Z","times_seen":20,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Face_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.197Z","timestamp":1782329721197,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Face_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VhbTEqsNAxX91D%2BbbF2gZeZ5Scg8ojZ06HnztPS%2Fkj72lfAf7hmIgzCAx90yUd1mD00w9RCwaz7BDL9hYOnJoM%2BFt2bKuQaQODLMDhHTAb7iLA2QHh3NAKJzJ4jmE%2B91P9tFjg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3c93-19e8af97366\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 15507\r\ncf-ray: a10e2cd57c01723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":15507,"size_decoded":16492,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"7f49f2968819ff01bfde5e1bef53c69d","sha1":"d85319afec7eeb0429e0674f92e4300779f1e333","sha256":"ba3fc55c5b76bed815eed65eedfbd5a7af09f1c074e943edc9d43499d32b016a","sha512":"d9e62394e0b6d5bf467ea5ff5b1e7298c259b8f5d642af2b1e1303c0bd9fb1f4101380f806cfc37cc68a8c3fc7624077a8a512f338d40f5735f1d5540740f506","ssdeep":"384:DNiZgp7mN86oaME+iSo21JSuZ9XciiGyMhH:DDy862JVzSuZdie","tlshash":"b0628c78689b73f7eb14dc22cb7807407b2552e6c7e4fb6c909288bd9a336e5c468851","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:40.702677Z","times_seen":20,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/ETHRank.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.250Z","timestamp":1782329721250,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/ETHRank.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N%2F6VpHTcx0Ma1Q%2FeZp8V7Y1bRN5rJfMT4qWJS%2B82r2i0QAoZ47ljaUtyp%2FLrY6DETeHb1HOAzYrWt80ZswOq7XhqNZ6hS5P%2B3DH0GfglGu%2BzlQrZgkIPYiQH7ZcM1YD7hQkpYg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"172f-19e8af9723a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5935\r\ncf-ray: a10e2cd5dc34723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5935,"size_decoded":6923,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"c3d83572a1a802c17f7922bf2d37fde8","sha1":"06ad5694e916d6557409803994170cc3b0b616c4","sha256":"bb0d122f09beb8bb2111aad2707eea35a81eaf535732281bcaf6bd2f48b557de","sha512":"70b2540214fb30fd55f92455f4853014026de5b286defcb796ec5ea4a541b749836dd95c452180ab5c0f186424a0406ebcd9d22dbf2a7dc893538d01127d7ed9","ssdeep":"96:3u5lb8PFuyw29HKRCfjoE/1eLwGmZhPb1q+8egrx0XfI7f3lZLtWcbtlBMd10v+P:en8PF3dqNweLPWjyLrxN3x/b7BO1Y+nP","tlshash":"6ac1afc4e5c89955fb301631c192636e768107772f7b7a88a6cc570ab4035a6fe3da2c","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:40.658685Z","times_seen":19,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/axxets/styles/modal.css","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.136Z","timestamp":1782329720136,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /axxets/styles/modal.css HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1e5d-19e8af973fe\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 1671\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1fGXdVA9qE5rKDTv81Wm4IWcv83CcQpO72Lq18leg13P3oWW5jVJPoU7hlPWMq4cA8r4YehGA%2FMRidlYbaXDdGHuOXpzrVEBlRQ9d87UtX%2F%2FDtMRRCDCnTKUaE2nN%2F96%2FKSeHA%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a10e2cced9a5723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7773,"size_decoded":2649,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"41f169040ffbf1a539082d9f99819175","sha1":"a5c9e8563b8452c997bf12efc2d33a9948196aaa","sha256":"15434b23fb1d49dd04c96ac283ff2318e080c48cca871129130ba3d4e99430fe","sha512":"4b4b093903f27d34b2af329eee1e2a26cfdc663b2bf7365e07a81f30e157de2de9b06a4ff9e0edac20069a57d214b598d5aea0d54d08610e34212e6f824f7e72","ssdeep":"96:EUFZo/1DVc+oAuNO9JFZoA4UVc+oAbNo3MI1RsQ3MrTVjoBmK0rRyQGad79Tsb:EF/1L359KA4e3oMfIMKBORefb","tlshash":"07f184215d2ed489db075cc6b7f86f295c595032a246817bb6f62bcc16cf63223a07ce","first_seen":"2026-06-24T19:08:41.943937Z","last_seen":"2026-06-24T19:36:12.632815Z","times_seen":3,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Copiosa.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.489Z","timestamp":1782329720489,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Copiosa.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FX%2BJ13Vz%2B%2B6kPaAFdTE2GjUAgCHLzl4cUHueD48GTBucHfAnzoVqE%2FCyuvXtttDz7LWlubOBpAHOTSXcnbJwU82hwFVUps51%2BYLY3cTVGnal1TMXMSJViKfKqe8EjjpDmJ%2B24A%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3cb3-19e8af97356\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 15539\r\ncf-ray: a10e2cd10a2a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15539,"size_decoded":16528,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"136a1f5ca064ed80cdcf37a3e282327b","sha1":"187d945fc9410917a6d5e8d9e570d9a8da9c0341","sha256":"67e5f54fc2968c9a377a5ee547f252a85f9348d63e4eb0cfa1b4783b6858ca2d","sha512":"40a09a00bdb724c12e394e9cc195247873944f3c5bc3074edc3b1912366b6bc11e8934215c6319a450cda42076eb3f1dba33c4edebb607d0405cb49a79d4b9b5","ssdeep":"384:5dE2AD3WdZL3n9dywEhIsUk3GM4F8cIBL1Blnyi4AUvF7:jEzDGv9QF3GM4Fah6ie7","tlshash":"8362d1e1d9985707668403e275cf6cfe16931c37619283719002bcb7aa1b791ff460bc","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:40.683561Z","times_seen":19,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/ZooKeeper.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.350Z","timestamp":1782329721350,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/ZooKeeper.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d%2F0YQi%2F5pMdb%2F8vn8sk2S39rzsaWXGOeLUsCTheWwV4eh7Za4ZMv68eytIub8q40RFWos561o4bk77M9Enr6uJ2%2BQJDeWQkHQDI4jpp9XvK1yRKmq6xUKL5aqAQOehmf1X5TLA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"149b-19e8af97312\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5275\r\ncf-ray: a10e2cd67c89723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5275,"size_decoded":6259,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"b58f40671e0e23223a1d4df9a1faa1a7","sha1":"74d97e18b65f0d212d6f8262159756b489a0e2ee","sha256":"91e84f4b0ff997591c4c975859ed33dd264cdece21fe66e8fe40239c8fb558f1","sha512":"1f2e874de82f7c47495390ef87139c8c9c9fb8b6cd3b75f6edd4fa17fa2c2288ddc1f67597ce75b81de4d8817b89263920f52c9031eaabacb67bfe9cb5da6ae5","ssdeep":"96:Cq6ptns7w4FHRcNAk3fbxWXjWRidgioVNYjo2uJTAAIQgDz0Gc:CNO4NHeBgNaoGAIl3W","tlshash":"87b14bac169a4aa2081e64e72c07ab13a3f8dcdf5f9ed45055a0076702fb9e50709fdf","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.551292Z","times_seen":19,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Hop.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.338Z","timestamp":1782329721338,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Hop.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0GC5xaDQRz%2FG8I2Z3ZOorAEej%2BcO7XO3mnGPLSVFaU%2Bu8bW1FcaXDa34L4nht6EQIZ4Jku%2BGJ1HkLIc892QKuPdfCZGnrYSPQW2cQZ%2FkzF4sstt5SM7aTastSnzakW0vjeru0Q%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"163bd-19e8af97256\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 91069\r\ncf-ray: a10e2cd65c7f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":91069,"size_decoded":92057,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"f6bc5daecec076a1453f0b590b9b4d14","sha1":"34b61971e7a638c6f59ca15428f6e065291d291d","sha256":"f8ae2d06ed582c518bdc8b7b6ba82978a6f692a4a1af160d05c2de20c3bf6ee0","sha512":"4e65d83298cd606b305e0874c4994004a70b28ace5e3a53b82c92289bf04c558ac34d2d4a107026ce36dbbb85b7b0974f2cf6741f446926b56f29ab7764a7664","ssdeep":"1536:pqhD7GLnSj0dB+XNgeiRoNm/yV4C63uQxQuolp4nqpKt2b2xDNmy3NpctszsHZU/:mv0SNd7qxV8p4Y1bEsyd+y0Zdg","tlshash":"8b930244806c59e48849a3a3f106258d327fe73a26b5d9e81c972fb7990487fc6c1be8","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:41.069951Z","times_seen":19,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/IDriss.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.355Z","timestamp":1782329721355,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/IDriss.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3FHQ7ULUhe1VaOdIinmFJ0GmdtL3yhEPKQMhCiC2GacBwT70omjaXCONw54mjAXSOnHPOIeqUqVuminJ8LwqW6Wx%2BE6zOXG%2FLknhw0mfH%2FiLhxWYvFowh6X9J0YEN7VJ59fX0w%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"159b-19e8af9725a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5531\r\ncf-ray: a10e2cd67c8c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5531,"size_decoded":6513,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"f45e6605a84f33b5c42adec5aa3a7cf6","sha1":"fbea42650be6b28ab204b155c8f01475ea1bf989","sha256":"aa4ad9edfd9b7eca4a2e2eaa4dfc182465678ccdb11f8abb08c0bb8d9d84e1ff","sha512":"f8b832a62d7fd48be39217de68668f3abf8eb1d69b0d38beeceb27764523f39a866d91374f37aede177b8f67667fdcb634a8ad186d4da9f999ab63cebe3d0d3a","ssdeep":"96:aLKLLLQ5L1LULLLLLLLLLLLLLLLLLULLLLJLLLLLLLLx1mU4lwsRjuGU4eWW22uG:aLKLLLQ5L1LULLLLLLLLLLLLLLLLLULl","tlshash":"33b17d49018d7b13abfe3e1dbcddd4d0b15a552a33d9d2b801076b8c3086adc4c6629e","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.774896Z","times_seen":19,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Exactly.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.744Z","timestamp":1782329721744,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Exactly.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1zftq2F10lJ67scUzaz7l%2F28BrRS7h1xSWbO2pORUbP6Jee1jfDaxXeIvL22GkI1bp92eKgMGUl1t4Zweal8CozUDrGoVnGDUTqXh7N5%2ByFEPpVrT8vKfx5%2Fyo5RohpHjQQbbg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"571-19e8af9723a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 1393\r\ncf-ray: a10e2cd8ed6f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1393,"size_decoded":2374,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"12f7db4bfb45691781afcd02f9b2a783","sha1":"50d40acf3dc080c870d45bace06402a26007b4ce","sha256":"658a24e89fbe39daddad82ec19aef4f569a88abf179069a9a5b8490b0c7a5b22","sha512":"d83ee955a205fff6578aed410fcb169b8dc76983d1c35295ba934eb6a56d3840354d8e1b89a23b24b3b9bdacc84dc160604fe9e1b9560a8c544f3bef479afd2a","ssdeep":"","tlshash":"3621a88083f02415c13e907c4af634b6ccbda62fd724157ee63a0fdf295941a9105d43","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:40.724942Z","times_seen":18,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Change_Now.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.765Z","timestamp":1782329721765,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Change_Now.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XJnAvD6B2A1YLNGW50CXxnmmR%2FwwKgk0c2bA3GYvMtD58mT%2FLl%2BLOiYSnFoe%2BiuWHfAs7Q4oa6J8HcWkqv7HlZkM%2BkBsaKrmIRv4XXdFcaiIoR6C9ZrgUkOOs0j99xOlUsreVw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"cb0c-19e8af9720e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 51980\r\ncf-ray: a10e2cd90d7e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51980,"size_decoded":52967,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"f22d41e9ac6f5ce1cc3dd213ce801889","sha1":"0bb74d2c6c5c35fbda6adbc1270487c12a03bb2a","sha256":"aa05835454c0a1d6f11cc74f2389a056126d58cd743454c6d27a8686d75e5b63","sha512":"42ec5f724981fbfdca423c9d9af3e4143d47beedc27a2b16ec834fe1b24cfeff664b5f43f5d52e57ac4b4aa6e07b7c35ad69fc8ab361015360fc9f16150c0961","ssdeep":"1536:+0N9OF95jFu8hpAxmem111UnFDtpWD/DSdm:18F388XeE+FHWTDF","tlshash":"4c3302d4cf48c1399168818b7887778a5eeb3720d8bcd5f4479c8ef448677386b89e62","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:40.690465Z","times_seen":18,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/FairFight.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.894Z","timestamp":1782329721894,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/FairFight.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3TNiaK%2FNdJU2OEFUuyOSW948i%2Bizn47FC8GQZ8aZVzjt1fvGqMgnyPhIc%2FdcD7m7nBOeGGJA0nycFo8r8RsyNC%2FOsC2Te0zLaII0PfMucVXY4Vv1QIjaFJFr9jwG4C%2BcfDn4TQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1aed-19e8af9723e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6893\r\ncf-ray: a10e2cd9ddd7723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":6893,"size_decoded":7879,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"f8c5b5b131a393c765fb3eb66a18914a","sha1":"c8c7b65029c5740a3b818a34eb4914a7840eba07","sha256":"85ef0045d7af091d2ad22b15351bb8b0ba2d0e860127d528e8fdc805debc2880","sha512":"65643e2f7ec35a48c4c0f0ca013a85d48d8a4a75a8e097322d939bca96637f642e9201aaee697da699095b7888978293314ce84a35ec153d08d333cb0b9e495e","ssdeep":"192:SV9V9GTLKiopkV7H9TErD8meY33V1d7HZBpf:SVbcTLKio29TE38meY33F9Df","tlshash":"cbe16a82a6d92970232fdf2eb121180b54341a16927e81de2843dbd30f814da68fbb16","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:40.767084Z","times_seen":17,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/OpenSea.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.234Z","timestamp":1782329721234,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/OpenSea.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tph%2BTbZnEpSSNUupQdf5C6%2B3pSdXhRpt7hyXyEr6tquwIHySmT9m3cjCJQLC09DTfHq3OktkXIm4sN4cITNT9cu4PbWnPLK10wLSyJ66skTKoBPTjkbZcM23%2BvHIWvVrkoDG9w%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"8e3d-19e8af97292\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 36413\r\ncf-ray: a10e2cd5bc1f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36413,"size_decoded":37396,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"88d0a84d175da07e243fd238c78b7eee","sha1":"45403dca8fa0ac8c626eaf27ca5b3c0a683672ef","sha256":"43b0b46f41e4a0a156ef7a353103527cfcfe462d3b1f48960329ec4f93ea7b0d","sha512":"f9d24b78d61504d6b553b8c4786c4004e0363a1dfc33a732197cc9056d4edf1c88d7ef3ca5dc4ff31925559ec22c706a50ae66e4b7603a445e554581314f8b84","ssdeep":"768:rYdxUpMqNWSW+SQpMk7+ZmqdhmGNY0gqGQU/ki7TT0iSbocexr3Huwh:cdx2Mqh/T6M+YqWki70iXum","tlshash":"04f2e163e304a396b807235b0aef5854a7bee8925dc6d2dad5bc46724c0bf433db2315","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-08-04T05:59:26.002874Z","times_seen":35,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/AuxoDAO.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.486Z","timestamp":1782329721486,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/AuxoDAO.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yg1%2FnqK%2F78JvuEdRAcLuQNpXHuYJheoOsGuK9uMmqt6Z0sCJxA3vV02LJLcZV%2BEiZFgWWl%2F3sqy9V3XCuD8%2BJkwerusP1Uj0FDMqj%2BWK05NGLXpXOO2dBio8Uj95y97BOmgGxQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"29b1-19e8af971f2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 880\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10673\r\ncf-ray: a10e2cd74ce7723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10673,"size_decoded":11661,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"6f543041d5e5bc59cbd329eb5ed4ed21","sha1":"ca0ae7f6e15ef95a8b538b6ca797b0667097573e","sha256":"05115da2140e5fb5688ec06603fa76e00b123177aae8bff7e73ce280addf825a","sha512":"a8b23c6010c37cc4cc98a926a4bf5d273f30aa42332224556bb23c11dce23c5b526e65a198b4444f03e89b4f6e015b7ca94d8b2b5336ac270ad1fdd0e1b65307","ssdeep":"192:pXtbC/bzPZZKRn9Rnlm0HPCUzw9+dGkQLeCKjotFAEoTTF5rh4BKH+:pB0b7/KR9hlVBc+okDktFNoRF+","tlshash":"7122bfa2750137d6309235760a07f375579b2c14794a7f336c7ba0abb9b32a9368280f","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:40.920785Z","times_seen":19,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/farmswap.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.041Z","timestamp":1782329722041,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/farmswap.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H6Yhn9foADzrUyYUGjVI%2BWc%2BwMvPw9lxWYJFCRyH3lvIMExu2v0vCUccjKECDDrQEbLgUTyEveL14MfTNRfJSDrKKl%2BUXYUDtJh3uU058rXYZBHdHBR4Unb7id8PHi1Dg53Elg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"353c-19e8af9723e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13628\r\ncf-ray: a10e2cdace7d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":13628,"size_decoded":14611,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"1923f6ab8c36f32b009e89bc3726d7fe","sha1":"97d6080f05b0dbea116033022c7f4471704d8b49","sha256":"73aadcfefc1b64314a1e7796588d1e52b399ccd92bc2afbdf406f78ba045f44b","sha512":"9865bd27f062aae9749c208f77802aba15278cc4ba9d566487cdd8f6142b144670780cceccea423e726ec2ea0abd6930cf9e8e4640ffa6f86df61908bb11767e","ssdeep":"384:Qwb7NoXsxCr3iACgB4k+KDJ9xgcJvyWgpJvQmh+vj:QioXDb3Cm9VdJvJgn4j","tlshash":"6d52b0974fd8a53e677a463370ed86444c1413aa1272f4c4e209d2b9ccbe5c6cf0695f","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:41.100986Z","times_seen":17,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Forge.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.096Z","timestamp":1782329722096,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Forge.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m12Eb8BZrUVXacITnAZmDVkxEiml0wbJV0nCEbiGsdFFFuROllvqEFbgrCh%2FG%2Bo9MMydRcs5lU1iU0STdZCrNSF8BKg%2FUYHLLuQK5NzMz%2FOumNYvpRAuq6bzIlboZ2U1iMIp3Q%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"25c5-19e8af97242\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9669\r\ncf-ray: a10e2cdb1eaa723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9669,"size_decoded":10653,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"1a27b37d395b9a115d67076a450339c9","sha1":"c37a90297c46c9beda002829c4d255709da1d019","sha256":"2e04cf22d9e6254352382795cf03016af0679a5fd656d45e623e053c4b900b56","sha512":"cecd9cc387d8b4550696d48f0c6a6cfcc29c42e181bae67371672a3d77514f49d2c76d3c825480e2745ce47b78725e88491e7c0795860cda471a7f063ea6dd4d","ssdeep":"192:r7dXbcSYSt21TfNVVO+irTy4yhpIqgdOQ6mIXy8gOZpOp9:hcSr2FBiH1RqHmEdQ9","tlshash":"cb129eb5201208e53ea9f9f099f34f3f55f785224ce9221b5a8dd804eacf558108f9b3","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:40.753562Z","times_seen":17,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Athena_Cert.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.157Z","timestamp":1782329722157,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Athena_Cert.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rr%2BVpgDyrAnl%2BhLvZhvdb75oJPj3c9bFIB9hRGB%2B3PAocR19%2BANZnftT7yNPGguqMurKxfUOR0dJifE8eYYhtGr2J0iSpcQinmLObQRl0T5iuyyC4dMkR296MucGkSmel8WAfA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"2c30-19e8af971f2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11312\r\ncf-ray: a10e2cdb7ee8723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":11312,"size_decoded":12297,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"833a31dfaf75c67260170a966cf10d14","sha1":"9e42ed601f89ff5b551c9965fd60dc98ed8af098","sha256":"0919f5cf75b590be88f8a4f14743ee20d9d087b350f863cc15d48265100f7623","sha512":"0b036ddfe392057f09094c90bd18123bcc9219e3ed6f06e5cf777e90c987de4da641c4b43e96bc14cb958c20b9375e2652149ecb73a8c2a471fddd2b75755e2a","ssdeep":"192:6th75foK8PD4qHARf0vlRDSgChd54TShF/Hw/c6qFlMX14o4dmpAskNcCB:6P75AK8PbHhtFvQgShDfFlMFuIHkhB","tlshash":"d8329fe2742192afae18f3ae1b471791d2a667987132a7c5e908db31053ac89dd410b3","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:41.169363Z","times_seen":17,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Songbird.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.291Z","timestamp":1782329722291,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Songbird.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p4Ks%2B6vnJGvNnIQbBJ9y%2FzJ4%2FqOXBbFEKDTfUWtk%2Fm84NR4ut0Z%2FFYiOze2kKP%2BPK%2BqSdaHyC1i6GevCCMLJl2gnanuUOhGJ3G%2Bw0rzTZxMwbKppzmK%2B33LR1iTv08xeb%2Fqtug%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"c6e-19e8af971da\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3182\r\ncf-ray: a10e2cdc5f4e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":3182,"size_decoded":4177,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"08014527cf7aa9c276d360d5cd9e21ff","sha1":"8abd6add369f84de5cbef6d59e9b901e72636077","sha256":"dbb5a1ce63be30c8e4be75449a377ade31ca9e2039b3d6cbf9a77d582a3b5156","sha512":"fca970ab697cf996bd18a5307c5d8537d0174a1e5e9ce8291b17f44a67291fa4d49f6bb3c062a8fd377eab06d6c740ffe6f9f6ee90d1137afb6481b185cb672e","ssdeep":"","tlshash":"62612be27b809434fc4333785418a03c85d7ad099bba756b84c7b03b41b7472a8666a5","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-06-29T07:04:40.971106Z","times_seen":17,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-24T19:35:13.066Z","timestamp":1782329713066,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-wCtwxhh8DXPOJXicBiUQBd' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a10e2ca2ef31723c\", cfExtPri\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vZSQewiic8pAtHrLEdzY5KoMwqjbufA1U%2FBiE40dCuRz8Hak94bkocgaOUgR%2FEYU0tcfvNEpZBdTy5TlpcCLMguSBtCfm7BGHUKKe4EmXBcIYS6kU0rv741Rqc6ESy6%2FXWULrQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 24 Jun 2026 19:35:13 GMT\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\ncf-ray: a10e2ca2ef31723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5578,"size_decoded":5550,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5578), with no line terminators","md5":"8b4b8833be3e19f3acb873a2025e0ae9","sha1":"6e33230bc1aa3ce8430a726feebc98e1d95f1a12","sha256":"a113e76375c828cb04e3a2d7224f21f5f7966f5352d73fc6f620eff49673882b","sha512":"5130fd36f677889a71007fba1d114b0913803291f8a5ff9c3f78ae3cc4dd4773a0fd7794305058a0a61130dd0edbbc08bda75f1c4c6f171bae70b5672a007f65","ssdeep":"96:PNy9toXZzIEb0EaW87HoXSo/KdNSSsolWoTjRwnBYzueh81mw:PN0tkCBI3ydAIJdiWySw","tlshash":"c2b14ce7ac31a023cbb65fe31477b39c4222b548f301d0ece5e246bea0def868109149","first_seen":"2026-06-24T19:36:12.640882Z","last_seen":"2026-06-24T19:36:12.640882Z","times_seen":1,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":11,"connect":18,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"skyroon-claim.xyz/","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-24T19:35:13.250Z","timestamp":1782329713250,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Wed, 24 Jun 2026 19:35:13 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLocation: https://skyroon-claim.xyz/\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AWP1T5IXJO8vuqvq7WfT25s3lc8Fx2jJLLtewe15eZbzcuQVPO2Huxg3mZB3j0XiqzrvgyyGxDxTs71%2BlvLv0mW3sHrX4cdtm%2Be2ZPneGbF1%2BjTntrGtC7SQS%2BfMxdEpTtvcTg%3D%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: a10e2ca3dfdb49c5-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T23:45:00.487881Z","times_seen":17963874,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Safe.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.242Z","timestamp":1782329720242,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Safe.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VY8RK7pJVOJynMJYJlRBrVLdk3u17wQg4mF99ImtGAG5%2F9ft3KEtg8Q6p6kkHW9P2%2F41gGeHZOf6kUoSvzS6BrEd8FzzN8w2VJ4v%2BvnYNJjn0vJzjvEPSh8vTlVozqUgdJHEVQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"e72-19e8af973ba\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3698\r\ncf-ray: a10e2ccf89c9723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3698,"size_decoded":4679,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"e31561dfb6e06b0301e56757f3bf3fd2","sha1":"f48562f8defb8e178f32456d639e198038041069","sha256":"00ec37abb69628fefb003769405e9859917fdd41561e856e5c115fd070332200","sha512":"93ff08ce67db98211c5f75abcb204769e173c4effb5191e34dda09b421eeeb7cc354e31aec5e4b61929d526d4a4dec0827c03867013dd2488cc486e524e215e1","ssdeep":"","tlshash":"4871837269641b325dfeb754ca824ad454890e6f10aff7113368f303268b2b996e42de","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-08-04T05:59:25.942322Z","times_seen":37,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/37x.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.203Z","timestamp":1782329721203,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/37x.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aiSXo%2FrJgHX56BEeY%2FJxgDRUs4gAt4FwKegltwtDNZHs%2FsSrymdE3K3%2BX%2BdrBBEmVHmcLtSjEmQmW3UP9birm4iJ%2FVtAXdAf7YsdVs0FPEmeXlDL8%2FD8m0j5VMx5UW%2BcroyGrw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1dd9-19e8af9731e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 7641\r\ncf-ray: a10e2cd58c06723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7641,"size_decoded":8633,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"c306aa6ce26393325fe4334817286843","sha1":"33453afea1a067d279c885cd713f16f8d6a46ddc","sha256":"368b86ad86f033a17cc68b95ac5fe4714ece8e741d9cc0d13278c738fb440ab0","sha512":"e6536aac8da6606bc308450e61f957e7cb9f7d6a4284c3d2e1ce1fc2cf962f6d7da140681128b8baecfdfa5f4b1bf6d5316279f850e9d26353f58ea48f24c681","ssdeep":"192:nwvuVF0Pot/th/9QdcEEh+JfzhZtW1ev6cedPpV:+uVF0PUJ9QdcfWVZE1e1etD","tlshash":"4ff118ba6169d8946af08c4918c2cb5f78ccc9a77be79806ba6b745e3c7f11ec43c441","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:41.084209Z","times_seen":19,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/OpenBiSea.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.237Z","timestamp":1782329721237,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/OpenBiSea.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=794GMrHlx8HStqsV%2FnGQzs7BkIg30HBIwt1NXYFv32JKYT3zMxpOOwsVZjtjcwUzE8AD0rYRAH4wMsw2B%2BEoVaOBpgE5krwbYY7z%2FleOT7ewa5cQCSSlkM5LShBxVcjK7nMsBw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3ba4-19e8af97292\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 15268\r\ncf-ray: a10e2cd5cc22723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":15268,"size_decoded":16251,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"bd8f3d2865e8ef07c039deee8e0b2d98","sha1":"d0037bc7c9ccf6ff5c3a8722c2303fba5e2e88c2","sha256":"92cbe15875ba57cc1b26ad66990f2ca0e09e7eec811187d3c544a75f68121dfb","sha512":"d73d4b0ab571d296a5ab4f3422e0bcd5c63caf9684700aaab9c2a240edd4f2ccbf4bb982f4704c301edb525424224e6c1d357c25cb3a8435df5886f819291a2a","ssdeep":"384:pIDXSvygBraXz0greqJs1bW7BuSWzUyHSceQG/XX:iLSvygVkzLeqJWaBW4yH6PX","tlshash":"4162bfdeac005769212cb7b2939f0c7414b2f7af974e3e0953608077b624aba6b79584","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:40.539174Z","times_seen":19,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Yearn.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.438Z","timestamp":1782329721438,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Yearn.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xZYyEPsuLl7DeR%2FVKOvcRYp5eJ%2BisXoP%2FduNX25DPlrSqStM3CEpzx3fmAxNttGCYGjKkgtjn1%2BaRajozh4rJhaJj9JPRxINDLEIyXlCDj8C2kKIx2iJGBi2mb0HUZNcadcNLA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2518-19e8af97306\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9496\r\ncf-ray: a10e2cd6fccd723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9496,"size_decoded":10480,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"d92669b62c8baef4990dfd6669a5720f","sha1":"01c7356d1cc3df3398f2150514a7aec77f5f0d98","sha256":"0778eba6539d0b324978eb4b9838345c641dfc01dc34ec4506e29ccff54fc115","sha512":"00bf9317ab5ed7e68c50328b4a053d4a068f9989f066e87e0d57fc974555b03f0dd1fabfb6641562f385590010501710791be8dc143bca32192f3536dde34e8d","ssdeep":"192:UeEIScQPnJUaa0oPUDLuoTUPGSCxr+X91daIeJcFrVTw:U5I0JUN8nunGdR+XZZeir2","tlshash":"8c129e7e9e6c9c2f8c3802679d7e7d9d0f371babe227a445d98248336a64cd8d052841","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-08-04T05:59:25.996898Z","times_seen":36,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/soulfrag.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.881Z","timestamp":1782329721881,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/soulfrag.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6KIGg0YS89n2FsABdLbUBjF%2FXdsjep3e13ODjpQ9RGaspiH%2FhaAzOTJRVB6dywcba93wDFaTDn2FBEoaPZdJeWaCmQFV2DgPWGpqZiyoAa1QD70mJW1OaoSOn7p2x45icNqpEQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"304f-19e8af972da\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12367\r\ncf-ray: a10e2cd9cdce723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12367,"size_decoded":13348,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"771fa8eb68ca2cac80c2fd82c415aa3a","sha1":"ae5e5c331605daf75383b9a1adff7e8f2a1a397f","sha256":"0effc26fb79042abf47f3de1840f2fb3055eafbfa26f7a75612d6ec3e0039cd5","sha512":"d70d9e5bc9ed959722d3fda4ba7b3daf6a8f5be682e563fc5834d78519ed1c362729dfee3cc66ba39d52c95b83aebecebe5c9214c5fd6363ab9e253769165217","ssdeep":"192:l5m7LJxt3i+11etnU3Y9Y0hie8XNiWYozKCsAY3Cp5nNNDxKX/0ig:l53+11eC3YTtWj4C3NO/0ig","tlshash":"2142befb0988d2601674462fdb39b857aa82951cd189a21463adf1baa349e0237d07dc","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:41.116287Z","times_seen":18,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Create_Mona.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.037Z","timestamp":1782329722037,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Create_Mona.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Ecl2rb92ghNi99s9FWkn%2F4G3vh%2BCGCuWXYsfGV2FDexWzjw2s33a2L47SGfFDV%2F9s3ZfBQwKfBBBJZ65DRy7YUrej39hQc8foLXYhBKXzfehm9nFgGJJPWJ421W8B8IyAIPBA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"253c-19e8af97216\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9532\r\ncf-ray: a10e2cdabe79723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":9532,"size_decoded":10514,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"f489a1920c3ad537c865f09836d1d6fd","sha1":"289c0ae9214425bdc8b64eb428de551f8bb78317","sha256":"ffb10b949a375807d841897bb89716c4fb6ba5f8f4062f71443727e50b404f33","sha512":"0c12e838261d3b33bcc2d7bffbfb07ab56ea1099e7996f06ecfa6b8b5caef64fcdbb1a5189a8992c563989d401ec54855fef8af16ebf5cd242cab5e66fee3c01","ssdeep":"192:e4se1g7pyOtNk1vqtEwTgfTV2NWUu1oveyCa7c:e3Ug8OtUUyrgNWUuIef","tlshash":"ee124bd9b822c7b3795e209fd3017a735f0d9e1ca1091e9bcd41b72162771c6bca8b48","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:40.672047Z","times_seen":18,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Syscoin.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.268Z","timestamp":1782329722268,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Syscoin.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kHy8E%2FBrRzbCWys1x3jx1D6tZzP7GJoa5L7NXizVP0oHusLz%2BXv0cItpODOADyCAsZR7sW%2BIqP6JuED6iTbU5kItYIqtCPEQQbbpZLUOu615sp3pfCjU33FaMI%2Brj7f9CGmkqQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"9de-19e8af971da\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2526\r\ncf-ray: a10e2cdc2f39723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2526,"size_decoded":3509,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"2c5ae5efe5b6d318e179a42aad22afcd","sha1":"778e84375b8190d4bf13594d0eb281e897fb548f","sha256":"2552974c52f98131194d2315c9d733a7824909f2d11b745730f609fd1feee4c9","sha512":"bc3ed626c7a99268a2f9b2fcb0f27b7f3b95b7381bdcf4c51756633329f5d1e82e65c5d6876f42c5a2102e3f5fcc8fac34fbac40a4bd6639c2e1c1b1faaa2f87","ssdeep":"","tlshash":"bc514db60fc349254d39216ec1d58dfd583100674767ab819f50a3705d4259276febf4","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-06-29T07:04:40.75467Z","times_seen":17,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Crypto_com_DeFi_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.270Z","timestamp":1782329720270,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Crypto_com_DeFi_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KCGjdnn3A1IVT87F6NiDrDfYfXC%2BkGXqqy%2F2tJzmdiq%2BD0lO4ucu%2F7lLkhchdxmBRI4FhAZ8%2FsL4hjzsWK3pT8bT9MCSw4Xl88FMOEsEPmHQnMr4VFw1RVLk5KtCkupgT0xncQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"d853-19e8af9735a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 55379\r\ncf-ray: a10e2ccfb9d5723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":55379,"size_decoded":56366,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"95a182c40be92e7dba1efb0f331c7c15","sha1":"28f0d3bffa82c3acf9aaf6e6e89414ce9167edaa","sha256":"b34964d059f027b2606637c93829819000981d914f9c0e6bac4dde93444ffd2e","sha512":"5b170b97ddece235713b09575112b709ce18eb2e86b293556bc93db3f18ac67ca28afa7894573bd3b819db726aa3588133e22e663d841f1ea2abc3f5869e8b9e","ssdeep":"1536:4VSs+1Ny4z7dEKaGrwby+G4OYjmcwogL7Hg6Y1OArtRX:8Ss+i4H5wbtOYSy7MsX","tlshash":"45430126f680ecd681315462dd095046eff0b43c9a54514f87a7903e2eaab84ed9bf3f","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-07-21T05:16:19.657663Z","times_seen":175,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Uniblow.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.769Z","timestamp":1782329720769,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Uniblow.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2irwBrR0NelcZFocd4W3IPCAk0lYaZZSznj%2FfPNnn0hs1T6cHpQ5fEGKm9TRXXdVWm9vx%2B6jHToTKP9haTTN3Vy1ctGpr8ll%2BMvUtZ4elJ546H99gI3alHgIutvYZdnG55YJ3A%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"40b5-19e8af973de\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 16565\r\ncf-ray: a10e2cd2ca96723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":16565,"size_decoded":17548,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"7c914facd91034e56d14a461c46b63d3","sha1":"6208257939b39707644deb1486e67d9bb2a6abf2","sha256":"54f2c11d6f2794fa84804e95129b590537e0cc3ff5d061248064e9b3a01e1aa4","sha512":"3fc39a3b5a923da4e7f043405052c98d39741a30c3941fe3ffc37e1c940ba3351c81d2b763a92e4c1abd009f8132fc00932051784d4becf2f56e3ae12069897d","ssdeep":"384:BhOMPMGvO05PCJkQFBSpDC518cZ3nKWWf/QuBiGgCI7iztj1:fOqMGbCD7518y3KZfYSXtztj1","tlshash":"d872cf987c4815f806696dcb2390d235e2136c0566dd2b85f998b10267fa7d8efcd31a","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:40.795067Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Tholos.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.957Z","timestamp":1782329720957,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Tholos.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LZxZqvsOvnAI2LsCA98DPa7XnM%2Fs4No8pfiCrU4dZ5y5Tuoh%2FTqyVjqohE%2FwoGs9PKfq6BPsqwYee%2Fvx%2FcXBLZ2eAXYJZvo1CTJSOYbVPvIDQ1uIQ3dXZVUDr4ruHu62S5oyiQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1ea3-19e8af973d2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 7843\r\ncf-ray: a10e2cd3fb21723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7843,"size_decoded":8829,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"963e5756730e96fe22b4882ca278e4a9","sha1":"ed1bcf1defcd6f8ae29ebc19d230146d5bb03fbd","sha256":"d9d5e6e9a48b4fb9276ecf22bd79b7445b73ebc4f77d4d1ff5d876bebd6c9d9c","sha512":"7297ce5c72cf471bb08b1b990d168476428d7d85637f7777a1147bb5537ff1c1187a0a8b5c4b1b7129a2b711817487a0d20f2a502efb1f611ee87f15fde742be","ssdeep":"192:yAJOuRq25T/QH+NjuLDXCBy1e1ot98HQSpDtKZo:yQbw2tpqLmBy1eAuDUO","tlshash":"15f19fedd1a3b26044a7006048bd5989def7e72974a7056a0646f52fcaa73ca8c87913","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-08-04T05:59:26.02576Z","times_seen":37,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/atato_custody.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.040Z","timestamp":1782329721040,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/atato_custody.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=te2OwhREOqP%2FCE8z54%2F5wlCSNWH5hIZ2rKNplUr%2Fq9jnWJn0yE%2FX1GWKhr7988GlRD5JJ4WhQ3gRKusWeZ2J%2B%2BkkjfpSrhKqAd4kJgiOc%2F4rhEKhp44fRVYdO1bFxAujUXqGeQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1d86-19e8af97336\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 7558\r\ncf-ray: a10e2cd48b6f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":7558,"size_decoded":8548,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"3acc6df8ddaf0f7333729efc9e9028f6","sha1":"653946642e1020fdac23d7ac4863d2134eeda2cf","sha256":"0e4b118c319d119ac58a17136e8e7a22bfec2e034275e0a0f261609a96a2c23c","sha512":"525c1803a79b1a7975d03ac025190c9a662e710d848749d26ec1bd8f7c59cddf537d88d4f15392e985c542193daf748f41286848c6716765cbf8f1924ab9923f","ssdeep":"192:IazjGMzMoYmdbDzEADnpOaaY9xRajdUZ3s271gcSX:vApmppOMRIzX","tlshash":"2df17de11ca9245d8a0a3b1959b938d4d802de87f83a6c78cd15489d78c733f0fcab5e","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.673894Z","times_seen":20,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Quick_Intel.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.307Z","timestamp":1782329721307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Quick_Intel.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FLoV8P5kJocFlTTd2JAS6itthJF%2BE5ADDYmOioX0TKfTeHuRTMV5vfN6Pmz4n3w0Auo%2FX8HU99xmKPzMBgbBs5JVzLNav5eX4jG3EMDe16%2BpUDb0bimP8bE67Sof2ptga4BeLg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2368-19e8af972c2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9064\r\ncf-ray: a10e2cd62c64723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9064,"size_decoded":10048,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"c66f4d4080e78a0c7f28429477380768","sha1":"6cd131fb3adea36e97e16e51a9417059e367f4e7","sha256":"6c5148eac2beb5a917458b7779a43e20084a01389c17183e23033bd58ee39414","sha512":"dc3343af0f4dffef404cc4e6bf0651f51fb66b249848ef04bee483cdd14322d6047bd813a3f4a98171845080a03669df32ae6befba94a3ca68b4035dabd7999a","ssdeep":"192:a67oGD7iUOSMlVtf/RJReet0qSiF8668Q0qn0pjhSc:FouiUO59degSEQN6Mc","tlshash":"d312af4907e7885bfb7d1a5205006670242e80374497ba0736bdb9f07c7e937dc9caa8","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.709077Z","times_seen":19,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/NativeX.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.721Z","timestamp":1782329721721,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/NativeX.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=61Taf5AKeB%2F08NHX5f%2Fd3brVTl1WUG7glwulR7KWqhB7Z00Js4GNZRQpc3qHQKUss3j0wA4d8L3T8aEcH4VXUnoYi2jFZJ3lzvoNgdveG4qMpiTNTbp9uNtkzFvG5FQHYqIgaA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2594-19e8af9728a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9620\r\ncf-ray: a10e2cd8cd5c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":9620,"size_decoded":10600,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"9c1bb3f1d040192188ed3e192d1e9db0","sha1":"7d993b1bbaa6fc1e0a69a511dab4e545d470a5ab","sha256":"b12bad73c5f2c4bcd954f14e16ccd8a4d902c1120403869a55eebf65f5afc6cf","sha512":"dba5de054480292d9feedf254fd019aac3a39e9876618aa25748c9e8abb9921bb30267c73de370cb64141cf34f8c9887573d2bc4abdd18c1e4380a5bc4769eaa","ssdeep":"192:1MvbSUVRSd72qPRFJMVj8bLkHnnfgvamxel9g0QSYLvTc6veTk4Rz/:0Sd79RFJRb4+amxkg0QRTc6vSkm/","tlshash":"a612af497b8b6cd4f78922b180dd3294f2ad1507e28dc78dc2a2703e25bc1674f12d64","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:40.720643Z","times_seen":18,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Sound_xyz.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.834Z","timestamp":1782329721834,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Sound_xyz.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jybPN5lfRQNmixjr68d1UFqzYw9DUHSmESV1nIUPW8yfU28gLhOZ0WGvgGeLTSL%2F7Ky975RXr9aqO3PK1x1XksUwe%2BVW6EpYoLEvcjiNzfhV9iVPQjyb16nyNpaMzbRRp3AHSg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"12eb-19e8af972da\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4843\r\ncf-ray: a10e2cd97da9723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4843,"size_decoded":5823,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"675709629ea7d9ad231545110fd87100","sha1":"35c4f9046bb013ddf3111fab08bbf5d0ca125598","sha256":"c36f44ce21d7f6abae9cd3ee092f03365efcf55ea941bb24e18b6ebd6e434618","sha512":"de664f4665017fd04398add2db46b31b3b26d9ceb450a1c56dff5d5a229d3676b2372a887c0dca0f02fdff61d8cc8a779c1708e57cd3c0a311036469567b1641","ssdeep":"96:Sy6z+UxlQAo81J7PIn46aK5YUoRhEbanVjYQ:SyKc8vTKCUoRyenVjYQ","tlshash":"e0a1f6ef92313f584581ecd857f1a64b9da14415addcbb00f2de0d9808622d7e147b1d","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:41.046448Z","times_seen":18,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/bitcashout.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.915Z","timestamp":1782329721915,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/bitcashout.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B8piHNDbexYoDYgQLw8%2BUSwfYRKcVVyFcph5lvfSr9X8bzIkVLGHrjUOvdIFnvuAQoyje68nHvSkJZ9rCZIRU7MO78rXynHLicjak4zVS4xg2%2FjZkpSXVyOol4oAXBXkfPT%2Bdg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"5dc7-19e8af971fe\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 24007\r\ncf-ray: a10e2cd9fdf2723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":24007,"size_decoded":24992,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"324040c542def22abc2defde7f1d1a99","sha1":"09cb92bcaf5a010f7e927de0567c1f83b42c8f22","sha256":"19ec0199eda4a255fe1f375c17ccfbf86e5b1aac755760a050ccf3be0588f7c1","sha512":"3d81b592ec755ac4dd6fef4717a34153436e249c16602b34707703c3481d8fcdc24a5de9c304c202e1f1574e7497ea03e023138ae4e515a07d9ee04a68b31df2","ssdeep":"384:6tYjgBZffn+o+TAQvfuK5p0JUG2f+LqVf6MEMUr/smYtfSV7GBGOnS/pYg09Hza5:6YgBZX6AMflb0q1MjOBDSCg0RaS6qgqY","tlshash":"e7b2f182cbcc162271573019b21011b817f9bb8d7a4732ad82a6f8775e3623ef51edd2","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:40.946094Z","times_seen":17,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Sender.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.942Z","timestamp":1782329720942,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Sender.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mVsrHG0yPhVrpHg2bz72sKhwmjq6P3oFAjuzPSj1Oasp6QOpeFm%2Fq1vsLtB0VH%2F9Mxshl2oCWuS2eFZc8IIMzmxaWxllaMTtVqD%2BgzoBXdroJwyGQrJpT6mTKY3UmWuY0qjlKA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"338e-19e8af973be\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13198\r\ncf-ray: a10e2cd3eb16723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":13198,"size_decoded":14181,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"9432bc949431c98983020cfc79b1ab07","sha1":"eb2da86a347091efde3a8f01d375a2a64a92245b","sha256":"81e082e374b990f0da5b040707ef8355c253fcd1582def054868cc8d0056648d","sha512":"1df249731b8c3686bd469f2733985d57a568c9dc69d6a52dc8e3772c33d377ed81107136c176e33fe20463c8932598b1dd6ef5adc2b177b8208b3200467c7bbb","ssdeep":"384:dRzV5GXsf2PP8GEJXx/mXd2EKd9TxIr9+vc6pgNo0okR:dRPGHPBEBvEK2ovc6pgv","tlshash":"5742c0647af26314e591599277bb854001ca08dc9a3c5faca4b1bd3b0dc791693d3fca","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:40.958604Z","times_seen":20,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Halo_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.050Z","timestamp":1782329721050,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Halo_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A4mUbVcV1%2B84RNf8wmJgA4Hkzci22zL81o%2FMiqdRiGOjGdNdK8jckVo5gaqaahv50PBjB3hSnCEUUUIVEyjNR4%2Fa2qZYc%2FewC%2BImfKzG67EZlQledKuYa2qaDBOf6d9YIUcU0g%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1847-19e8af97372\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6215\r\ncf-ray: a10e2cd49b77723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":6215,"size_decoded":7201,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"60c0a1d1554d5191a69becb0b8ba8a4f","sha1":"d073b0023fd0aa717ace90b6f1f12e41a9d3d56f","sha256":"0bc7b7cdb3a0cbfcef6ff4a3f05d9574f2fc6402591f8ac95c02ac1b2307e196","sha512":"2e6a3930ad02959b538b21a1df91ea57a2b17465bf1c3f2b9a59d59383cad6b7a1d19395470629999f6560420de795cc8a99ba16d53aee9120299c41accf9a8a","ssdeep":"96:U70MOUFr+yXgDYxm1JLMAjDq+EGON75cILrF/krLpj0FripZYItAlzuf:UkGKjYxmnVjO+0755RMrt0FmHYItezw","tlshash":"2dd19e8007a91045fb710838c6f21a88f74ac311af9dc17f46625b7ea0732a69eed28c","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.565783Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Ape_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.100Z","timestamp":1782329721100,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Ape_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f0JP1f8sy9Zm%2FVvWecQRHGg2C0UGpdXMQzKCBbzQfKzvDAA6QXZjsiFpQKAdzUkSFmOwVzBBQ4AbeUSC9llQA4gqcdFWm1BvvHspOfV%2FFctH%2F1XgAKmeymdx6BHhOnHSaxmiyA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2521-19e8af97332\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9505\r\ncf-ray: a10e2cd4eba1723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":9505,"size_decoded":10487,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"71459259ad50e1c531abd702c128cab0","sha1":"bd20222ed74efd80403d1953d9740c21ed238fa5","sha256":"c68d4810901ee2bb1487a34fac2ff4f180dbcb2b60fd5a569fb14f1f0c47e835","sha512":"98005b22a18cf8a01a726749bc7edb07e60ef939a991482790ee002a07e2055c01145bf9406bf1c649a4abbe76bb6a8f1989bd154e6dfa69ea34ab5f8fc3ef69","ssdeep":"192:IoPnvT3qJcOC2kJFzqvEZ6ZrSn0j3dHCh70nYYtjHIIiDGxmZkyjSfHW9pS:1bpOC2kJccZ6ZrC0TdHM4ZtjoIiCwKyw","tlshash":"61127cb623639ee8d4de40f547528509b4baf0b3d94b50b38c5b36a3e9dd08f253092e","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:41.263774Z","times_seen":19,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Parcel_Payroll.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.289Z","timestamp":1782329721289,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Parcel_Payroll.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SfzoepeZkqPJtK6g1Jv7LeRr3hpWPgQczA7rUtwcB8QO52aHmJOuboMTSPeDGuAheQ70jMKjlD74oMl2sJ0cOwn0jotO6qzMUTSJu12EosmN%2F90frIqMGH6C%2BP3ky3s%2B2hIibg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"a5f-19e8af9729e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2655\r\ncf-ray: a10e2cd61c58723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2655,"size_decoded":3636,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"b69a22876470b5a53a6f8179186be43f","sha1":"d0d06454dd41cd146f9d0462dddaac7b1419b85d","sha256":"1f08048ea3b9e40631df793e48bdc1cc21cb42d0ab07266f9fa164988a7142a2","sha512":"2b24b7650b90091347c775d0ea8796757a8206ad809f8bf2ddd7958aaa7f2d293380057e199361d7b841e7c755f223f824b894e9acd60f684ce1f1580155ffb7","ssdeep":"","tlshash":"6751c60a3ca4528ed67a4435a5d5b1b1f1c42192c1b19c864fb766ce64e9cd0cd8f7c5","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:40.762462Z","times_seen":19,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/ONCHAINVISION.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.983Z","timestamp":1782329721983,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/ONCHAINVISION.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LArYaTfVQhAqX%2B6hrAixi6LQBv6aLBYbYXIt8tJocXckY63jdPZ20D7d8W1EIlKvHFG1%2F7XAZTkFhj9BMiRtPooLKiJcPfYgkt3T5LSM%2Brhu%2BRVPDq0IbzzYgbZkVoZrKJ9rHw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"7c48-19e8af97292\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 31816\r\ncf-ray: a10e2cda6e54723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31816,"size_decoded":32801,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"94a017cbc1672fa8e5fbe81ebcc4aa73","sha1":"d7497c18f98217b33df9e7b1e2ef3ff293268c28","sha256":"014c7361413a7d1e24dc8bd34123825b9aedcaea55cae4f7fb764ad1c8dee948","sha512":"27774ac621a90cf11a84db9a05f0e2f7f276e94f1d80504748ff4b6007bfd2584e13cf4c5bff46ce2f2823e66797741b1e72ed5655668e373ef7f08b098e50eb","ssdeep":"768:88qRkxBxrRZWAUbIHoYXSFDB63ArTPQpo1EPN9H7wfj:8tkxBx3WVIEFDB6ozio1UNlOj","tlshash":"b7e2f2afcb119e648517420b88dcc9bff2d8655c3f549f1fb2a494a053a538631c492f","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:40.905222Z","times_seen":17,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/CoinFactory.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.005Z","timestamp":1782329722005,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/CoinFactory.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=keEBOffGWD4fxzClk87GWGbv3P9Vk%2BXUXvHgo1lNsVnDWu1ZiUsuh8qjhYlCMngR5ehkdvq2nRrbTSh3%2B90%2FfBxwXo%2FIjJ9OaPzrktSrri20dhly%2FwZNJHVkXwVXNf41JkDcAg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"195f-19e8af97212\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6495\r\ncf-ray: a10e2cda8e63723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6495,"size_decoded":7481,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"b21560cc6221370d936fb403372ca9c9","sha1":"7b5dfae1fc1c7ca4292548918dae00ba2a6f3283","sha256":"8c659adb60b63b75853cd5f22dbed63e2300aadf63f26f074eb1ebfd7e221223","sha512":"deec8fb9bf53a38f9d5fc054c423a48b6f730b2dac442f01a9f2afc7c126b7b030ae9f82e82dbf3ef76a47935e124c2cd61594cf29f712a0892fd7ac9abb55a3","ssdeep":"192:tAYYI4fCjc9QAJpxaHEJfmHwjDEVudWYKL78Mu:SYYtmAZakHjA8WJ8","tlshash":"38d17ecb5369ddd3e563711bad26040a4d6b8f21c601417f9802ac27a4f7a35e92a861","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:40.767706Z","times_seen":17,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/p256.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.007Z","timestamp":1782329722007,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/p256.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gynsp%2BPNtm9OWQyZQpDN4ZzsvpfayKY6Ij74Dx0x7IdnCIJZCsBIzMlcLk%2BKbseujY9A94Lzza155reFuxvGRbk7gHbht4JrH4yRhpWH70eekORioLKXSY2DmEmTk82vEOwT4w%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"139e-19e8af97296\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5022\r\ncf-ray: a10e2cda8e65723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":5022,"size_decoded":6002,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"bc10a10c33b8c2a971c5aa85c5068aea","sha1":"59bc63f9f1c24b74c06d42a4214eaa23abd41c56","sha256":"f176ffc2512956c6d1d3f7fdda81b2b92cae984195100ced5181eee6e86c2cf4","sha512":"c0a62fe109a43a0a27672f8133ad11e0f48b271a9b98f313b073c4388008e605bfe2aef208c47fed888083c15d350c24f7d5ff11a7406fce9291fd01dc4c5147","ssdeep":"96:o4UPGGGGGGGGGGGGGGGY5qUeS+hrgtoqurhPZAWivHmkpgXXCIhMmW11wE0XRoxz:pSGGGGGGGGGGGGGGGY5q1SGrg4rhZAPN","tlshash":"4ba1b851c3f8977df9a0297fa81ba57a31540b864c6213ab42e40efe837df592d404b3","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:41.232754Z","times_seen":18,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Terra.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.318Z","timestamp":1782329722318,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Terra.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4IhJ3kczC9mMqod%2FYzjbi2puiSitgT3yM7%2Bpb9r77oqARBCLxEDY3X%2BWDX2EE7LwwH2rlUNRRwEKBQpMVbcgetzo2Sp4B1CeVAyXRPu%2B6p19lxo8fe9C0DazYN4Qoi3kOHmMAw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"f49-19e8af971da\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3913\r\ncf-ray: a10e2cdc7f63723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3913,"size_decoded":4896,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"94c0d0c293269f33e1dc6485d89c5470","sha1":"a3c5787cbbc9df31520764c84c77220268aa544b","sha256":"31f537305de3186abb3d416df957f61f4e547e7ebe31ae1f8c1bb9cbc57f6dd0","sha512":"8b41ae923365ffb0410e406ca9145649eba7b201542cc9969f562307219616bcb67cf64c0cc813dd860b9669763c3d86cc2290443ad2b30b6bd6d71d3c6246ba","ssdeep":"","tlshash":"82815cdc2b80106bcca69f856d59703f0cee285cde546c5e02b475537926ca98c3a0b3","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-08-04T05:59:25.929759Z","times_seen":34,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Argent.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.260Z","timestamp":1782329720260,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Argent.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DXwUlx2HnfKr3ttBPs0I6V69ral7i9Lb7573ly3eF8CAQmNy82zcSjjcYeqXCafQdqqrcjCipT5rM65efKULOi6%2FgenLDuBlr4YzOu%2Fj4eXlPWE03AtDGvD%2FL2vwlWBPq9j%2Fkw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"14e7-19e8af97332\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5351\r\ncf-ray: a10e2ccfa9d1723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5351,"size_decoded":6335,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"3fe701c521defc046ef607ab77209445","sha1":"7a9e1851c3889c32cb34b1227d11bde27bbc07e9","sha256":"29a65b00cf3e3cc4297a510292c828c0c6a471c578a3296b946cf76fbd25022a","sha512":"001a76a767175107f7f2193788c9534332f0d38e9f2ccd127abace79d5763a769f1fb3cc7918c1647266c739217f8f5660a83778543f9a8ada27b4ca1be2d007","ssdeep":"96:ii99OP2A+3FtPQSjz11cnPqjAbTZMuru/QosY1:ii+P2NPPjz1u5PZ7vY1","tlshash":"f9b13be762119a28f668473f2697e000fc1053dae6f15b6545260eeefb368de1e13d31","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-07-21T05:16:19.682862Z","times_seen":175,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/OzoneWallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.996Z","timestamp":1782329720996,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/OzoneWallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xw4C8ZJcNPZ%2BgUUESfhGY0r8BgxhUU%2Buz5cEEd09o62gl%2F%2FhPfM81KLXx7rU7TXZMycQnySOAN4zgBMTvsHrIQlNT9IcIqdJXGKa9XcWZPW1%2B9GlLgXIhNjWvfO1%2BhwGfGnjBg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1d14-19e8af973a6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 7444\r\ncf-ray: a10e2cd43b48723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7444,"size_decoded":8432,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"b331db147ab3a4333d119afd44c4e450","sha1":"3402758ec59578a8a7211df21861d5079204d5c2","sha256":"a751375b554e6bd5e12cb1c00c5b1a7cec40ef50b5f9e2d6ba190e6910dc628a","sha512":"7e0b21fb76975491690ea3dd12c0b08ac40e8bcf5a2d86cf76a95318cf9be3be238a5f7968e1f9ed8f7937cf9af6876ef8d9f65b2e91866388fc01dfb7f5009f","ssdeep":"192:njYku3EouNHawffffffffIU9YFNv5liUaA9r8XOffffffffK+cWlU:Zu37uda1a5YQXWU","tlshash":"a9e18e445bc60b015ccaf2f0f2316563763b6239df060931c70b327ae6de13d2a1ba26","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.646143Z","times_seen":20,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/TEXAN.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.243Z","timestamp":1782329721243,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/TEXAN.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H3go7qK0zoZM%2BM7O41kHwLa9yX75WhFNTZv8fqHBVizNyGZ2RF4DkMzoOR0l8E%2FVvAzvcFyRyzFtWb5%2BnkbmpAKsNC9gj7zf4EiB%2F%2BgVJTKZwSB805ShDRd47b85ccuuM4mS5w%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"19a6-19e8af972ea\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6566\r\ncf-ray: a10e2cd5cc27723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":6566,"size_decoded":7552,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"383025f6c4a2f7d426da49c23f19148f","sha1":"34a54b71baa30ba6bd6faa946f76bc29de799a90","sha256":"e92788bb6732620cba66c010feb925cee9470ee468db9302a0dbda175c9610f3","sha512":"db924be4dc32631ea8d5242b7d3d0b393e10983e5b9819fae2157b6d3f1b35a564cec73e819638401fd6e56d72046cb63798316f0331988f5fb1ba939ff73652","ssdeep":"96:kVrTQSBlwSrkZidcfljU8uoXjelExry0lR7N6i7yftaOHQAtIJP:gmSretI8uoXalEx1lR7/7yftaUO1","tlshash":"93d16f26d5644754129a13cf0fba71646c8f6012f936374f031dbfb16b4b3d9c5591ca","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:40.657765Z","times_seen":19,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Oryy.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.939Z","timestamp":1782329721939,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Oryy.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FnHfYSD3eLnx48bDcOv1YIZ2eg8aG2alnYn6PjCNaSMSbhjlPbeoCQH%2Fhc94sc1IasAcBp5BWN7m1T4S%2FpLmO5T18zI86j0w%2FQUCzNELumW8KJLhmBgqzDrERnBbf%2Fk%2Fi2gsMg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"9dc-19e8af97296\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2524\r\ncf-ray: a10e2cda2e1f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2524,"size_decoded":3511,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"de8ba9b9ece6915173371bc497617d5e","sha1":"8789e857ceb0f54fafaaa185a0d1aa167b11b435","sha256":"84f2013e7c9dd12b58cd0208c188b3e42f1ef19a7ea84498e96a00c7e3ed5500","sha512":"6ed12c4f5f451e2cb2079c47e04df6012a63a5f085213a7ba70ac265201044bf39be62b45591f157c935b87423594133a1979bd9befb940ec50fdcb76f93c0e3","ssdeep":"","tlshash":"4f510aee3750c435c13f86718681b15ad9851b93c7318ea2531730506c0af18c9f2997","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:41.052624Z","times_seen":17,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Scarab.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.031Z","timestamp":1782329722031,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Scarab.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NhQFelRUMwcg77%2FQxmHtXta3SgU6zFsn7Bbs9QiA5jQGHzUTyVQquWyY79e6I0V0kP%2Bp1QMFM%2F2BGvyjcKmDypugGextG9aXuJyRKlzwqRtJ8uSPtdUg1LEaNtQytVdCCvumig%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"34f8-19e8af972ce\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13560\r\ncf-ray: a10e2cdabe72723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13560,"size_decoded":14543,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"338ab285fc65ea6939de26bd7078f20b","sha1":"a98f239610bfbc1734ecc8c51d05e1da730ec22e","sha256":"31ad2a9bdb47a66de6f180909c4cf46cac09c39d480a6c0169ebc5bc2b2bbece","sha512":"7a14d13e7c5beaffe78b2d5968fec2229e6676739549a9395715c912656a0545c2165ea43a5a97ce8734f16a4f52fc25a01035482eee17b275527e26e1b6cbd3","ssdeep":"192:IQMC/DxY3oJKrUcfR4btWZWs2rP/4ktkbM7tTJiW0ZtyeDBqa9SbE9FNCQ09osE9:3GQ0R4ZRJroy0ZtKbEfNQ94N7OK","tlshash":"9752b0e1a869ae1fc484f931d37a011dfc4c030adffb5ee615702459ad5af64335b618","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:40.574155Z","times_seen":18,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Hello.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.069Z","timestamp":1782329721069,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Hello.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iI10%2FhzKa1GRo8KnEJ2ARrnEwerv7CrSBh50w%2FzD5IOMWW9O1TjH8GWty6wPPYERjs5A%2FcYPs2jdgW5LPqi5OIklDMSpo8IC%2FjMQlp%2B5LCiOdwVC5%2BmiZNZ63LNFpGFqpoEoBA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1daa-19e8af97372\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 7594\r\ncf-ray: a10e2cd4ab83723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7594,"size_decoded":8582,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit gray+alpha, non-interlaced","md5":"c85227ca6b8b2273a8b821e84ed5cf41","sha1":"4483d4e7844439541b7be5ac799bfb5d2cbaf5e6","sha256":"9f2839930488c842e84e093439fab86297d80d4de015dcd5feda3594e4ffd07d","sha512":"61133380b0505c55c3eeceb04eb654b2bfc43a7d131ee32ee302f716faa1774b6733181578251f7a0395f9cdfc2bf7117889f423387b5906f12de5eb43d05a45","ssdeep":"192:yIhnxlcBzl02o3toH2s3l8es9mWe0C8LgLo8HDoWzuG8e9hnxSOK:y2HOzG2o3I3l8Xep8LR80WLFnMd","tlshash":"f9f15c2fc568fbbd54d7af58a8cbd6610d85635f8d40496a4bf29b0a0c728ffa3424c4","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:40.902715Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Kayros.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.098Z","timestamp":1782329721098,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Kayros.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5BLSMRTBR9f2%2FnSNmhBL8X0vo7gOCrt%2BkopV1QVmW5vxyW2UdmulzZKglzCGphE4Irnt1NNngeqFriN7KVO7MtGvGa4l1lXDNwF%2BS%2FipsSp%2BsSgXNbmEMY%2BGCf2sYNa8blGWfA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1362b-19e8af9737e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 79403\r\ncf-ray: a10e2cd4db9f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79403,"size_decoded":80393,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"a3f109c59fe2fc45d44bf0af72c39284","sha1":"aff59915a26009fa08a4477591dd71ac837413c7","sha256":"e297f99f3602e6e5ff3e295ae860e3525fda595037e68c5dfe6f5a890deb51a5","sha512":"ebe305c7ba95be214ef78b4d52fd14cea94bec15fe4132c7c2a63cb12090c67a5da1ce3dc16cd4c2c8bd18affa9335eea9541572ec409f0368441e35130018ea","ssdeep":"1536:rtJkKADKA/j9P7LJqkEP9MjTABvuXgCrVLafNTC/tQZI93Ly0:rtJRiVb9PhqPijToIzONutQ2j","tlshash":"c0731255a8fa2b628c7ffada95e94356e63c50815300823f2dd2e3de98375539fb1800","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:40.874293Z","times_seen":19,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Loop2Earn.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.551Z","timestamp":1782329721551,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Loop2Earn.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oCdK2wbwnuEp9zoFsIlo0dVR3SQBoJWC0EA7yg4cOoYHBU1LZ9gQ4irgtRqPLZVqjiIkYgMi3T7%2FmRWtrZ1gh6M4oFrVv6ga9BLhS0Aj8uoifYdNHiDMhJzv0aNPV9f5zdlFDQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"13e57-19e8af97272\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 81495\r\ncf-ray: a10e2cd7bd0f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81495,"size_decoded":82475,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"ddefc80c29ba7a8df1be64a7c4d448e6","sha1":"584f178a9255900b4d98c8f86dc614dd0c1e5d4c","sha256":"9c78843be6b655a515aaae381730a8708a291e708325d3ecabe80fb19c4acc57","sha512":"d2babb2d56f624816d3349e5853bab2414d59d3f3e3e2eacd479dba4762ee1beb30e2d7a26bd75ad053ace8dcc1b383300b7ffda2648c762c9f60e6d80d2b8f6","ssdeep":"1536:jTAJtieSkrgOy13nSxLW9MD/kK2A4ihbjRCxS9+sBJhxEenpGzM:jMJFxG3y12A4ihUxSFBJz3GzM","tlshash":"ad830209ec15033a0ed7bfe3ec9c16d9b615118aa536f78a78b2ee26cd59505c3bb009","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:41.019575Z","times_seen":18,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Lens_Invites.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.579Z","timestamp":1782329721579,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Lens_Invites.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wUsyMNWfX%2BzFm9%2FOjshiSzvsdlL2TtWQThKzPaHOIJWRoFowD1yoYDKERDguokdzUnDoSC7Q3AS0%2FrUiDp8E2wdBMw8vyIoXF%2BnB3L1TEBVkptdPAhExMFczPoxk2G1N9s4yNA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"195e-19e8af9726e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6494\r\ncf-ray: a10e2cd7dd22723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":6494,"size_decoded":7478,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"90dde059fee73ca14c280f8104a8d86e","sha1":"cbdf809cff84956a0bd6e529eea418faedf07d59","sha256":"0f453dfbb6b3cad96ccb9021ec529e92bc70e37b6daa1f04ab711f538607c8b2","sha512":"22821040b647fb14bf7c9da8fdca67a036c0a1ed8f9f587f57b81c98ee2ea526beaa68df2a870d14d752ea3e0545c798e09e078b8cde78ac039f59d534067684","ssdeep":"96:+qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqz:ENdtokPLkNzFzv16EshUrj1WAJ8Stql","tlshash":"2ad15c45fdbc546ed88b802d0f5dc55b88e808aa412dc2a8acd3763b67af55bccd8076","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:40.748058Z","times_seen":18,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/tenset_web3.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.661Z","timestamp":1782329721661,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/tenset_web3.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wNUOWrXWXjF50NBRFiG9HI9fZtp%2FJXOIyM6QU6PDsQ%2FsG2TbSywnTxdaxPkAk2oH%2FZu1m12gxV6vSviNpbkYDrQXsQujJouneXRukJHrpuEmmXxJE0KG2cDkpx1R%2B9xX6e%2FDLw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"9e1-19e8af972ea\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2529\r\ncf-ray: a10e2cd87d45723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2529,"size_decoded":3514,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"28cf9de00ace796b9631918e0faec8d6","sha1":"fe5ffdba98ee5e0f4d364c530e3663c62495ada9","sha256":"6019cf095a089e2cad890879e5ddf146a83d789d2483016f74bf7f76bb1b1ac8","sha512":"621af528cb13901143b127158f70a3964de035fc8f1f55b699a594c25e4827f68992ef073ea24feae7267f1318adb004216659ef272189ffad9230f3e0c8610d","ssdeep":"","tlshash":"a551ea8672169e58ce3d1639c7a09128ed15e612d3c9cd50073b78d52d8b941d5e70d0","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:40.608507Z","times_seen":18,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/DBot.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.097Z","timestamp":1782329722097,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/DBot.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fj0xAkmUcYO8N1vjmdwIBpvQK60DLpKK8f77s8r5bMZWkTIY5mN9Ezc8HsU7XrL72bLYgy23%2FgM9gsKpPcgdORuOsi3sjSkfjI03ebOd5LQ%2BlsaJpYHJWj3tSDV2lkoSig6lcA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"17d6-19e8af9721e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6102\r\ncf-ray: a10e2cdb1eab723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6102,"size_decoded":7082,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit gray+alpha, non-interlaced","md5":"4273851aaf0e27f5032f69170a9b3c0a","sha1":"0200616653bce77fe3148d3ff40ee2a300df9181","sha256":"569008a3964be8fbc57d45de92b2116686cb9bf9dfb6e24dd862debe01699e0e","sha512":"80a0abb6d40d02d8a05cb7ce05cde3a0a21b2cb504f3b6e911b5a5bc7d2e54134208f2539ef219a50ea804310d3f43074d092136674dce447f1c0e9737dc56f3","ssdeep":"96:gs7ePnj3elF9U/5W2Dnw7y3uaIIS0LAKve1yTCqz/WrPcIPPZmEx1Pkvi:gs7ePSle5WOwC4IFUKm1dqbWrEIPAQPD","tlshash":"64c11847cb19373fcb9b1c4987bf09165be06c8f95709d278fda8881102b96266770de","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:40.589413Z","times_seen":17,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/app.js","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.154Z","timestamp":1782329720154,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /app.js HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1192-19e8af973f2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 1671\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aa1YE%2BkAkD%2BiyQTx18AJuMK8%2FGgw2EA%2FgM5Kklk2%2BThw%2FYpooOv%2BDZZKX6JhA%2F1lSPsZdZcsS0JkTKVlCXgfg8x%2B3BMnRJhMPgWn9GbbRDOApTRnpYZYTdyiOQLmoy7CgRsUMQ%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a10e2ccf09b0723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":4498,"size_decoded":2459,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text","md5":"fefc4b11785d4367d35ebc1195c7b18f","sha1":"98dd7b05425a7cc674cd893b8704630a59d36200","sha256":"f3dbb6366136dcc3e29087c809b5be86bdb26cc39ccf313a0b0921643475b0d6","sha512":"86d5ea886df4191a073dd3a7c1cc15c4fa50b4e8b38ac9b7768f51e6867ca94b5e34386de8458c7a81f4cb9d0599c038d10abb74c5aab206b04bd9145c6af9df","ssdeep":"96:plAvL4WmYbt/mz0IH8nytlkCN61Til65zdi775zJAiN+GvSC0EX9Bzd4NMt25hA:plAvL2impYhiAZdi77ZJVN+Gv/9Bzd46","tlshash":"17916551607614300a6fbed926e78667329d50177906eec03d8c41180fe7ba5cafeed7","first_seen":"2026-06-24T19:08:43.057487Z","last_seen":"2026-06-24T19:36:12.665509Z","times_seen":3,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Housefly.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.538Z","timestamp":1782329721538,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Housefly.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0OITwXZgrMXnhB3whi5RVeuQl87ReswNZ4yq2fhDtlPqIDMznFMGttmK3ZFe0j79Ibec5%2ByY6S91N1qcvRq%2B9SYvzEJT25i7Gh3M6AO868Z4h7sRapsFc7nmJwPiL3vGZX%2F9%2FA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"14a7-19e8af9725a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5287\r\ncf-ray: a10e2cd79d04723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5287,"size_decoded":6271,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"0d69650577ffb51ea50d298918fb62bc","sha1":"28c38f757d7149270a2e8c27fb24868483ba6b3e","sha256":"bde9d9ff68f2ad09e144daf32bba434883b90a01cf51b53f51ab43bc80638ca2","sha512":"e1a1fea0c992aebdf631fa03f2e206b1b06fac7b4883f5a3e71a711fed9abc65489380580382a3c411d1617af8c2b4242ff25ad56b68c63b5897c409b65e6d44","ssdeep":"96:USQBpzCJIuU63KS5xxYFkcNHcivRIm4NIZJv97cyJ+80c333333333333333333D:+W866u8WcN8ivKNI1v+q","tlshash":"0fb14bb2307184f7c218f5bdde7ea51fd8210b3a8b4db27dd2860e162d08a0f57b9964","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:41.250516Z","times_seen":18,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Exodus.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.318Z","timestamp":1782329720318,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Exodus.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vmscGiVnsQnpf9pqUtSJQqg7l5aoS3Fv37np5mLnPK3cInFmuTQ7%2FTtGhNY01Xzc0CT9ZaQFnyt3lYEO1RqAqBoZuGIgdLqiefYXDU8bvl7QsFfFCq7TM1xGC3%2F3DNkTUawwog%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"51f7-19e8af97366\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 20983\r\ncf-ray: a10e2ccff9eb723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20983,"size_decoded":21964,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"01d3635baf1954f7d844289df2aed368","sha1":"c825f5ba18a1b388f1cb0c35d455c4b27b7e906c","sha256":"e9cee107605ed19417ab49051c9e64043e72e1269eb8677d2e9fbac4608a2b96","sha512":"e1c13f6fe38a57a736debc04f345dedcbe3dfb69275a32e84bd99334e61c4c7e346a0f5fdb5807fed294e55dbd22fcdf6b55ca1060b393a5256e1cbfd9f364a9","ssdeep":"384:8Its077WIm2gVRrNeJnokrgsjmHxCNq8xY+klISSTJdwTaojgBZR9vsXlx:dssA2gXrmnOEmHxB8xYf8TJdwm3BJvsD","tlshash":"3a92e152b95cef718a2b42df0c09e846679c08aab43ba7f073125c52fe361850f12db8","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-08-04T05:59:25.939103Z","times_seen":37,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/OneKey.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.931Z","timestamp":1782329720931,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/OneKey.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z1ZzFdQI1Ul2Ez3i%2BdmEQFjt7I2GSvHI%2BhfwZZvvIZ8qY6p5GjzC7M%2B0vsVQKNhYW3xnCe33SpT1QqqtIsRSlf6oUnVzYoH%2FDW6uRItrqYwzG1tf4Zs9P7lvG5Dfy8lo1oTQsg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1d95-19e8af973a2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 7573\r\ncf-ray: a10e2cd3db05723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7573,"size_decoded":8557,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"ab86a37bfb4f8d3e886cee043922b717","sha1":"23f9dddf063b97bff37bb4b3ecd472826d75de3f","sha256":"e9dd1db798f2933e59cb2371f17e4d95d3ac28870b27ba9cc8720f84ea925c1c","sha512":"a04b8428116c6d7ca37d55e1beea896f2f588ce69b5d47abe8b32c4834324fef84a02ce459cbbeb472c9e41eb1e390c284b102aad69d8ecc8d82a9d57017e8d3","ssdeep":"192:PgqkPejwQiXM/J3ez6LDUeyrnlKHZcRGZItVLVRFOqhSJ+8A:fD0M/J+6vEoZqVRFhoA","tlshash":"54f16ca527c94981fa2e9913f139fb6c6cf508e3b5da118768c2c9518ffec1239c984d","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:40.983154Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Toric_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.209Z","timestamp":1782329721209,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Toric_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2B2E2D6FJALEUullQiGgR7GT%2Fne6VQRter7KKO%2FZn16iVdlycx%2BarDex4KkmCKjVUw8qWaEvASkKKCPuML1xPaG090GhBlLsAW3HBk9kxb6aFiYmg3Dp5878orQmdtVGDYFLFA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3641-19e8af973da\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13889\r\ncf-ray: a10e2cd58c0a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":13889,"size_decoded":14874,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"f3b724a0890571bf198afe4f8ce25af2","sha1":"d95f99be23ca3a0fd9c1b629a049bc0e81b1d7d0","sha256":"d1aa69967b18c4171e0659a5ddc14360503966fbd0c4e3cf09b13f892df8a11a","sha512":"3870ec2b65883224f03c651bcadd2d1ef643c8566b6735293855bebe72c55f1f69d22a40d2361d198d796a704d8a8c505a04dce5ccfb92e52daedaac1a04f81e","ssdeep":"384:bTamgXCILXhHjioLsuQpUzS6GplqmXweFc+OQeGh:bYXhXNQ6FGjqmXVJR","tlshash":"c552cf7ab9b4fa00a073c9e1d3cb951e1f9496dbac4a424cdace0073429c13766ea4c7","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-08-04T05:59:25.928749Z","times_seen":36,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Mauve.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.908Z","timestamp":1782329721908,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Mauve.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tLCB4Y3OCmPtyLfSDhI%2FGQaUCdLhEuVlm0dnpKAxCY3GwXGSeefxe2rtJmKX8oOCI78qJVEaurLrn4Vaf3e7Ze0qMkdIUHvqkTQ3MTUPR0V6hkhKtaWRtCYN7%2Fapc9b%2FwS1kjw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1114-19e8af9727a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4372\r\ncf-ray: a10e2cd9ede2723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":4372,"size_decoded":5354,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"811fd3e40337151d5d40d3cbeda3a349","sha1":"1fe31583c9f1882e280000b6e1d7b37f1adec730","sha256":"b7bbc863442760fd7f61492c010fe5ffbe2f98df3d9ed236474630f2b257da25","sha512":"72a7cdd4cffe93c9898de24317c33599eae590ca52cad8f4e06b64164fe9b98a1ab23a89f9c6a8e6f7b0ec880c93322bee2086aeae2e3a5103c73d8cbf295ecb","ssdeep":"96:eTZox1tWkljFwSPrJKl0SNJDYKXx9vk08kFdREUKsm/0jm:elOtWk1CIJKl0STD/k3ktbusm","tlshash":"4d915c833fef6c6dc5201141a4b1e5af6172b8b5a3d22d7c212322c24d9c5711b96fbc","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:40.811914Z","times_seen":17,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Oxalus_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.565Z","timestamp":1782329720565,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Oxalus_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SpAtUJzwq7atMC7i67Iu7FGRUarevD70wKivyPW5U1BRIOq98qtEGSmOjI82tOX5V4sqZqSze9BDjySYVutgkrREoZmkIXTs9bkKlV7gqCSBBGuaMRoYz04cRRrtHvZwLVxBrw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3962-19e8af973a6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 14690\r\ncf-ray: a10e2cd18a40723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":14690,"size_decoded":15667,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"5729b0e638ee58d356afc6f7a9a883dc","sha1":"f9e520b112a73579517bc153628d40762acc5869","sha256":"178f76265432da264bfeb86f8a657fe7c83b53878caa458322495fe31ec50281","sha512":"403bb6fdfe3d13c446c184fc7806ec4519407e8ff674523b09963f9490c7dd31d872368477aad3f3d03127a5ac626ea084902e0c2b56bbd52d13fd5f5c941b10","ssdeep":"384:T+WkhQ4fkjPct6jJXFE8mVbcFfDf+ve2zH1snO8nxX5Is:TUHKPctcOVYV4raLFys","tlshash":"3762aeb9da6841e143069760d7add56ca949ba969cff2825b14321e1293ff001c7313e","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:41.11957Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/GStream.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.680Z","timestamp":1782329721680,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/GStream.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Y1dqJkQdOz34nojUDR1guQccIxE%2BfUuldJ7tt2XEO9nk30oMxexg3N9n0dFTlN5f6h0jbfVUZ0hc8%2BdlOMfeW6RT77I8ZToojDdf0ZcepTtmfiB6czvM7aFagcNpQc8Ua%2BIjg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"15ea-19e8af9724e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5610\r\ncf-ray: a10e2cd88d47723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5610,"size_decoded":6592,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"e6753df913efa2aa9e91e7f96f5b9fb1","sha1":"15f6a8318b8fdc9782b617b95cd2aaed65cd6622","sha256":"8ba659022371ac4253e5da3768d0efeb1121a1ed33dba80d58db7f399e081164","sha512":"d80d378653b6492acd726ebd850825051468781a9d388e0f080b176194f3217219d0c4f4f2d1afa875bf81ec7ddc9a30ad97bbdf84f6a85ea9ff80991c6262b8","ssdeep":"96:JLaGboPB/K7RNz23ZJ2W9qJIiSz4hOLDFKMdGy0JgU9uR68J0FKnQXP:JL5op/K6ZlqdS9RF0JgXIa0cnA","tlshash":"64c16cbe03cef0b20378f65235372faa4472c4843f5599929faa1331771b13189867ad","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:40.913651Z","times_seen":18,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Status.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.548Z","timestamp":1782329720548,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Status.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gQauTNHQq3tFfPzQF8LQS9unv1Xr8MEW4v1r0fH15OdBoSGBRTlV%2Fvg8Gbn4eTgx%2FYbyqWYCozx9y9TUO1nNozUTDTqzqNuQtbt26%2BTZAs0LgT%2Bw%2FHQYTxVD71HK3h8ct%2BqMKQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"18b5-19e8af973ca\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6325\r\ncf-ray: a10e2cd16a37723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":6325,"size_decoded":7313,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"8164dada6721aec307209016d4771393","sha1":"c49c204f3d24918fd55db0864f0c5f322c7e6d8e","sha256":"9ea1588fd5a8532cee34b52e09a0087e144f3306063e1451d4d775564270770a","sha512":"e9221530dee4ee41db366ee66c484f076c5fe76c0cf07cb24ee888d05e5e69859a306823b123a87b69e0e3db08abd4dea3c9a767477bc8c4ef6a1aeedb7f8e02","ssdeep":"192:HsSSfAHnzAcMHmAGVhYheTowvGLRfsi8uwB84:HsSXHFLuc4+i8ueJ","tlshash":"bfd17c9882ffc508899b2af0d5832e128d7b0f19cb3fed0362df042b54c917515c69ae","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:40.585085Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Wallet_3.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.925Z","timestamp":1782329720925,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Wallet_3.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vTx4g%2B5%2F63H%2B5zBDL3muZDua658w2MhkK8gHckJg2qviln7QuSa1vvuk9SZATZkFeA%2Bhe%2BjvsOI3HkUg6Qa4T2kSqYfC9oX4xnoNCLhywHarxeZ0Y9qtZ8efCUQnLiFZW7Orfg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"127d-19e8af973e6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4733\r\ncf-ray: a10e2cd3cb02723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4733,"size_decoded":5719,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"9975bb8235f33d94679ed9218be1e89e","sha1":"c1513d5e6f2f816619edfd3c57060ccf0838f8ea","sha256":"4acbc8d92873900cf5ac0ff5e6e7beeb194ff786ab8289d4431719b01dcd4a6b","sha512":"4db5828de65277deb6e341c333aa933e7b2e46e1ee4295f23f3b9913b0ae866718b7574d6575d5a32088dbe03519fbd4dedbb371180c19db11037a57655339f3","ssdeep":"96:KQjlSvYmKw623pGAgu5Jlx1GY9X+dTe+5x0s5fzEw0FWRn4ztLc:QvYmKwtYAb3x9vsFd0YsZc","tlshash":"86a13ee5bc18868c3e78777baf33c23862b95f58a5900af549d1619c73dc47c8c486d0","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:41.009635Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/SparkSwap.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.339Z","timestamp":1782329721339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/SparkSwap.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RbA0MDPn8befoUKSaupepWiRQCa3%2Frv%2BJLAqsiuikjRIEbWMWxoe6D1y%2FQxEKWzfn%2BAXnIK71d0aOQmWbi%2FcLR5GMZyEY47NyDNEAPZqAilZ2nZSKNlMdRywNUg2T3fy9Ghpjw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"28ef-19e8af972da\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10479\r\ncf-ray: a10e2cd65c80723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":10479,"size_decoded":11466,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"6f7c019cc88db5548f4df8d7d6327a4e","sha1":"5d99b7c537e4c649233ce6099c2173cc7de081cc","sha256":"a5a03fbd80bdc95851e945fb0821ac52976ccd34cf0e63a66ce8db5295da3bad","sha512":"0c0817f18d57eec9c956465bf8adb1726ce7d2a7a4962beb94ea490b2f152c05f05f86d5e916df89aaae58518b3e8d21d73ecb34cffe7d80a34e6573e2bf37ee","ssdeep":"192:m5aqK42GJvCYZJ3skYPhg09w0NSuGajjFMThLsLcSXRItGNOeMq97Nwbt:mwqNjr3sA09hS4jOsWtGpep","tlshash":"ca22ae294777b033aff980524e7f5dacfba22807b646251be70327a9426a5c6e010bd4","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.710611Z","times_seen":19,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/JumpTask.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.400Z","timestamp":1782329721400,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/JumpTask.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aJYq%2Fr%2FRG8jo59rCSVBP3fE%2FuxpSScs2Oh37XoAv1UGJpMFPMIQvZSfLWZZvVg9zq3rl0Pg6lApP%2Bic6qY2191Wg9xn8pC4chQ%2FoUP7LWXeszabVj79hlJXgch3JiRtkfKjn8Q%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"e78-19e8af97262\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3704\r\ncf-ray: a10e2cd6bcb9723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":3704,"size_decoded":4689,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"4fc022d1bb02a8bf17d70a00eddc6904","sha1":"f3a20e8f89c75bbb25c90abef70105983112d071","sha256":"32aa6ad9b719a0e181d1d60afc4f5601b2445349644bad30401096bea9ce26eb","sha512":"20549854fb6eba4f343a414b541848dddf15581c1690b8dd4cb4dc765ce6d6616f64766fa370adfc2ad7ae349d6c8387ec9e660a8f47121223db6328257a64e8","ssdeep":"","tlshash":"a1712bc6e691256fc031e1ba01b3c5f6ecba4fbb678a119246753fa159403b6c1c51e0","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:41.269121Z","times_seen":19,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/repoint.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.450Z","timestamp":1782329721450,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/repoint.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W45mNGEXtz4EEU%2FxGsLEp6UOCqjW%2FFEARTUuCcBAS%2FXF4cj5tjAZeWBsSyDnaUeS%2B92CLb%2FFKZhdesEofqO94rV04HL6GDfIBErIFdofW8JwuVScy9eeNF5JmIGMzr2P%2BkOL9g%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"17a6-19e8af972c6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6054\r\ncf-ray: a10e2cd71cd7723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6054,"size_decoded":7042,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"0c71a5eeb06484994bb6e1fdf03540e4","sha1":"b96c89d7c9da73b9cf1af034640ab5e1e8c71675","sha256":"1294fc40b4cd066f3cdad47360c174ea17e5a8a994d16cbec5154942a272d58b","sha512":"9df3234a51c0f2e62b36e008582224c48b0c1d14801bf70b6ffd7aff812329b663cdfc7b24a410fd1451e66ba49a9f9dccf371072516a98b09eb2a9ec5dde3ed","ssdeep":"96:jn62ePkQ2hBxFJUYZLDvI7UKG8UfEAWhfpQr9ktedIuJU6b:j6yLXFZLE7/hUhE1edd","tlshash":"fdc14c5fa2647393af06d246613ae87d531b5f74da55beca0e5c38b617bf0ab40880c2","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:41.033796Z","times_seen":19,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/AIPTP.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.465Z","timestamp":1782329721465,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/AIPTP.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BjzwKpDYW2Qo9lVuGI6ZqWnDFUDQiRNHTtMr2uhbaDKHrtUgUjRnrfcQeDD3%2BVhxznklIIpwUPuujn8nBPkLNJdtDfeVwSDb9mpbxoOjr%2FUuSxeTFT7MnhXW%2FT9r9gYerbmCNA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"1a9e-19e8af971e6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6814\r\ncf-ray: a10e2cd72cdc723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6814,"size_decoded":7796,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"05d6e4d450abd50f674ff3095cb7d688","sha1":"5e5f4708a15ee47f086106c62e6bff636867a711","sha256":"cf26810716ef25db7c9eefe7d29ab7a7f4c79ffac46997449d0e2778adb6c4ae","sha512":"9e35f9cb357189c8aea7ef7ab5723ae7d2bb022a5110406411a9588da3598d68efbd5128a5b369fdf8a3904617d43cb3fcf3c3d34e01897050241afb68560683","ssdeep":"192:IqO9ixkYkpzNyxo9R3HNHUfr2jBB3h5D4N:QiSYKNyxozHN0fr2bhpg","tlshash":"fee19ec277a48e74fbaeed36551dd57426361701ef1a71919991c8301a2a24fc381b78","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:41.125887Z","times_seen":19,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/KRILLER.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.524Z","timestamp":1782329721524,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/KRILLER.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vwqzVmhHvGJd1Bi%2FK67dvIlU%2BLpNm2cCvGCWx%2Fh2%2FeAX%2BOm3%2Bq%2F0umz%2FAg89KdWwohMYf7jHxXwjaR84oLRlhf%2FF2F6YaCjAmg05gstlkltXXEP5JOgO%2F8e5tK9fkAfV68tgoA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"917-19e8af97266\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2327\r\ncf-ray: a10e2cd78cfe723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2327,"size_decoded":3322,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"9259559a51d2946b00f6b6c67b592a40","sha1":"63f68050906fe3edee968cf67178571e95265207","sha256":"bc3efac3eb77ec66633c2d38b2c88bfdda6c4496dd3f918edf0b062e204534af","sha512":"e7166d4f712471d98a1c488d87f9f52d43e23f4d3e37de076b4b0603a2ad37c5d213accb4626be360485e7a137af842dd8bae0970f7eb9215fd92d68e5afad10","ssdeep":"","tlshash":"f74119f69644ab12d64cfe38d6916d80314bf5cd29a05a88dcdcb5e4c480fb63e29c85","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:41.198694Z","times_seen":18,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/MOC.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.591Z","timestamp":1782329721591,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/MOC.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WpyO9yDSeOfXwimRvWhbRdLEifZM08qbVKJSFGY5AJt1nPEzEhVkVoO92vwFu8poJYhnnG6zpdN3AKIEIY83DMRMOTeXErVi5XWqWelUddpP4h6rXwJrH1ILTxjT%2FAaHSDV%2Faw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3336-19e8af9727e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13110\r\ncf-ray: a10e2cd7fd2e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":13110,"size_decoded":14091,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"c2ba3d5b8f07b3c8b17cda7d7f24ec74","sha1":"fe6523252d5afd2a6ddb23dcb5c5ddc6c5a486f9","sha256":"b0a5b9605d471fcaab550af7d63addc257bdc0110742e59fb4d21814b7a4960d","sha512":"b7538d40ad1d09dd8d47eeaafb233bdfad41004b273524b60a224530ed404e99261f9895ce6540b4f2936bae2a0dc2d55c4f00cd2f6abc8fa9f6f2d348e52293","ssdeep":"192:1oZQj+8/7nWp0bNlrYfZqrtrSEdf/WdwYBMC1Oz8AJjxj/VOF6YMeD+451ik0j0:0g/zWKb7WZKh7WTgJl/VT7ei6n","tlshash":"5242ae77d64a49a4c607deb1d82653be08e8fc270f5c135309ffe9b36c10596a4ae2c8","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:41.111268Z","times_seen":18,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-24T19:35:13.278Z","timestamp":1782329713278,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-qaLr7hvnrLqQQnieTbZRoV' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a10e2ca3ffb4723c\", cfExtPri\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hUlvpMr%2BW21M8cO5ytmBr1DagT%2BBToUYSu0nAyDVKGwRky5UUmRe64S4JfKbIJ518olcuhpDBpW7xi%2FUAyjGZYPZ8285dqT1fUHJrI5vtkV%2Buc43zzl%2B9N1mMV3w0Ke%2F2R4xuw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 24 Jun 2026 19:35:13 GMT\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\ncf-ray: a10e2ca3ffb4723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5578,"size_decoded":5548,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5578), with no line terminators","md5":"6f32d2e216271387fc7665a54623cd63","sha1":"1bbfd095890d23feb2610789bd4f5f3c0a78f63e","sha256":"c1bbe352a8cbf43d22d978b7a69a5108c4f5c6fd6961f2f4a860a8fbcd2e3a43","sha512":"a239aaed595107f80741b36ed65c42b04695dabab4cfeb44283dc4c02af1f1afb9692f2efeb3472514ae77625696cf8ac9fb889e8f28a4307a70506625112fd8","ssdeep":"96:PNydtoXZzIEb0EaW87f4m3Mk5B8N2JiER3FzmLrhbMRBnrYzueh8Dmw:PNMtkCBAm8kPfNFzqtyBnkyEw","tlshash":"beb13aebac31a017dbf52f4a51f7f36c9210f14bbf069089e1d18aac86dcf47800a294","first_seen":"2026-06-24T19:36:12.675396Z","last_seen":"2026-06-24T19:36:12.675396Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Verso.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.464Z","timestamp":1782329720464,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Verso.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6cjpx0VpR1g48JpNCvkhBQVXBRttOh3Lq49ySDqDjr%2BDY0WtTK8cT2oi99F6b8UgpNvok8FPiMSWmiLrFK9dbsIamvEH0zWPJQUfNsY78jafXnujFV1HaO3RFyeJuGWMS7LmRg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"132f-19e8af973e2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4911\r\ncf-ray: a10e2cd0ea21723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4911,"size_decoded":5889,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"219e886ea8b819a7ad0a57817d70b9f7","sha1":"750492fb080dcd08aee53ef745ce1455d01a2cb5","sha256":"6f2c7fe87d00e01b5edccb7a5230a0bd0ded79cc5179f610944d03bffafd8add","sha512":"270b68cdc8a192296e21868f7131a80fa9ed7cf1e5370e484d9c18617767439b27355a3678703cdb6624c8eea973a8b3b06d134dfabf9c981cac61e750c9d2fd","ssdeep":"96:cZXGc+asP11CMr0iJEBv7oMLw/8c27zLRvsJatT/aeC53WoPljvcUqf5W:csXaSLCMrrJEBv7oMk/8cgxkori3Zjca","tlshash":"83a18ec043412ff6fd1e7d71512bc19974721e2571b8cc98f60034aca8737a5a81dac9","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-08-04T05:59:25.948291Z","times_seen":33,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Cosmostation.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.948Z","timestamp":1782329720948,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Cosmostation.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YEgBWhwFWbG7Liv6uavXJGfGFs4dsGtFjrVIhWaUerlZvAAmW%2FBlGxcbdmAEZce42YPdZWXYZDfXEjs5LwZVFy0PDr4MgzI4lWLRGcPunbsDetDnkRSszLZ1VUxn4RBfd1NxDQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1493-19e8af97356\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5267\r\ncf-ray: a10e2cd3eb1a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5267,"size_decoded":6245,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"f159cea5ea661c33a7bc295ed9b6a1b1","sha1":"bb07c64de482c5d97bbc1c759547b9f1d0d4f4d8","sha256":"42da4b56db22bf417896ca5e42da76e37f0564ad14d38c4f867c471df56a4870","sha512":"1b285d5854fb800c0a18a48e44d81e9742eedafb15431deb0d111d32f45e9acf742a91a11134ad78f65a30707a606821b5bf3ee7ebee0a84f694055f946a9a5b","ssdeep":"96:lCeM7tIYyINIdG9cNvHNQlWpKjR3ihq5R5/gNuQuHcO0TigV18s6b:lxMMyaNSlWwFShy5+1dygb8J","tlshash":"69b16c97381b204cf4cf1132ddd2efc0191655f3de2e1904260a9477a919f217794fa2","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:40.873345Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Bitcuit.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.185Z","timestamp":1782329721185,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Bitcuit.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z4dU5WeXV3pp7w9eQfMGmEj%2BS7r%2FEIvzYhfiNxM8b8PgINUvNl6Ijg9Qb30ImljKGr9WB%2FNO%2BAudc4EK847DnPl48K%2F3dK3oRu10v%2FRiA4WKK4RUvtjoxmUl%2F5E7WLeyhcdXIg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"c66d-19e8af9733e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 50797\r\ncf-ray: a10e2cd56bf3723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50797,"size_decoded":51788,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"3fd24e0264dc47a045f88da3fffa8dda","sha1":"e1080e8c31cc80b43e24374cd6bddd660a560d1d","sha256":"956ee5755461899e21656d0cb83d9d1cc959d914dd583df5cd5d462d0617224d","sha512":"d0765fe83455de2358f4f1f1a0ec3aa791711b3577f8d9a912d44d337775d26836390ea2f8e26a496d157450b48f44546a4a4f68b4a3d50bffccdcfb33d3b54b","ssdeep":"768:xXAlWuQQ0ferlzJX13tC9njEKRIl8UDo/U44+h3VLs3ytCdyjWxzHF9:LuQQ0e9X13tWjEKR644Ss3ytCdl9","tlshash":"fc33f2b4f5b059cceb08252da775e12b72ed378163cc831ab99fdc6f8a7094024e45e9","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:41.032143Z","times_seen":20,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/NEOPIN.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.225Z","timestamp":1782329721225,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/NEOPIN.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O9zRZpYhkhdLlpM0IpqaV425F%2FYOHt1IkPxvIpz%2F6edVLzOklMPuP8NeMZHd0Tos6EMWpyLsOBlnBHCvQ0KW6fZaAz7NgIHy8VGyDbuqYJeYB8fTgvOu444wdJW7rqYVEEz7Yw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1907-19e8af9739a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6407\r\ncf-ray: a10e2cd5ac17723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6407,"size_decoded":7387,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"8106dfe0f8ca0990714ac1291a2c53de","sha1":"c869d8e5a88fcd2cec9cdf0e8bc0422ba13e7f20","sha256":"0b7a491d9d1a649bfc18ac932085132bc400c2ffe42d4086128a73929da13df2","sha512":"e7bdf89fa5714c0ca4397766f023b848e7cc5b56da93dbeec50cd21efb8984e1784f53d24f8b6e9f306dd91c2cd54d4a7b47d61c36c40c1b50e851999d913c22","ssdeep":"192:iZ6DaFxoO9C4PjABmscPB0czXrLMjEiGomUb:iZ6DB4PsBmsQB0qHZymUb","tlshash":"62d16df2f509657a2bfc0b31cca6b53a4d4183884a6d0b7e0a259cb2b5b73905dd73d8","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:40.600732Z","times_seen":19,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/uaht_io.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.496Z","timestamp":1782329721496,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/uaht_io.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jSrexMky4Phf4cf0oyrmkKJRz%2BF9PFy9bWKe1AMpuKaRjztA67M7bz9DRIbzposgeN6dBJf8bdYFed2YmUetF%2BGJUyBHNd7DCwJM%2BEj1MLAK5AFF6eGn7fGwWnZ%2BPdj%2Bgwp3IA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"998c-19e8af972f6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 39308\r\ncf-ray: a10e2cd75cec723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39308,"size_decoded":40295,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"16a1590f6b4e83e0515cd376bca54772","sha1":"c5080b1ad8b3ac37881053cb8b9acfcd54928414","sha256":"9c764e5744e7a3ef72a209bf2f94e4fb7b367b34a4441f0aa39195882bb13525","sha512":"7995e49930ca2978911534d3610928bec47efa25e4adca55c34ff7e0a68aff79a7f55da88f5f7f8ac1333943f030c562134c2960aa918cd57700be61aa59e01f","ssdeep":"768:DEXkF9YSYwbbi8M3gp+9mVjOA7RVVn7AHXRoTrFEbs/81R/9RG5y3M9H9ly:649zb6gp4mVjTVx0GrabsKjRqy3MV9I","tlshash":"8403f1a7e1474abb364fc012440aa3557ce2ddc1e89ea92d7a30ff306c7931d5ca5125","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:40.697633Z","times_seen":18,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Near.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.230Z","timestamp":1782329722230,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Near.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Kf0oj1KLRNk5Ulfaj1YsipTc6%2B5RMISlxRdrJYLnuJYo5aoh1Yivw9Z%2FxJ%2F3r%2BJR1sjU6BP0NFo4wHqANgmg86Wbjgweq%2BJgIeXMEnFtkGWvSLgYVprMo8BCkuYya8YSLnu8Q%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"649-19e8af971d2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 1609\r\ncf-ray: a10e2cdbff1f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1609,"size_decoded":2594,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"c51ef1e457b52fada64ce3c23703be5a","sha1":"bff531959fa01d11fbb7056b5e0dff470e67a59c","sha256":"8fa671dc39412ef1ab63589d461b2db4078ae972a31405034aca2d54b36ee1be","sha512":"030918b60ac41fb63045cec7592a0858afe60b50719cb59189aae015fa609d5098fa721279bf595b2164bd2f119d0b99f72dbe63c820a6020506270dbe142979","ssdeep":"","tlshash":"9e31ea8c1d8069ae12636042daaa003df8f95136b412d5d35bd07b008f2ae6ecba95a9","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-06-29T07:04:40.730947Z","times_seen":17,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Xcapit.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.686Z","timestamp":1782329720686,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Xcapit.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qWVCNhcBqnoLC0oplBkpuqXUL6%2BcS7KCDy4cAPQNVInXFx0omskgkS4ocaeX%2B0MEDybi1pegveqF4wkKtJct0gOWCRo4CNBwASzw1IZQLGynOqurf8QJVxcvwpQnKTvrQpu2pg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"f37-19e8af973e6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3895\r\ncf-ray: a10e2cd24a6e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":3895,"size_decoded":4874,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"c80b1aa970a9607830e36f3612d1a527","sha1":"40ce369afa416b54812cb279cc5f0feceeb8e908","sha256":"e9e218641ab6a2a24326c4075e579145b78da44dc20c333041d52cb228478ccc","sha512":"b1eee380c8a08e9b34c716f011046d4e36fb9ce4840df728054cf5daad35497abb66d48e5d1d88a9513a6320093d922cb7c3b6326c96260079dbb366357055fd","ssdeep":"","tlshash":"66814ca24a2015f6554f9019536d77ad375637e5fb53083009b5c85a0bbefbd4c11b31","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:41.061803Z","times_seen":20,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/FoxWallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.975Z","timestamp":1782329720975,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/FoxWallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H3Si9wBsqEWE7IgBNq76hu%2B0JkQAgApvd%2BQPtxcND%2B6ADm3eeYuWqG0GNo3ZrMvaqwTWcTPHpTPZKE40KDXNRd4NqSDgDcCSN8yI%2Fmpv9n5LyA3XluJxqlWvH0%2BTNvDWpqioOw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3096-19e8af9736a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12438\r\ncf-ray: a10e2cd41b30723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":12438,"size_decoded":13425,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"9a05ad2ffe8b8597b2bc56451087b1c3","sha1":"c3944379a534485b471f09d24745ea133564bbf1","sha256":"ae5a2e23ab18371e148fad19c38005fca45b4d99afdf336538ff4a99442ecc3f","sha512":"aa10f3e16ebb4b1d99360c3ffc7fb04eff2c43be395354b8fd84b9eabb186f5989130e581d42ba76895b64ca390639717bcd7156bafd555711c5dbb8c3216c49","ssdeep":"384:phK/zERl+oU1EFSW0PhACQHkEVFfRY9VnsDzBKc2z9Kpx:UzERsoqzW0PaBlVFfRSVnOgcyYx","tlshash":"a142d0cd91ef88ee21aaae4d1c5cac24ae9ff3cd11f7a99b4439e4715e94510213e1c1","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:41.022319Z","times_seen":20,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/MG.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.139Z","timestamp":1782329721139,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/MG.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o3yRoii3%2F6h7oU4AbHqnYwJY86wIaOB%2FxzEeq9IPtEfK%2FwTx89Mc2mChwRnUl%2FITc%2FIHnymFt1eY3IbydkQ%2FMcdKgriCz0HOxX5UNhdcZfcPtn3YqkOlPsZFdZgwZAu%2B9pQDVw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"18ad-19e8af97392\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6317\r\ncf-ray: a10e2cd51bbf723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6317,"size_decoded":7307,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"6b45db2d458beed65c72c8e25a01b718","sha1":"30cc5f59258f58d735e1d325de94d773a91cd04c","sha256":"5c03951739c07f120a0f4794e9d2dfc337af4dba883d83380acae8637d9ab77e","sha512":"21e5ebaca70eaaf8f5a75a68b8328332ee690ea3a5b5d8a16ce169d14688247a24cadc2912ff7269c6e5d8e35d09db3ea59696194132ecfffb660ac508abdd27","ssdeep":"192:dIraojkJw+oFh8TNfu//weamZHN+HvS73Z6sOpM:dIr7jkJFkCCt+PMstpM","tlshash":"aad1af96c12babb5dcc966301f98ef79044b434a85bd4376be7855c50fc31678ac10c6","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:41.177795Z","times_seen":19,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/SFT_protocol.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.511Z","timestamp":1782329721511,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/SFT_protocol.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hZLpeWUXCsuehicHvtoRvennF7QV9nMOCI9CxQRPN9C%2BY%2BNt2PREYH0aTeav%2FP9OJr4xb6xvRYOkzo41vNfhPoOvQz0L%2BE0zIKevJcGptX%2BHvBI8SovWMuj3diTzxs3C3yKOJA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"25f1-19e8af972d2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9713\r\ncf-ray: a10e2cd77cf9723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":9713,"size_decoded":10699,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"564b9e5562367f640a8e175098b90f30","sha1":"0a2aaf0025af4624f6fe62d02d28bb1be9f0b0e7","sha256":"6d78741c89d52a7ff62a8312fe18976f13b4b47b9d78384b4a6cf8989768f8f4","sha512":"ce863f115e01ebd97f5b63af236404b7eca3c31528cf7d7f79550a8bf047cf48e97306514a8a788b0cc2d87b0d29634aa51c867607d74a1aefb6699b772ba35c","ssdeep":"192:HKScr6J0ImhFj2EDjncrpFDMu3FSsVRzPU3Vt+9:qScrnTzjBjcDIu3UM8i9","tlshash":"75129d8a5adbb1e3e3ccb781667b0563f2d25b188ba2e5034138eccb3641eee4091558","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:40.616961Z","times_seen":18,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/OmniDoggos.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.736Z","timestamp":1782329721736,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/OmniDoggos.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AGWxIp88%2F88MZvnnHlmj2srX%2F%2Bah8EAMhHWpTAOm5xdIb7pD0pF10GurxRo01DrhjRpVvTnmHskzC3f0h%2BxsaVk6zGm3lPazfOqqgd8v%2F14bK00rxD0u%2BoDt2ODjrecXAIMYBg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2cab-19e8af9728e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11435\r\ncf-ray: a10e2cd8dd69723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11435,"size_decoded":12424,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"013382733fcb001f4e902d7960526cd1","sha1":"fe035722c9720c50d8eafbe98d925e1582f0c30f","sha256":"68f216a1bef03aee475312f14f2076e7ffed8917053ccf748caca89a5a076c91","sha512":"f445cfee82d0c6c21eeffceff24bbd4413382c5fcb55ce00529c3c6e24cb5a31e9df63b5f1f930ca2eb5412dbfd07d8b712bb63f2b54086f9307eb4f95ace111","ssdeep":"192:hbCTSwyIhRffe/rmZ54eLjklfYmqATRV0k2zFxcwMGtAk8bur7ks:hbCTSwxRfW/rmZ9AfqATRaHz7HAdEks","tlshash":"cf32bec3e7c0a5a7c96dbe7068e95923f1c9d9186d419396e304948ec91e71bc8c9cec","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:40.99588Z","times_seen":18,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/PGN.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.140Z","timestamp":1782329722140,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/PGN.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bg2WTaSDCdIvEchc4uEhtNFNd%2FBCDmIj6G%2F7Jy9AB7Jj16w15my03s5lMiAmQqCl5HWOh4AVfSGw0M%2BkmQxXyZkY2wpeQ9xU4v3Tjk%2F63itue0z0yKOCYQ1zEDODeOL9J3cteg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2970-19e8af972a6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10608\r\ncf-ray: a10e2cdb6edd723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":10608,"size_decoded":11593,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"31324a832f828f7f3c82505ea2f8e94f","sha1":"56c6dc48eea32b3615698144f5762da0a9bc5929","sha256":"703820f793f4f404e574263f99cb7c5c525a5b891628097c6914fe56a0ea4542","sha512":"481a15d94ad2d615fbea4345ad1dd791a97e63d1c3d169f4cba7b7edba6889193e87852bf2758f0dc08999810fd055dc4d0ef403b9f3e5a24a4d0f4e386b0f88","ssdeep":"192:A8AtSLkaPOYHzZGT6JRaj5g+SAMMlFP/ZLHEuo:A8AhaWYHzZfsg+3l1/Bkuo","tlshash":"4422af7a53e4e0ae24063a83e12703050faa6474fa977c619cf40f97690399fb50f847","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:40.554776Z","times_seen":17,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Injective.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.305Z","timestamp":1782329722305,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Injective.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FPoIwVSWUol4EFTgn86G05d7QXsC3%2B16LC6E%2B9mzyCILX%2BAFBhUZdEiYm9C1YoRpJedCtjipmSfoxDv%2BYKJvhiqkFmXP5rKLFnvYYP0jLevY1hvorSyMXreSprTIqYHJxcquiA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"f9d-19e8af971ce\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3997\r\ncf-ray: a10e2cdc6f56723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3997,"size_decoded":4982,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"12a905da5e5004dc50c30d0f507382e9","sha1":"03dfa2744359ec7cb976c866fb5e5129a9056d29","sha256":"6f4c6abea888537fed25ad0308ece0f34aa6cda62a7dc51da50833c1b793be2e","sha512":"7ab43810a18b41111ef14648f70b9d26651c01ef17cc6191f7ba02a48e1b8041b9fc5ee379ab97ad2bcd35742ab4535ee1efe97166130c97b3674a9e5511b25e","ssdeep":"","tlshash":"10817cdcada619e3a14ee841c3f15ca46c9ea3441b6712e08dbde87a5e04af6ce07040","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:40.740019Z","times_seen":17,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Aptos.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.321Z","timestamp":1782329722321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Aptos.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MBwJ7yVLwoA4NOm%2FFVKRI7og%2Fju2rTiknLDd2KyGw%2FYQdryOoOkQUUEyELMP5PCa6%2FU7u9ji%2FuYiXuBg7SfSoCmQV7H4EhDcNGeryp4u4sSrfKiK5AhtAuAdb1%2BTYnZRE6L1xA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"563-19e8af971ba\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 1379\r\ncf-ray: a10e2cdc8f64723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1379,"size_decoded":2366,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"e8638b26dc9a49ee2e44cad1091f5dba","sha1":"a4a847fc9e810f3dec986be78d393fdd296243ca","sha256":"ac9dd28841f6dfaaf48bd9fbda39faca5386dcf1d544ace97cdd17188c642744","sha512":"a41df326acf0a30014a90596e9f3ab9d8315842ed2f3612b2423f16b9eac0ecf1db60f97ca7ed79efb9345125be0d8b307095a41f9184441ddc673278dc939c4","ssdeep":"","tlshash":"bc21a5a6f6a9ddd1cc8d0d310d9d578b88c0d4448338939aa2ccfcb4d2ab8a786e5027","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:40.973946Z","times_seen":17,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Yooldo.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.753Z","timestamp":1782329721753,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Yooldo.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7zXFRYkBkr7y0QFyBgnEe0uqGdM0HErAgQCymcZNESeTr5A6Q7XNAatZUMxNxTxOL6ZwbYbwB90x%2BH1W%2F%2BI8R9KW6VR61K1Om4Mmnwj1bwDnNrIrTQSpUpJ9UKSh6QAVoWUCDQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"337e-19e8af9730a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 880\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13182\r\ncf-ray: a10e2cd8fd77723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":13182,"size_decoded":14164,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"4dd75c512946ad21e6647e5a05a22d2c","sha1":"9be34576b6f7b0677c093709252bc1ac7de13277","sha256":"60f088f78ae26560112ca929144c5ba56bb27ac984e52ca07f25260a3db7a433","sha512":"c7a0365d2d83415ae4d412da1ee34487a95901930b76101d43d03b0bbc44cf6222e9917d8fb5bd386c42ced3f1ba0e2f4a2657128fd9f4dfb17b7d568f138b7b","ssdeep":"192:WnNSTIIN/FvvdlqBy3aPAen9MDIMz+fb5SnlgQsF3sVz7tcAMq5vPS6YxMQvgCP9:W48AvX8y32A0BMSftSdFtJZvK7x/cQN","tlshash":"e442d033e316561b0ca8ee28061b977def846fd44be3539c0bd75da6217789810a36d2","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:41.163454Z","times_seen":18,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Eskrow_Decentralized_Trustless_On_Chain_Escrow_dApp.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.864Z","timestamp":1782329721864,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Eskrow_Decentralized_Trustless_On_Chain_Escrow_dApp.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D5V2vf%2FC7adAOHvekGrI5yuMeK5PMCJZaBlzI31apQrRW1urkibXO4ulNSLznaAsLNF7GGV0ckts8T2joDmWhB7WRJU%2F6EEseu1SfNp7yPInfOtiSMxc0Gd8quECZQHhzK5NSg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"10602-19e8af9723a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 67074\r\ncf-ray: a10e2cd9adc1723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":67074,"size_decoded":68056,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"207c20a4ae8df3c3f3c6cda510bbbad5","sha1":"ff566edcd81b9ef326cec2a514d96609e3b24159","sha256":"3b8d35235719e285d891ca101ccc3fee3388371228c31dc49c298726414f9fc7","sha512":"023f4786df5e76b4b5fd71ab3ca88d606a73d16e412659478f9068056fe9a0815bba863edc6ba485cc18c1540b9fd14bbd74aa899ed20115d3e8abe2e9051c30","ssdeep":"1536:HSSkmbqkSFru+U59aZRuUaE+8jp3hX0NAWd/M54f:ySJy1u+09ajaULX0N/f","tlshash":"8963025b65b95d2728e1cc3e181c6eaa2ffa531c00c44cb5c53631e4ed23a989747e6f","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:40.910068Z","times_seen":18,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Mute_Switch.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.899Z","timestamp":1782329721899,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Mute_Switch.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9u%2FaV%2FVkJB8ofYha2bbNhquEmi6427yYa9KTfI81Q3WF2KPJaJDToapFm7x0fl3rlQq0q9ezymNutmbYlF%2Bi9aO%2Be8wrL0yxEQfVfoEmAPSfaVS2FXhhC4mCNWOQrrt3Rr4c%2BA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"195f-19e8af97286\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6495\r\ncf-ray: a10e2cd9ddd9723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":6495,"size_decoded":7481,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"ea179889dfb6e3295b027ceaf4159630","sha1":"884176998303a2b52d523b8ca6dfbdf75458780b","sha256":"a23d24489a32b62e0b63f60ceb05cbdb454b65153337d2f7a4066ed60a6c1e09","sha512":"770bb805e6302a777a1bd9486059cb77074c10db4e6a3e9100f98b277e08a8f0aa69966095a0891685a4cd9751d4287a0af07e26b658b6171302c3876fa2a42a","ssdeep":"96:JWCP4AdjYFSX3usZthcQXp6D7iSGKzcmxf+UEA/KT/7MHZr8+emeH7ge4iqSxz9:TPdkFSXRcQSz2UfPuHH7gCnz9","tlshash":"8ad19e84a14c7949d29a89a20feca5ca42002c3fe0daf0d5b6ddb731ef710dd4a4b0f1","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:40.875121Z","times_seen":17,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Paradigma_Education.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.141Z","timestamp":1782329722141,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Paradigma_Education.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MjCVf%2F7b9Uqb0SZWUTpdoMCVx%2Bxs8Z0A5efbin8ixECRYrkheoAPCeBquRSsBirFjkYbLGrjUX4m1IuQI3VcMdKYYxQH6WThcBQfSwQbEEuZ5a%2B9lLDs9Tg8ZVJlzWIqTqvqdQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"96d-19e8af9729a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2413\r\ncf-ray: a10e2cdb6edf723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2413,"size_decoded":3394,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"dcdb3a1e07434e9f66543f3af39ce9c2","sha1":"7a32e93e831fea98db5853dd568e681ea6be4fab","sha256":"e8e3d4a1b93be7edd91bca0a9cfeb6040406229278d3c1670be579b750924fa5","sha512":"9012858feab15165113365c951bd684c24bc65c42107ad7942c6a37e80f6305d72cf545030b6724b9d13f06631b8f665e95357293eed4fbd3f3a6eea717674b1","ssdeep":"","tlshash":"43414cb0fd8cdef5e1fcaf33823ea4d544a04a3e6059b412e04d58a53a1e0bc1e43247","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:40.962134Z","times_seen":17,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/PiGO_DAPP.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.147Z","timestamp":1782329722147,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/PiGO_DAPP.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kVOeY%2BxN9ex2%2FLg7d4TZWV52fqhstrKdgjVfkv2n7Folczh75MWAUsk4d27wtq%2F9bj410UBkj%2F8GPfhuKU8VBMYs7QaXACNsCQ0dbgb238HXYtQjvFh%2BV9wxLUqTNGDYbwMeNA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"32cd-19e8af972aa\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13005\r\ncf-ray: a10e2cdb6ee7723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13005,"size_decoded":13992,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"e652d26db11cbbf8eacb6cc59bf82297","sha1":"956b7708fb00f7a1397aeb2d2f038e57030633d9","sha256":"8a6b1ad2892d2eb7e61a9b42c8afa702c7ec4cb8e8e585a7188740e37a8ad04e","sha512":"79f24b715966429a33d5c08aab6fa741dec38b23542ca16a25e4af94bcfdd60d373c81ea416c99ef320909842224e51079ea2f5677189973e88412056769dbfc","ssdeep":"384:p9Wo/ohvR3f2FmZFBUaOzOxsxRO1bqsR7m:vghvR3ZJ4zYsTO1bi","tlshash":"1e42cf78e685d541cb16f561a720ab8d7f2b4f3832b28ac905be329ae93512504b4cc7","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:40.541055Z","times_seen":17,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/CHZDomains.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.160Z","timestamp":1782329722160,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/CHZDomains.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NwfIWQjbyLG%2FJ8fWyXBOvSr5%2BVzlRUEHLoWGQrGF2XVNOt4QnOGrcHY0MgEWa1k8P8OjalkQ%2FBZW%2BMX%2F%2F0ec2%2BhGo9FRYgDDYqXNJQj44t1sNEHZknyOrKRxzgOlfqIG6xmhIg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"257c-19e8af9720e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9596\r\ncf-ray: a10e2cdb8eec723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9596,"size_decoded":10586,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"0a276085692ea31359aae41ab1a76721","sha1":"0f75dd1ba1011e754360c2b42fbd22bfef992855","sha256":"7203f65c5a18a91074fee5747d6bc25fb85b31b684ff4f268576d1057ad38cee","sha512":"74378a76b16e518909da594da1cbcbd80f8e6b54e129e46da6c37e37866923b3c34a7eb9c6eb2fb2b9466071be4b42de9eb1dc1c86213656f8ae42d00795bad4","ssdeep":"192:lm4HYjbkPHOtOv8RYoka3dLGxnq8YikrgqrcuUmEPuS1nUXjJ8Qa47h1QPN:44HYjbkWtOg73aTYNrjXSENfaAuV","tlshash":"05127cded9f96d098cf899339e12a30473b5541fd8aa0648508ef00c2e9f6bd631425f","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-06-29T07:04:40.639538Z","times_seen":17,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Solana.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.190Z","timestamp":1782329722190,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Solana.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=km%2FAmHBapx06afennWLrfFwNi1tHEsVRI9fyJLt7ke5hrOLDHX1zpvEc6a4M2PHChVlvdSdd5I4QmXcDm1YKtTtyJWq9%2BvAzojwDohB%2Fa3o79xoo%2F%2F2KfMwlSA6o3wtOymyWQA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"bf2-19e8af971da\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 880\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3058\r\ncf-ray: a10e2cdbbf09723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3058,"size_decoded":4042,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"8aeadd34643558372f991cdac88a96da","sha1":"d8df97751447f252bc7815ae1589462dfefc34f4","sha256":"e24048166795fffb94b829cd6fc60dbf9e3c685e4bc40c37cc9fdf39972ccecc","sha512":"e3fc2dbbea900acba39402f11740f9df9d8afb2b55da258cab07242cac8102f28a2d336ef6550cafc02ec75ceec2400125dd47cd719c0d6b0feddac2381330f9","ssdeep":"","tlshash":"99517d9e92513c3623844e26de212287a8d6419d7d372384f515848c76349d2bdfe78b","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-08-04T05:59:26.033153Z","times_seen":34,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/ATON.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.718Z","timestamp":1782329720718,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/ATON.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Ehm6DcGs3L3pjBfPvLOd1ytYCuFprSR5dO2UmG6oscEcprwkwDoeEEVDSvLnCV6i3h%2BBJLYEiLTpDKXyB2QDI1JH61Etr5ibudpjiJ20w3JgPiOqMR6Y3pbgKdUaWHr0YNr6g%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"c8f5-19e8af97336\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 51445\r\ncf-ray: a10e2cd27a82723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51445,"size_decoded":52424,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"e663650d5eb347920a9bc7b8fc297705","sha1":"a1a9bfee8a183625327b422ec441feaa463009f1","sha256":"3c9f7b6e49d7ec2745a312e98c6ae479905c3a35bd9f490f2df8715e43bf84b4","sha512":"6960973b6fc81d6f8217f893efb0673351ccbb6d1c7a5adea9f28f8dfb6577a847ea96f3e1c5dfe47478393fb8a9962579217178bea47a23557f101eb75992e1","ssdeep":"1536:FJ78dIpcJT0SCMC7mNbUJkqp0uYs94SlEIlbsyq:AdJASN2sb4lp0ltUBE","tlshash":"e83302f3c46b0ed8953456f4046ec73525923ac7c9fa4251927c0b9d21f32eaaed1b78","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:41.218597Z","times_seen":20,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Ancrypto_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.822Z","timestamp":1782329720822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Ancrypto_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NQQD1jhlR%2BfLWKUgBEiOq4vo0%2Bl7KT%2B7b%2Bbq3OSqplCw2ikpWBPAN1PflpA1xvrKVgsysiRYLteuuRlI3cFTTum8RCzdGQnWYsDxm4sZ8WLsxT6TCJ8ElIII%2BGk1GmZVoqLJWw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"205f-19e8af97332\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 8287\r\ncf-ray: a10e2cd32acc723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":8287,"size_decoded":9273,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"b43c488501d6c1635e717b1207add2e0","sha1":"df50830d7dcf9736b8e980b6f3e369a589f282c9","sha256":"f3f557eac1396b29196a36f8aedc60e6f3464ff8d1c91d294c593db0e6d5d3c1","sha512":"1849f35cbc1ea4f0fdb6f48526aba18a3b7c601e1a5e11421c2fcdb4a9cb04a1a7f380f5ad6af68e04823d3319af666b2cea324489f5fbd2b039c6a7ee6c41f1","ssdeep":"192:SXtmn/qQKr9zy8YoatFfgO9jfo7a4QRFS0D6501A+Eau/Ol10/Ammmmmmmmmmmms:QtmniQEG8YBgUjfojQRFSI650ON9Ow/L","tlshash":"2a028eccd1edf089e3689b0e8b49fa37cbee1b477247b4514ae3469114899a0618ff42","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:40.555841Z","times_seen":20,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Bitverse.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.005Z","timestamp":1782329721005,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Bitverse.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qQMqzI2mvm1pK8fGW9bA2NCL3nJqRfsv80Dbr7aU%2F4%2F70RrKJinVLrQtKbAPaMRlMVn0IFzWhNww40LALAhaTh0a63P%2F3g7GU96faP620TCYfkYaryakCgFGzUYNOdfG%2F5qYrQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"326c-19e8af97342\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12908\r\ncf-ray: a10e2cd44b50723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":12908,"size_decoded":13893,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"b47d035e4abef87d5189bf8e287b46a7","sha1":"3445c72a86528d2c34e79a17e2fa58f21b66a306","sha256":"db258f64d810dd59215e5a15c319b49393d35ca11a13720d2b3c91dbb5c020dd","sha512":"0b8b4187c6b4a99d580ae8efab5743fa5b4297019e0e0ca47fe5e3614b8a11ee560664f3d43d68c3677035cfe873397734b3cc8c9fd6fcb623614588e3542a0e","ssdeep":"384:uxrL3MV9/6FzdSNzADY3SCT4ZTP20KrrcuVBNua:mrCkz8lgZTNkXZua","tlshash":"9d42cf70c38e1ebf24723b2670e06c878d3a26729910534b14b0428da1f7227baf42b9","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.693045Z","times_seen":20,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/ColdStack.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.276Z","timestamp":1782329721276,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/ColdStack.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A1BYdnvf1hwFJz5j4cWmd7DByrb0Ip09lkTSCD1Cc4ScwF1oyw7W0dUEHN1z3CUuYeswQRPbD2kdRBomD0jF5kunpXxCgzkN%2BfPVlqUuqTDK3rwAH7s2Ebf4U81aNjUb%2FwveAQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"12ed-19e8af97212\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4845\r\ncf-ray: a10e2cd5fc4e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4845,"size_decoded":5825,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"bf9c7d719914adbfb4110a36ba1acd00","sha1":"5efb4ec44590943ec6a02a5e136017080719830f","sha256":"f18d7d2424f4ab9f32f271d316b8bcb1cb9958071d796916367b6d5d50b24388","sha512":"833a75983bce085d6c48387e8891af948db04906a72c1b996f56acb330cf435a12e183c64f06739d0b85d109b4ca5ea982504216bba2e39e514e2144ce362de3","ssdeep":"96:1k8JUw8zNpo0quwL6bo4v2c9lCHaJSOc3fFwyyCsUOZ8D:1KfN+NuwLu8C1c3fFBnhOZY","tlshash":"f2a12a33a43dc477f5a12bf1a8a5064ca8f3b306b026d429924cd4dc3aea7a4fc4129d","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:40.895545Z","times_seen":19,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Marinade_Finance.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.356Z","timestamp":1782329721356,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Marinade_Finance.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HpBEgv84BuZ034zpOqvYI8sbXpmhO0IilHHuvBxz6LqdruJ5lAP6OVwcp363vToKEEZ6QuosflBgfP6BeLVHx1uBWL9SEhFXyTkz%2BftF%2Ba6%2Ftwn%2B%2BrqNDDzi84ehrPeRc1XHVA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"9a31-19e8af97276\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 39473\r\ncf-ray: a10e2cd67c8d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39473,"size_decoded":40460,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"5e372c9deea602c379f636b1f394b1c8","sha1":"75f12f4902ab312c8a0f1b829618664466953cd1","sha256":"5ae2566f6737b8189ba4c0de31d7ce67ea334667f2944666a082ccfcee8fb8c3","sha512":"9204d3d80f13d22950792131c9b2b3499cc3955c3853d96fe5731c339fe9d677e1987467b3bb6b543291a4ddd0f9f3995ac9db8a1f50be982abbffbc62eb1b2a","ssdeep":"768:xQ4PezvbMX1KJ4CIp7hAmMaYnYlG7O+sufoHZG3BNbhZC5EZHL:xCbc1k4tjMai8SEHZGXbe6J","tlshash":"2a03f197f6355d98122cd3bd09346c309139edd65a2da2bc74d88cfd289b414bcf11c2","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:41.11458Z","times_seen":19,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/BabyDoge_NFT.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.383Z","timestamp":1782329721383,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/BabyDoge_NFT.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ytc%2BhZUBZRidu8YJl383myM59AQwNRmSTnnKlv16qd3tl%2F2KM4qtxeHXfHI8qYpi7plrqZsiofgRHwmuGnAZeoHzYhoABx8xrkuwhjfzvvDBcKgyjWfKjlnuyvucSyfjYA5EQQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"5bee-19e8af971f6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 23534\r\ncf-ray: a10e2cd6aca9723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":23534,"size_decoded":24515,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"42fc5e9da2427e02048ad6d2c3c6aa7d","sha1":"19186c60fccd19052bdcc1bdae9288794d2a92b6","sha256":"96129640e7c07d79d9c4999ae718758fe7617ad522e7725a92c47a856a1c9e94","sha512":"e499fedf9cecf4dc33698e8b1c9d86b5a5b858c617e2171c422fd9454b801e987d89b506deb3fd3709b409851433fb2469ce958abff76813cee50340278e37f4","ssdeep":"384:8hzrvEJIV+xZKD20hHrJW0pTiUH36CVPGtVFSOphSOVjadn1jJ8tBvUri5kg2ZOn:8Es+sTHuUPOdSOpMOVi1F8PMU6OyGr39","tlshash":"deb2f031775c463ad830c0ff579a9b3b67d618273a7c3a12dac859058ba9c3f79b0921","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:40.602102Z","times_seen":19,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Seed.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.593Z","timestamp":1782329721593,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Seed.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9abpM1rsFPjeAc%2FS2AWh1dZjr1%2FVyr%2FwW2cIAqw%2FUBo6QvtEgZ6qagUC73b6gCztaxfoBOJMxjx3KiDbrcdkgsO6Pbpg5H8llLikQcKf%2B9Jcen29NHE2ZuKw83PjTjtZytSK5A%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"e1e-19e8af972d2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3614\r\ncf-ray: a10e2cd7fd30723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3614,"size_decoded":4599,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"b184dd118e92d0369ea25c5b1f5be446","sha1":"a82803f47cda023cd388049564f7d42db268a93d","sha256":"fd03e6d187b8461f284058acf0d14a1dcd7f420198505ef6743550ebca80dbdb","sha512":"933799fac635cc84b1ccae1cd9bdeb99915128933b9fbdc00d59f3b8668f09be91169bb2e17806a59f96330631c0fdd16cf4d4a4642597cc0e3bc4cc783d1cab","ssdeep":"","tlshash":"80712b724b580c2ed61188f8423fdd4b085e1458a931817f9fdba5be812dd35f494a32","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:40.897573Z","times_seen":18,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Lenstube.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.833Z","timestamp":1782329721833,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Lenstube.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WyFfoJqRgAOJofsaGLYURR2Df7U3Eg3E9xX%2FnVf%2BgTn9wi1Glo37F8oGmzbv3sk49r4d4zljeau4qatm3xyTSc8VD7hJFCltKtuMVXsQTkJqOix1w6YOe%2B2szAbTJ9zAQK3ldg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"de4-19e8af9726e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3556\r\ncf-ray: a10e2cd97da8723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3556,"size_decoded":4537,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"2c38782b9561eb7f146aaf5c16534787","sha1":"f21249ff0f776e9169f35eef24ce824a219e6b08","sha256":"025abda2c3b7915aa07029826b42fb5fb7cc50876c7f9e6e7c96c87759945af3","sha512":"531f4f1fb5755f93e9acc573cdc407aaa66d2f99dcd0217a93e3dfeedec7cdd0a2b98faad1c56440993abe2771e6608e53d4b9c405631e2fd3681b0f9ec7c312","ssdeep":"","tlshash":"75715c5fa66a456ff9b62a351dd1410821c8eae90be423cbca66bc544568748474cc8a","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:40.766545Z","times_seen":18,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/KEYRING_PRO.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.330Z","timestamp":1782329720330,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/KEYRING_PRO.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rOijdaHQaDDw9ry3zlz6WGB5%2Bzunbp3Lwn6PWBk7VdjXJE%2B8pqqR91p1jiY7g6JGLNQUIIWK39OHba7YJ1QwrxLv8rhH5Bt%2FFW2vOMrBlAugCvI%2BH8wRSRgI8uVAXmy2mwfUNw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"249d-19e8af97382\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9373\r\ncf-ray: a10e2cd019f2723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9373,"size_decoded":10357,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"23391acd8c5445757fe917e62ec6435e","sha1":"c0e18ec4b4122c32e2ce7d4d87eddce4fe4c989d","sha256":"8204ac572ab4e849e267cb9a79e90ed3753ede4548e1e745367f04234c79b4c5","sha512":"f9978111c87e079ac40292a17bbaf747378d9aaf09df7ae4c23b7e2a3209ac5fec084f26c38c752bb39414ceb200fef3e9d132ad85b612762baf86a4dc6d4bca","ssdeep":"192:EJHrtLCEoi2yykZlleh97cOAuk7C54F/oVfvv+IjhBgeTLc6:2rYEoi/ZlIhShC5fV3GIdme/b","tlshash":"5e12af55907ea874d3ff8e4ec351b8cad22cc168a419aa04c4fad6b5a6441c61f85bbc","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-07-21T05:16:19.605871Z","times_seen":175,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Neon_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.690Z","timestamp":1782329720690,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Neon_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0RXBO0VLi4usLG2uO2fujVYv%2BV7pJaU9Bx71iaShAwXB4Yn%2BJvco7MIloDqVvM5h%2BHUs0tJctdibINVDDCKhMI9Mf1LNMi1tV%2BPWiULq%2BgvPmHxQgtnIE4CCKDXoxj7HoyZYeA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"189e-19e8af9739a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6302\r\ncf-ray: a10e2cd24a70723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":6302,"size_decoded":7288,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"851508a1bc683da226c5969492cf9d51","sha1":"98fab6bba992e6ca789a4ce1dac6bd1f82eb40b3","sha256":"4d7e9bcd532d3d7c06a5e2a5238bbf60b51b75312304cc4740104c2574cd45d7","sha512":"c5c4dc4ba8bda8d2860c32aa67d7cc46335c1817f214a77f16a3feaa996835a8333e0b13b6ee4ec4fd41b7a1e939eb7ec3b23887155756ad0dc0444be8193994","ssdeep":"192:doWA5Oc8woi6kAjCHyv7tWvhI1yrMbEYSMXo2Q:lWOcEzjcS7+rMbJPXo2Q","tlshash":"a5d16ce269844122655036378e61f39bf0ecbe855ed10fb3122868b92cf56766e60ab1","first_seen":"2024-08-15T09:23:21Z","last_seen":"2026-06-29T07:04:41.234749Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Manifold_Studio.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.382Z","timestamp":1782329721382,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Manifold_Studio.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dO0z27lHnyOi4bZRBddirx73Y%2B5DeJsfmVZtX%2Bwktjo2jwWPc%2B2cDkSZh3UdJm5JxUV9UoYh4ldzBLwLTg9qHKRWv1e5kjX6cItJVJHKjxoa9f9ijJI82qcaA%2B2ZeKKMkKPIgA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"582-19e8af97276\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 1410\r\ncf-ray: a10e2cd6aca8723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1410,"size_decoded":2393,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"74a916b79adbff9847fbe978ef09265f","sha1":"18cb088a531c286e95d3ae6012967cff2ce9cd3b","sha256":"087c78e31dd330e5c4c77af9c35e1d7cf2f442b7087de18a73c9db8f24e53676","sha512":"88ce39c72ab62d4eae7b010b704f821bb596ea2b612a0bdef37cf71c01c9a8d7e1861dff5ecd7b698a54c58a27cf8849a5bb778dcac4dc7a41ba31af617ad363","ssdeep":"","tlshash":"1421338ada39f55adbf4053a9eab16c63b3d4a20524b32ad360c12b3233086d40e4a40","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:41.146587Z","times_seen":19,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Covalent.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.395Z","timestamp":1782329721395,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Covalent.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Do5xY8Y89%2B4Ktnc9HKLmuZiWhtbndvB2dklRAx9gydFtJQXnfWERMIR69qCE0wYK1%2FTOlOd9GdVB5VkgbuTdB3eQDymczYnXRj6VbSet3ZLLeSRo00HJRqlN7%2F8oO1oe2YIfNg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"288f-19e8af97216\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10383\r\ncf-ray: a10e2cd6bcb4723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10383,"size_decoded":11366,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"efe32500967574bad09ff8a0041180ba","sha1":"4e81dcff91805dcb20dbe08fd1e3215e8a1c3fd7","sha256":"80600ea870d90acda93ae7421f0c47adda3f9621951e7e42ee2ac8934bc1f885","sha512":"2b7a47aac3b0593be598f047140a2984d7e40afe177213c22253d7c3076605ddaddb7d46c8219e6c64396c911b709161088881c45f88708ee39937f5347bee56","ssdeep":"192:JtvCSu/cgdEd4VIplNLfEkZK3WjF/cHvk59tkd/DRQwmo1m/8:JtNu/yCVIp/CGhH5qGwDR","tlshash":"5422cf445de86ea2db988df290eb144e38732e6fe542a10f302135eebcb913c3183196","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:41.227887Z","times_seen":19,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Seashell.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.447Z","timestamp":1782329721447,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Seashell.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mG0KyKjft7LW6W4ggcS3nyvq1LStyMIAEJV0LjBbm2Ld1eeQKNkM%2FyNNeZbykYugz5N5t2%2Bd%2BFvaZsY0MA6tS7hx32YrBJ6gPwMvOgKSdLDz7tVfbdu7BriiGQKaiKR7WSRdOw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1604-19e8af972d2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5636\r\ncf-ray: a10e2cd70cd3723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5636,"size_decoded":6618,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"0227f29dad3aeeae7bf874fb70d8e2d6","sha1":"021666ea8e345b3d8f868174b7651a63ccbe9a9b","sha256":"8e36c078c9f8cda569043b6c986c0021dc33990f4c6524526558b78edc49fda0","sha512":"24aa31b2b490746d009530b42d7772095f2ac2df0b45cfd90cb372d2ae1a15a0ec54156bcd1eb2b3274af51e3e280749a39b74e88a5ab601d9efed4bc19729a8","ssdeep":"96:HoaaCOLEsGNStABXSEAYcsfHjJjXprNSOLte2AQs38qz6PISN9CVu9:Ho9zELEAAvs79pVsHz6PJ79","tlshash":"cac18f976d3ec5f3c905a233e08d44320281e16ca173a70a110b9bf39f9dd5275a7e25","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:40.616254Z","times_seen":19,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Suit_MetaFisik.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.911Z","timestamp":1782329721911,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Suit_MetaFisik.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3S7ROHDW%2BPxz%2FdtXWSF%2B27%2FYHdtZWSzjyu4dyR3rWI%2FPiq9uzr7rwOYeILwroNtB7rLKi%2B00hL1z03FsbcTXRQZhuOmD%2B84kQVoTiCCGgh4h8MuTE7QorLCjYZdfzw7c4SnI2w%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1992-19e8af972e6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6546\r\ncf-ray: a10e2cd9fde9723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":6546,"size_decoded":7536,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"1bc918b2115bcfe54e51b634f42251aa","sha1":"f6cab3ddc50e900516798d2ef40f72438562a10a","sha256":"b4f988df6f9e06be90a23034ae4d4132c0a1a8ac2c2bfa06d3cb8996e9703c25","sha512":"56f7ef8f1a337c144e019342e6c0c403a2c011836a7144db935137c10533f8c3cd8a7f5f825da83bfcfe7bbcfc653b89cae198e5b6b6622b58df711926d513b6","ssdeep":"192:wuIfIB5sHC3RLSbc/6j/F2lLznBM9lFuufh:TIfkpRLY+6j/cLTBM9fh","tlshash":"83d19e63723cebb1ed22707b9d879d9521e246bd9ad4ee9fdf1c08031d68a1c13945d0","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:41.037788Z","times_seen":17,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Swap_beauty.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.108Z","timestamp":1782329722108,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Swap_beauty.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DhogC9FZYfNf3KPAb3%2FyHCNqH3jiV01LFazIy0Gn7bWY89cmxK7ddrLlQSe1F%2BrCAfWo1Iu9T2NIzzKpAJ%2FCg1bEz%2BK3o8TLd0%2Bea5FUYyY2iL28sdiGVzoCvXGNq5gU%2BmSN3g%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"175e-19e8af972e6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5982\r\ncf-ray: a10e2cdb2eb6723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":5982,"size_decoded":6970,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"4833e95b839647829eed3727243d9899","sha1":"6befb1ee9aefaf20312c8f7bf83c668ba4a8eff0","sha256":"1dd2e6cd834d961ff949ea1e1b16d54e1cdb65cd34e3f9d4150cd6dcf9526bf2","sha512":"e1bdb2d50cf415cd4350fb7af302b806f90df31bf7e53f1b37685497b4d3cd31d0df4c560a95030cfc05acca6d3070f2dc472e961de7c01dff11c65b8d3eb6a8","ssdeep":"96:IVhJ40hcZPHJuPFm7NFYXbYL/C2jfkk9/uTFR6mX3o1z7f9lCpHoP2plC13tVBgC:I9/cZRRpFocsM/uTjX3UvVInC13tgC","tlshash":"76c19e5243e19802ef3e9a31ba5e2a5cf20b1418389414f3a14fa4fe93daf5b005517a","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:40.590281Z","times_seen":18,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Spot_On_Chain_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.071Z","timestamp":1782329721071,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Spot_On_Chain_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iKI4T%2FpMasDzIMYI6rlo8ZDvhKrJ%2BBPNEDzs1XDd54nAJVIyqUxXZh1V%2FGBAUA6dCtJCNNE%2FFf%2BRH3byFiOQN6MCX93g6Sel7jj19QySWQ2Q3r1K39iBdlS8%2Fk%2B4uOth9g2L9w%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1b12-19e8af973ca\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6930\r\ncf-ray: a10e2cd4bb84723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6930,"size_decoded":7920,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"27c32e9449f88637196a70fa666a12c4","sha1":"2733d5944d4e61dba10c03d0604cac9b53afdd68","sha256":"9546640f5c424cc2e7cc6e55dc75fd6ee3524582c8fa89364beecada2f8acf46","sha512":"a99497b74b606ac5e8d7bee06fe964b1d2499f4c1902d600971eb4486c25e90872b98052f4686cb67b64f430ab24076aa86422589fbe4c93bbc34f41b95db68e","ssdeep":"96:tQon2JdHPed3ontElsC+tyZTLjhzFxcVciLCApabVdyqQFdkGy:tQUVYgjxFxcVc32ImFdkP","tlshash":"56e19ee09dd0a302b0b25bf9468ae76b031b701b9853ef5858ffd865db6d0117c4ae11","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.641379Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Noone_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.166Z","timestamp":1782329721166,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Noone_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CxDQgfyGc%2B13axGZ7GVK4Xpir%2BmhmGMtRSLPmfKOSHkNjwIRFbYE8k8G%2F7%2BMJ3CYEyIsi4VZLZ4VO97hqTMkUXJ1%2BtDoW3NGcLm7whPxWq8EWKNtkh4Q%2FIVnk7vbaoXGIY1pPQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"21c7-19e8af9739e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 8647\r\ncf-ray: a10e2cd54bde723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8647,"size_decoded":9635,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"2c58e570ae25f2079142d26432733778","sha1":"d14bee0bc0db206db184a66217703c6621504351","sha256":"1ba000973420109a357de338e9060d5b9955023e634ed9b1c7df1f9ed3199dd6","sha512":"ea46e5b8f5378713295f631b75db41274a829dffbc51ba9878f28a11a4548ba64d46161aa9823461d547698d817ec4063ee2a7e507a8ffd8fc3bf5d8070e10b0","ssdeep":"192:EgMrlOrE0iUmXMtC1aqxQLAAImk2q8pPzFxPar:1Mr2MBd//Z9URY","tlshash":"5b029edec7f922f64c9115775048c445277888ef69add2ace00439126dcd6fe8346abf","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:40.549249Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/socrates_develop.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.246Z","timestamp":1782329721246,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/socrates_develop.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u6pvTmkPj6NBZZoPOjWRfujzgIOoRUBcKEenAtMAZs%2FwL3%2F2URndbS84WqRmr1MFW2vNrX4pXf3AujNj%2F8tXstpRGJTN9Orf47eBtLpGI7uJMFyc1cRN%2FRhiKYi%2BcQhhXyZ3ww%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3400-19e8af972d6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13312\r\ncf-ray: a10e2cd5cc2b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13312,"size_decoded":14299,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"78cab76c7c2809dd3a93003cb171e5ca","sha1":"5bbeeec95b5aec82e6c0a05c930674bcb64853b2","sha256":"c915850e93f91c24cc1fd64894f9463b484e7f87bbbd4b7f077df379328d1fb5","sha512":"1e11e25bf2526d7bb95b80a9809c548e5b4ec1b40e870f27ac08dd3de6eeec0249a152ef69f26f3a6f77aa192ff26202973ee4c24c688d33c51e190cadb1360b","ssdeep":"384:FS8lHyr6isPT3VzbtzWFPSaHbnu9nC4IqkRkio3k:FSCHyr6ioT3LWFPSWbuLIq6kH3k","tlshash":"7a52c0bc7a302ecbad856964a3db6e1d0548bf152d444db4257378eeef018720ce5b36","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:41.227089Z","times_seen":19,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/MathWallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.400Z","timestamp":1782329720400,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/MathWallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3ma8%2FTvEL4Mett1iCUmUhWiX5UwjseBz4p7n41oPCwVC%2BZXeHbnNeb2F%2BSCYtZSIG9cY6ataiiJZ0ZpaTHi4ynKiOXLMHjUcii8qrskhGvKqi%2FN6XoeZUmMtCZQREAWf%2Bd284A%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"125c4-19e8af9738e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 75204\r\ncf-ray: a10e2cd08a06723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":75204,"size_decoded":76192,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"a542846c2645d62ec9e7420c9468c203","sha1":"880a61a9d1a3230f251828a50678880041510a76","sha256":"ddd38b4ec78cd9755233ce662ee9610fe193981c0f7bf379cc29a4ea4c5bedd9","sha512":"aeaf52bde05f4ec36e23b31586e9d840c7040e7bd5779362c4d5813487edb96a082a51fab2113e7647e76527370c9a52066bbd9c10b508ad3384f79417f31380","ssdeep":"1536:ez4jqUOZjV55+/10ByJP/V4vCQPOnPs94nJEcqfBIcWSSVQrH9IUVzJ4Z:QT1dnnwJHGFOnPs94nJEcqySHrdrVKZ","tlshash":"947302fdca0544531d74a422648818826a1ebfc5cab7f2779cf9ce86027494d4df1ace","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-06-29T07:04:40.793428Z","times_seen":20,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Theta_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.573Z","timestamp":1782329720573,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Theta_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y8q%2B0BTXbCFo41%2BT%2BHXiFnghUhuP69MaqAt6qp%2Bcgh4MqxW7ugtvJFK8a4u4dTm4LIizc7JJKdtoVZNgHuzoIwv6lr7YjbqEaOy0egsdrSzxN8gD5vmzWr8PBMXuKa3iFimbog%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"4021-19e8af973ce\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 16417\r\ncf-ray: a10e2cd19a42723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":16417,"size_decoded":17402,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"beb259f2dba6dea4ebed991348c0e7d6","sha1":"adffd3892409c3d1425af11e4a6bbbf9b93ad5b9","sha256":"80b8fd413ddfa5dd0f498bdd0345714c9e9a5535686c057253c5e44b99627c2f","sha512":"96d42eefcccbdaec969a7c95ab96ea00825af7758db54c0144946ef3d276a1a370a1c81fb548e4f2006a2eea7cc208cce849f3319d4d93e0f16b4820bac3ad21","ssdeep":"384:VqfT9Bw6N36Hl5nHYTSVktbzwC8XS1OaGBm1X2AeqyHSA80:Vqrc6N3Uh0GS1OaMIPQ7","tlshash":"bc72e04d6bc4336a8f8f2154b4bf7e5f957ab362ce0b4bd2cd94b1ca306061ac585670","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-08-04T05:59:25.943283Z","times_seen":37,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/SISTEMAS.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.018Z","timestamp":1782329721018,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/SISTEMAS.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KO6KHRyqAgCWXavCrdNY5wnwrUamxnJk0kr4f8yLXCm8%2BYZC2ycj317n7L5MlKG10IpRiufGqLXtzixZIYjVvq7lQEFiKn0%2FCPumGcsE1iSSuBAFJ%2BoXTT72McoIeMhAp7wDCg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2d81-19e8af973c2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11649\r\ncf-ray: a10e2cd45b5b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":11649,"size_decoded":12632,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"75327c2327a2ee2765dae86e1bb87a45","sha1":"2405bf468abd5ce1b064d6f50b2c475cc6635f9e","sha256":"2ec34b5cf2fa7cdfd4c100b3f80d8bb5c6fa23f29690e6d83f9f10fcce90cbb0","sha512":"ac6372efc249f4e26bcd8c04f08b94fb4470e37d6c7e64c631fd1d70b66e909bad7885f15a42012185ad0f5157f7ea929e1355d11ec492e4fe11c37e19235dfe","ssdeep":"192:pWbA2EZQ+TA7U1keT5yfBHkHBWCSuaw4Nhfi1XEzedMgcQFLtOFi8F:EboZC7U1XTABHCkhuaz89Ez8MgcM8c8F","tlshash":"59327aa547e94ff16adf7193806f2073564fe4a7838023bb55811bcebd7c2862e13925","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.702105Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Interface.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.303Z","timestamp":1782329721303,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Interface.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rFyQ9k9jV6m5K5XI0sSs1JVdySPdiIYHTxIl%2BQZKMHmw6wV9w81m%2BcIdJyUcLq34s2dxFRa3WGQUf4gCqpUUQjHlghCkIcvVXqmMPI97CG0WccYlykNFH7m6Xd64q6KJqMuIbw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"acf-19e8af9725e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2767\r\ncf-ray: a10e2cd62c60723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2767,"size_decoded":3746,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"9849917042d2d8f09cd5ada6b66f1a5a","sha1":"3be825d40cddb6f0e3389d8aeb31b269280266a7","sha256":"0155556e1c98ca3cac81a3417d1e39a83becefc63bcfd3fe9d3ae03914044c1b","sha512":"942a4b8873306b445a616da0af91f2e20dcffe47603e48263bd40e1fbd58575a1256d35268118480f7e87a23cc518b747eb3dd347a8b4f9f821087916e043e3a","ssdeep":"","tlshash":"77519f561df80e94c67241b3616c8ce63d1572814b0da7036c0df0857977365545ce43","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.751398Z","times_seen":19,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Astral.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.738Z","timestamp":1782329721738,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Astral.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5YC1Vx7NIpdKyik%2FjZrvMeBGFTK6i01u2np6BGmUB28SeOTdQPk16nKg48jMlQbXWpmYkU3nqgiF%2BMg%2BxnSBf%2F01Cz1Leg%2FP02QPNkUCS31h%2Fl8c7IA1Y3s2wl8l037QmzcI7g%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"26ed-19e8af971ee\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9965\r\ncf-ray: a10e2cd8dd6a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9965,"size_decoded":10953,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"1c0da1ed05f651ac5ac918011f703961","sha1":"1650d68d774d9e9abaede06cb15e1438e1a0ee55","sha256":"97921a6886605229e4c614ebcefeb522c995656db9ebfd6235b7164330b43be1","sha512":"5d45999d97457c4fff537bee440ba5bb2a2868c11a2909cab308afbade53c7a974bdc5e6736faa92e1c55f02e6c20e2473707e02211045bfb7a60dfc306b0af7","ssdeep":"192:mP5sdBK5USJ0qE6/O6kxAijBTuPdiq1PtX5QclkMAHTXKAkjVatk:g5sDKL0qE9yijByV/1PtX5QiFAHTXNcX","tlshash":"e222ae0ea48b6c2a80ea90566131df9a3ecd4f24ae017cdc739056d3c2be2d879624c5","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:41.160696Z","times_seen":18,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/bitbadges.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.821Z","timestamp":1782329721821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/bitbadges.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3SpulzHUCoaqr0zzXGVofG8cSBNaXpAHCt613ZSxjuqA6QvxX%2FVE5FVSwrx0PwXMfvhMcc%2B1OW5phBhK9w3QNqkVgscr%2BcMN4LhigMY3zSJtpgWqYNZL3%2FM%2FuN%2FdMnS4ZeIxAQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"17e7-19e8af971fe\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6119\r\ncf-ray: a10e2cd96da2723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":6119,"size_decoded":7107,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"221f4062846188effde7d40ba25c5e5f","sha1":"25a021dcdaf6ed1754f4cf87ebefb7dcc92144cc","sha256":"ba6e272c2537982b432705af150074a19d000492b2554505fb6974d7cb89192b","sha512":"9b277f126863716647b0af39ba58d92abde9ca438ddd02b554e5174fc72771037f2c84c9ea6967e152803e79a572c66b3ee02714e71844374ec76a86ba9183fc","ssdeep":"96:5NyvN6j1Jrsix2g6h5h7RTOXaKOLknLwQuUPdTx0ZJtVEie5rH4tICGHZOxdqhvs:5NylAZsixhUhdTO9OYnkwVTxa/VBIeIo","tlshash":"d2c19e934b15303fc59df9f083013d79d953e970303da4a88c17f694adb069a267d5ab","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:40.956964Z","times_seen":18,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Imota_.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.492Z","timestamp":1782329720492,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Imota_.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VPyY5Bak5%2B3RkC1R59xfZkDG5dn5ktfrG7LGl2qjG7iNh4Tles6gE0iGZk%2FUwGhXMvR4e4%2FfIoiCDukxhgmVShE%2Bo%2BYAIg9dsMgAd3VlfrTb7UHQQ5FEyB5UnS5Kk3MBmagVUQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1ece-19e8af9737a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 7886\r\ncf-ray: a10e2cd11a2b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":7886,"size_decoded":8872,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"805c54e5b1757614f9f379a853d2a685","sha1":"66c1ae039013ba9b6192953ce880ddf7fe218666","sha256":"4cf77119d05ebb0588e83ea75dfad376bdcb4726a5d3b735de6147ef4a31b6dc","sha512":"f6b5b19868124be06295ae4a2f4be476543e8103cc4a37bd2fc67f59164b20adcf1936ed18b597e06d8901c1fd4e3ae9d1c2fef361ab582659e7a4c4e3d4d67e","ssdeep":"192:oDHEK7WTP+dPqV33OdOKMSlngVMokfTFBSI:O17WT2dPMOQKMSlmvkP","tlshash":"f7f1afe19a1aa077df3d22b7a4a410318d4def0a2c4cd77d56187074c63a2da5e03ab5","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:41.170086Z","times_seen":19,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Hippo_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.946Z","timestamp":1782329720946,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Hippo_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1CZYIJqt8PKW3RyFiZceJVepsjNdrbATH3R1sGl%2B0CWQt2e2JlCB0dJQ3omMMstSnMgA4JA%2Brm%2BWjSL0Vg6RBj5zoJd2Bf6n4VK6w3ytLo%2FiuYYYf3Vim4aE3e9zWCqGUoqOqg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1ffc-19e8af97372\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 8188\r\ncf-ray: a10e2cd3eb19723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":8188,"size_decoded":9172,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"a49456b931d46beb96233e5b75d73f2c","sha1":"28c656a349c5a3c8b73df4f6c49619c5e695a8f5","sha256":"64b3d0e06557eeb23b467e0700ce82e38a16e7797a3b123cfa44f66a7f719131","sha512":"77473a3e6d43fd1b48a281e54e6db3e827f430c772a59400fe6a63c6a4c932853a8d13a13f3063db2f176c195ee7e1ddef86ae6531b8114c66f328138a11f03f","ssdeep":"192:O6ex7ko+o0VRAxTLahN2Y8C6BM5L4Pn0OIke3n2ZuDQd4S5o:r5oKAxTehNt8C6BoA0OIke32kc+S5o","tlshash":"b3f19fb1d053adacd2bf72438d146899d2afc0f3e4241be6b82dc5d9b8417665d42c8e","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:40.894428Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/extractodao_dev.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.367Z","timestamp":1782329721367,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/extractodao_dev.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fkai%2FBVYjecPxntdAWU9xSHjkY5KctcnIW1RHwxh8S3YOHMGVydkUgkZGrrb33cqZ91%2F41rUmkP7Tj%2BBHPEzzoAdXDxMCfAeTX78r2UeOTai%2B%2BCWGhqHoyoP%2FH1dwpftYyHfoQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"31c5-19e8af9723a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12741\r\ncf-ray: a10e2cd68c9a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12741,"size_decoded":13732,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"d1978ca61cc903e31de53fa665b131bc","sha1":"2efbbd25fad1a4ae11c116173d4f7afa750fb9b0","sha256":"9ef90a9c84adb540930df95cdafcc7bbd0d9c87c4360a001757fbefa02451e21","sha512":"d0f34356319973051ebad54decdaf086dd10eedc57e0e3111a353874f03525553b078fa9abcf82ea61b1c3c2efb7327833e18dde6afa68d274b21af388869b60","ssdeep":"192:I5sbnGg0SREbIMQKh7/QqTDt1KEGgHzZ/oQhZqj/BHmZXConygB:7R0zQSjTDfEgHzJZqj5HmZZy2","tlshash":"3a42bfe1cc744d3dc8fdebfe48d1e513365c7c098a81bde892f68a42492a7cbda95041","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.886456Z","times_seen":19,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Kinetix_Finance.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.049Z","timestamp":1782329722049,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Kinetix_Finance.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eFl8Xq7PLwq5Rrys%2B4mFWqsVscR9Jbcx2WnRsXaJ9aW%2BujTY%2Fr4luM8BX%2BMyyVWvxJ1Z%2BKt3fTm%2Bu3HpTBaghcc0gUddMoNb%2Bb1sZ9zel6pz%2Bm6qiPEVZTgO4OUDb9J%2BHiPP0Q%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"ce9-19e8af97262\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3305\r\ncf-ray: a10e2cdace85723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3305,"size_decoded":4298,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"27a771d32ece6408655b1e679fc518b0","sha1":"c1560e144d45722816386f2d328ccf2abe983a16","sha256":"7c525b42e77862daa02279ffcd9780859f4487da00db70e7834e3d959e03df0f","sha512":"3dd92dc7aad54b6f31a707bc78bf7d740658e6abeec2658d6b5c6fee509d0eaf767c14a1d1011365549cd422d70ac4ccb676667c8437919fe2c9a38454790ed2","ssdeep":"","tlshash":"d1615d6a376e3ca3ed3c9f7447bb387ba073a13046b631a5f45314563853540d1d8b9a","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:41.25653Z","times_seen":17,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/BCERTin_wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.601Z","timestamp":1782329720601,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/BCERTin_wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q0Uo7dPol4M6Kr0hW6mkYJ%2Fk9xMosWU4UhRfaGS8KLsxoEX6gtFVmW8du7g4UaeeZjoqLalOlAwTKNy3iojbvpFrwUj0Dm9VRkCjkjgkcyIrI4uzuIHl6HvoqDH%2BI8hA6o87HQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"55c6-19e8af9733a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 21958\r\ncf-ray: a10e2cd1ca51723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21958,"size_decoded":22939,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"1bcfdeef8d9a427a6a00f9477fc16554","sha1":"494dcf80967d440bc9709670c867e615d5815e6b","sha256":"e0cbfffcb0d9df442a7b1e3afd520643294102b55e3185385c84b43dec819bbb","sha512":"b3e767f279b0256ee770cb5590bb09d37875abc5409ea2d5bb5911b541ddd5bc25f40227c314d4c81132b0d6a83dc7acfe83eaecceff75449e909a39881f6da2","ssdeep":"384:3HY0KvApCkMtydzpVwJfAu3P+aKbZ0H0xOhDi/yQnZ7OpDnUJadZdzT:34fBkdzLqfA+PPKbSMnBAjdZB","tlshash":"a4a2e1fd23b90c6752e4c48d9629056e4d81259f399f0ce400a24affcdb5c92da2feb0","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:41.261272Z","times_seen":20,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Autonomy_Connect.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.921Z","timestamp":1782329720921,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Autonomy_Connect.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qeUxXUDIMACcptd7q28S2tM%2Bqko%2BiVqV1q3q5P82XWkWbSTRr4CFkWukZLabgkldqeV0itGLW2SEPbr%2B3UQ2laddYL7hvVyRsXS%2BBszboMvWeWnLbRu%2BOLLY4kSQEVBtKhGXhA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"e16-19e8af97336\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3606\r\ncf-ray: a10e2cd3caff723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3606,"size_decoded":4591,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"043c9055260ac0cf72c6d93dbc19ec2c","sha1":"163954cf7bd9e6e8509b3ef2b9b93b1bbdf32526","sha256":"495c2fd59e43293f693733a00061543f18c3f522c570010193d5d0745c868425","sha512":"e16ddbe515331740202840466570e130ef64ec35b0d3cfa5729d4ea2e3860dc7b7a4c069b112c38c88fab62cd0f238c285b65080951ff63d4f7372ed7871e8d7","ssdeep":"","tlshash":"b271e966ad5046124ffea7900b9e0dd518941c9e011bf719ef90f022b29b4fc47d9b4b","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:41.243952Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/LikerLand_App.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.964Z","timestamp":1782329720964,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/LikerLand_App.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lpWRBW48qHqxcCLo6U2%2BsgR8vSGvA5XgJLe9GQ53pOwrsgFXTv1xAS%2BZnDkbTuE1CmFkTkNF1aik1R1EYtxzmxn0Ky%2BvQ1jXQ5s5bHP8HUQWkJy5A4Fvgl8yzd9aDUM1EvVpnw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2b27-19e8af9738a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11047\r\ncf-ray: a10e2cd40b26723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11047,"size_decoded":12030,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"38ed2ba1ac034933fa850d6a3be06c7a","sha1":"7a3a514411484863a5863a3e8b987391509bcc68","sha256":"e737aaf8cef02816b760f0f920de0993adfa08d9ce0c5f8f02be2d0d86ee73e9","sha512":"f94388fbdec77ec8454dd225bea9f9d20ffd4605a0e1a731f0c6ad1bcb0c2ca6ddb833d4f2a4537e7768b2e0eca6d09c997b39f49c5f07895852f54b36a8fd2a","ssdeep":"192:eJfBBQKKfeKTUV1Wzh68fFDOCMFcI4JaSMc3OqYdac5NdHgbo3wWq:WBQKCeK4fWBFSzCI4t7YNzgUgWq","tlshash":"db32c0e5954bc5f0e7a4d2566b41a5667f3c000bfc21219215ef7a9fbb0e06d3e48dc0","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.624474Z","times_seen":20,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/BuyWithCrypto.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.264Z","timestamp":1782329721264,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/BuyWithCrypto.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=edyAGejSFnEyhQaX0SyU8KXH5dkM8brfxL2Hqd9lV7F%2BLoL7wyjeahk9BdmbmEhdzkinUyvvng1Oqank%2B9j9yBAR%2BkEruqOlIorV3W2DiGGETBA5vtVK0wJYno42TX4vU2Fh4g%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"292f-19e8af97206\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10543\r\ncf-ray: a10e2cd5fc46723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":10543,"size_decoded":11526,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"8f0b1b31825e30e2ba5d6a34faf16634","sha1":"eacf515ee053da2b3cf53d98d72d62d6ccee1369","sha256":"91b9f3efb0fde80974e400f48017dc752d6390e4f8c5e89bc8ad301af33b5b25","sha512":"da2dca0fc6fca6f950b5b49a476c4f7357c51d8dd71630e9231db17a83b2095bdb98d00979447fa206b5cc0f0abb7e93144f24a0d2141e944fc4ee89c685b3ab","ssdeep":"192:I8XCiy4NY4MYC/mk8nT3SFQZGEz3tY855a1VEJU+qf:3XJZYQWl8n2FQLtj5gEJKf","tlshash":"7c228db7bea8c268d44139741a44febd444d3e59ce8b191738a7335ee67683868431c9","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:40.688691Z","times_seen":19,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/MetaOne.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.896Z","timestamp":1782329720896,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/MetaOne.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QCUdgIGQG9NM0nl0M1KQcsmdUfs9SgJ73mPVdetPGN4K%2BZHIT8Koslgu%2BhWqTy3lOUnFGfM%2F%2F4PeD8OfaW1Q0vYF0I9GCTB11T21%2F9d2yRLOx6qS9%2FKgDRv9bVBNJFcmwRzwRg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"435c-19e8af97392\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 17244\r\ncf-ray: a10e2cd39aee723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":17244,"size_decoded":18233,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"539c6d8d4068451828115adb76ab4948","sha1":"49598804747b8b00307f1c8c8bb13543cd9a37ec","sha256":"d14ea57c578ce6da9e0bf3719e0cdc2455b9c5cc65c877bee0384347463aabef","sha512":"6233f17dfbcd3f2de7d4f7e81fb64ea7ce0d6d493333ab7d65763c15024cb8d2f27ca3ef4b0b675fa52afb7cf61a07b54dd20562f925cda46a468c229c7228a8","ssdeep":"384:Y2jDDqXGSmCX1EA97rOyeRnMcLBLvpmqcDwNKlp8yQe1vSfToKvJQ:pmXpFEYmyeRnnFLxdrKlp8yn6LPQ","tlshash":"4772c0b9f9c0f9155945e87e0b7e74a690166b7e67c20f54210d104b760b678339e0ff","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:40.62062Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Me_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.952Z","timestamp":1782329720952,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Me_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WLVuaDGhNIRI7bY9pF8MSLHMMm9Smgjl9B4V8y22Pw3YESaUsFnWDgdiwLECDL%2BVQPOuFNajj%2FFRtblVWXm5C2FihgISUahop6nDed6iUzw0wiIV5t0HA3LZQnz3tUPIzHIcPg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2669-19e8af9738e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9833\r\ncf-ray: a10e2cd3fb1e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9833,"size_decoded":10813,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"0f08569c128c9b79f2bf9acd8964370c","sha1":"d84c7b146363f78190d8ef1663535a282d74a2f7","sha256":"128b0df78b4b83f5d8982e3acd1e83dcd6048dbe5ad6936b237f709825edef88","sha512":"595363d9e8be73f6946132300f22ed86d68c9c613be3494293c62ca46b6f7a5b51d60f280114e7133b7931e50da6c128101e1c167718450aabe7ef7c9c2e4dcc","ssdeep":"192:or38/pXQ81TXGO817BAfPWRqkTPk3Onl3yCFayn2VbPnUpq:Gmw7BakPlrFaDVbcpq","tlshash":"6b127deb1d3a3b166c5f76260216c619741de0a4793ed42d4433821a97dae2c6bc0f1d","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:40.998878Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/HARTi_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.967Z","timestamp":1782329720967,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/HARTi_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TwOhqc6gpmD8S%2Bp88fznRNQYFHGirQNjekEI4hdUS2u1AYmkHO%2FzIO5YnrNXk14RfoiOPaNwh6zgpPXIZdjZfzTklFsvm7nz9fRJwakeiSAWlFX8sMSe63UuDPMdnQ72J%2B4M6w%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2028-19e8af97372\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 8232\r\ncf-ray: a10e2cd40b29723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8232,"size_decoded":9214,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"dbf9da918f3f6f76d3ea30830d7c8bab","sha1":"c5478c22e3fc9183368d4c3ad667d754fd617a33","sha256":"5b3e8287de17500e5c8e465f85f7eec55723fa4e0ac5de0bd168e100b02b40c7","sha512":"747ebd21c99d260c468fb88973ac22cfa5c6e96aa412c78721faf87241d5671fe14c26d832fee770061aae1ffcba593c9120654020048829fd6b8c40789747ac","ssdeep":"192:I5JzJrGz4QC99sBrANqzBjjlbU04diPjbIWi94:c9Gz4QC3sBxTbYxK","tlshash":"f3025bd87e4f9722d923edf58286cc9700e969276c52991708dba0508aeb5f3dfc7814","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.816798Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/AIME.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.127Z","timestamp":1782329722127,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/AIME.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7NVOY7pSZZ9UaPaUGfV%2FV00feYp2L5tLYbQXBPIn1N8Bv%2BksQ%2BgcNGi5uSXrUqXmd5Zi8U9MC68mfAyGVGlwYohO8%2BTkGxOHV1pHlPOFRUhCyeNatxn7BS3aZ7ch2jqGT0MmWg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"183f-19e8af971e6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6207\r\ncf-ray: a10e2cdb4ecf723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":6207,"size_decoded":7191,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"5e843fced8e8734386f906961d64f3f1","sha1":"4d1f51514d4c920d02720f37e9ac7b6fb1164d26","sha256":"95e5032204ce79615da9ba93450bbe7a48730986649168ae85a029f1174359bd","sha512":"e04bceb44114054ea661723d597f3282a0902b33c27e5251fbe88bc989e9bb2594c04c406bea83e6d4df677c5d6a77f358128e831b63aaa71c8752b9f6cabdf7","ssdeep":"96:8oBRgpZ500WUHjBWcC/aftDo3O1qwUOLa25LDlWu8e+fp+k6IijbaOZKU:8oBRgf5tLWcCy5oeGhqvojSaOwU","tlshash":"76d18d308bc5a93e4e132929dc8f85f72b75b55db95a338906e1e34f6ab05d009e92c3","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:41.02646Z","times_seen":17,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Halotrade_Staging.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.144Z","timestamp":1782329722144,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Halotrade_Staging.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=73wu55Supl90mNBwI01vISmIueQjYAJLRGFEGtdHZw63%2B8DN2kRK6m54oD4d0dozy67wVEsf7dTA2ui%2FjEK1QVLpfmnaygVlr1bIUd%2BHeLvu5m%2BbIxxiXJGPgjhkx4h5KIkb5g%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"32a2-19e8af97252\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12962\r\ncf-ray: a10e2cdb6ee5723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12962,"size_decoded":13947,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"43c90a80e9c1b9f43e653d261bb97f95","sha1":"818340318083554822f94c247b0008eaeda42ff9","sha256":"00e561371d4cb29a9ade774441259727ea5d44ac0fba2e5422af43c6d9061a70","sha512":"5b6983c31ffef0338d9db46d3ff6d086c2cc37b359f98059ff468ac250ff9a8e4e5c6800f734d264d3db57757c568354939caff8a02448a1e9452062bbf2bc7b","ssdeep":"384:JAdN1el/biv48toaesaWJsPuBqVHWENRNpjGs+:J81eljVIfKWCPuBavNX5+","tlshash":"6742c087c0595d9a86335f293b1b9629f362510daad15377b2c014bef3e8a0d20b4aa2","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:40.562119Z","times_seen":17,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Award_Pool.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.327Z","timestamp":1782329721327,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Award_Pool.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UAhowTy2a5CNWG2Flc44IZApx5PbMRSJV%2BqYk%2BdLEjIzEgN%2BalZ7sZe%2FHYiijJ4E9TmIQS%2BEMTLWI6Rg9ZDcpQ26LBDcStzw7p%2BiIqcVcjoLwXaxX4koM6E2b%2Brb9v1l9IfnkA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"179f-19e8af971f2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6047\r\ncf-ray: a10e2cd64c75723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6047,"size_decoded":7037,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"d7f0aa784040aa0a0e5330ac5e370878","sha1":"08e10df8f0ab8788cb3c3aa7dd4dd34e7e0acc62","sha256":"549eb5b1d4984e3be74617da69a4cbe0a60d64175b561a98730be4c4ace3a6bc","sha512":"1431e4f9bdecbfbeff2e39a85f1f73dad43815c9b2cb8c6bbcc3fb018f6a1c3f1fdc5e925da0c2b71d138daba9272b256a0af138cb69c909f6443c50fba96522","ssdeep":"96:5vqrLkGHM2UEUkd32/VNjrss4ekoK2pG1J9w4CdFcbLaGBWhJEzZJqHdzEjyqbRD:ZWkGRBd32VNjrss4ek92pGZbCdFcbOGj","tlshash":"d0c17d6250b3cac38f36bc46cf51773d6080d99bd15ce43a819dad196dbe6c45660ed0","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:41.202478Z","times_seen":19,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Holograph_Develop.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.495Z","timestamp":1782329721495,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Holograph_Develop.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h%2BBVNVDoeAZL4xSi3bj3Zbgl%2FVl23gpcvBQWGy35x1usBh8P7oiBWncM%2FkQWWKdrcSVatlRGXGNicTsvZckfdwHfl2PTtUdoRJdCz%2Br8HbQPlOnyPJK8FLV4TVSKRXxROBlrcg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"13d4-19e8af97256\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5076\r\ncf-ray: a10e2cd75ceb723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5076,"size_decoded":6060,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"5327c4b521f98bde313e0e31fa6c7088","sha1":"4863016dc283b440f7e8795f43bf811d8e333155","sha256":"53b6df6d5089e1f3eb6ea2539d8f4b8af958593b348bfdb6607dbc0e3c3d45cf","sha512":"04a51781e3f4ba15d8e21f9678f02f001c0f56ae81359c19e6dbdc110975e90eaf3a2e16707a864a3ad7931a3de0fa391c332010748fb47517de3f3b6004be30","ssdeep":"96:oDwpmPisovdNZttQcPrSH/nD7Ffzd6NAAAAAAAH1ugfeACEuw1+fWecJAb:oDwpZsaBtGczSf9fzcNAAAAAAAHEyeA6","tlshash":"92a129d2991222c1dbe80b315c1f92aa16a37e73a692eb115033a17cc1168174ebddc1","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:40.896632Z","times_seen":19,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Tradescrow.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.825Z","timestamp":1782329721825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Tradescrow.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yS4XJini1PQxLafTzlzrWXUj4iqWbkanHAZqmBKrFyDcNwNDPYwJ5Z2FwvS7HV5NKjvUsSqKzIgAmcWS0yjOia%2F1QMP%2BnXAaTOiZgC3mbuGNVu8u83WPlSPeUfKDtTz9OK8lMg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"17e6-19e8af972f6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 880\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6118\r\ncf-ray: a10e2cd96da4723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6118,"size_decoded":7097,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"571dcaa4b77979adf95b4b48d2881879","sha1":"13d43c27d8c5e3a1218b45470641b06bb060ff41","sha256":"51b9df81da6de383d91dab01c35a4af04140357294355f572619e8bf3d37cdc1","sha512":"c33d86900dc245684acce8b59781800280ae4a47f15bf17d67fdfa0b6450b8ca8759a3b4668e6e8d2e8ccbee4731daba25a64cbdbbe1e7ba01bed5f778ff128e","ssdeep":"96:MZ3m/GhoaVoehchc9mwroYdUtLDq9epiYYgFlbAZj75bcwWIaONpHR:+mpammchc9tetLE6iYhlb+jFwwWCx","tlshash":"30c16bc52347df7a916adc0586c11324042e920992c3875a93cf2eb63cb83f9e496fad","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:40.638547Z","times_seen":18,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Konio.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.009Z","timestamp":1782329721009,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Konio.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RXL9%2B0juFBcRp7ZGbee8z%2BOOj9fTxQ43jD%2B76i0FKg1mZWtIQ2NWEAeUb1M6jb4yiO6JB7u%2B%2FpyJ0MLDlB%2FeGbcNcciJ2kpAiP%2F%2BJMnevoOmmweZHE0Q3vOqfRhpnxIz1pjAkw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"28dc-19e8af97382\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10460\r\ncf-ray: a10e2cd45b51723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10460,"size_decoded":11453,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"84327d9dfb61f10aaabffbeb747d2d3b","sha1":"8c7e097247319d6002a9e3961bba399148c70dbf","sha256":"698124bae54011bfc4528b1906165f24c72ec6203327d39285d74ddfe09db47f","sha512":"f3c001465c1d05c8724d0dfb1088ff424dfdc93d4d2bc3ee087d24c12bb4eada55d2ff1fd00c5df8dc38292b7508df1091237631896bccbd0a92efc3e0e612ce","ssdeep":"192:wU84UFP9qZSD8I5uzewqo9pLDdZ43bB8c+Rzv8BqZbXJOaUB:wUPWP91xVo/XdZeF1SW2LgFB","tlshash":"e222bea8cda4b768ecff79181f2d8e333927c1407a15701d25e960be2457205bfc2e68","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:41.222703Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/OPZ_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.053Z","timestamp":1782329721053,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/OPZ_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fQJrcUi8mlWzLKmevEJdmKa9mUMz2jLcm1yGPtQ4OT4KFxUChpsFlLPgqEls8tc6lrU7wZipqTX7B7cR0pInJcf8X8j%2BwtBDP6gkmbzBPh8tb4jFM0BaKF8FvBpoKHbkTMkNcw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"6c59-19e8af973a6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 27737\r\ncf-ray: a10e2cd49b79723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":27737,"size_decoded":28716,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"8931b24dc45c462eb866ab3f7c7918ca","sha1":"6c45ea23e62cb1a70edb616dcd40dd49929c3295","sha256":"e0743036b802a664144c0dcfa96a8f452454a021d37b308b99c42a854cdb4f93","sha512":"3b5eedcc155ff2e76adfe91e65a2d9208d057d51e1505c7f4f0b38ad619969d4bdd2d1b919b838eafc06a79a7b11afbe3ff40d94d32f71623f48cb58fd0bcf73","ssdeep":"768:ajSACcuivhb/5q/N1c+w2H6LXVaaQ2FgYv3NEEZKhO:ajSOuivhbxiN1c+BHAaaQ2aYv32EZKQ","tlshash":"f6c2c01845784d493cb81ccb3f880dd6eb2f59d473a7f7243636284ad8a4d09e7897ea","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.640488Z","times_seen":20,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/BabyDoge_Swap.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.116Z","timestamp":1782329722116,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/BabyDoge_Swap.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kyuL%2B2tzlH54nCT8q1BQ7pEKCShZId9P7aXiUkOLTOsnWEpRWQwN5VTy0iQjYVZ40YGVQDUvmZdk75TDL0tu9vg98NSxNgqXxucAPt755zrteCkqJK30pRJsMQzaTd8YzBMBcg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"5bee-19e8af971f6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 23534\r\ncf-ray: a10e2cdb3ebd723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":23534,"size_decoded":24513,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"42fc5e9da2427e02048ad6d2c3c6aa7d","sha1":"19186c60fccd19052bdcc1bdae9288794d2a92b6","sha256":"96129640e7c07d79d9c4999ae718758fe7617ad522e7725a92c47a856a1c9e94","sha512":"e499fedf9cecf4dc33698e8b1c9d86b5a5b858c617e2171c422fd9454b801e987d89b506deb3fd3709b409851433fb2469ce958abff76813cee50340278e37f4","ssdeep":"384:8hzrvEJIV+xZKD20hHrJW0pTiUH36CVPGtVFSOphSOVjadn1jJ8tBvUri5kg2ZOn:8Es+sTHuUPOdSOpMOVi1F8PMU6OyGr39","tlshash":"deb2f031775c463ad830c0ff579a9b3b67d618273a7c3a12dac859058ba9c3f79b0921","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:40.602102Z","times_seen":19,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/GodWoken.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.301Z","timestamp":1782329722301,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/GodWoken.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Rh8GULRuyeFVZNp1oRwAeRDnsQRH2GLWtjpxrAnJGygVkU%2F1aGoOLUj8AoKCWNqxp5G754ZknxtjrFSceaAQPZo0lJSDdx5RhT9iTqFQvwOtZqAVp1Fu%2BUXRlMFqiPc0NxxTQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"4bf-19e8af971ca\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 1215\r\ncf-ray: a10e2cdc6f54723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1215,"size_decoded":2194,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"4ec563b07b6aee17bded9a133189212b","sha1":"8b11a01d81c7e2942978a47803d4b1922acfac0c","sha256":"a57c142c79c3c09a80413dde587b42c43aaee71e1770bb8fa714b5f3793af454","sha512":"5c2d1588550d30ccd545a22d77ae04dc24374eee4aa1b442514da38ba69d4708bec409a93baf306b00b3518339463886c442fef7efc246c111e8cc0b71517c5a","ssdeep":"","tlshash":"1d21b7b405283c5af24048951635e4134c93cd3fb0a788d0b4f1397c5abacd072960ae","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-06-29T07:04:40.603014Z","times_seen":18,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Brave_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.732Z","timestamp":1782329720732,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Brave_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8WuW51SL2vDKnGf6ZpImMqnQwgekrIyAyES7XDz1DSeeC6bnJifxBAqfF9D4%2Fb38DEl0EOmihBBM0k04LZ3OJfq6ZsIPYXmI%2BR3Ut0FdBP6SmYdc9lSbvQ1Dvn7RWgIufeI%2Bew%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"24ee-19e8af97346\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9454\r\ncf-ray: a10e2cd29a88723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":9454,"size_decoded":10436,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"c62b4699f1bc81f8bab3768dc810528d","sha1":"b2dd4a7e705e698c3904030e7fc4679e86412b92","sha256":"102e81361c1b387658a546111d700870b64315a8d53cd76b63a34750237607df","sha512":"fb8c7b9270d213776597f1a5bbf92ff2988e278ddd279b68a97c212ed8a3aa8e97086fa3e965ee034e67eb10ddb70b13d5400f31b5e4f0e66078373055219a8b","ssdeep":"192:FgpkjYlgHSTP5kvBN7JaiiSASTwQ5mDyXzV9qYtW:FgpRlgHSTP2J7aQ9TDNV9DW","tlshash":"3512aef87ad6c01d12959430ab41e0322f65c9620621bd0bcd19e9cfce11d56f9ee98d","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-07-21T05:16:19.665542Z","times_seen":175,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Talk_.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.834Z","timestamp":1782329720834,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Talk_.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gmZ7aAJQo5to5OpPUkqufQDL1rLpV2%2BsXyX5%2FhRdknwIZKcAABchZyp%2FcaY2jcLmc%2FIBGEp1lJ7%2B%2F8VcQ2IEx8gzlA88LDzwTrmfvIJmb4HIMRN%2BBFQ%2FVpN7KBlKaP8LHN1Xtg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2be9-19e8af973ce\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11241\r\ncf-ray: a10e2cd33ad2723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11241,"size_decoded":12234,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"b6d958c62337f1a9fab845aab98ff724","sha1":"035517c431bdb5f30bccc477c9aba5875ea2e2ce","sha256":"7f56df23f405f8a39d39e702f4698b18c8bd6ac798d519dbf549d1c0dc4673b2","sha512":"027e81c9b409d61f74993958379da3a6f9409d5885d1f838424ef45a7940cdffed88f7057da2a6be8c65990f8305bfbce891a3e1a4380ab3ae660e3177bbf388","ssdeep":"192:dw5rQO70eY72fNX1v53Mo0NicaSq7vtxBfxz/lEBmwWFrSLa1PuLRK:UrQcD5ENUxBRGBOtSLwuo","tlshash":"8d32b0e9eed04ecdd30a15bb4c02e717bc60c336908e9071268a50bc19915587adfbae","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-08-04T05:59:25.945137Z","times_seen":37,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Volt_DeFi.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.915Z","timestamp":1782329720915,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Volt_DeFi.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hait%2F71s5Lo3lO1oznYSH28m0CpHJt9va7YbduCFuIgcxNkWxKwmMBUFGaEMLvKwjct0VGk090tj5PgYzK3bSdRYyNZi0VBzbQmrcKdieXWcGSDgXR3xhCzTxJNw1j%2BDZKYy6w%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"67d2-19e8af973e6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 26578\r\ncf-ray: a10e2cd3bafb723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":26578,"size_decoded":27559,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"457135eb0a35be08e48ebc02b21f7ba2","sha1":"0bf9ac9d4ede05a4c1b9d957808a633ded10a47f","sha256":"484f76de162a7decea8d41a11b47061fef64a30a37a79255f88d9a034811727e","sha512":"a939cf73df4c07fda0f6b1aacd1f3384d47eb9038f03be44bc21b904fc8643b22ae76b532aa26ad2d97d2c2de8300c6732abe3a72af1d139d19f365ed38e71c3","ssdeep":"384:n+U27HOVQUCetJJwmfhK2gMeHFeraD7pLd3IFYRiVWRCRD4Mn2/wMEqf:f2bOVFCIJJXY2teHu+7pZ3YYmzHn2zE6","tlshash":"95c2e130a53794e7474e816e90fbe1a6c163631ebb8150d336dd0bb56592fc9681cb33","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-08-04T05:59:26.024524Z","times_seen":37,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Raffl.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.409Z","timestamp":1782329721409,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Raffl.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oiu%2FRsKdakaF6RGi9W9TfFs3EOE7Eg8Kc4wbUCSuoVEC4lAu8%2Fclf25X40MWC1DvMi8kg3fOzEQ2LO8oJnRNwoJKnjEYllqjLwvRqXheo6F7AQAa76NOwdaT0zOm8RbXGOw2QA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"11ba-19e8af972c2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4538\r\ncf-ray: a10e2cd6ccbe723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":4538,"size_decoded":5518,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"40cee252a55b3667f668d4fb0630c18b","sha1":"a85ae1e76798be66b6546fd4abc64173b918d2c9","sha256":"dc24ca514ffad7d10fc98ff7f84e2979a67b04c1fb142c75c7e713ee8cf9c0ee","sha512":"4de9aec58b98a4226c5ac2101bca5ec5b6ad9ac5f36af711d28f75cc7b33324466c2e645921a1561442a5b29af0858c5d60160d5ddbe67d7efabfd89d6457e20","ssdeep":"96:hhdhpeQo5I7Y2O/SbjV7clpYyGvq3Nz0PLhovReknPp+sxACEGCp:hPeQLs2O/SbjVIliJvq3Ratqsa+gACup","tlshash":"65915cd7ed4790f3dd680150cf690959b58c8e117eac0ef1a6bf446c9e1cf94a99141c","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:41.124568Z","times_seen":19,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Staked_Celo.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.411Z","timestamp":1782329721411,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Staked_Celo.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GJ9JoZ%2Fb7hxFdD8x0hHxXet9TbEJ6F45u3cguo3O%2BstLk05Q1jo0B%2F%2FZzVOeY465e4zzY0f1SqOKU22KePTPs3ujdbhOyHa1AY8kxzV6J7f%2FvXEWXOl7RJsmUs0oZErO7cPAJA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2618-19e8af972e2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9752\r\ncf-ray: a10e2cd6dcc0723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9752,"size_decoded":10738,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"84c2b308d16d8be09e954843c91df889","sha1":"69c5809d940ad029b59a43c232399649d39542a4","sha256":"830d0f080573340061387e58ae6b985f84baee7341976adb212ab32698e98b0a","sha512":"4bff1467f9ded8f220d63e70d9dc48b5c1bf9725e2e294166d573137c6f6062bceb1af7bbead9dca848cea720cab362f3b746caaeb59e6680fe738aaa09fa9e9","ssdeep":"192:jTsA5BjZjaUoMoQglsXwez7t3AeUe6C76qBTAAkKCoreVsxV/dIJON/X:n7vK2X77t3Ae3HBTAA9eQV/dIcN/X","tlshash":"c812bfaf1c5241cacf016b3ac6feec5505ac41e5aede81206b2582a38825dcb0368dbd","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:40.775526Z","times_seen":19,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Ottr_Finance.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.452Z","timestamp":1782329720452,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Ottr_Finance.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nMwxO0Ac4vxsJ5wAvK1ntyXwuhv06ugO%2BfBZx9b%2F%2BfJ9qEJnHxFGQ%2BTi%2FPHtX6nYqrQlPaKANLDcWCGWTKfzrMO%2BqhZaFIQuEjpkLFpAAirKAMYWeY7tXYjMm7Zn4KgG49fkNA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"6f0d-19e8af973a6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 28429\r\ncf-ray: a10e2cd0da1c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28429,"size_decoded":29418,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"a6cb3f49bff842179186165f6f3a9d8f","sha1":"fa558f976f9b2c34eedd030b5fc5a488b198cb56","sha256":"0436668ed2f124b47dad5b767c4b5e6998768e4cca7d9c19163a29dc39fdc2ad","sha512":"23d9a36d7bab9a3b92df6db499001a354bd6ba9ed007b68654b81e636dbcd09273e4ef56bf6fc8d4c16e97cfd715cb315243ed5a79d91d4aba1f00ad47ac5923","ssdeep":"768:TT8me/mvlJokCG7yjRRF8Pp8b1TK2WHcWNuZo:v/nCG7ytRu4ZCduZo","tlshash":"ead2f13e43b066697b89e188e439e5d2325fdb58c8799bc07466e4313dafc7c13a5234","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-06-29T07:04:40.887229Z","times_seen":20,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Torus.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.757Z","timestamp":1782329720757,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Torus.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e5FEbz4Lt1T50Z7xx7tX%2F7V7d70LWSzyJnPjfsfvyju%2BCHmOO6DbRKOweSu8aBQVU0ZuKbWQe3nrEf4E5hPs1krwyaIZc5HUGPtCopeRCbPs55QcFNV0HX6472XI0cKVpv7%2Bkg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1014-19e8af973da\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4116\r\ncf-ray: a10e2cd2ba91723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4116,"size_decoded":5098,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"f98637446d8a69bfe1330d84ab956c57","sha1":"fe46f7ea18d550bcb9e40519c92a680914967692","sha256":"7155e585f5f698073cd2ef1e743145e35fe13d70c40420c6c4eb1a40939a6826","sha512":"e7da856ec84a1b350e96732b0275651d18064d76b183924db6044f8af6bcd1a16664cc77c789efa1e5d960df9c47312258821c9aa888c4b49d13da758dad0316","ssdeep":"96:iT/Yr/D9YscLoggggggggC9JHxQerAhM8khT7eIUN1gggggggggggggrFNZA0ggE:iT/4D9jm3jRzrAfpKNZANcAr","tlshash":"e481722741298992e47f0547f0df760aa41283942ff218c5b6a52c4fb5a821bdf1bceb","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-08-04T05:59:25.975588Z","times_seen":192,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/ENS_Merch_Shop.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.745Z","timestamp":1782329721745,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/ENS_Merch_Shop.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lNCDgnRvlCnDwgpBYF4EK2VZu5SZeV4KoCRkd2xe0WeV3uxjK1m9KMkaaOJk%2Fb3ERQBKYLWrpuFSoTlbUMaLtC3BjwmPBFIZxBVIabISU%2BA7kIc38rSXjulMp%2BLoUlktGVdB5A%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2407-19e8af97236\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9223\r\ncf-ray: a10e2cd8ed70723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9223,"size_decoded":10205,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"03e64fd1a801924f584d6602d109b903","sha1":"d5aa3de24104c4308968d58ab73902a9bdb121cf","sha256":"08db59384a011fdd848dfb1bf10f08c90422edaa69ee4a1bbafc239139b8fa1b","sha512":"a796ce3433b412a9420baa8a71c925a28a1c1929460c1ddd52a0396beb11473ace756f9f30ee2761344cc1778f5e861b7aba0d14d0f409c07aab5ba00909e2e4","ssdeep":"192:ALgpAh19m9l+4uqcdS9250MUQR+ThZlTbkA9DJL87ciNLb:AOAN4l+/qc7UQR+ThZFP9DF0tb","tlshash":"cc128ecaee18b42254311b41881622137c3f2e41db06af5ccead8dd83c12b4bd47aa9a","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:40.738703Z","times_seen":18,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/dHealth_Update.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.006Z","timestamp":1782329722006,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/dHealth_Update.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KoUXo7oGazip8MP36RZ7gTBmMaXn5eVV7vxC%2FyMvJpAyRZj2sUZnOibVO%2F5UDiG%2BMufbM16p7JSPL%2F4tTAuPZvglfw%2FV3qG23%2BrCRMTdAAAt0KEwVPUbcivoPeXvne%2F7gSZzeg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1bac-19e8af97226\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 7084\r\ncf-ray: a10e2cda8e64723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7084,"size_decoded":8074,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"83fec168948dcfd677b782a46a99f293","sha1":"beaca923030771bb195dc10475670e72ed61eb44","sha256":"b873021f614e3c1e145a2b7b4a6f392a86fcc63156a88c8163b1acbbe2dc0710","sha512":"2c27ecc996fbbbe0e57532d552c7e6d2c6a739bc570a8f3688c2f9fca0fbc53578916fac22b02f9279e711dc3621e248e4b1428a2281c5dd1a628157d37b9d36","ssdeep":"192:9HZDYqk0ls/TnkiTSK+zYZPyCHYGfChzFqbmv:NVM0lsTFTzV14GqpQqv","tlshash":"efe16a645362bccb3f56610369f60e462c3da2c2219046ec6f528defbed04b2608c7ce","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:40.721805Z","times_seen":17,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Cosmos.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.225Z","timestamp":1782329722225,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Cosmos.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YrBWkDFkdZXdrpaDZebLkOlxsKESml%2FizgdXcM%2FG3H9ciV%2BnX%2F%2BBMyZ%2FwQSI8Fn0lYZA5dILYbeQepi8CEuWV%2BWvCvG1gxLdz2wKR2%2Fj52ILC6Rc01lKM%2FnkHUIzKQ6LOizdRw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"a2b-19e8af971c6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2603\r\ncf-ray: a10e2cdbef1b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2603,"size_decoded":3596,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"1b4d11d6d3cc518d471a0f2eae4ae082","sha1":"2edd85cdf217fd9e1a9c3284a3b2188e0cca06f7","sha256":"e4bc2bdd6802cacfd313023ec123aa3deefb259f4a3169d479f40044c8145486","sha512":"e0338a0d6977d0f08965ba5aa23fdbdf74f800bf429019bbaab9ae2c45f9173269a58db186edad453054e114edd9cbcca2beea6851109803d23b2fe0328b5aab","ssdeep":"","tlshash":"cf511ae3040f2ec68f99971f92a5452f526f47650b8c0d35f2deb79369a7110827118b","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-06-29T07:04:40.880027Z","times_seen":17,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/OKX_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.284Z","timestamp":1782329720284,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/OKX_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j53rPhvc5N3%2BpKlYlkzcudvbxq%2Bqu66HDCFVtpTxvEFYwRv7oDlNHbLEHuyo1nmt0PN4x08zloFKROmztP3P1n7%2Btz%2Fcf8TOX4vL19ouB9%2FGuKfTFAedwTORthqNxFZtbNIsOQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"577-19e8af973a2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 1399\r\ncf-ray: a10e2ccfc9d8723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1399,"size_decoded":2384,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"5b6d03daeb1568d094cb2cf8fdc17259","sha1":"4c829fdefad55a31fa9ca3b572ad510ad9ed0a3d","sha256":"de1a333a6a4a1144699d4b3207d352bbfec7b19c22062fbf2d8271943e781216","sha512":"f4d7e5ca8c2a721dbbb7f075e9ea1dcab3bcbc902480d95a71841d17b0eb25b5c186b552692c50cd5bb04323629888a97d52ee1cb555b29526f2790e23313178","ssdeep":"","tlshash":"ca21c5b8fd497088eb69043308943cc1ae08daa9ad6645463d5a248bfe319f17a0cfc9","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-08-04T05:59:25.985559Z","times_seen":192,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Monarch_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.611Z","timestamp":1782329720611,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Monarch_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PE5EfLTwyule7P38wBSPIaM854UjOwE0hHx2E5bsxulR2Eu5R36eBU8vZL2ueYvOgTwTT7UZtEYaNIz750gHuuTnjfIs1MzVjOZwtrHkzPnl84PQ2qW7dEpRd0g9EdO3NTx4Qw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"6e4-19e8af97396\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 1764\r\ncf-ray: a10e2cd1da55723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1764,"size_decoded":2739,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"5716fe296bab9093770654a1eb126597","sha1":"3f7197a97ba37742c846c84397fe2cfdfce3de75","sha256":"11aaf8194dfb68f181b8dcca8ed525572c9bf5a316418bc1251b489635623cec","sha512":"c20fdba6ac61323a872d7df228a8e781c2be8250f7d18bd1b0725ae9fa3298325d3f45ee76e8aeb9f7166b960bfc91a03416687f80c366b0c36df25212774a79","ssdeep":"","tlshash":"7031fac774c02a56cb4104f322b5c8f94b00226053acb2629875ac282c14734bfa861a","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:40.87198Z","times_seen":20,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Unstoppable_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.004Z","timestamp":1782329721004,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Unstoppable_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MuY1gN0G5JF6d0CLRcetFCPLPYNqvRdNmCvTnKCQY8wIiHAo8SulmXLwmJEkFv8VJX5YvV2zXAzRufFmTCHx1Q234i7PgazSPbtFAGSvg50I79HJMj1Z3yPIpU9aVLTauntW2A%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2800-19e8af973e2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10240\r\ncf-ray: a10e2cd44b4f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10240,"size_decoded":11217,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"6972c4792f8d16c6a0fda4ddaf4764ca","sha1":"78ef2ac1281341c3e1acf625d2e8bda45393634a","sha256":"db6bca5e40e5832c45ec6ff5e1f3368b3c704c9a1e1af9c7118dc13f257aa726","sha512":"fdbf40f60be3e6f8831437c610c2e313220173bb340931035476cac8d7d12be9c8b459ee5fd65aafa1164b39be280e748168168354166b7d1328a039c9401cf0","ssdeep":"192:3wtGThlabAyUggm5e7lYB3p0mvInSkYtnAXNgHOCQpWAH7TL8Igr8Lqyz:3uGTLyAyUggDlYB38nSkkn0+S0cXu8N","tlshash":"db22bfb24eef2801246b3202b192964c3fad6d9958f091c78f5f8e499f3d6c5b48cc56","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:41.201062Z","times_seen":20,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/DuckHub.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.241Z","timestamp":1782329721241,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/DuckHub.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SZADSVDEZzrpHx%2BnqkQv82Quq5zI%2Fw8HV2RkFD8PDjn2ZEfldhKgxf2N8w%2FXkveX3B%2Bg%2FOCptDU47yhYZZ7IQsypZLcf6eCbdx%2FkP%2B2FGV2dzW8FBUAeKU0YOAMVp1qJZFcLOw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"5d8c-19e8af9722e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 23948\r\ncf-ray: a10e2cd5cc26723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23948,"size_decoded":24939,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"0538a069c1f5229ef162a72f807bc16f","sha1":"1c0f46692a9e16661f5cd3a23174bc781f7c30ee","sha256":"5c4ba01aa399ef8b00dc136b419882fffbf6959ae9d1234c4b1bd4cbb1f42bb0","sha512":"d87965f9d6d3ff06e22997099ffb16d8b54d44be46b4065e207093715cca0eb859e5f994799aae2ce112bdc6fa0f963ca64e5d85c9a74992ff516b51b102d5b2","ssdeep":"384:eBZfqdgUbRHt9Ezy9oGlpyukz+TBBJ+iRijuCBpeLaQwxijpZ9Rb4/oQDU1e7Nq5:ebqeUbdS2oeyuW+TBD+Xj3p1Qwxij33H","tlshash":"f0b2e107007b08a7ced06a430fbc7d89a3ea29e7c22c77186555a295c16ad7f1095fb8","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:40.67524Z","times_seen":19,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/FailSafe_Wallet_Firewall.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.078Z","timestamp":1782329722078,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/FailSafe_Wallet_Firewall.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4fjb%2F1wOebgmer99o%2B6AaKw4He10c56YyNHaPgYdoJN6SLJp47Xai6xqFKquiK5mpPpthP3AVuSVMQuad1hZYmxSktOZnamOAQBfl%2Fx6OJlh9U9pmFh99M4PPGF5yLJsPhyh%2BA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2df7-19e8af9723e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11767\r\ncf-ray: a10e2cdafea2723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":11767,"size_decoded":12752,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"72abfd04a10a6adedfc6fe3c70e481ae","sha1":"87493b9315f8774d5a4d84ff1ec9df2fd348de91","sha256":"66a55e98a7d6e49641c3d147fdb8666c83cd17a0ec75f451d6aca07072ff6d12","sha512":"f5608a7e27534de4e7aefe2dbaf2235fdece64eef21c5e01de6aeb753894e43e6a42aed34c72c05065e58d0d890dec20b7cb722d5192a3d67697477eeb09453c","ssdeep":"192:bkdWnv8U2zptvUE1PZdexbPxbFFvcbDvTupNNglsrMjmJbp/x5eGwu0uLoKBv/KS:gKkUKUSbexDSbjapNAL+bp/3xtoICIt","tlshash":"c232d1c31db6a8a2d14a7b3eed31d78a4b096d83d1ba65701deb7d0102903719c483e2","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:41.021513Z","times_seen":17,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Harmony.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.260Z","timestamp":1782329722260,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Harmony.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YoXE0KlD8%2Fh%2Bm9lKFi8GIsdcV%2FYorsXt%2BftQ1m3HYn9JL2Zqmg4Yr0EURmogie9BYwWdol63O5ocHvnavPjR1YlopEfngZ4iCpHymXzfWj3l0N2oiyF%2BcLbAGtwOIIiihx2%2Bdg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"2dfe-19e8af971ce\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11774\r\ncf-ray: a10e2cdc2f36723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":11774,"size_decoded":12763,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"89089869d43fe3471c532c6c2eee38b3","sha1":"a0a5a6daa5d0badf12653d0da91c5f39421af315","sha256":"99ff9493822375cf57b36207ac61272cc308a380dfc5a2cd926e37d556921a0a","sha512":"35ac5701862e7c0a291ce92fe563af78baae8365c95566cbb16c82b14bd5ffb4131fde501de1210a63dc2c7e31f4f95e272e28f13b2d82008ad05e9ec34336cb","ssdeep":"192:+fDYz+N+MzFcZ8Mp+fjGkHnPCR6L8PUSqCLqSpzcZhi1bBZiWuw+mMM906X4Ta:2D6+dFcZZOqkHntAMqLqvubBZtSbM90u","tlshash":"8932bf80b52d126953f2b3b3f09e68255c25a45ff1d8ce6d1147e5380fad1a9423fd32","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-06-29T07:04:40.726811Z","times_seen":17,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/KeepKey_Desktop.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.966Z","timestamp":1782329720966,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/KeepKey_Desktop.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UIKOXYOS8TQPa3HiRrQI8OeFivsJcL86sYbUyvfch46ehcAqGKnOX5lfsJy5bJME963K1uW7sE4SAmfKWDOulB3%2F5lgGRrOk3coxrUFTyEcEJTabejl6u4S%2B1T9A3NMwNTKlQQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"24a2-19e8af9737e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9378\r\ncf-ray: a10e2cd40b28723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9378,"size_decoded":10358,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"e014075a7370d4c26918b7418f2ac1a2","sha1":"0355334da75a7a9b777574f42ad28278d516aff2","sha256":"4b53aceb146ae994d469c35a0b4637e42ab18023a05f1794b298587067f65a3e","sha512":"f7e2573b32fd53a91d4f5b2fa2366da8f531b53a06bdd1de26df23a6b26117136baf3c11f379d0a65ca068f5f47240776f283e0c5f55946cea2121abd609a63d","ssdeep":"192:dAeGHq3NT8/fsv0CPl7Xnsgo/VbWDNmkSE8sLBJ5QnKcVC98Tu:93NA/fw0CPl7XnsXNMjpLTOKcLu","tlshash":"49129de106bead98df375e7387a225c0c489d6449267ad505afc0a37d422b6d2ff02cd","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:41.109385Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Proof_of_Visit.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.247Z","timestamp":1782329721247,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Proof_of_Visit.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RYDNCmjtFMw1UTVgbX5%2FKPLneYxa2I%2F%2F5WWJZd%2B%2FYq2vVHDVJClpAyJPc5HptRZWE54BzEE4veRlylTHzEXyn%2BsoTGGIpqdGpCUvxL6ZhzmFm2pruu6sOqumBQv%2FET6c%2Fbir%2Fw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"336e-19e8af972be\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13166\r\ncf-ray: a10e2cd5cc2c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":13166,"size_decoded":14161,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"94ea39ce1637078acdfa0dbd3ac5a690","sha1":"9f2595672041ed23c799fd5340d3513ba7fdf9e4","sha256":"7465e9b5749532332604b7701ec1439cf6bc38156e916bcd59b8da32207f1a3c","sha512":"4440faf891afd5e3e7f7695177e0465d58b10c768118727eb2a40879210e1b2c4ce8418dd545c0fd69f972868243545324562d4221cefa1dc9e668624c44e07f","ssdeep":"192:c3oIlJ4/kos0NrNExMozrN2pkkbKpHGF8NCvISmoDFIlTi4D16Ei1oPAVaX5sgHA:cvposSIBSbKIFA2M6pCPANgg","tlshash":"43424917adfaf27504b0c373b439fb78659b1b949889c49206468abb07412b8d880bdf","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:41.110242Z","times_seen":19,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Olive.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.514Z","timestamp":1782329721514,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Olive.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=liMoGb5t0Z%2FxhqeWPHfV%2FIxs%2F5BQ6cDx%2Fn605JPXk4JKjMCgDnc2av%2Bx9d6WxeNCHqLlYV9BlhPym%2B%2BlvJ%2Ft84EWehxeDFM7tsjH2dlMiaqeNu6zFzPkX3dR5lBNMStGVtbRww%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1416-19e8af9728e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 880\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5142\r\ncf-ray: a10e2cd77cfb723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5142,"size_decoded":6133,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"70f62e3d68dcd5e7ae935576576bc18d","sha1":"dcae87b7e661b60fbc257f681415590205f70364","sha256":"21e5d75715bb5376e4059830427cf661a89567581fa1405b2a1d2f047feafd5d","sha512":"26b1fd3f61d1fdf6a9280e4ca0f81014897974f92a19216b9f182327843d155accba72041f9e04af156a80fceea70fe5be2d9c2cd60931849c3bd284e84a37b8","ssdeep":"96:UZ5/aT/UWJIDCixKSoZGLvUfq9YqQTwPs4hm9QztxN:SWe/9LvUCrsNETN","tlshash":"e3b14c670656da20342e7b95835df5e42e4f4fc82cc973740ae08f849d197b39acc8ba","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:40.705503Z","times_seen":18,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Intelly.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.597Z","timestamp":1782329721597,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Intelly.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ff2tFZjbwKMsj5Wl2cZ7Jbo3%2B7aB0f2rNKMZ0VqI1jX5o%2FrDfY%2FVZCVOO4A%2B0VpYlIUVeuNJUdWiv69qg4zzouM5HRBKaOe72a2iEx5Fb5ppgBiKZpNdicCW%2BLxIlpb4k5ZbtQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"15c1-19e8af9725e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5569\r\ncf-ray: a10e2cd80d31723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5569,"size_decoded":6555,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"924ee1942b7c26986f16af0d5cac2e94","sha1":"3652988396044cff31df7c6ea201398ebd2fd634","sha256":"453de45388ca16b1a7a50897d50f1ad5b32ab784de153e60791a995abcda3d82","sha512":"aa4967ffe67cdab94e72203b34846effa82c29cab8de242f4c5d65244f061667e884d04c85d5f7343d7c076e823b395d1746695e0ad1c67314203c5b4d0a9b7c","ssdeep":"96:vYtLCMpWhEOHyPAY0Z8npt92yUJNp/jBY2rxdrvutZMfqG2q8V+ikS:gXQJyoH8pX2y0HWs2xToif","tlshash":"67b19e180d9767430d4021b8bedad22d8e357fdcaa59cd0b2a38729191335171ed15ee","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:40.720118Z","times_seen":18,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Zien.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.038Z","timestamp":1782329722038,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Zien.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=efoAuo0VEWPeVI7krluHoMPF9hAQnCoewai1vDWR4IyuShGCxn3vNYiIXZaCQD8%2FvONWA92RAgOATSsFqguANVvsCmaWvG2l64BzQuHi8bo9u19fqTD4tIqDsuIkpLTWWW4j%2Fg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"112d-19e8af9730a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4397\r\ncf-ray: a10e2cdabe7c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4397,"size_decoded":5377,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"c2713840a36e1b8f65aa0afd4f69f608","sha1":"846595258bd6c917fa3c996a0236fa5f4286db77","sha256":"08d8771f24cca89b5a4b5dd23271fc6a16feb90e6c909666e7cee43e5751ece2","sha512":"037b827f29bcd9377b29593384ae3d371a2235997d66162e5901c9e2bf1b5815f845a7cf21b79af8622f3f4809b62d0051101150ad0a480e926106c91652c3b3","ssdeep":"96:fDwlgb+eV7EoPzbSL3TisxtDB2NxaU+PINdk1h+Rd5w/4t4cZqm:dye1T23TiwsD+OdW8vG4tlEm","tlshash":"aa91c6693a4de986866f07719c5af1c5391517a606b82e8223af3c79156380ff81ffc4","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-08-04T05:59:25.994833Z","times_seen":34,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Binance_Web3_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.315Z","timestamp":1782329720315,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Binance_Web3_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2knccBKmb2pxOcwwgCxP0cNxzZAG4sDkGUu81eYWgChxoP01WrQrnzA4O0j1L9o1HAyZys9tDuwqnFIyG2M7jm6TVGMc%2Bpn9XQIA1m%2Bi7IvM%2FtW6gj3r5J1nzGesdxR2FcNElw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"25cd-19e8af9733e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9677\r\ncf-ray: a10e2ccff9ea723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9677,"size_decoded":10659,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"a82884d5b8bcafb10a39853d3d453598","sha1":"a63f07f206c22a408627c05f90a926e5f0745132","sha256":"81053d21ba0331c8caded347e4aeb9795a45661c717f2a798e5dfc67add47ccb","sha512":"b7429b536e4c501ed1228fce5c0090451d6dce608d0f2baed2856cbebe29e06c2c7575d8a6f84b01bd1830dbacc829a68abe5723b372fb11039043a1313af37e","ssdeep":"192:DA4QG2/A2FAXN/Q8q4Lp+6xvE1nyFeKCrnO:DhQG2TAXXq4I6e1nfKCrO","tlshash":"5b129e8e405c6aebf4c212a9e5294a0bd98962843bc3059ef9dfc01c55437d3ff16a5b","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-08-04T05:59:26.022171Z","times_seen":37,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Best_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.120Z","timestamp":1782329721120,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Best_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GH1%2FjlD1gEAax3LsYyRaTZcspz8dMpR39pFf2zx6y9Aylhf8LdbEGaeCeTak21qcartTOQf%2F2pFb%2BBul%2Ft2EWtaSYe4gXQO0DIQVz68jOqyP7qd6vHUN%2FtMumMUAHpaH0Pvi3g%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"32a3-19e8af9733a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12963\r\ncf-ray: a10e2cd50bb3723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12963,"size_decoded":13950,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"9bee63d12b3f9e480c0a98911cbe9826","sha1":"0e274da7064b70096079e4932006c1d7377d9dd1","sha256":"c83f9fb8386056d814b62f943648e05773fa53ae6ebd881fbfc90c7e7b7da58b","sha512":"c8d1f7f1c4b85a61cefd594da951c52474a89091218c40c025a3141d8eb70408ed1bdf5b3c2d8a25892481578ca33df2f8b5658fb092f9efd27f67c61b13af90","ssdeep":"192:J+9zOKDz7NdWgVb0HA0ilXv37qy81buqxxcU1v1J+mf2BpJ0et8VFkBdjdxD:c1DnLn0i5rqr7cEvv+dBpJTuVFAdhxD","tlshash":"4942d0d8e076d2281b4d857fbc3548818bbab72c9b309d35e12174a1619bd3d8e5f31d","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-08-04T05:59:25.919141Z","times_seen":191,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Comm.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.314Z","timestamp":1782329721314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Comm.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EXE9%2Fw%2BtJFE51v%2Bh7RiwSx2yc1izsglOM%2F06Iht1usygx%2FW84vgKZP%2B9gZuJPtoEMtmC7iElxz9TeBH2FSlGme1dngDVMkAXvUBCNop31fGR%2Bn3nVJxjm1rMJEF5fWAWVLUzdg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"d84-19e8af97216\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3460\r\ncf-ray: a10e2cd63c69723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3460,"size_decoded":4449,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"f684092f82c65c90ab26ea27ad3faaf6","sha1":"e92675ea49b3746a5a2bba79d7091d3b82a76f3f","sha256":"5f10285a73b097fa15463ceb9b0fbad89a2ea479b1ca314b3120d391a40bf953","sha512":"6e78036ede11615b63c5f9bc9ba7e5a79477ca0b1b1e9ef2e80a0e308d22cc96a72745e8e8a35511491ea97f7916acdfd643ab70473f2fc97e592f2ed6232908","ssdeep":"","tlshash":"9e618ee13fd0bf60c736b0fae00a63f64d166d409b8298691d2a0e89160705bccfd9b3","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.960239Z","times_seen":19,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Crossmint.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.740Z","timestamp":1782329720740,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Crossmint.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AnzxlwXsXAJXvuVcEfio4XWLdjjCtH0JJUa%2BmVtw%2FXaG0d4UddtuitjXRF6oRW79FctM7rFFxXhJZOlFMvsRMtkH1XJf61PxI%2BTeRxN%2B4Vh4N6FRMQTd%2BSkutgaGJ4BKb%2Fw9Cg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"6193-19e8af97356\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 24979\r\ncf-ray: a10e2cd2aa8b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":24979,"size_decoded":25968,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"83d61e76026cf10c013adc6cfeeb7eec","sha1":"e67ff2a99a6c626452fe56699f13923a0b169bb6","sha256":"dc80c258045f25bf1c54c0bcfde058245665fb87f61b87b0f87b49c76fd307b5","sha512":"2829dba2b6997f6d3c9f7f8b78624d2d6c710fb1b7c1ec4b74b7e1eef9254c528a9b81807c83046f3e7f7d1b750bf09ab5f69813f8381db2dd480c2bd6f07f42","ssdeep":"768:mqn1jtqxB+LrVGPYb0dEgF05cRqhVdOdV:mwfwB+L5eTNFAcREdOr","tlshash":"f8b2d0100a02ebf854f59282b451c0d8ae52056e8b9a617f7e64f7b1ec9c7c6cd1e73d","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:40.599351Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/dHEDGE.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.261Z","timestamp":1782329721261,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/dHEDGE.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PlTsd%2FYHIzZVS1cz9s0C9jmt2f6M9jjhUIk2rE%2F%2FJYb4SYNgVG1bSi5UK%2FeYahuHPdWKA1%2BmDj04EsemE9E86hMnkh0KtB0VROqtzhviVdYsvrZmF3m6iIbYqfoEBZiQT7e8cA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"c01-19e8af9722a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3073\r\ncf-ray: a10e2cd5fc43723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3073,"size_decoded":4058,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"6215166d90f2978d14de5de51a6d9311","sha1":"76bd411c3e1e8ed375e4bee76ada1a1c1c9e8f12","sha256":"7f150a7deb42e5ca6a2de128655dfbe84e562980e83c815e6e15830c92a49c9e","sha512":"15757d934a9d603c18ee82c3318fb75ceb7296cc0d9967cc21872a11bc6f8f2ab3a87860d217c12b03fbfb7f71e6877e0a40bde88cf3b0d7dbc70b9342ff0c92","ssdeep":"","tlshash":"9c51c7df7fd15fa565eb851bf260cad04c823509b9dda3fa00c39569b12ddd020d4358","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:40.956109Z","times_seen":19,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/DeFund_protocol.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.266Z","timestamp":1782329721266,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/DeFund_protocol.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZR%2Ft%2B4%2FtZTnKwj%2Bh6VI3BvvlVRuUOQN5iDHeArULVyXyXhYWd8SGiuoBJ%2FOlI55kx5hrmCmJHIZ6mL577E39Ym437XiKhvyZ9RiTYRwsT0AYsR0mGZA25OmZzNSeQqyOeFrZkQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"e273-19e8af97226\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 57971\r\ncf-ray: a10e2cd5fc40723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":57971,"size_decoded":58958,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"2b3ca1c27d30ee1b2ff0a1fd6b90ce8f","sha1":"f4c318a3aaade6e1ddf7bdc5ba1e646f4fda0a5d","sha256":"4d483790ebe8130594a1a6273c444e3cfd6e75303ba3b131c6d9b21b0b326cfe","sha512":"a3d8db84826ebe827bc3593deb8654643600fd15f8033be9a69a93279b32fe440a016ee32e3852271eb136fbb5678d2d44a9372eafb3bed4aa743ef19abe0a0a","ssdeep":"768:YcPVO11WrKt8/SMmikoAZG/haEQ/AsAE/A1/IgTL/x+UBtax6UAnCELhACT:YcPonttikor/pQ4sA0uQiL/HpffNACT","tlshash":"a4430261680f1f5bfe4e244bce5a7c012ea9d2153097142639c38dc1fa7edeb474365a","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:40.586736Z","times_seen":19,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Zealy.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.326Z","timestamp":1782329721326,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Zealy.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=elJlrIyyTHfr%2FrBNs2%2FaTx70uY7SqFR4pEvJvn%2Fb07SoE8BdIgVW%2BEG14fZnQoZk97Vd940mulacjNQeV6ESAiDJBXlQK0dppbnGB9N6DRUsARvMUraM0%2BFnksUGhqCkc40V3Q%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"24d3-19e8af9730a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9427\r\ncf-ray: a10e2cd64c74723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9427,"size_decoded":10413,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"88071da89e8e776843c4bd8ae079a74e","sha1":"6259d4cc065dc31ffc9bdd8cdf2d12386f7ae7ff","sha256":"d9589510d18301d3f5fcb57d3b1587ff53fa1dc9a974ec589ce07e677fcc6366","sha512":"8a7988988435d80b47adc3d261f8b2ebb293368055858447f6498d3baf7733fbb36f29a936d4bc0254ce2a2f18b0b93b57915ed830435ccb729d91ce80b58229","ssdeep":"192:eBl2mzL4RIffESmtXG7YHnBDNd0dSMKN/PimaEyUtDvGqqzuO:yEmzozlyqj8SrN/PimByELGqU","tlshash":"6512aee0c2e6e8e327b92e538788df926a55be7d2610d7a8e100b925f433dd462e0350","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.717047Z","times_seen":19,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Lotte_Fan.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.600Z","timestamp":1782329721600,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Lotte_Fan.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pRxlNGUVpHcAFBeWCRR41Ku2wu%2FA0B7KSYMnBNdNx5z6ij4MyiPToT7rJgTQTn3ySYyape%2BhKqfrMT1pNv9GupmaFOWR9%2BEum%2BSYdmMIDF5Gmk8o8v9au1Nm8HoVL2xLvJPb0Q%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"960-19e8af97272\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2400\r\ncf-ray: a10e2cd80d32723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2400,"size_decoded":3383,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"24cc4e85eca6e9a14624918e6483c69a","sha1":"14847d221dd219cc99b46b37bca09a007bf1e072","sha256":"ea3498b5c4ca5fd9be709c60e12a6e36d1cad614e9262a1757c5808f7cf70f92","sha512":"c9b73918e9967b39436b5bc0a878fc3baccb8e6f90a49c6de3393dfc80e34fb5de395e3d7f2b68ce0dac3c61318b33655c61091926adf9f8ca6595cca85c22a1","ssdeep":"","tlshash":"f4410af6863be52acd7db277860e229186339d2d230665828238c9e535043a737dd349","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:41.024078Z","times_seen":18,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/PyeSwap.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.641Z","timestamp":1782329721641,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/PyeSwap.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sr5oNApgKgoCDsD3StI79T2etv8BscBxX0q9U7jtRkzTwLvq9SmXQUjuyjNVkk8B61ukPFmujhYJLL%2FdYDfTmLksi6zgLoZ75xId34LHNQi498Vitt%2Fiif4b9BC5fzViTon1XA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2ec8-19e8af972c2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11976\r\ncf-ray: a10e2cd84d3c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":11976,"size_decoded":12957,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"3d2a8caa611702e10d2ed0a2a89c3d3d","sha1":"749c37efea26f3940d65148fa9b0a6d168a172b3","sha256":"2ec7a8126789e80ebcdfc47f7b3acb1725a38f8cbe38e577081bfc9d570dd5dc","sha512":"c3765c09add4131f38e86fd7c0cf947a780a08ee39756b7583d2b1407421f21c381919276de47c7d29e450eb8c5dfc8dc48a49ac4f9c47fa662839c64c33ee9e","ssdeep":"192:23F8fCsWkhclONX6rEX1UQfm89lTInyKszrCtdsCkAKBuokU3K6L9ofubSFj/t:23F8f9QONeM1UQfm89lTInyrCtyNRQog","tlshash":"1a32bfd699328841f331790133a31143ffb764f8282161b93aa2595a76f54fe8983ae8","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:41.206402Z","times_seen":18,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Token_Claim_Dashboard.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.690Z","timestamp":1782329721690,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Token_Claim_Dashboard.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O2c47lhdGm2O6Qyq98aEMjfNw6FgvVstoulf65X91kntUKoK2lcmNJbfyWimXNIRkRhyy6uA0JA3y31z8Ha1KRgFs%2BWjXF1ugZmD4vqnc85CL49iYS8rWod2KLsF1go%2FvtVorQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"cc0-19e8af972f2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3264\r\ncf-ray: a10e2cd89d4c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":3264,"size_decoded":4243,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"c13cf3cbd8039f11b7191e9c4e833126","sha1":"08d314b9f1d11466a074a04b1fdb6f6b588f089f","sha256":"84eb452f7517bf3c6f5c7ca9d9a2e2efd72c12631c76789d86c81df2609e938e","sha512":"4d345b1d22831eb9a61d5fba2616d423598d6b365090348305067820c22e1694b52df9e71096916550cf441bba6a5e6a965ba07567014e39ee14ad0e2b6589e2","ssdeep":"","tlshash":"cc61c559af8bff15b3c964b3c9a41e204b1b81eca059b0d9e00c197f166d9cda37684f","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:40.686331Z","times_seen":18,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/BetcoinPro.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.748Z","timestamp":1782329721748,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/BetcoinPro.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z4p3TUZSnA0sDwPnOLdtZlqz1Zd4qmaRk0ivCqYU%2B7kUidNUfkyMUsY%2FKK91cYzR%2FGwawCl9UPIlBl1%2FcZZ2C4CYVbcq%2BIWZkmyqzKb0iCw7uNYOykQZHd3R1N8MGimnNl3qKw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"ed4a-19e8af971fa\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 60746\r\ncf-ray: a10e2cd8ed71723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60746,"size_decoded":61733,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"08f03ad6220f82fa960483ef550b4966","sha1":"51c083656ee900252ca676827b96126bd0bbac14","sha256":"1c2af0dc5d2f10fb60d91707cfbd7fe3323f762a93140edb8a5814af28d0798a","sha512":"57b3964f9c0fbbbc642b9edac2c006afc7ab5b7c8e2969f97c8195cf650f78b2043849c8f8514d936aa53e62edbdcccf8e121f14c10f67c8cf59b008dc245505","ssdeep":"1536:VbGE7Nf3RzSA7xKB3EUEN14PPuMrdkzrA:Vl7f+O83ER14uMrOzrA","tlshash":"025301b61f0727a47775dcb290d99731125ee23d4ac60f66248aa7d3078f8a1179f42c","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:40.664133Z","times_seen":18,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Cypher_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.541Z","timestamp":1782329720541,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Cypher_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cMjZl%2FbMFoTq3UtRSEUuIUtwwPr4CKbIIsdGgGAZRd0iGk0qxxyt1ACNiW3asy%2F486U7qT2Bi3jZ%2BqrH8tJYksGctn%2FP%2FfYsYVNEAXobbzwHtfky2Q5p5SbSk8jgrEJfpy9gSQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3461-19e8af9735a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13409\r\ncf-ray: a10e2cd16a33723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":13409,"size_decoded":14396,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"3867f033877819268794a6b277cb2c46","sha1":"7da7747ed4f38a06a04c12669a597e8c4cce06fb","sha256":"240cec18f9b36f8df19343d210bdeab3a623208afdd71777d011ec098e896065","sha512":"306f07fede1bae469b7fa3a7e6c408556d2b7513989048d7fb2ca0500352291e1c11e295b35d692b7e2d6e21f3a6dc1427f63869563cf21145ae2d5960d5812e","ssdeep":"384:tgvLva0yJ/DwP02vRGEh989Dmg7vl3UE3Rgv5KIU:gL+1Ds02v/huoAEE3c54","tlshash":"ba52b0b79d5cdce7a3be02b51ff018e0e62326d955648c88df72999df580a081d0f194","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:40.985993Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Core.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.750Z","timestamp":1782329720750,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Core.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oEv0aEzcB2Ptyo5%2BJxUhfD0C7KdHe46vLcucr5M5KMpALaI1njE1C9vFTYkXcUjLRepKmHSn7CK%2BUAwEGFDSLFAnAMAZuPjia%2B5wl8%2FBXjkhXC%2FDDS8vRjqsQDLBJtuLgV997w%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1726-19e8af97356\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5926\r\ncf-ray: a10e2cd2ba8f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":5926,"size_decoded":6912,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"444a258460b9c3df1854adbdb2b305dd","sha1":"812482150e759bfe0d35cb71e0f9b01e856471c7","sha256":"639af554e2de34e89832d49733f48a2ab6923f74bfece462ca8772b005fca38d","sha512":"9e9b410fae6bc6879b6c71b75cd949db24fa9bb02534adecf73103b940f5e20568ef4bdfd0105e94cd46b4eecfe587646cd7d9a30881570557ddcfd3ae1ec376","ssdeep":"96:lzNEwMLris/QuBEyAgkeiT/psalPY6Qjbfr+8U1Dua63FtvEiap7YM7:lzNEwTsFFAaqWmP2j3PU4nHGYe","tlshash":"57c16c769c017b4ffb22be7622c8cf98e821054218caa3654dd80d5634e31d7361cf6d","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:41.016191Z","times_seen":20,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Edge_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.804Z","timestamp":1782329720804,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Edge_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qscPukvzOlhbDH00EQ%2BN4wbpdFSHnr7x5mkQCRPgCmItLtY14yHnGvfLfwCWiXrLrlYq4BE%2Blg7W0ZKW1sRf0GFUT1sRK7ntpo5JRT3j1BCIvRlMjHxJC3LTNUJixpg6sN4QVA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"613b-19e8af97362\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 24891\r\ncf-ray: a10e2cd30ac7723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24891,"size_decoded":25872,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"6e50f251f963b2f974ea775ec4825de5","sha1":"a26a56228c529a5e709a3109f484f5ebf8899a10","sha256":"e145fdef7004bbe830824e1edf7187110d7ad88a7f69f4b874591fbb4f477de9","sha512":"b3a69b7b9a0ffd2f7c1916ec9d6a91d68734178e8f85a614ab5e915e552cdbac6f7a914218d0a5d4118571a13427cc10b0c708f987aa0c5e3772ed0af664aef1","ssdeep":"384:P2DvlJQGqsjFKsNkSmWHwfYetjE9tBhcqdTIOy8IacqfCR8b5CCr22S+IZl77:P2DvTQGqsQsNTQFjmiNXqfx9R+l77","tlshash":"abb2c0ddea2bd12b7d0949e67242e4da6a9775003e1fe3ceb245e8b434810c185dd1ef","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:41.055935Z","times_seen":20,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/GateWeb3.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.010Z","timestamp":1782329721010,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/GateWeb3.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XAOztTz4c5H6ZmI1qhUdfhxVz5Mx0gyFT1voCZSjEApd2vxZ3y1iQT1%2B5dNk08cEimlQEeS3S3P3%2B3rc07NgyGzNba5YQD0WdYMudnKjignAPZPfp1xxEiIWpmrvSOucp1DTXg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"15dc-19e8af9736e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5596\r\ncf-ray: a10e2cd45b52723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5596,"size_decoded":6576,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"cf5cd79bfd6c089e46be0c6d0a76d162","sha1":"6d06ca2f04b4635731789378045ad0dd4ac808cc","sha256":"d1dc9908a5e1a3ba3a6b4a6b9f92a95540e62c3a707e5374093f27eef3490928","sha512":"6c99b30c4f423a3afbe08c62db0eb133d55adff2ff47f1b87a098dc5ad3bc28f79bf53b1c9fbc2cff4e7f8c33e17da5ee82b41ea94ed83d59c0852cebbb9f172","ssdeep":"96:iJ6Q7/GxTIMclEFEsTflgkePHHyrqMHLLupLV9vx7WejrCJp1:i172sliTf2keaWY2pRL7ZnCJp1","tlshash":"4db11abe574c8e16ee747a92b0ff64816cd30c50647913bbc700bcb632a5513e769479","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.807587Z","times_seen":20,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.191Z","timestamp":1782329721191,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 24 Jun 2026 19:35:21 GMT\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":1447,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-08-18T23:30:09.145657Z","times_seen":40917,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":33,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Pooky.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.394Z","timestamp":1782329721394,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Pooky.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1SwihQuB0OoIAg1RbnYdJ80TxY3cGd84HCd6QJcX9MaRAth3rjEO6Eo8Nlj2d0mb0Uck9gwEjZ47gWxRlQRuoTAm7xoCy6CYcwg%2F1q3D5rsiINwN%2BBH8b7UNgs%2FS%2BuEs%2Fw%2Fsag%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1319-19e8af972b2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4889\r\ncf-ray: a10e2cd6bcb1723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":4889,"size_decoded":5877,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"d10876d690a4f01729befa80469df42a","sha1":"54ca9ac05631b032b9b0fd984ae86ed51ffc546c","sha256":"a0e7566aabf1d177824314c668c7f7fe72664b65a7fd32f21f68c4ec9d766c53","sha512":"a316f243e064b9358fd5f41f245e8664f2e1b3fae1335f4b438345146a79df6ccc0f69edd83627d31b0c111d5024861b11ba8d44f9ad72e3443626bafe6fc49d","ssdeep":"96:L3lqX7spVuuKjYDLpbxYiPcB9RMN5PErHcOJXrj4ZYWU8/VJKe3IFSm1GW0L:L3lsspVuuKsDL0iPcB9RMrMbcOJ/KYlg","tlshash":"b8a16e3736e24e44f02451b84a19fd43191742bdd107967daa22a07dccef3c4ae4b1e1","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:41.071143Z","times_seen":19,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/zkSync_Portal.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.568Z","timestamp":1782329721568,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/zkSync_Portal.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sn1jKgbqXRZGljmf4zchoEHV8lN9K7aMlkbkbvzAkOFD4x2oKwOWcH98wviExhGxi1q0tvODPwHTuJlAXWyqv0JQMRT45vGnowto%2BiSxLRlhX71CqlvaZVOan5IjhAdXX10z3Q%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"12a2-19e8af97312\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4770\r\ncf-ray: a10e2cd7cd18723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4770,"size_decoded":5748,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"b386c5101810ec5aa8d0f344d095636c","sha1":"d9751bcb8f5199445e0072be762a45413fa31154","sha256":"de7e8dc8e7dccee615faf76bcf585c51a78d9fd88e5447073e41b6220ce616f5","sha512":"c20a3761e0cd6e94d571a201be4c6626ee3fa6d3e12cee98ebb51d78c83e194dbe00e60cf9086e180cfe551075c258504c8f36bae259d441084043e5c5972bd8","ssdeep":"96:c5yWUxRYww9s+Jn85x9HZWupfsOPBmPJC7/Yu3mmnis8jB7pQUfm86qRouihvQp2:5YwV+Jn8lxNM87b3vniDBeUfmLZ5QA40","tlshash":"d6a14cc657ef6e29dd4a68b65a70b4b440e42377f677d23c3944c2aec2085ec06c587b","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-08-04T05:59:26.014895Z","times_seen":35,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Meter_Passport.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.813Z","timestamp":1782329721813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Meter_Passport.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qD1LBYoM3venxJMEFd8x3Qe%2B1hk11z6yY5ZGKim%2F%2BvGW4FWLIwZ%2BCuUl3Jadcz%2F%2B9YVV%2F2nf5VRuHSPuCPjvnv%2Frv02FZnxcWstqTL%2F8VZHW15qMqydOuM%2Fn5M%2B0Q2Hvc%2Fipjg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2977-19e8af9727a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10615\r\ncf-ray: a10e2cd95d9f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10615,"size_decoded":11616,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"e2b1f6304d00ab65e652e08d44797433","sha1":"2f8bff85aaf7f77d340f2bc6efdfbf7037553116","sha256":"36a763b241751efcdeb8bd6766e0fae40f4375e72186a61dd9cb5fdd74721f4f","sha512":"147585e05e8d30e49e26363f138df7a5fb9e1c6dcc28854aaa32d3083f939aac560eda6b69deb7c71d851ea4e92496ebcd1702a6fbefb06780c5717a46985ada","ssdeep":"192:/Bipw9I2q0ju/T2atqUEKfhbt6Ox1hIakRXdRpbLH6GnlYljbJlkg:/Ew9Xq042wEWhV9IaiFbeGnOjlp","tlshash":"f422c048ce65c636aef70b6dcc9923d7da0c643f6c5a0613614abddc432522f08ed14e","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.690989Z","times_seen":20,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.140Z","timestamp":1782329720140,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\nlast-modified: Tue, 29 Aug 2023 04:36:11 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\ncf-cache-status: HIT\r\nage: 5068\r\nexpires: Mon, 14 Jun 2027 19:35:20 GMT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f7Qlq%2BT%2Fce5VkvxjFqnrzW1n5vAAKK6muP58QiAKG05bg%2FHLCyguPq9BtNqr1%2B9o%2FBmoZfN0zMz2Mei2e62NkMNc%2BTm%2F3wkN4otdTPShoYAeP6T%2B04g7JXjdqFo%2BpoTe5sIyEwUC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a10e2ccf0a675694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87533,"size_decoded":28444,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-18T23:41:52.15668Z","times_seen":189559,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":4,"connect":18,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/MyWalliD.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.621Z","timestamp":1782329720621,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/MyWalliD.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jI0Q5GYy%2Fp%2Fz0WzKcEqgiDgF2RRfhJ4rVwl%2B4EU7AU7f823UrmcT7Uz32CQANJbqN%2F2h8mpjGeuGLNtq4bXDF2ErlNqTWCnk%2F0rX0IBlJa0GTaioIyHyekPhQp4flmuFPR7Zeg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1443-19e8af9739a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5187\r\ncf-ray: a10e2cd1ea59723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5187,"size_decoded":6173,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"510b1e83f32810407f0e0940a96a46f2","sha1":"c1dc67a5503eff3a65e13c8cc8688174f5dc4274","sha256":"18ad0a4e788269678d7277e9597e95f8535fb334af3ae7594ca27185f6d52263","sha512":"63efcd49002ad938d703945f0120b9c4040c07a1704d11493c034caec0be6be605d29e0c9a86d0bfa5989252c3218a54c8b45f52e524e66728945675f080b870","ssdeep":"96:/ux7WjchRByaJGuTByGo+/w/Tp4EIl18Vna2K5P7mhvBaIqY4N7vLhQDPVCvwNcE:/uxyjcFPJGSByr1451IlKJmh5ttQ7vLw","tlshash":"7ab17eb24874f825dad777ffab2f1e5e4695224193e1075ac8140c36894503ec9973a5","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:40.677938Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/DTTD.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.970Z","timestamp":1782329720970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/DTTD.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tnSt2GbzkcN8Lnvk4W0QHjvZvShlFAtUAJfkNQdl3PxKXnyHki7Ipvlz6U3xz%2FbNW1bVHlyfcs1KWQ6S92kHUoPflQFEvblpS1t1N%2FgiAQmH48pEA0vTzXpu7a5IqNiNQlljgw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3cf5-19e8af97362\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 15605\r\ncf-ray: a10e2cd41b2d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":15605,"size_decoded":16586,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"82a410eef4d36f831bb97af281d8c264","sha1":"732167188f19fc0ab539e7422e76eef4e0f9cfde","sha256":"aa21e43a26f5a5de9694ba2718220f7e5cd740d2dc70c534e6cc8685e1c8bdd3","sha512":"6b62bafc2d40d4d3bfae89cf6c984965c15d51d333f99fda9030b3e9f97de007f633f33f22c6f2d63f33ec8a31943a105e0bf1a5da214c3790795b06a5074cf6","ssdeep":"384:orlfVI+s5gZmyuAnMv2hEmgu6l1uQ0HvltMQXVMAy4I:oZfuuQV2rT6BmnMQXry4I","tlshash":"e562bf7c273795b07b4ee5360422b281882a71c55fc05979b1b060b9b24ff4adfa7291","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.738116Z","times_seen":20,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/SecuX.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.048Z","timestamp":1782329721048,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/SecuX.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b7eWCGpOB5%2F34Hz6r6yKW9FrMxDBI2h6sVBm1Pbb%2BlGzhf%2F3FSI53%2BYyww33loZUdFEAS%2Bc5V6buezh1hoE4BGMQVOb%2BGO4L1eou1QXQjIKL1Hg09Bip3LEnay4y2SNiphX1bQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2a0c-19e8af973be\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10764\r\ncf-ray: a10e2cd48b76723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10764,"size_decoded":11753,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"9350726e93e139c91eda957ac4e59075","sha1":"65cdda9ddfce2d7e2d92c2ae9cc21a8c51b69340","sha256":"06540857aa90d245ca255bbc312b964d4cd591ec1da0bb70141f350337ae0e43","sha512":"3301d707e392904b29778bed84ff0643dc95448198a64bd4e3a89abfa723495b8e0d81f378ce06f2985155b813085d4e72d66be0df895516d25c1aa4887a1bd8","ssdeep":"192:xCae44g6mTmNjryP2MMiB1rfozaS8GnTtUaup71ulpjHW:xCzQdm9mP2MMifzoPzZ+zqW","tlshash":"1e22bfa506e0e896e757b6f13f5099632f844f01b038478fd242b9dc867f2a8118d4ad","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:41.161304Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/KAX_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.194Z","timestamp":1782329721194,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/KAX_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=stWmZuntlMkGV7f6%2FpE%2BX%2Fqh8MGihrKAiZfx1KN9e3zK6Z0DFBvYUz6%2FuVm%2BLaMxjbEZ1RBO%2B51eZbM4nEqhBmHX7YDjDnyVU%2FkkFOIfR26ULe9ZgJst5pAPWVjY78cp6L5S6w%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3b55-19e8af9737e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 15189\r\ncf-ray: a10e2cd57c00723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15189,"size_decoded":16180,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"51db978f7da68460c2598778b5eec0a4","sha1":"76b74812240df8a7a39246ecbc4c3966306130ae","sha256":"49d968fddd13b5f048125037222504b169100a7ca2d43fe39b0a78d3dfaad388","sha512":"03a39fa2057ee1b3ca5a6c9421f7384f8b9a54230d8df4fad351b9c649116ad3e344c2a13afe67ac353c502d97e30f7d936c27696d88f2bc37b407936398fa00","ssdeep":"384:ybyuCRXJk90c9tFGBHYB8GzbVs1hLkSaRO3Y43:yQ9J0zGuK0+L3","tlshash":"1262becc78d8205e1fe9a9fc86f8378234ac0d902527b7cb9764e59e7629c1498cd467","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:41.274092Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/DipoleSwap.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.345Z","timestamp":1782329721345,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/DipoleSwap.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f3jArfUxU%2BlcPJlTeVK7M8wiY1FN0Ea%2BKdF9MbMlSBzzvH4ZFXqpIWbqpFgnsgny2mutTHQQvCgTzDI7AuqjHhysbC9LtyyDWy7HMMNMuaedjtv1gjVvTWVu2VNUkyix%2BpNzQg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"a22-19e8af9722a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2594\r\ncf-ray: a10e2cd66c85723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2594,"size_decoded":3575,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"c828a3035b6743b1bfa385b0580286b6","sha1":"0bd7e431b43d3e7ad5dfdfba79c753414d09bcfd","sha256":"8f8ab2d6a1138c6e788008967bf9e1e2ea6b066bfa89a7b7b8e7ff332df7c1c4","sha512":"42385aeaf9fec0b4e8e1accae8872a4a555d40b2cd8acef3ae32aa6faefc58534e80e3f1b503a2eb23431d9b35acf027c01d452ebf11101698b4135cf27a6b7a","ssdeep":"","tlshash":"e7515dfd90e02e4dc5062e7dc2150c172c7a51d6029e6e20643651fa87dc6c2faef288","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:41.096582Z","times_seen":19,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Earnifi.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.562Z","timestamp":1782329721562,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Earnifi.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d%2BW5OiBq1gjs5ElLY4Gnc9kGyFZN5P5XH63gCIGGRpVPRSkDUe9bSB2poPpeWiG3aTMn5be8085WqRMcrB4WkRkTFsWHHA1nTQ9ZnusIfAaMtrFsC%2BuYC2ysNvJrIS1mBYgGGw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2749-19e8af9722e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10057\r\ncf-ray: a10e2cd7cd16723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10057,"size_decoded":11038,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"3ab482422e26852efef736bc92aaea1a","sha1":"f526a71ca2ddcd9fb20eb77059b8e7aefe3d3940","sha256":"d117b6176bc2b781ddb87d94e708fa978368e8be111441f4993c60debdc5b20a","sha512":"33af2164c815a37877d19b77b7669c971390ea57508cfd979670c162dfb67f0f78fbf98b713947afdf2b0352b226176b9b4d81f07896d1b18966959dcaebd347","ssdeep":"192:11BZgX3cUcg7EprvOuFmbt0Wb6mIcKFkBAyqt67pfAzNp25NXwo9kb5VRUopv:03fcg4prvtFUt0g6mukCCfmuX5KNVRP5","tlshash":"9f228dcceef686002dcd15771729663f17ba5267596b21ff842832480e7207ca7e815f","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:40.809227Z","times_seen":18,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Timeless_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.934Z","timestamp":1782329720934,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Timeless_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8tDHGpvMLw3ksNSq%2FWAKOmrQpHAyiC5Jm425rm5Ge%2F2ot4MJfyivgfqOF8%2BJoi%2BFh1Eumbf2vjlgROHTvkuwZ4Tv%2FtmLTUKR%2BmMCbTgK8lKf0TrU23GKVF2CskRRLKvCwZk3%2FA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"4cb6-19e8af973d2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 19638\r\ncf-ray: a10e2cd3db07723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":19638,"size_decoded":20629,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"5d6a964acff9da030aaa80cd4946cf1b","sha1":"2fd8bcf9d2d93531373b4b16cf67363bf67529b4","sha256":"ec3f9d6d1c832be3d5bbe9cf91a793bd2656c387f9981062ace3362b17d5b77d","sha512":"5cf0310138f2f00a75bc51ad2647a6f132206b9ee59ad6242e1a9a0d9d51578d2507a95396ed2199b6750201de61305ca2fa17a336315eff8eea5e63e3bbf2a1","ssdeep":"384:yMPqOzNQMubJDuAdC4EmxYhvLzt600WxOWLe/GFWNcbrl4JQQTD:BbzGMu/C4XCzt600W4WahV2aD","tlshash":"3092d0a343460619503b2aaf58261b38f7614f38f446e0ed7897a663402b6d7d39ff32","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:40.556861Z","times_seen":20,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/UTORG.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.011Z","timestamp":1782329721011,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/UTORG.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ODkfHU0JtbYSJ%2BDEZG9qYiMpYa8u1N2EtYdShg%2BCMCHuMaBbhJPsH62TgSv3tifabTX54Oy1kC6o3Tz%2B7y50Qc9mJUzdUTTQuw35hUj0ve4vvVRsQOMUVaiePbmRNmO5pTA3VA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"b03-19e8af973e2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2819\r\ncf-ray: a10e2cd45b53723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2819,"size_decoded":3800,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"48c61a16073db8a90d62c84df65bb660","sha1":"eb257df67634d0fe2d17d0537b13d8f92121cced","sha256":"b245133622ad2b4d72d508bbaa2fc374900f8c893e9577577cf27504f9315ca9","sha512":"4c44ddd7d21c36ffd32ccc76a0ccbee546f1c290d0944a64b1c3d4f64590ba129ab4cbd21f42bfc4f15f8333ee70cb4138f03b463d7232d1bcc74c06fc2dbb89","ssdeep":"","tlshash":"ae5191b04d4da6f28857b69c77cc91b2006dfc3346cfad9689ca43781015a1cacf1872","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.743505Z","times_seen":20,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/ShapeShift.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.222Z","timestamp":1782329721222,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/ShapeShift.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xMxxCQ6AMxemZeUOWJ0d06Uisqc2VxNcM9DQ%2BZ4VPU7RRDUTMYXXHDlecv4j16uosIPMVThQDjEVukayRGrZxXngRC4SDNTP0ShSWRoobD3MF6Hnx%2B5tm5UoEUbl8Ocq2ocYeg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1e82-19e8af973be\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 7810\r\ncf-ray: a10e2cd5ac14723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7810,"size_decoded":8790,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"2d3bc572c491dc3d23f405c2a6d23331","sha1":"cfb9ef34b223ace9cb7e0ee17f25aa583eb1dadc","sha256":"79581873aff904fa15c10292804ac1374cdc4a0d0d6efd22f0d29ec34cbda51f","sha512":"48ec52d2c882810b1b1b323e8ece90f7ff7120b1428cba42118eeef521894f0c553daa1a5ef42a091324e5d08d4835cb97db95113a602619fae903c33a58a6ee","ssdeep":"192:iV3F30FLQ5MYczJGW1Fg9HYpaDrQFjZlavUXi7svq:KF30lcPcdGi+H4FTavuWsvq","tlshash":"b3f1afae890f3355ed6e4474bc6e00a619eb4c7675ce6246fa814b71a007bf50085f8a","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:40.955247Z","times_seen":19,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Octus_Bridge.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.342Z","timestamp":1782329721342,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Octus_Bridge.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZJCoGvcIINW28DjF4u7YVxX1cMeyoh04MIYIH72EdHxn4uq%2BYxdtCNkKc2ekTe3iixQ7Iz1Ouj2WqlohSTCA%2Bs6lQphE4GlJAM8cRQ%2FKcz6NY7%2FKwFZFzcWDef8R%2BeOQJwjRhg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"986-19e8af9728e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2438\r\ncf-ray: a10e2cd66c82723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2438,"size_decoded":3423,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"5416f590ebc43860fb32d5f4fda16c4a","sha1":"512cc6139eee5bd428a8fcbd9618f6a10a3d9bd2","sha256":"67d2d5e3ba8e233ada631e2e0e4fff88649b44ca52a96125738c82a4893de57c","sha512":"1839be10d7b39c9dc022fc8ea5b4002cc6e96e80c2a6ab64f135debf7b5dffe4e0eda4c7e0f7393cd29e33ce70f6d3c71c326179abdaf62cebf264f6f99d137e","ssdeep":"","tlshash":"0a41192899021b94c7bfcd328ae893bec9055229c7ac446935abacd21419b61cdf7387","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.68002Z","times_seen":19,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/LI_FI_Widget.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.555Z","timestamp":1782329721555,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/LI_FI_Widget.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w%2Fll3GpKUvz8ZOut1DC5a6LNuYVO81bs3b8pss6qTI2QgEQWQFlCT8Sv%2Bz8Op12FYYe3nPxfWcIfSqyJpDYtfOgvrFwr0VNt00KDRnycRhsLHtbfc4q3fo64nxNoTpezavkLLw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"15ab-19e8af9726e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5547\r\ncf-ray: a10e2cd7bd12723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5547,"size_decoded":6527,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"f3ae0713c42211852e360bb09f3093a3","sha1":"5f0433a32ddaa554ba68be946213ba13836654fd","sha256":"ea72adaefdbe3b0465fd33b04fee998d095ad8a3189a15d0df566e9ebda9066d","sha512":"b99ac9d9744666a1b566149fb9f49d99a6404c71d98b83110dc8b65a3872441527eb63910f39931353296ef1855c05f3b0650d3a4c2121bd7cfde3c8c6cdbb17","ssdeep":"96:f9i0nFAQxlqDrzmoy7LXN2NnaR7G/CWWyMn+jofGgXoKBFJV4F3RvIwpJjDJ2SN:bBgK1nNana4/CCM+2XouWF9JjDJ2E","tlshash":"11b15d5d9e121d1cb49c173e56e7106f5a9c5a5fab48cdbcc313026809399867397683","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:41.160083Z","times_seen":18,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/smap.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.812Z","timestamp":1782329721812,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/smap.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0pkkYMmWXLOUoPRgkwJb%2FJSL6P71gt166FUdtDh4FctsOTznMXFOPt13khfjjrKAYLah9DuTO1HKrnNnlANNboYZy6kizIbdonRNGQcawbd3Zgac%2FXVGtFKV0T67dSpvM29Tog%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3294-19e8af972d2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12948\r\ncf-ray: a10e2cd95d9e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12948,"size_decoded":13929,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"0200bf606fe511348930f0310c5745d0","sha1":"f3011029d34745b96523a2fa71ea8e1829719811","sha256":"24628e68870af72cfd92ee41924a1398b790b81ef3bcdef9c5b88318e957481e","sha512":"f797eaaf48c4961edab8284a30cd3834b89b1496c064ac4f8d18c7e0624b0889822e536ca7d6646327a5607f37e3c1f92ee417d0845dfde30912ff8451915af2","ssdeep":"384:FzJGqjLpJYhTy1jfro/ke43upYYuFWhdaV:FzJLaez0/R43eushdK","tlshash":"7442c063dd51ad12eb0d929f6a2b9c703fa543c1f296819348db08272c48f281f90dd2","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:41.25949Z","times_seen":18,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Phase.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.990Z","timestamp":1782329721990,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Phase.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oHC23sefXxruCxEaOma%2BAEXQUT5JgzfaxgSkyJYckF804y6IuB72sFYv6gzvmPLZs5ZXKEt88c1hdNUzbBy0%2Fq095Q51xWf33yCUdPjMUfqqQLVu5xjDSNUeRPrfEi8QlxOuBA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"24af-19e8af972a6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9391\r\ncf-ray: a10e2cda6e58723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":9391,"size_decoded":10371,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"bab7269bffc01c07759d7ed6ceeee670","sha1":"ded82af1b62b6385b84c7f52f3cdd0896ef285b9","sha256":"3cb42d45f1604a61578f5db298b2818219120f2c7b5674f1d8b0b2a83b810caf","sha512":"e9cfb9cf0d31b754d6148162bb392f3897b27b3b8f0689c6bbc8e9580345211935e9343c9844a7720479a549ae607277e0f5bd004ba1ee9cb065a3ea64ae685e","ssdeep":"192:5xHwkZQYMSAjBPZMhG6JBUTyfPsXUBraehugV9P+eaKy:5xcdZMhGkPTB/hugVXaKy","tlshash":"b812af0d3ec0872b1529a6f319ef528b4737c79161f79e6cb5c7a200e42e3256d2ab15","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:40.806701Z","times_seen":17,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/LEGOBIT.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.161Z","timestamp":1782329722161,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/LEGOBIT.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TP%2F1fQji1k%2F7nMrjjvxONBlXXdNu6quwmnBm7TVbmPb1V8%2Ftspm2adIf32oY5P1u8%2BiQU2qgWkcWPzZzTWl1IcQc765DmL%2FdEfOsholQgcKhN9jwVMVL3wfiY1YY51OAWiiiTA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2cae-19e8af9726a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11438\r\ncf-ray: a10e2cdb8eed723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":11438,"size_decoded":12425,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"c5494a50695fd8e3cec040613385e2a0","sha1":"0963b1ec33c0d6d2e6c68ecc4e4dd00639d103de","sha256":"3e90e2448fb56d8d784986c60d399a43eec707cbf5ebc9702d8c3ed9e6d8d7b1","sha512":"ea2d04358f73f262243904c8059d3313d4d3584e62298845a2bc852c2a5cd72e28ed4086402d2082c5284192813204f7ab703a9a0921b0a6ba6f0d6918a107c7","ssdeep":"192:hbCsfSvCrgqXEhxGzvdx3i1DcPXz1Hu0hGm64BvYnttvb/hNauLwE5eeOHwulb6m:TSvCrgqXETwRHuMR6btxtNanvwulOzBA","tlshash":"b232c0a1656d0092d38341b8d654fef22b6296b088ede3681699173f13fa1b8880f5c3","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-06-29T07:04:40.881573Z","times_seen":17,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/NOW_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.430Z","timestamp":1782329720430,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/NOW_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o%2B2adQ33j33KQ%2F0VD9El1%2FLIkMdjczmwPifQdYGltKCpWJg4FTgIYRgbxK%2FUzJ3zxsLVF4GE9yhkG1b0Xdp2ZUgAlafR%2FqvzQSJ6kL2i4fz8p%2Fl806sgc%2BlGpOdYGxOVP%2FWWyQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3424-19e8af9739e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13348\r\ncf-ray: a10e2cd0ba12723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13348,"size_decoded":14341,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"f7d471d24765936f2ca8c8726f700717","sha1":"eb6a83df190cda24d0d8e9468a46a75aa596f630","sha256":"b7fa87cb4b833ea36cae3b8684d81501a67708a6286346816cb321ce704bad40","sha512":"4f2b6057fba2552eeafe2eccba1f2abda41b013be5522748b5500aa16f333f52f41a132b3cb7dcb9a34ce5f0c5b6a0bd07d77cf3f5b17337fc5158880f0f97d1","ssdeep":"384:nuFvAp8QWgGWA7/keZDQd1XKM0/JwSkpH7x:nuFvS8oGWA7/k2D8190ypHV","tlshash":"e752d197bc5af5669f88e9d342cb21faa51c28f10f928c5540f2a39823474b6e567036","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-06-29T07:04:40.740759Z","times_seen":20,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/rss_wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.105Z","timestamp":1782329721105,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/rss_wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L0yDAXsm8lfGdhyRThhxs0%2FtUPQH1bTk5KsrLOUq2U0p15ycNXLi6iJ6MjXrm%2BfTNvaWu%2B5aqN3KjZQbX9%2BNABx7uK3kDmWcnUxudTMCf4j0xpc8n%2BGpUGGqKPpxrxxPD%2BgW3w%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2f7e-19e8af973ba\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12158\r\ncf-ray: a10e2cd4eba8723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12158,"size_decoded":13147,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"24ffeb74d40e0982307c1a1ddac54585","sha1":"8b59c14cc131e4610fa3b9ae6d82e1acbd7cfacf","sha256":"8cef44733854afedbc2906d0059a0e778c0859570a4b8f35b434d0964b9f2b7e","sha512":"0080938ab35cf24280117f3622d3becc51370767f761c4363bcc0954b2f08ebfb52ed8991908e85f257dab7c644506aa30ee234dd91c43df489c0ccb37037eb8","ssdeep":"192:aKfYGir/VV4oLN81wl2cYwKHInz8TQ3XB7nF4giwHVkcQmfHXy6Vkw:zbiRVlLqrozooR7FBN14mf3y61","tlshash":"dd42ae9decf2de45d303c1f507181f91ae6c4e1ac3264642dd5f10faa82c8a994c7b6a","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:40.615091Z","times_seen":19,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Kaikas.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.188Z","timestamp":1782329721188,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Kaikas.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cIk8M60s3rZ8utWIscHhLV7stIoT0ajpIwVyaYmur0zTt9BkL07BZY4GNJpAWcMdv%2FYSdHen9ZGFp5hzxuWu8SLSeTG%2FZ%2BoPF1nwWFiY1ULlJx5oKav2eQbSYTqhrX97sMKoCQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2765-19e8af9737e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10085\r\ncf-ray: a10e2cd56bfa723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10085,"size_decoded":11068,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"903a32f7f6b301c058493e8ea28d1f9d","sha1":"5bf5321ed4917fdbdb461436b509a1bfe9900f2e","sha256":"389ac7a9ef77986b740bbc2b4bc4f5368735a8e0ded18f4064e943fabed34780","sha512":"0a65efe5a80a89638119980997a7576246a7d3a3431c71bbb5179c3c5eb4aeb2fac46157c1dbaee166ddf7f11ce13f23e8f6aafffb3723bcee1753fd695d9213","ssdeep":"192:ARXzH+fhOtdGGTbjlEkrs1XRh+oQ2f3ba0R3sOfdH0e7WGPNKy:ARmOtLvj2Thtpf3u0R7fdD7xn","tlshash":"c3229f841345f594c18b2f241b52a2995b3907f2f2ac000329f1cf935d9ebbd1fbaad5","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:40.744758Z","times_seen":20,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Mintdash.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.851Z","timestamp":1782329721851,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Mintdash.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kLaMgqtFHcoQiELQIHtqdjw2YTMftu39nrTTeSmkrXHumOyy%2B75MdZVT7u1ATm7czxwYlZIX4Agvhmw1iZi3dehIY6RVF15oSPnQzIatt51RThHxxBF7F3uHQoO2SdTrwVea1w%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1917-19e8af9727e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6423\r\ncf-ray: a10e2cd99db9723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":6423,"size_decoded":7401,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"ce28ed0765a9ab9cf2b7f9d7843e9fc8","sha1":"3d391aaf84475dec80238992aa8f177930618f32","sha256":"5b776bd80baa4afe61cc8ac8478f3cd4d80dc892cf9c59df6731e459aa46218f","sha512":"108afe274e88f4284fe4bdfba1b1c13332d19ce8d61b07ae837de2b07c3b7c4f0756481759a3b47f2c7579b2eaad2fb2fdcd5791ef5b9ef52e9fe5e7d20a93a2","ssdeep":"96:qe+h/3BEIWoEA6k2w7XHbnu+lL5OCdVvNnHwfr658tYEsqQhOAkkIa/wBB6c:q/jE0zdP9nar6iCEsNOAvIa/c","tlshash":"f2d18db825a88355dabbfc3c7485246e0a12a4f452909241b62c63f58e5c7c4a2f13bf","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:40.931677Z","times_seen":18,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Stellar.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.226Z","timestamp":1782329722226,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Stellar.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lQ0Qm9YXuCeb9HsgLonSy8AQH5kNZjPgSO7TsST0gCm0ixizppQIIackstQTCekgI6kRzE3riQacV6Iz%2BLJcUFRuocWxUd3vTlv8LpsZeM8oTH6NETEWYGcDI%2BmQAg18cT7%2F7A%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"1854-19e8af971da\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6228\r\ncf-ray: a10e2cdbef1c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":6228,"size_decoded":7210,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"65916b9986cd53d5036976b5bd1c9c7a","sha1":"d61ce2f66fc60fec76079868b95939c2bd58cbd6","sha256":"46a6913ccb57513465cbadadf7e62c18e95e3c8203e1e627f6bde6efb44403fe","sha512":"94e2244d6200dc0b7ae47716f19693a8145f1ad06130a8f93ec877b10b458a86a137dc792b495126e581bcfc80ffa72c02b836ba53f7252fead341db773c6166","ssdeep":"192:3vaRQi/PDN5nVnGrAk8z+0OlpteSAL/4O+l5:3KQmBVVnQF8zuML/5E5","tlshash":"fed19fa7ac61d840e10923a0304899ed78ff6a5c18723718fae65729632fc79f8c551d","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-08-04T05:59:26.001635Z","times_seen":34,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Caduceus.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.283Z","timestamp":1782329722283,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Caduceus.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FciJ%2FIzAOV6JN9pLfoMenf7ofNqSvI50%2BWXO7Quk4FRM2ozFGTYatjtHyhwuvYBGAN1bJXic92swo0ln%2FYtLXVL2P7LWQRllNhJDEbBun0djlNNBNCgcacAyp9gv19d2wknBnQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"a00-19e8af971c2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2560\r\ncf-ray: a10e2cdc4f47723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2560,"size_decoded":3541,"mime_type":"image/png","magic":"PNG image data, 121 x 120, 8-bit colormap, non-interlaced","md5":"9d1e6857928c8aa8002ebb07724ce2e9","sha1":"5a758e3cf4411e9a571a557cad683ebfb6f0b0aa","sha256":"08ecccac7de4d268873425cfbf3ea26d34e62dab95f447fafd898ecd66163c8b","sha512":"36297c0edb37edec3cb8920d71f303ee70f8bfc2ff45dd3a9a9cc2f4559c65434e71ef8c94d1090f46c93cbbfc1df99dee23dcb08dface1bf0a7aa07db37756d","ssdeep":"","tlshash":"73515cd5cf31615ef22fa08fc723cdd411c281595332262f1b795a4f57688d35165087","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-06-29T07:04:40.731576Z","times_seen":17,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/RSK.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.311Z","timestamp":1782329722311,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/RSK.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ui10APYkHEl1jpw9W6dqAbjvHi3Krlz1zAIweihzi%2FFeiRpLb3tOJ2rAtcU6FhXVNNcHbZF0%2BtFo4XSutF197EqyLFvtHehuqnwZdaIchldIFW5tRFbg3jvCeB6yQyT68ZrvyA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"87b-19e8af971d6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2171\r\ncf-ray: a10e2cdc7f5d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2171,"size_decoded":3150,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"b932a68d4b3cdb61b13aa96ea1da19d1","sha1":"94e41927344ff25053915f1aef5c37e9bd5baff1","sha256":"a2c9e782c2f7a36dfea2861fd3f084119a9ec36f27d474944ad9b0fa2c4e042d","sha512":"6bb3669ba0f4bb037dc3fc3d7f96d5bd558e3148d73701cdd6318e3454d0b6f80f53af12eac3d497e5f96fbfbc3911065fa7bddeba4aa19c4ed018650e6d513b","ssdeep":"","tlshash":"29411a338c1888aeee1c809dd11e008ddb298cbeaa51d45318bd74bc29bd29c72dc0bd","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:40.901086Z","times_seen":17,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Bitizen.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.949Z","timestamp":1782329720949,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Bitizen.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rLV%2BZYMMeUfo4zEkb5V2G8F66YWs6ZFLZlDE1mwP5JJk8jySpMO76n3sFiImOCtOoYiiy3qNa4kPqPiuwoz8yb1cfhkegFF1btO4ycxs7mkARsnV9lKRDtXJoW4t%2BudIQwf4TA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"d09-19e8af97342\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3337\r\ncf-ray: a10e2cd3fb1d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3337,"size_decoded":4316,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"cc73304c16bd4f4f760102b6c97951c4","sha1":"b3be362bb3357be12b112003050f51fbc5131590","sha256":"8242aa9f66aa5a77d1619b8e93bb75ddc58631eb663455196b06703f5f9cd432","sha512":"dc0833251dca369027a1a4dee2910e87c009d812c103862192dc89a3949596865a267b94fe2c88f7f550086f24f90c287c320d5d8e8dfffdb9d6d849193b2707","ssdeep":"","tlshash":"a96140a77cc21f344ceebb02daab4ba110814d2e455ff6117751f227226b0fa16f578a","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:41.003161Z","times_seen":20,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/DOSI_Vault.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.001Z","timestamp":1782329721001,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/DOSI_Vault.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LmM1g7%2B19Gn8fTiSBFGU2XEGboC3q7zIP7ZDnPRIh142qEHGRWupKDf51j1xpV7R2VPUyf8BFaGlsfF8j3tZSK3pcQQQa2fe%2FfG20QxROWpzAxRAE9emaP%2Bl3Wgg9hFIp%2FsM2Q%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1c7a-19e8af9735e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 7290\r\ncf-ray: a10e2cd44b4c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":7290,"size_decoded":8274,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"e0ab58d739d458cb971e694a686f0303","sha1":"56d39e2ed5c373e03be4c0c92d8eb4a7b0da05a0","sha256":"73d380b18adc1e459dd98e522c24902b0316404f10326b263c36991d1a1fe91b","sha512":"3c7ca499a02f7b6d348fc71e436dc51d1d5a6322fed3e111372de8a93e8b42300caa5697c8f0d23d21358b891d62bc4dbeb64db9d730f9db8c67d22a89a5a35c","ssdeep":"192:L5cq2WPFMO1vsoC+BVh8z5AGWXLUyPlnh9hze:L5cFGFMOaE+JWbUclh9Be","tlshash":"1ee15a78df96cb31f027ad66b7858699a37185fa0411a722c3e40716583cc88685f577","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.558213Z","times_seen":20,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/FxWallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.021Z","timestamp":1782329721021,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/FxWallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XA3IX3Tj3FwS75fdcDuNDj7F%2BMp89mvlFDproMhbYEKwXQj%2F3SqFiz9kxVP8o6ZPDFbjROZ8Kpr5m7rUWxKmkpyfupicKHj5ppdgrSN81an7DL1MLkosypd%2FkR6wXsMlHHHU%2BA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1246-19e8af9736e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4678\r\ncf-ray: a10e2cd46b63723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4678,"size_decoded":5662,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"e3712fe0543e5274cff2bd3980135bb4","sha1":"b4ca1d35bec2a88d56c83f89d64023bf09a6a4b0","sha256":"fe2fa0ee65188bca5cf475ea9312b2fa75f772b87c1c49c5033e8ec9c048172c","sha512":"3bae10d269c0806e8375b35795b73fb9a45ce1134018cc54a5c00c6037af9258d17fc0ae189f8a35be34e09a4f276f2c702df1290980fc257bf3ec752fb033f1","ssdeep":"96:ec09Q/udviSFKZfekh7st1aqPFdiIGBGvMXQem2H0yV/1Cgnh:eDiGviSFKZWMst1aqPiyMAe+sTh","tlshash":"e7a1497f96b407cd500215ef983b8c87e1db2b638d91ff5bb58a85396e0e140e004fa6","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:41.058904Z","times_seen":20,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Pali_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.041Z","timestamp":1782329721041,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Pali_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fft4VKGOiXDXzfJd7S01yNF82J6W9PVLA5HIHyA0nQP9%2B3cmumxkvtI%2F9cDtVBlXvtWoKaZHLwevugzKGVheF7AAPKq0UTGvrDIzMepQGLU1j53Cp4V78lo4DvFwAMNCboURUQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"4166-19e8af973aa\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 16742\r\ncf-ray: a10e2cd48b70723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":16742,"size_decoded":17725,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"4eae987880ac0a07e34d235d9164199f","sha1":"2af1e0b74d9063adf69e89e14859e9be29457a32","sha256":"8624cbb1572a795754d1e5b0925e76ae4c31d5f0e756c59a33e5c6e8bc736f85","sha512":"0824723660f721167095dd8fcb68cec08ef7b1a1d9978e9e0bf2a02c5abb1476e8cb3bb09430faf46779d96279d7eea873748cedf24a956c746422a21a398151","ssdeep":"384:3ofG1OcBcx2/ejTwBGz1fWww2ecth0ywnlcYCXqLLcB4xhCw:3X1hcx0ejN1fNw22lcYCqLcB4jB","tlshash":"9772dfa90ce53ea0d8d98f06fd5671218cc28a33e9eb7e701763fc59101fe064a73280","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.569668Z","times_seen":20,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Faye.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.346Z","timestamp":1782329721346,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Faye.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d1sFfoMo%2BlaliANBuintDuM1KNoDB0F2BeFo0kBXJ%2FTF0yxxERtYa7AC3Wgh7ufcyOle%2BoOw9Wo0YOT71qwKczrexyXCTNCxT6BZ2HJPbW%2Fa5Z%2FiqoEeABb52GeIwoN8ydzlIg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"8a0-19e8af97242\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 880\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2208\r\ncf-ray: a10e2cd66c86723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2208,"size_decoded":3192,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"98486de87c95ae6bdac491771b7598fe","sha1":"e44789a1b072edc55f0cad739801a4e29ccf25dc","sha256":"9638188c7e5f0c7ed25a3ed15c55321e0e27923ec912a84c137f470ecf9ff64f","sha512":"37dc1f486116927371470d4aad5e57d18284b5284583e01d38d5b6ad79fbf5209c789b0cdbbd87f5c22be653398a38f2cd10fb431affd62ec9eea2296c1e0efb","ssdeep":"","tlshash":"754191a4bce79428fac1227b87f92fa1890d0abf410136d84e0f466305c37de026b25f","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:41.156407Z","times_seen":19,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Tengri_io.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.348Z","timestamp":1782329721348,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Tengri_io.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sWqSkGAJe92bdmEM3FzByEb1QHLRxNHoR3t5LaHTbw3KddfnokQwNNVpFAIqmMw7j16eqtEpG4JoqCQWF63KA%2FvOYBnrrZU6IVgsoMfRYeWXAhVVCwzpwYyEuaLpZ61NHDrAJQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"261f-19e8af972ea\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9759\r\ncf-ray: a10e2cd66c87723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9759,"size_decoded":10737,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"3253bcf59536355ff18a9b0a8e723e58","sha1":"c98972cae7a9ccc0ab31c26830a07e7b03d87fff","sha256":"dfae91e26471e9fa8b7cd2a296ec9d74f339647848a1ccf2b9fff7e66180e8b4","sha512":"fba2b9d04d7818eab3c3c8f098a47989e8e58ff15c9b185c9f2ed3b6b85891a4fbac8f9f4d1f337ddbd364ac87d35cb9571d1457e6ed93e3cd71b82e4ea5a406","ssdeep":"192:02/8KmqsGWxCnjG323oVuvHnDg1P525liqiBP1CN/Cas7GX2R:P/8KsGTG324VuvHnGP52D2t1lasqXO","tlshash":"8e129de19277c4dcda5de1c36750f3bf82b10eb36e1fa4940b12bdae198b896d587210","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:41.25376Z","times_seen":19,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/KLAY.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.246Z","timestamp":1782329722246,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/KLAY.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pho0zpJuz8DOHYiT28c5Vs8yhSyfqhF3p4wbf4XVvotgCaw564TAliyAUV0%2FNdWk84rDgeBPV1lZ%2FVqNQ87MRU0SkrTdXzv5QRpuuMw66KHEXspSnoYd0hyOcQmu%2FeQeS0Kt8A%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"bce-19e8af971ce\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3022\r\ncf-ray: a10e2cdc0f2c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":3022,"size_decoded":4003,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"6afb14555c75b83960b97462a335e4f6","sha1":"2d26daa9022187de26d309c3d570e7131558037a","sha256":"d9ff4dc458a42e6fde123f1f21ae3a79e56b7017f379e5888cc463b428a50127","sha512":"b3e45f76ac0b6fd846584a7b415146a0f68c5338dd0e4b6e76b57f86724a1bc1c8a711d2871006ddad72ba1158aa55c108a4ded7c9318fe2d27c069abce0a80e","ssdeep":"","tlshash":"72516ee552b110d9bdef68aa15ce1321c2ae8fff65808887d2f1c9babbc5544433184a","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-08-04T05:59:25.947179Z","times_seen":34,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Arbitrum.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.300Z","timestamp":1782329722300,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Arbitrum.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=49n33N1WoI37tP%2Ba6rEbNrcjz9ClZK%2B6%2FeLk1NjRMhQrpJTHOXdZRU7BITzP8%2BJQ1ertE%2FYJkQVSTt7xvw8cWQ%2FI6rNlaOhIGhm4OiUhmIghLzVG0DQ0I%2FsrquxzdUqexLBxWw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"d70-19e8af971ba\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3440\r\ncf-ray: a10e2cdc6f53723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3440,"size_decoded":4429,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"b4645f84eb3e3cef99577d1d2b0d05bf","sha1":"4d28692b1577baba465ec64e0d3e3071924fcc45","sha256":"15c3ea38b110feaa1d79f4bb33cb4e982097d42775fce0162c5f9de1b3431530","sha512":"c0cb8a717baea3e485ed6d5133e6b13d68532847d4cc69af2c856c593fc750b4eb0d314665e4e98612b3b169542fbaa477c25be7135f5d5a525fce6025b8a2cb","ssdeep":"","tlshash":"5a615c7d2a2c5560e0d7c4e44b42e2cf44b67e5597c22095ca3b3af54dfa2b54312ce3","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-06-29T07:04:40.972668Z","times_seen":18,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Snowball.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.627Z","timestamp":1782329720627,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Snowball.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PX3ejxlHdZpBn6sIrFPdBNxBjqVuay1X42qxfORppt2t46Xf6nRap9HFMqqYu%2BLsAyuEjv6REXgtj9yT63VDeybtso%2FGXxo8pZesYkKEEyoPZYQPgaw2tka7Dfsf91%2BadSLJXQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"c88c-19e8af973c6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 51340\r\ncf-ray: a10e2cd1ea5b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51340,"size_decoded":52323,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"36ada9b1ff732e9f33d9db37b3eb3f7c","sha1":"8b3f61ffa6783d4ed661c494f6fc1258e18083a3","sha256":"c57bfcaf7da623d56b038f9abf801f39fa80f7eac8a9cf0bf5f3d1b181924635","sha512":"d356114d94bff76dd8dd49290bf508ebb0cee8b21e73c7da1dc531753988831b7a02b1797ef4c258aab4e3b309728b71fb7646456c38e576e4f4c02591b5e99f","ssdeep":"768:0aNgWIYGs5juTYLsiMcWVqmQi7TpfIFgCceJaaE6qAdSXgukJ9yXCm0AdDkTUzUV:0XLq2YLsx8iRfICWsaE6SD1dUzB48v","tlshash":"3833015e9ee874b15aff972698810d51b153420eb0a375c04f3b8cb75bab4b0eaa1347","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:41.150732Z","times_seen":20,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Venly.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.936Z","timestamp":1782329720936,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Venly.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r4k2rDfMgevXyoKjdfyYVjlG8GBdKcaBlSMCcpg47n1znrbZ3N1tYTRfRyxajN8UjqSr448AXiSYd0VUp8rw643hZ%2FO8lY4rRvlzu2FOPZf2rxSJhyAoZLqiyVowJVOSjGh2Hg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"c704-19e8af973e2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 50948\r\ncf-ray: a10e2cd3db09723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50948,"size_decoded":51927,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"77ddacb936438e891398be7c2497c2b1","sha1":"76d453b9c03f46112ed0f1da46a279d20a43f5bd","sha256":"130601a509cdd1a8d7ad8fca4a42af078bf0c952cc28d0bf2dd31ba9c0f9fa13","sha512":"d5f093b7470b1991728931ed24ab30f161e2d0cf31a73edfb90f1345fcf6a99d3144f8b9260b42a7e32c0cc4797d80e63799ffff4b91867dc7a58efabc075e78","ssdeep":"1536:/B4RIX31pGpZlcBSR+ZYQqGLXOXP4lGUt6l+UasfIl:J4RIHGpZlR+KOLXcKVxsfIl","tlshash":"c833020e8fac143becd006c70119c41131dc66df2962c9de3c3adaba4f55fa9967a917","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:40.888078Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Smart_Baby.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.078Z","timestamp":1782329721078,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Smart_Baby.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pPsV6TJ7k%2B56Rx%2BHYx1gGxzBPB4gaFy6LNiVsM%2BwZLAQ6vRAcBADv1sKZ8Fq7gK0nbCGcY6L%2BcxmH3wQSpYa2UGYeGhFryN7JAVVDehHgbpJZtjYXJD5G22kG3lJeUnO6BrOzg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2121-19e8af973c6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 8481\r\ncf-ray: a10e2cd4bb98723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8481,"size_decoded":9465,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"a8be5b5e82267af7d032ddb04845a6e3","sha1":"ddb974dff23aba05fe8ba5aa7afdc41ff7b0c563","sha256":"c547fa86bfebe1f0352217d8f0cdc6f9646ebaec114a82f6a02acb9724d6fbd7","sha512":"9c307c94e234bc1c15e45d1d614846de6ed0a5f6dd52b9ceb6cb8704ef636ecfe64c4fcabf3817e0fdd73eaa6d8c215b26e6c90daf7c9b129ee16ecc6b6d9c71","ssdeep":"192:JzvRmWzlEtHrTYNH3ZQLcS1KyJPvzDnrhDgNAM:5IWzefYVqLVKwP3rhENAM","tlshash":"f7029e893ce8da7d55a2fae9c15b2758c514523b80f111612022f32deb97ee3de5cc4b","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:40.669549Z","times_seen":20,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Trustee_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.104Z","timestamp":1782329721104,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Trustee_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=081915MrfRPzBEOJkdGeQcelovxGU6dI39eWzy8HOR7PqYsP0xjB8gzqmi3n40NAVeyU%2BjMhthv1yFxfA7GSDWGZKJocVHVK0%2B2Luqsfggeh1v1GOZ%2BxA4jC6hBzS6wP%2Bd8E0w%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"23e3-19e8af973da\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9187\r\ncf-ray: a10e2cd4eba7723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9187,"size_decoded":10171,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"77ca096c25c034022b6593b475b8f7d8","sha1":"602ab84469aabbac24f4e91d82c51b1170ee85b9","sha256":"9f4760b2e3cce236ae833b6275d3ddeedfd6aca9164350100acdede0cdfcbdea","sha512":"17ed81e56c12ad9e50f32608d8db90e14d1138f45f55096d54ab3df49a140d84d7b6ec533eeca16c55dbe9eb28f95040e788b82393c67112d995be08c8d3dba7","ssdeep":"192:RRzAh1ZndA1gJQL0bpFX1rTP1G3Uih5n+IO8pmdrI52hxU:R1ATZdA1gJY0NcUij+IlmFI528","tlshash":"0512af462164e8ab02317d1c4ee0e6da6b916e4f078ce35d2461ff9d2ab224f585f8b4","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-07-21T05:16:19.706907Z","times_seen":174,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/DreamByt3.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.997Z","timestamp":1782329721997,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/DreamByt3.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lJ%2FelYLoubhvuSZpuDP0DJUm8KMrIbjLqfsmnadug%2FKjD0Jytna9s2puZ9XyJmkQkeeIJBljjZFV0wNaSJQViOkCv0IF%2BfyysNDIJjWkEykTzj%2BCyk0Z9LWt%2FslXZ6Cmeo2PsQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2ff2-19e8af9722a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12274\r\ncf-ray: a10e2cda7e5d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12274,"size_decoded":13261,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"23aa5bcc56e5c11619bce7f22b485ce2","sha1":"a88df8cc19b17c13db6bf1728164bf542ca20794","sha256":"160faa7a1fa4d6aedb93d4a1dd1c613d75732e9faacbf267401b8b38dc4d840c","sha512":"6bfc0dffb080932bea352954597f5e5e92f42f403a11c77d5821244f39391fb216f15f60db8b7c4d8f2f3446fed75a3260a65a4f6a75606d66d078ba36f2a7ef","ssdeep":"192:5/J3pdxGSxxaGVVXPiFSg7vILsttw7l4kX5AlN4G9QfI62HDpDCNj90fDU0SkaTW:xdpzGSxx/NiwOpttChX5JGIbWpuj9ObX","tlshash":"e442a0d51cc59ba11198293978c5e3e64743ddfc3033085ff6498a17fe255ff9a89442","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:40.65957Z","times_seen":16,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/PulseChain.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.288Z","timestamp":1782329722288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/PulseChain.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xoM8oY%2F8chtUFJJc16kUQKdmOxYYu32XJFwYozpzSSPP8%2BtWmjOIwlJIBnJ1dJ0kpFjjKuMkOb1xFFfVSCtem5q4Slmx3kBz1O4XXBggw6EFBr6uQDJD0ws%2BYY600%2FJU4mhNuA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"f03-19e8af971d6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3843\r\ncf-ray: a10e2cdc4f4d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3843,"size_decoded":4826,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"49cc62aef63c02699665b4d1691b3a94","sha1":"5a46dc9827b2e36a1fcf2596f895be9d532ddb6e","sha256":"0def970812154ccacfaccb8769e3d1e76ae81aff5720810f235539281ebccf13","sha512":"4a1902a67718b2cc96203e816ad127c27b2e8b0a20cf88fb9e3d2873d05131f7320d465f8ca5ba89b7dbd2268b28081e1e3afb9bfd2bd0fb85414a7a482f4dc3","ssdeep":"","tlshash":"09817df582858e4df0cd5862eab4d49d5648311ed0bb9709bba2302044482d63bdb82a","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-06-29T07:04:40.988459Z","times_seen":17,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Bitcoin_com_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.438Z","timestamp":1782329720438,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Bitcoin_com_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fjlYqXPPPTxpWCAhIEo0j7mcb8twfMuOee6K8%2FacypU5mqHrRY16qajbLQs875dUXdTpr8eE3KVQbdQhPMBkxShuggegoq6GGpBNUm2K5Hl5zL7Zdzih6lvJaNehqaKgFefXkA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"a372-19e8af9733e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 41842\r\ncf-ray: a10e2cd0ca17723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41842,"size_decoded":42821,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"11761202c2b5634e4aacc4f66e90888e","sha1":"7c1656634f896816f67cffbfe0b86230734e7a9a","sha256":"77a56e2bb2f56fa7bceeae443eb8123f110c1ed2c574404dfb00762a10b2d831","sha512":"a1ef0ca231a8e40e4fde22bf3e8c9a043fde1cb5a69891be41b64d89a3ba3623f54af5dc1becde357b478d50fa4a0ec50a24e66c4f0157317fc110b794627fa5","ssdeep":"768:4tkIT3M5Qqd/e8aHcoFcKTEn92E6ja8+jo3oS8k/D8Vu9bhaFTu3GivOF5ZC3WBN:4tkIT85jexPFcKTSsEUa8co3oVk8mcLJ","tlshash":"a313f107c576db7620f07b0f2371ce20082c2e7a6a7b566e50d1aee7639af2d695d1c0","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-06-29T07:04:40.783431Z","times_seen":20,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Zelus.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.831Z","timestamp":1782329720831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Zelus.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BLFZhPAnr4oPMQmQZNEKZ79He4Um%2FnRaaSlyNsbgB%2BCEvDTLMv%2FPU1Ri%2BYq6V4iQPx6cwLfmCURbLlNPOnlqONEXfcIzYWnFQNwUyh8uQgvftHO%2F7kGxcvxxyQpB1Xwk3lFLQw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"63d7-19e8af973ee\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 25559\r\ncf-ray: a10e2cd33ad1723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":25559,"size_decoded":26546,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"a7e65aef10cc0fa31b2d308fb8eebc5c","sha1":"7118f062a1072c30cab4a8b6095fbb26e3a58b07","sha256":"c994a8a28e43492cb76d39cabcaed22b21c2e7eb61b1093a4dca46908714a37f","sha512":"df0a86b795c53985b367f9cfad76bfa5ad30d9e2f1d3d4fec38cf75a4d3751cc228d889070358dd62667676948e75c1840f82bbe6c6029de181ad23f72775cbc","ssdeep":"768:0Aa2222222222222U6PoZ1Vbs0ZNPW/4HF66FV3K7QThSwgjBn2222222222222v:0MPgjs0ZNuQHFV2QThSbjBe","tlshash":"f7b2e13aa82e76fb2dd4239276210a1314e265fdaf2ac744dcf288a525363475c33cf4","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-08-04T05:59:25.995936Z","times_seen":37,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Gravita_Protocol.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.420Z","timestamp":1782329721420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Gravita_Protocol.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=neFr3FY8X6zkEPgYp2dzqOzcFtfASYrBpEvL7g%2FzVLQfIKrvN0NN7V2VSX%2FvSun3ljf%2BY3jpnOhDmFhgdUZK6rwcV4RMHNVR5cVTja3OtU%2BCMk5O1JqZPfh1fUd19RNwmC2XMw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2611-19e8af9724e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9745\r\ncf-ray: a10e2cd6ecc4723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":9745,"size_decoded":10729,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"118c15bbc60c397f166de2b47be175af","sha1":"06c01bddc4ad8ee3306ad730b27c99e1a4902e95","sha256":"1728f68413ff26517af0f2b620a655bc194c294c838fd48925cf6b244a4733e6","sha512":"95fd14f496f67f8a0a09537c84374909baaec70dbc6206541379056911ecd884a18ec8765870fbf5648555f905e0aa2d6aa6db92ec59b42241cb9c461c7f5d23","ssdeep":"192:wGqDaNdkaFWLxPmbG0L8zQn5co48nnpAz1j2nrcqvoyJ2O:eeBF6mDL8zQpdnpjnrcqvaO","tlshash":"22128ded18f8b9c0d3cfe3ab8ae5e593df50e62279a70d8c016042f434e69ee1164340","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:40.989209Z","times_seen":19,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/DOLZ.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.488Z","timestamp":1782329721488,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/DOLZ.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1QdmUy8bL6E%2F020ttabimyyoCLziE2jSMc8z4n89ftv22OAf9ZkScgxURcCxXsYk0N4fxZGTEDS8vvEzt18qkVAqVcXJcSITT0t%2FKVjLu5W9B%2F%2FtJ2XZw3opXbZwtDElhgrMPQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"13c2-19e8af9722a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5058\r\ncf-ray: a10e2cd74ce8723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5058,"size_decoded":6042,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"8015e2a8b37cc11c8318ff5b0b82e6c3","sha1":"552c5f8fd9a5605f07218a5aaad9d36d805e4b0e","sha256":"ecd1b569bc48c8ef37b9e834c054955d0cd84d0378f0e95a38bce75cf2488eb7","sha512":"08018a128a53362860f52209ecede39a5c0032eb0e22cc91871916f76ac0573d5fba50907218cff2de1a079e675ac55a18bc5b518ba47f495ea943801ceea533","ssdeep":"96:spm674KNsX4K+ve1izMM21VD3+bxRl4sNRBi7bseTO4vp82XS:spm6EfX4Nm0By+fVNR07bsfU8ES","tlshash":"02a14a78e7382ae21be12dca0a8af1d5b1411531fd1595e6e0f780fe552c09ff6aa1c1","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:40.805019Z","times_seen":19,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Code4rena.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.645Z","timestamp":1782329721645,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Code4rena.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=53a2WwIQ0RIm7GXD1gapkDlRrPZXL%2F7PtzOXB8dh1Oav95kCMpFwNy1G%2F1b1XZzMj0FVZFH87oIgdvursxmD63ug3gNsOa2fvnP2BP4CVWVAPbjmdRCo8eejQTTsYQZ%2FqSBk7Q%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"35e7-19e8af97212\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13799\r\ncf-ray: a10e2cd85d3f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13799,"size_decoded":14782,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"1b912d319cc3210f40a846bda5cf9004","sha1":"bdad96d36204ab4aa97edf6d8a3d0b74183c9fa2","sha256":"613554c6b98ed3284714b9d23dbf55e58d58e56da9fcaede2845d2abad3a2e6a","sha512":"169708b9f895a9748c86b3c29bab31a617c406066e05b524bc410896ad9606b89cbe86ce744c33ca35c609c402742296b335a8283c0953830dd1dc9b314b8053","ssdeep":"192:6f9TtARiarJgaXce7sXr+e9UGXqdnf6NnZ9OlGjiPAFR+2aUSgfcZZy6vk/v8NO+:HlF26df6NnZ9FR+6BkZZy6vCZh5+K35o","tlshash":"2452b067bcb207643e5b2ef6264e8f97172b3dba8adba1d1df5a5d01f02818540870dc","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:40.605736Z","times_seen":18,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Zapankiswap.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.875Z","timestamp":1782329721875,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Zapankiswap.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hAgsSxP917tNgGNBGrz0M6j8iVLwq0zJSzvcLa4wH7AdZCt07oGGAc%2FB14u6TRubrHDKXTbgAtA%2BO447u%2Bu7pWqCdTNV7IOIU4pAD0sWQ3hoQ75rYjDt44Kz8HKgMW4Tqi40jQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"32e0-19e8af9730a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13024\r\ncf-ray: a10e2cd9bdc9723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13024,"size_decoded":14007,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"9b881ad53b8396dde88542235d46c2f2","sha1":"8f72d2f121458402b55b1aa9a2d7c096f4fee7d8","sha256":"595f9a72f96ca787c4a3c272e7aa23488913510835b2f54610f8208affbdd817","sha512":"9f72d391f838c93f28f31c2b95179ee6ab08296c86ba944535bbe8e2680e101d67bc908d329b00502fc72d48bd9146a216442d37af1a7f0f80d53f76ea81a7e8","ssdeep":"192:DjMa146fVY7Jjte6KJ/1ETstLi1rX6pGx355YKaA2QodEJNAYE0py0VohUPHWt:ELwVY71dKRKIe1rX6oxJ5qWBCAU","tlshash":"c642a0af30402c0c77b2c4ff3579c21ecaaca655559adaae0717973a5583c7060ae0be","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:41.2475Z","times_seen":18,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Mantle_Delegates.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.953Z","timestamp":1782329721953,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Mantle_Delegates.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h4JcnaiqpY8VLaTFWk%2F3EqXwaXPqXLUdgu5y033AfWwo750oK6vhCIY7ZjSkM1qkiF6PTwZCsUpGE2TG1WXp58G85D3SSPFO0U6hycV8zZg34mvoMPdwNENMwkn7IDiCOuqnuQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"352d-19e8af97276\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13613\r\ncf-ray: a10e2cda3e3a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":13613,"size_decoded":14592,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"9dc341fce456f8b6da41cf2d19251d33","sha1":"71c0e7e27ee02daeb1d4777b76020bd1d2b610e7","sha256":"bc0b217b9f8754aed43f08aaf67cc2124b949b0513a6efe05fe46d6271e025a4","sha512":"9e2145a957086d8791599574b06b80d9cd6d35bca65b84e9836b7ff6fd30ddb2f82ba57abd204eee4cfcb585834400bd5683de4d7918e78fba7fbc31227cd626","ssdeep":"384:VrigI9cnd/pJyIyjpKDpo/sigDQuxS7Ys3mT:VOD9cndBwUDpo/XgQuxU7Q","tlshash":"3252c07da0d0654104448d278f8d6929e347b788b276f1cf1b7fbda8a2e12f7632d908","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:41.113038Z","times_seen":17,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/ysmarkets.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.051Z","timestamp":1782329722051,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/ysmarkets.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hNU70SyKNcEWNvUFIZ1bCwnRhamJv%2F5TC1BeDuH3eCTOkxlFmBT6qg9ddNHY6MeqorzDnGPsvfkfuGHdvhv7YBB5V%2FpMQIrNBZw%2FC7Kj8c9eORqUHTvIBhH%2FXF16i4dX5th%2FPA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2386-19e8af9730a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9094\r\ncf-ray: a10e2cdade88723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":9094,"size_decoded":10080,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"067e222e23aeff5e8a93ca6e250b6db7","sha1":"1aaf489617bccd8b7ab1176d7fcc1c07d8ff6b96","sha256":"369ed10fbc5b8c40d78472bf99b54e96fc7603f14421bd34d36e02d0f18ece88","sha512":"df15bb47120385fb0db69a67c4d180212f547a5223614ef506b95483bbcdcd832c22e86cfc00f9769ff39c1b5bff95b2d8e78cb43896b7d416588fd4e42bbf58","ssdeep":"192:F6X5MA+TSIFOOZ6oqFUu/UHUjwTu+VTppzeoUXdjGjCxJ2S:cX5CRFObzFUuxjwTFpeob+AS","tlshash":"a51290d12de56bfcf92d208cfb6a0594e6349ebf2593ee188c338c255f2d199861435c","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:40.771861Z","times_seen":17,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Locker_Token.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.693Z","timestamp":1782329720693,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Locker_Token.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jLjz9Y5fe9FRTH%2BbDHDhpZKXv0I3JxrRO9GhPFPFtdSOIq90Ha5PSXMqXQcGrDBabht6VLXjB1sWMNZ9N0N33RVvzlZ44mHmiJOip67N6EbyEYNfZ6fUnjj5NjO6za6TcyG1nA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3d2b-19e8af9738a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 15659\r\ncf-ray: a10e2cd25a73723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":15659,"size_decoded":16638,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"610e3270bd0960c7e5b472f9ca1826f9","sha1":"0bc8a6b493bf6429ca3a2afa89a551de7fd51a14","sha256":"61b563038d038da09ca38f2d9c9597ed1880c5d345202f5f4357584f9f4a66f1","sha512":"46ba0aed93999cce924b86b96822d7dea5bb3530163f5b84ddf1bb9973f6f1790200c9074cf61338aa98625184b921f00ce711cd605a0ca2281330c137c68e40","ssdeep":"384:QCyp2T4aHJr6jcsSXgeQFlCxAXUk3/2rOMHDn:Q/UTv6jclXXQFlCx8UO/2rOyn","tlshash":"3f62c06ba3377ba57b2f2b11041054cc7d6a9de7a7c0accb430d35f9afbb0415a44899","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-06-29T07:04:40.562667Z","times_seen":20,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Flooz.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.713Z","timestamp":1782329720713,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Flooz.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qv3kzpjCwTXMTgUQuoawKn49V8tDSZtY5mQZZY5RiHZFN5iYekgvsQxidkbUVsQlYDH8jVsXNQ8DcUkTALKX5LyxVYVnBUKrmhPeIft%2BidN9rFNHr%2B1CuJDndwWWB5PGQQCR%2FA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"114c-19e8af9736a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4428\r\ncf-ray: a10e2cd27a7e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":4428,"size_decoded":5410,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"0401abf82470543fcbb05bd6dcafd030","sha1":"0ff6b12d910f5c0ffb109fe4c2fb64fd240b7228","sha256":"fab64462e72d85527babc47870150dbcfaa192a4aa6c68d9d3edf115bedaabaa","sha512":"226dbf4bc475a9d79016aa3ff5458fccb273fe23b582aa6ebc3ba5b24acc6d992fa73ea3d2e3046a724641ce8c4e48e1fd90825fa104903fc4c909254343649b","ssdeep":"96:0XYYGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGpQFjrHKlp1w+LMRhGTRJCihigLVRt:0IsjrHKlp1xYRhgRUikEOvxk","tlshash":"76916e293a6966320c7cfeebd83cf5657b429745705e0f64fbb7f2444921db0a148270","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:40.585917Z","times_seen":20,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/U2U_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.993Z","timestamp":1782329720993,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/U2U_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WSn0CsNhzhGuXGvWjAayRRHfBnC6HSJTVixr9MLuA%2F0srUOZaQuyjS55iq7eycAxLXdMoL2KTsB5gO4ZpGb9lQdUuKFpe7zBycFHcWLRZb8RMODbTZkjhdpoRQ9eqaMfcBiIrA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"5fb8-19e8af973de\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 24504\r\ncf-ray: a10e2cd43b47723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":24504,"size_decoded":25483,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"b1173b3d89828d5cdbc89a407a8aadc1","sha1":"8245549a6bea9b2c4f05ef159da392a1adedb9ec","sha256":"d8197fa0f85fc1502425702be28d798509e0a050ea6fc45de3980f5ed1308c12","sha512":"52ba70b244fae02c7a66161c75d7f5893dbc265807fb1d18a435db2e45a45a3a0015dfb6dfc224c1b5ba99e41a99135158c4acd719fbc95d51f6fa44cc3364d4","ssdeep":"384:k32ggh1cu1ykwJieubfIya2FjnvzL6o0pmDlB3Ob6V1HtK:k32gO/fleubfq2BnvzOo0pv6Vho","tlshash":"38b2e00e28bde3760e37b089e7a652cc56447811a2cc4bbe140ffe59ae8d5a0e6c01c2","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.771113Z","times_seen":20,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Zeal.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.096Z","timestamp":1782329721096,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Zeal.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y2FcbKiMmbQ9vUgPaqepd4gg3tRUObevROd6wGWZHqFh9xVqCTig4WoCJatZkyxg0YTIIOj0ioRZiDEgtZJbbovx2hSt5yJJ0885Jl3tZ7BJvxsEaP6vb7k%2Fm9Tx44T%2Fj6r4XA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"24dc-19e8af973ee\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9436\r\ncf-ray: a10e2cd4db9e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":9436,"size_decoded":10416,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"04153d9e9c4284dbe8a4c030bc92a281","sha1":"e72fdab5b1f6f9e95b4de6bf828b964efdfd1f23","sha256":"439d6a0d9a6565f72daa2e96808da9307508f181a72f8ab5fb90cd62cd89eb09","sha512":"3b0b67ba454c0813f8de816666a40cd36b089ecf8f4f629b9345825d3b7d4ad36845e426588ad5ef59d20911b81d23ca998753a8e26e4b33fa96b95b00ac7006","ssdeep":"192:p+heE0zrhDA/JLnNBfAZNh615A8WTfbqC6kAQgqtGnwv6WZM6:8heRrhDQtnCNhSW8KbqCOIGnwv3Z","tlshash":"e112c0a87f89764304f646a08351a439cc3e9d6dd6f1da2cc606f8401db0b93039b9cb","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:40.591216Z","times_seen":19,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/StakedFlip.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.082Z","timestamp":1782329722082,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/StakedFlip.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dOqDJrVydK5M9D6A71rrwrEvpM5HamrgLUovT1%2BoR%2BfmSUvEw21SG8XjM2Fxb8VeUmxlbHCQqLN7Ke37cjTsm3fKlMrkdQ2jeItqDmMiLbdbCvrzR8hd0cFtuXn28YQOYiSyUA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"353e-19e8af972e2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13630\r\ncf-ray: a10e2cdb0ea4723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13630,"size_decoded":14611,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"726a3f610e4a44d0d6998cdf82fea555","sha1":"57be60d72d005705a503652ff8ae2df5b70eb70f","sha256":"a9924450740a5c7e783af4435164c94fc8887cf83f45a0924b12633b461c5a30","sha512":"2e1478d4e9eb02198a43d8318bf7123d6fc53b4655ef254d0cd46740e1705260be6c47938aca635b79822abab56bbfc470a89bcaad16694f46557f2b2e2c21ab","ssdeep":"384:SC0wJJfo6Ooovi/VC9RPAcXA7BOQTLV6izdk:Njfo6kiIETOQ1JzW","tlshash":"d852b0f6bb95f3ae86172e4ed100158b1d18955c8a28ae519c1446e3e3ff3bec0cd546","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:41.092156Z","times_seen":17,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Stakease.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.124Z","timestamp":1782329722124,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Stakease.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R826T%2BuhGiT9OtYjaKodJjcb%2F%2F9YMPHp%2BExVe9BW43lVowdU%2FpjC8Rqzp1Sl51oMkkQCW273xJpaTwPjOktg8nkX0cfsIrqzsAmNx5TPrMEU0NUtXtEXpVb8pM1aKe%2FU6NFS1A%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"15a6-19e8af972de\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5542\r\ncf-ray: a10e2cdb4ecc723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5542,"size_decoded":6530,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"c7367997c6d7bc1847f35de3d5959e34","sha1":"897208b1e6edb98ec1e59b41311ff17014a840ee","sha256":"dc1d34f1be2541f1bcda3d551f339a899238000a8125ef3f0548203f4c9bb2a0","sha512":"0ef82a94830e3ab910775c14c957398e3223b3d477bf1fac835776c93a93607e914ff96c41cf05431e899be4a2596e9538d4e7b19b2368e2c7ecd3024c293e83","ssdeep":"96:6g9knbZJS+lKzxoLt8vsco5tPwioUBRDMDh45eVDyRvHahcm3Ll:6gUbZRKzqt8v45tPwiJBKLyRG3B","tlshash":"f5b16cb640f6eee16c4371f165812f1b522b3e34a1c52199f7e148ec2bcdd61af281e8","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:41.264384Z","times_seen":17,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Bitcoin.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.180Z","timestamp":1782329722180,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Bitcoin.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WmW9LO8oPsBaO1%2BV02X%2BNPPYZm%2B5JtFP60honMlsZQB%2FwMWZfNHa6VqWOvjcUJYag%2FK3N1%2F3Ry0gN3dphRAje6a6edxyopiZQ9vgxrzf0hZJHPxMDgXbQAz3SNXTy8SoeDGdMA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"718-19e8af971be\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 1816\r\ncf-ray: a10e2cdbaf00723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1816,"size_decoded":2803,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"f24a9123995ce2a388075d1083f4e658","sha1":"128570f5aabf1c317f37e4d9c76b40ad9d2e52f3","sha256":"1139f4aa334c1fba7ce2cc46a43c09a7b6ebd899da9c6f688a3af95a635a2a3b","sha512":"bfff27055ae4ea78b32ff6828432b0854b9e111e1ee1cc100c135891d01ec1ce962a10e831d332f19d9b65010a3d04e4a0bb1763657e554e4898e1b922465d76","ssdeep":"","tlshash":"65310b5266bc4d542947c79826234448b078957bf0439b05f3fe9518cfcd2dc8586b62","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:40.768233Z","times_seen":17,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/BOBA.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.282Z","timestamp":1782329722282,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/BOBA.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P4BzCVbskd2%2Fn4kCeTOh7Gfwcdup3CgQPHk5zz2bF78A7PKerU%2Fpz4Z6MFMWS5NDwRUjkkc7aXBAJuSzTViOtuj7O0Vr6V53ZF6WkZp%2BjZ%2BjnNK4EiduHHNNS9DBZM0FeFISIA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"878-19e8af971be\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2168\r\ncf-ray: a10e2cdc4f46723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2168,"size_decoded":3151,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"06af171af6fa64722f94087f83c3a303","sha1":"19d075057a136017c5630d15bd6024679304fcb2","sha256":"ef19410ce8ea78f3b2c940a15034029f7d33cff6c49ec8abcab2c6ad2f7a9715","sha512":"fe70fc8109eebb830f37c293306218d72cffba660fb89baad69448f7fec9e246792decdba42324e0a6b8c97b313934e5e95cc05b9d4820a6cdb0ffbcf4bacdd2","ssdeep":"","tlshash":"7641e7972729be7100b057469837b7519c58df7a3dea8821446e362ca82798077ac099","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-06-29T07:04:41.249334Z","times_seen":17,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Oamo.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.782Z","timestamp":1782329721782,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Oamo.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U5MXvNT9SEhr%2BeBgW3boBQjPF63lryBhkVFNp7dYGrTiluH3nzO9VDn50Ccw4%2FhXInzLFFd1nPWbXpu%2Fpd%2BCwbxCV0AAZ6kF1hIsrd3OkylpD79iMwc0LMCE1Y%2FhQdttxVdG%2Fg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"5f3d-19e8af9728e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 24381\r\ncf-ray: a10e2cd92d80723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":24381,"size_decoded":25370,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"73f16f24f39fad95f1705ffddef29d99","sha1":"5da697065e14d1eb41e69966f9f3b7f81af25df3","sha256":"2fba40b36de730c52631f23ce87d991c689e8bc16415db97c55241bc834fac8c","sha512":"ecced5888727f63d3f1552cbc5a6d4fb9620e75e80a94051e4048c2612db29c8166310cdd49ecdb10c350f625356fbacfca2e61f07d9a614f6124b054e973072","ssdeep":"384:KaMeD4uXousxGLbgSNp+P8VK3L/uhyAKxsy9S53Dme+j1pdsVKcjNd3oKRPs1:nMPuXousxGoSY8VK3qwAKxMKeK1pu3j6","tlshash":"acb2f1006c3974547c622bbf482e7fe0ca352d166a088ce0064a793263feedd31a6823","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:40.776212Z","times_seen":18,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Think_in_Coin.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.986Z","timestamp":1782329721986,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Think_in_Coin.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7q6dJbDLipejIc0TNEX6l2TKMdi3ePbhkpgwTjRl1OPSfSyPRg7MJKaYTIHpvrAbXxpHiB20te2hKb7hB0iUnZA520gOqJdLUj80J6mmUIdzMbiitjyQJ7gugXXEN%2BDiNHqQeA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"f08-19e8af972ee\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3848\r\ncf-ray: a10e2cda6e55723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3848,"size_decoded":4825,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"abdd600bc7e1a87a356b875f7c1d708f","sha1":"84dd0cb6c11f655014de7c082499cf01afb38e6a","sha256":"5ffb5da35c878b36e61022787d5ec993fba1fa832afcd69bc7bd2899db1f87e5","sha512":"facf0fe466bfd46c7de8566a267316bd3c8f1d1126480886963c88aaa769faf0b56c1651e31f795f6d5c163266e075958650b3e219205f2e8f63b9c5a2e1087d","ssdeep":"","tlshash":"b181c4ee098fe1a88e3ce553b0786d783108ce645e9fe3a210a87584089359d8bf6d16","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:41.221916Z","times_seen":17,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Telos_EVM.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.272Z","timestamp":1782329722272,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Telos_EVM.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KcbtERZXDaCQ%2BGM4bRROt8Kc8%2BW0RlVL9mkgK0WBj5sJDKYwHsbNKA5ztsvDTIx60WGp67LZKeDXWgKAtNLf5%2Fte0WtBY8SJUGSTUL4owmAx12O5pC%2FAG51ndYzUtycfTUMZOA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"190e-19e8af971da\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6414\r\ncf-ray: a10e2cdc3f3c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6414,"size_decoded":7398,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"2e8b62a05d282ff5c9df91a03e07924d","sha1":"3f26c594b9cb61b0b4878801475b9f943526cbef","sha256":"7a2442e53a3921434c27b3cb45dda5f34e2da59395d3dd276b96c4a7c5a3b436","sha512":"3e957cb078126c43faf31d101fca87edc41317400548978e985d3df820f8e227d2c9bd0e9063235ddd2ca8dee33f89afd1f01b05d16bd0f0f060b853b2211304","ssdeep":"192:J4Xbxc953xW2axUfih6CzRRj2B/OLIYVb4Z:J4Lxc953odxUM6CzRxJ/VO","tlshash":"2dd19fe7919159158d4c23beba2b1e9e46dc9c304b876efb1c2d8813f623114e1b25aa","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-06-29T07:04:40.568342Z","times_seen":17,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Taho.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.752Z","timestamp":1782329720752,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Taho.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fqa7BbWGsx%2FWE9HA484hKhFLLzn8wHBG4Cab1h2zJC9b0E9lRW%2FSspTA7PhhFH%2B90rALZZ6BKldsvbABzpq605n79cdLOVVy572vo7GNDb09vUIZgO8gZF9Rd4OSpMJA8251gg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"8f5d-19e8af973ce\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 36701\r\ncf-ray: a10e2cd2ba90723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":36701,"size_decoded":37684,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"6f713df9f724aff43c5c2d6f9c6299e5","sha1":"3c00c26fb2454575b0220e3304f827139d64874a","sha256":"70cee090b627974a2139bd0040917ee8062a6106bb9fb152f68dae8937fb4dd3","sha512":"c4e9b524674fca01558b730b5e618a645ccaf24343304d48ce0bfa60244f7c82941cfa9d40872e2f2191f18b0a34c12f5c9a41f1c98c36dd402dceb9ce3e185b","ssdeep":"768:NrSmyMNZlh4LUydE3lK8hEqjwiCwyETSHjlHtUTYUi9UPI02vT:FSD+hWUD3kqjhCBETCxNUTFwHvT","tlshash":"d2f2f14592a8464ba0be4f36b757807453e97a30e15c27da08ca613472c74aa7fa47b2","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:40.63696Z","times_seen":20,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/New_Money.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.094Z","timestamp":1782329721094,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/New_Money.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AJA4CigIR5vyt3fO6CLAUnQtbs%2B8fQM3a2jL5SQMPoHilC0CoWu0vPRjrSaD7M1k2GWFG392q5LNDjGHONievYMx%2FLXyapg13Ls4rU45%2FnO9EJC97QPO4Y5iki%2FOR4F36PsUPg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"534c-19e8af9739a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 21324\r\ncf-ray: a10e2cd4db9c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21324,"size_decoded":22309,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"0fab050fd835123e4bbb1c17c3db68f4","sha1":"a0df25e7a675debe1af5bf188267590755700433","sha256":"42e565073cb061cea582ada8b9158c0ff54e9604a74b70cc1ee258d1cf8af0f8","sha512":"5be728494452ea3b5672d693a6641634ed42186643e2d0e20ac0337ca78b4f3db7a03fb93c9120e25db3f2f4d987bee5e7d4a6b0a9101391b2992fda40cb1653","ssdeep":"384:wZBqMDxZfauFPGZ/dnyO9fulS73s3gbjc78Rg4nt8+R2/02hVnrwpLDrG:gqmVXPGZlR9JcQ3M8RRf2/rZErG","tlshash":"25a2d02c9ad8146b437a5b4c665896df4b49f80a7f1c77bc98671ba0cde31084f4907c","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:40.684929Z","times_seen":19,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/M1NTY.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.163Z","timestamp":1782329721163,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/M1NTY.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mdEVrgyqV8yI8xYEYCn9LXt3bfssD0PfgYrRDCbDFyQSGu6%2FcXguWkzp1sLUqgflq7qRl9Fo7t2GlMuOCy9VoZjojlrRS0L8M0DETCD9%2Bc1F0tsWA66oGeiEP%2FKQtsdjGuSPnw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"213b-19e8af9738a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 8507\r\ncf-ray: a10e2cd54bda723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8507,"size_decoded":9489,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"99301807c9a8c6c8fc7f70816df54901","sha1":"4cd267a03fb5bab573d51b92e9408e67a301a334","sha256":"b4ce9a5a05d582592371a27c73885b91bb7990b95d168ccb2d1717e1936d7e46","sha512":"dffff098059ded5ee225d11f79221436b073cc75a520f71415b9adb3abd525f5fb2509c45a6b78bbd40806a0aed897bcc006248732dfa103ef651f411a259650","ssdeep":"192:nuonUkEsYFFQ1dpx+EjJCAX/ljlk5cjB6oQ5pNXIj4s5eSUc:nuTkxT0kl5k5aB6oQ5pNXax1","tlshash":"cc029f6de403b8d0b4e602fadb060ba2ce5eb18cf630d1a58eda3ebd5620585d455943","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:41.197899Z","times_seen":20,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/modal.js?v=1","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.181Z","timestamp":1782329721181,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /modal.js?v=1 HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1854-19e8af974f6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 1670\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mLPJyVh2jc1ff1p%2Fb0%2BqKZzNxXCv0mkDLwn9Pf2eWtz5p5vGz5N7WZLAXR%2F3JN1JwAbwPxrEUlhgpKjbFkBH5WVpvLZt0QVPWmDotICQO%2F12uNsKrWmWNrgC5K66%2FBotoYNT3g%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a10e2cd56bed723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6228,"size_decoded":2939,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2629), with CRLF line terminators","md5":"2334e5bd32b1a294df8d942274619930","sha1":"8ad892481dd30868d8b24959fe41712c765a21a3","sha256":"ef299c4b49b2ec4d76acaba2d046cc53b4f250d258e84b9168bd63c1d3cb0cda","sha512":"b5ad9ad35c25db77a4fcad978049242c10ac3a3e55bba8a689c4f813c5a07aeb87b5d1cf3893c9b665ca95e6e9bc6261259fba5f1ecb91bbf07fd3fd79ba39ba","ssdeep":"96:uhNDOEWlSBezyIT36G18WvufOSSH4QESjoJjrBsS/dC/dDNncZad4z762CpEDpQp:sNxWgBeuIqh2giMVsLVo76zpR","tlshash":"3bd165d459b5031c33af239764335e68b5526167c341861073ac87688ebbf84d8d69eb","first_seen":"2026-06-24T19:08:42.36122Z","last_seen":"2026-06-24T19:36:12.84719Z","times_seen":3,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Affine_Defi.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.293Z","timestamp":1782329721293,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Affine_Defi.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H1ZET5uiJDMs%2Bj%2Fy23z1EwYkfwhHgL9awVEyzZfxhRiv%2FjethtGZcPCFKwVjJGlPAC9CRX86VNlnRmTAkIF3a3AgrUd46inZZ9fyKUiuULkeOWi7E%2BZA1lhgmMKDHpjrFVU1pw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"5f3-19e8af971e6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 1523\r\ncf-ray: a10e2cd61c5b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1523,"size_decoded":2506,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"dded3985f0eb9736cfe7a3724a3eb06e","sha1":"c20ecb6c67dd5f51a16b4b58cf975f93bd58aa91","sha256":"94aa7af28ff75b75d8f817c87b43daa6c892b2e2de5bade25bb164499f5b94d1","sha512":"06090caae006be0cde0182ce697173402b094cdd6c951de523992553a8daeed639a749925fc1e473a858fd1914ccceb7bf80dc74e7297053e03fed1479ac8213","ssdeep":"","tlshash":"7e31dfdeee16d784169956e251e00eacef01f17c2e350ab2b4ffa43e048538665e1f63","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:40.723696Z","times_seen":19,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/FRAX.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.379Z","timestamp":1782329721379,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/FRAX.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kdsTUVeoO5bMyFRikWyFO71hViSjOptdeuAWTMC7j%2BLPW4EbnXDaRVkpYuXgJgt8JXq76Tv5q852NNe2oQhxjA0d1b3jLpaYK9GeNjFT%2Br332upKc3BfKPdvSHbJGNgV4RWhTw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"6318-19e8af97246\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 25368\r\ncf-ray: a10e2cd69ca6723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25368,"size_decoded":26349,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"833fcc5a7e55824f87587b77229d8df6","sha1":"d51958fb301443addf8f1166e6a531becc85a689","sha256":"e73780eb0b2d8b68f2987a7345cc435e6c917319c1180e08a6a0d1cf80d7d31a","sha512":"1d8ab92c12688fdedea49117926686a3f1929489ccd9977e0322c969065a8a1b249cf940d7ce29a3bea400491f1cd98261b63f1ac1d7780d77d4b52a5d858347","ssdeep":"384:NsQMk93aAVtjhfIkhbcYB6lD5+qKL3Wm6rpBuvh6VG67v2JgKEJqs9er28vbnWyJ:Nmu3aCjhffB6ld+qRCu3TG5EJqS2v5N","tlshash":"78b2e1fb3af58f1054acb9a44aa53ad307f1c10851bf898c3cd8e278d1d86b61f545b8","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.607714Z","times_seen":19,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/LOOT8.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.386Z","timestamp":1782329721386,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/LOOT8.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=728qh2hUkjk%2FDMxNRaseJISTKq0AHbOld31iaZpWrJwC0KqlKQQZ11xdL6iqLJZCG3aSm6wLwvTpqrxHCbrFG032OSNVHRrQbnF8UumwyYMMRFKtFjKtUDdNTG1NDxLblOZ0Yw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"329b-19e8af97272\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12955\r\ncf-ray: a10e2cd6acab723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12955,"size_decoded":13934,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"9bac421b071a233a0993a1ef9c058adc","sha1":"7297b49c99365889d42efa06f761f98ee9f4ea7f","sha256":"4120636a80f7a3bb0fded1e67ff40b47de091de0ed3e4292ea8b439c84653355","sha512":"4a25b854e1b8ac3e0e0247bbfe34592d3d1cb791480366137278a2fcda07ac5436e9357d83e4ab49c97c9c4248fab304c66053f594e665e807be31ba0c1cea83","ssdeep":"384:+NqjU8uut4c5zOxPznTzfeoA3dOaIGX5cq:+8U8pD5S9eoQQDGX5cq","tlshash":"5a42d043ba1eb3b0d0503e32d372d35d4c76068e38972a4eb21696b66130667d4d62ab","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.711186Z","times_seen":19,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/PulseFurio.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.119Z","timestamp":1782329722119,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/PulseFurio.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZIgd81xan7589bST7cz%2FqaDtlrFN7B%2BFPTWBgcIN9RUcvuTJP0Q8EwSHNachvKZE3Kz9iCrM2T12xfqltqrLK2nlL0wIMR3ya8wL%2F6I6OJiGjuO6mnOmQa5YSwdC5%2F%2BGg8x6yw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2d9a-19e8af972be\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11674\r\ncf-ray: a10e2cdb3ec2723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":11674,"size_decoded":12661,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"dcdc94784ad56bbd4e13ed7f49e39b73","sha1":"ed060c6dba43e16ee6bcbc349c5a16e8f2903d11","sha256":"7221162f1593217d7d9641fe2aa12ca8e3fd01c8d5425f30a046d4e7e2c8f31d","sha512":"93d3e02b92bfd99dc23c7e06f9b91e9b2232559fee77ff5873c2a4af79fdac72a8d48d8392f84161b14a3981d56c044c7f2686409bf4160b4bb7a58a4a531495","ssdeep":"192:U9j56uI/sCfWg7DN8o4UG5tfIfK/PyPT0hrnbS8ixvDuAq4QjqMQomg:i563/DOsyVUG5OKaT0hHS82bDzA/R","tlshash":"9332c09989609417cdc4750701bdd6745a6be163b9fc0539e848e33353cbc9fa42a5f4","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:40.733619Z","times_seen":17,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/styles/modal-6.css?v=11","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.134Z","timestamp":1782329720134,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/styles/modal-6.css?v=11 HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"4ff0-19e8af973f2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 1671\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rlLtw8NN9U%2BcrNnoIxfixXdiIBN9veHZ3Xqmv50w9Zn7MPopyu2Vf3DNic3GW4LyQ4zQORYbFYRV1gcQQGX9cI251rUqd10VNxUFnHGjiT6iiBrp3kYOomaTnl%2BjwHXJ08hwYw%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a10e2cced9a4723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":20464,"size_decoded":6120,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"7ce88362c8d88e5ce1024a58456a9943","sha1":"684d904a1bb6cab67d90a7d2f66ceedf3e8d5e6c","sha256":"04ba99abd7a89c3fabfc62ec71b8fbc023ea0072c4b80d1d95a67cde7f614dac","sha512":"e89298568d06b5d1165d12e3985df6742ef5fd019b9447be31140463189a076688999ddacb5bca845fe9b3d194f0efba52a0620b031b58a5c30af0ff8677dd4e","ssdeep":"384:IF/1b59KA4oa+CKo75jdkVj1zCiWJaN3he/2:IF/1b59KA4oa+CKotWV1zCiWJM3he/2","tlshash":"0c92a465e9192049a333d8ccbbf54f55eea94063db0a417e75f5238c8feb12426a27cc","first_seen":"2026-06-24T19:08:42.155252Z","last_seen":"2026-06-24T19:36:12.850061Z","times_seen":3,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Uniswap_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.248Z","timestamp":1782329720248,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Uniswap_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rbdDkRdiDqAit0SwfUS26HtOKygkcuysOiQgQbEdhFZdQk8fGr%2FrB55dFJqxNdJaLDH4Pd4Xkl9d0SVJvM7r3gQeuzeSqOzyOrQb8UU0PXj28SpAE8sqGmmgyzb2dnQw8h2yBg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"c158-19e8af973e2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 49496\r\ncf-ray: a10e2ccf89cd723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49496,"size_decoded":50475,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"92b6fd2b73507f6e8bc7c0cf734fee81","sha1":"f5876aa99a6f4c43a8fc9a5ef07390fc0bda4fea","sha256":"bfbc39e657559095e09a2fcc1e734cc2971439b5f9622379e227bbe526744d6d","sha512":"8c8b0876287d23822f6c5e5abef6c8ad14f6747da16a58b2e8100bcc94e7797594cba92e955e8557f0eb9417223749953dc62fc130f44c5d31fe93b7e3525da8","ssdeep":"768:ubOZ1p+qYIjrcMtQvWTvi8mVRejEt0CesFY5DsK22asxQhofycCHWGkFSmVFrGO1:ubOZKq9lQeTvWl0CesFUsKNtxQhGOURZ","tlshash":"7523f1d8b68d46325b146528c6b3f1e2cda3457bf01cbe8c5b1c0674fea49e30a61a78","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-08-04T05:59:25.987409Z","times_seen":37,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/gearbox.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.330Z","timestamp":1782329721330,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/gearbox.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v5idd50JysKEBz9PS2ODWhEaM5cRT0cO%2FQlVvpZWdZexMZu%2BCktcyi1%2F%2FRsgpHZVAyk1J5QGG4GdkGSYVxoyyKI%2BR3TDOVv226sBSaSVm7i8kMf%2B%2Bm0UZ5Cw7Y1JjJiud5uYpA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3ab7-19e8af9724a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 15031\r\ncf-ray: a10e2cd65c78723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":15031,"size_decoded":16022,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"f96677c37366877a67d9ac2f86f157f7","sha1":"bec02146c6df806a9ed243118795de2ec9ab6ace","sha256":"5e31d448666ec31383d03f16ab58fef106c1a11132eebe294142313ab1f1e136","sha512":"10b88ac7b34e6401296f215443e372907c38f1cba0ea4bc2266cfd5394217921ad743b96dda6874f6d941c3243deaabeb6dffdf95b4edcc79b41491ae58262b0","ssdeep":"384:dlI6I9bDjos9AF8PHmfwGizOHAB+6jqjJ:wXbPkiufwG1g5jqV","tlshash":"9a62c0c63ec739c0ebea1871166a81b06c20c7f39adbe015dc5814440b954adef5a7eb","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.567496Z","times_seen":19,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Token_Tool_by_Bitbond.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.337Z","timestamp":1782329721337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Token_Tool_by_Bitbond.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4OgDHQHlMwCewdbwl0KLp81taR%2ByPykfNTxl29mKXf46TxeqPXfMWBgJHpNGZaywNATBlEmF2DDfx5GcFmFfVU4C9ZN%2FVyJS%2Bkl4TuqAq7CdFkHsC6aockRMJLI9ieyVDfzHBA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"699-19e8af972f2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 1689\r\ncf-ray: a10e2cd65c7d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1689,"size_decoded":2670,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"cecd7dafe9ee611e9867bdd3cffb9d69","sha1":"7057b13d382fa3a725eea616a4a720a0278f92e7","sha256":"baf0106f9180b5c888534fbbc4dfaff9021d5d95b9a862cf5eed231bcfe0443f","sha512":"39cf66efea94836a3c95ed436ab26b015cf512a3369a69132fe09711ca73ceb7dcb24f7db2d1e57c8463c274fd19929bf6f79e226800319ae1cc20a11395640e","ssdeep":"","tlshash":"06311014e3f0da01ae069e82feb0cea95106f3b8edde7ca2957b5405f65e09c6490f90","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.676581Z","times_seen":19,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Lemonade.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.878Z","timestamp":1782329721878,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Lemonade.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HZqLdNCMobxlAJr6FsjJVroeAl4j7tg5wCPZav4CGcbkJOhovswStuMuEeebxnteYkvcHLrPo1V27F3AH%2B55aV7OMiiZT1ZRnWNuSXkyHTewPTwSrmmHyN7Ldh%2FKP%2FONqiHbCw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2305-19e8af9726a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 8965\r\ncf-ray: a10e2cd9bdcb723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":8965,"size_decoded":9947,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"56476e6077e5a9e310cc98f1bb4f84bc","sha1":"f46895a81b7dc6163df6173e3f5949d61b54ceca","sha256":"3e66b955352134cf02b3af290739dc7114ca8c66f4086bc668d8adeed25a161f","sha512":"a27bc8879dfccdb344b28ae6e6d86653cd5227697cc7b319aaf32fa1d5950b0de951db5da9f7e60b35bac8e23e8e9ac7eff7b5204e45b5f1bfe2d81dacaae0d8","ssdeep":"192:Ila87YWKHhJz41swKeRiyAvfLHk32Q55nQEXK0A4u/4ZgKI/:p88WKLpbvBLExbBXK+u/qnI/","tlshash":"63029f5973487840dad55ab70b2431667ba05386338fb58b8bd285aff29e620225ced1","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:41.229431Z","times_seen":18,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Keplr.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.723Z","timestamp":1782329720723,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Keplr.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2SS%2FvwiNWnx9VgaMz59Em4kj8o1wEwlq4kyWIxgEhl%2BujMVc3DtFjCT%2B6RYNTvtf4oD%2BvXkYTawu1%2FuYicqjzxR78my4fq1vP8QYB3KpIBWwWU1qoaQ8wButMOuyfhnOT%2BaxWA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"5032-19e8af97382\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 20530\r\ncf-ray: a10e2cd28a84723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":20530,"size_decoded":21519,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"fd9553e561c910cfbf9340d822b973c3","sha1":"5d879bcc6edbe6553b868a1ef48700d94c34e87b","sha256":"d6d4b64332f2e8593e95967234be459b72adeb3b3912b003ca843a822172364c","sha512":"824d9e92c78a2731cedaeb8a6f74b407c3c8fc2bcb3e9f74bef96b505347501e7260232f90622c645ca2571daceb56ff190ff9793941c52367e9057005be189c","ssdeep":"384:CTfvGawpqCQqRnKix4hHaf6VRHp3hFfpp9V42RWJDtddtha1REWj:OvGawCAKiCp+6/Hp3HJVn6ZddTyj","tlshash":"9c92e13cebe2d8de4dafcdd649fed6f6847568765dbc11d9199080fa0a07140e221841","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:40.574908Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/tomiPAY.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.978Z","timestamp":1782329720978,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/tomiPAY.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kA6JGlpsp%2B8AIk2gns3zlELIeLRb56evt%2FQ%2Fp1i%2FXGaTpX9rkQS62i15qwnnnyPDgeQhcVLD1kfUufJC7ATciKtKZN%2FZQDVUy3BP7oYIXY7EJ8O%2Fo7w1t8olA0kK9sEhS0q02Q%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1415-19e8af973da\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5141\r\ncf-ray: a10e2cd41b32723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5141,"size_decoded":6129,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"88d9768985e7150bb1b858d34f2e281c","sha1":"f864aca70d09783642843dd80f53096ffc06b89c","sha256":"7a667644e2c7cd4531bc6c0c5939fb04eb503832ee1973c6f14aeb458bebbe91","sha512":"4ea1129debe5a50d7261ecfd071c9edfc853ebd78ce207e0ef730c587f56da6db083d4b137da8121290d79b8801a5cbb37c725e39cd50011d79532f3a434de1c","ssdeep":"96:Go6fal+vdxX5gYii7X1FDSAO/uNo6Sriea2/hMTNkyOheRBlu:ayMvnXH7X1FW5/zc2//ePA","tlshash":"24b1397110bb3d064121e6d68b027bcb8da14619b4dc770ae70e56115d2c7dfee2bd42","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.750713Z","times_seen":20,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/dodao_dev.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.556Z","timestamp":1782329721556,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/dodao_dev.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xyRik1LtoPS5CnkDEEkoP4apqo9Z0C9FUcf6XbFM4aw7ddL6riiiJ%2BY1B35rWz3Vn5TEGhH419lFH7iehodOuhVHWjej0e8%2BDiyoHPfoIiiq5GNxAIjQGjvumkx4yAkbF2WeJA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3b18-19e8af9722a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 15128\r\ncf-ray: a10e2cd7bd14723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15128,"size_decoded":16109,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"f8e630dd845d53ef265a2b01be283f04","sha1":"c3f0eca33c5f70f37b39758b8fc71797af255a18","sha256":"d0eb8ffa336ec76f1ec6851f5227b828045608943372b532052612c80b064dd3","sha512":"3b8bb18da751b97eca9103df53538dcba41f0b50ed9e5bb95ff9c6d3882d59d493a3097b5d052ddda0b038155919c4a924e68639fd36c6ba68b1ac3fb09d0655","ssdeep":"192:MU0TrLtIiFFDRWwxsiRlu4ugluFIelWvpYoO5Jvg8WejkVNOWY/mKUluuC5dO7Wz:Bc+GDR5/wmxelwaJfNWY/m9l11l3DhKD","tlshash":"a662bfba70b71cdf1f5bac2a5c649fc0f7a80979925169fa8e1331a07414eb4328b511","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:41.203942Z","times_seen":18,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/1w3_io.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.788Z","timestamp":1782329721788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/1w3_io.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bGqjYQcN9mLq5bWKHE87RJiYBdrVS1MJ2XnCmJ6%2BC5WKmua9cxvTfNntOwZt42i6ZW6EAmGHhKq8ypRNNwwpP1oWAe3nXVl6vmASbrGzVCWMhzgv3ygP6HwsBdQuxPzlKnaSnQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"35a2-19e8af971e2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13730\r\ncf-ray: a10e2cd92d84723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13730,"size_decoded":14709,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"77bdf5ad2baae864f15609b2ea10f5b0","sha1":"45bab435bc9763b2f9de992cbc76e7508520b532","sha256":"2ec5ca8ea360da0e0797059fefb08402d84468fcbd4b79df758a65d637f444fc","sha512":"6d9c530017d270c914915ae5116c4bad9e7b6cbc6ecbff3a0ae2a85f029825051d83c42ce82f1854e20b58b4e2f30d22c9aa6a938c633dcd93ca53d54ee74bad","ssdeep":"384:OStoWo6Or2rmoasdeikwb21mNAFlrJJkY:OSts2rmoaj5w4rJ1","tlshash":"c052d0e37b6e9db8582adb501390786860cc785481bcef3c03ec19661d474d0cb62fba","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:41.112104Z","times_seen":18,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/LAN_Air_Drop.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.996Z","timestamp":1782329721996,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/LAN_Air_Drop.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=afEMDc9i3z5bNr94JsnKAGW83z45FMxRYn9jqNj4bu6RGaNPm4DfwjkctVpjbhaWGyxtXWNg%2BJoEMFaSr6cYpBE%2BYI%2BaLJBNnXb%2BTfYb%2F0wS8kVMsR6q2YY0B9KDgBNMLHZ8rA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"e3d7-19e8af9726a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 58327\r\ncf-ray: a10e2cda7e5c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":58327,"size_decoded":59314,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"53a843c433b44646ebd38ed097bfb2be","sha1":"84048cc1f741cc37f7e278919f40ce831e8d8dc5","sha256":"f1f2a14e8bd41bfd818bd2d977b436ed4d2f469bf7d97ea2a8288d3e637e9288","sha512":"f35969c975e7615f2ebd98130d753e4d53b43278d137be35624b60e44468100cfc2cf6d259f9d7123aea1051991d6977eb3bf04707d8ddcd49e96d91ae2e3dbe","ssdeep":"768:Yr2M5hGQMrpc2GV1d9fVplsucANjbLyecyrV9cUImVg5nPGCNZ68NOcHGt223Bh7:y2MXGQepRGTPfVplsoJiv+4AYP9ZjHIv","tlshash":"f343019a27edf4ab43d493e87b36a50c45b37757e03d893a040b5ff9362971428b44d8","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:41.082294Z","times_seen":17,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/DigiByte.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.262Z","timestamp":1782329722262,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/DigiByte.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=egkw3Is2BwYoWGrih2DqHUYWisN3Gox%2FUloBvXr01lQtCbThdfCbLxw26XYtEe%2FBzyvibc5wx0xcqBRiBu0uC8GwHClYUYsKaaz8t3WiV5Gbn2%2B4U9YFajg2w3vmERjM5Sqvwg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"1a4c-19e8af971c6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6732\r\ncf-ray: a10e2cdc2f38723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6732,"size_decoded":7714,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"acc1e791ce403d30bb59bc286b0ce100","sha1":"fc36b4e13ffb65b02c6bf32f890884d5cd3a05de","sha256":"b89c9b287a11169fa0e8c06eeac83690a803bd7ab871c0a72ae41b14cd8fe0a9","sha512":"b2cc1602c2a0945c2709405ff80b9af8dd20013ab934bc46eef509f0dcc32437cd109a4c9ee5f68c73b321406ff95450de010da473fb18aebb54ceb5a5fcb014","ssdeep":"192:hvipzS9CfvFdZxH42xKPhT7rS/lzTYp7E:hJEd3xYXT7rS/xTyY","tlshash":"94d1af5e294fd03209ace8768d6b3182cb5594fd9f75b6d0c0577526768f9e8bc81310","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-06-29T07:04:40.660414Z","times_seen":18,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/25e6c66701a0/api.js?onload=ePmH8\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:13.697Z","timestamp":1782329713697,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /turnstile/v0/b/25e6c66701a0/api.js?onload=ePmH8\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://skyroon-claim.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 24 Jun 2026 19:35:13 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Mon, 22 Jun 2026 14:37:30 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: https://skyroon-claim.xyz\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a10e2ca6cad1120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67081,"size_decoded":22236,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d26819e314c7334b3a5dd5a004898650","sha1":"559b39e547d32af023ed6ab08c369e93db0c7f80","sha256":"9715b51191ac5c467c5b8d983bf9f77c688c61987ab80f94fe3b4c452429cbf4","sha512":"9f4ea7965bdfe1afd68bd1dbdf79cdaa039492ef8e1d29a4966ec6ae8d9b8cc6af8f8920964deab2926662041ee1ac0feb7d70df7df9e6f0e55c5d130adc818c","ssdeep":"1536:4oYt3AYYdolrsHspjxegN8t5LMhfS8OpyJr:b8+onxeg6Dgc6F","tlshash":"3a632cc472aa7877129ac0f0a03b6753b3267d36a84cc850d427dc65277de869173fba","first_seen":"2026-06-24T10:51:52.15506Z","last_seen":"2026-06-30T15:19:47.495467Z","times_seen":10376,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":4,"connect":19,"send":0,"wait":10,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Zerion.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.250Z","timestamp":1782329720250,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Zerion.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qptGU%2BON3GwfeRm9v0zG8h9xoXK8Vib0XpyFWgJk1mWgElFCUgMqvsk7sXp56uzqhKWKMTRjXCL5lDn24NSSDp4LRi269WqhMTgdOTtmeiZ%2BglvnuSA47G7cmFG27bvxWuwbzg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"afc-19e8af973ee\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2812\r\ncf-ray: a10e2ccf99ce723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2812,"size_decoded":3791,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"60f10e27099d6f46c78c10e031d1dc01","sha1":"d0b8d22813830a57ac138d5e1c8cdbfcca18eb10","sha256":"567d85284e3461f43a8c1b26f0c5971c8601de1ebaf945bd7d5d7a5baa79660a","sha512":"dc88134345bbb0361412e66e89a052c1b3a60ebd84dc512231edaa2e601428b5b3a90e0fef86f0bcb1c60ee8f9e5295707211d8e5ba897c9fecfe5cd46e1ceef","ssdeep":"","tlshash":"ca512cd7b91dda2fe003243110e5d397cd2b636bb2047f210d5a6501794a2698e001fd","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-08-04T05:59:25.960131Z","times_seen":37,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Bitski.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.940Z","timestamp":1782329720940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Bitski.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PE7q61npVnKneHRl1d7r9AyozbdbEG3wfQlwqthVUbj%2BYvCDjcmpCyeu8bL0Pj8AlqlFvSLZoedAGW8zDJT1hNxkgc3aGRvBN7ynp%2Bm4pJp8qTz8m0HNnlPfJZDnQWr0m370xA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"6356-19e8af97342\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 25430\r\ncf-ray: a10e2cd3eb15723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25430,"size_decoded":26411,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"f14c2ac9ee2ea14f00cd92bce03c0274","sha1":"0015d977423851e81ce44782e697d4343ad9af98","sha256":"15cc75fe62cd6913a83b341e9e4583f0b879624314e96ec5c6bee108b1070863","sha512":"fe27a142e505dd68cdcae5297516a99f9514671ad0bf4f39b09c7424eefb374c47c2745bd7f72dc89c0ed9b5caac05886baf5cc83ec3035401843dd0cc5b7aa0","ssdeep":"384:Xe/v7wAJHN1Wn17JSRuVeND24sJIp9wmEZr7vhLcem6SjhJOsZwa7O:XSG9ADwmEZvZQesDOCy","tlshash":"f5b2e09ddf71ef87e5867ebacd8140ad4c46645bf723387b550a0d78c1b8e2688a3046","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:41.230744Z","times_seen":20,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Yuse_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.031Z","timestamp":1782329721031,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Yuse_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7OJ6g3fYVjHm3V93Ao09b58TVtimlvJTXyN7W0IuEzmOvw7DPORDGWC7lVedqkENWxX3bzOq3Qn%2BcWewwmuJa0VVWw0XswPiCPTI1ZgZmhLJm77dbZldf%2FZ36gUmZevVHX%2FPCw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"30db-19e8af973ea\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12507\r\ncf-ray: a10e2cd47b6b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12507,"size_decoded":13490,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"eda59a66a00e81f74c134bcd975ae4b0","sha1":"1f1152de58b8ac684ac0d4700719fcad23114bae","sha256":"593f4e08203514ddac4e496c997fee982a6cb3e434485d997e43fb2e9ba9dac1","sha512":"96e930ce03521cf8dcc4a087b873cab077de0fbc7c27d606ffb4a54f060adc61479086972beb1d4874039aa3eeef0e9e7c5e3712906981fdb11d9adecd504dda","ssdeep":"192:GpYYUWsRwNga3WTWOeQ374nLg1j3k0aROAzTivc3Z9gAUTWfMMNlaHh9cJskVJjg:GpYY5Sa38WOLhkHRrccppUvpaXVJswW","tlshash":"6742b0559f4c97ed8aedbc1bb13d375cadac0c02a52bd9477833b0908b310c66d76a91","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.631781Z","times_seen":20,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/CreateMyToken.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.739Z","timestamp":1782329721739,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/CreateMyToken.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pmBINa7Q52VEbQ2W%2FZFFPQ66bT84W4%2F8wTHhv52CHTj8Nbaa%2FY4SPHzIINJm9AZ9%2Bm8n0PBXNNjaPrpubNZPfyLVK4mjCeX6cwxUiwOU0AH39tyb3p2CV9y6p9%2BsR7ubldH%2FkQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3613-19e8af9721a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13843\r\ncf-ray: a10e2cd8dd6b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":13843,"size_decoded":14832,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"26614392258f48781c930b416e2682a5","sha1":"34bb3bb29f6e6d89190babe4c16d680be6ec6140","sha256":"f4185c8b2883ce7a33d083935f6e5e7ab6be3386270f3e0430dab2599052b9ac","sha512":"1546132655c445d96bbbb1f3e74317870731f6e5a1be69e62e5aad636e01c880143789396c212021f43b28f61698c05e7f71342860b6ff74ba5c32f2852fa4ff","ssdeep":"384:GxGUnUHfSKYP+8KTSWvGhy+tdbK4Rp8NqYldSIY9:GxGmkqKYd5Wviy+R8NnldSJ","tlshash":"ed52bffa6143fbee46ce61600aa11ac9d7cc385876583508718e62f8f5ba82cd067b74","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:40.921572Z","times_seen":18,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Merkle_Trade.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.172Z","timestamp":1782329722172,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Merkle_Trade.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=50piAzXHx6wibHPiMAqb0W1xhLiIy%2BiDfekYPt4VkyfT30UyUg0CrttKF6iJWfLagXCB4y%2FbLhDxbcbUMbRz7WaSJe17kI6D2pFSwIvg3UlpP20JOpcSF43Q7Hn2trv0gjEHiA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2ca4-19e8af9727a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11428\r\ncf-ray: a10e2cdb9ef5723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11428,"size_decoded":12409,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"7719abb42a49b53295f33f1676712caa","sha1":"9e749ee6fa9e194777f686852b0fbfc397c6be61","sha256":"449afbd5fb0451cded14c2e4f731bbb2a1d4982929837db633eeb0c72dec353c","sha512":"a28b58c36a81dfbe32d3d9ca49f571144c5ca6b79e03372db75ecb4da1fc169c12b5c4fc3d3a8d41055ea6274e84778f686178d2bb1899633d31f9bd7ee4d7ea","ssdeep":"192:LzITR68pK1lMYdvPsz8ld7BUOythNyIfqY3SojiFxyoSxiWpY35cF++YHdA:LkdeMYRrld7Wz7YIfTSo2GoS8WOE++OC","tlshash":"e832bf0dafff38b495bba3c49dc6dc316552b41896cb6b90791bf9a0102d0d6447274f","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-06-29T07:04:41.251729Z","times_seen":17,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Spot.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.262Z","timestamp":1782329720262,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Spot.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iVYVyAYJlbOTjUBkG2cS8MK4Bnyphtn%2F29C2Akudi2rDkY%2FPFo5QjHJacMQG23G9s%2FiB8Vvuq1W5hwFVIQWcevydrEHHk%2Fwzupv4bKHhYyArYBMSUvpNN0Zma6sISwyUEIR6NQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"8ab6-19e8af973ca\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 35510\r\ncf-ray: a10e2ccfa9d2723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35510,"size_decoded":36495,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"9baeb9daa6f84917b1cae217c6639dd7","sha1":"6b119775f19126a2cff15d857d99e3cb6cc4cb37","sha256":"7100f0f91718ee42253ffc87306deb08e299c1d1825ea436c22f324889a18691","sha512":"31fe60edde8fb924eabbc555e98bf66dfc44ed6a157fd3e4b902f9f23467d21086f33be1f54a5894c69635c72ef921017a482816d06e576e3b43c5960dbcede1","ssdeep":"768:D8OuS+qqTMhvDFG/U+mlwCYPDCWRo+XGJ9N78nXTLGwBF:f6GL8/UH3YPD5pWJ9N8nHv","tlshash":"f7f2f2129022e759636768726f082ffb56690db9f0c8744ce69f345b0cc977a620fc5c","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-08-04T05:59:25.933206Z","times_seen":37,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Fireblocks.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.421Z","timestamp":1782329720421,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Fireblocks.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lrkRSCLq66exsdsuJpkM1l9nv2Bvrr6AIPeYWJPPK20H3m4jES5Ha415vSoLMWXkCF%2BgfeghzcS5JqPaC47Upqn6kL3ffxSXqNwqLEGUXKz5OBQt%2BDC68sb09YRY1u9BhWIqew%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"66ed-19e8af9736a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 26349\r\ncf-ray: a10e2cd0aa0c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":26349,"size_decoded":27330,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"ba9a12d6131ffec8d68673125630b903","sha1":"64799f387aed958ae0df2a5729e5f9576fdb32f0","sha256":"b4e420375aaec01a0962225ea91db1e8709b50e076141415094aaaf4ff9b6017","sha512":"37de26a6ad0ef7d935706258e801b76231829bed6873dbff821f475b736177f688ed62dbe953a1c7257382d3ba2cd309237ff71ee382b0564b57b6cc8e4ebc0e","ssdeep":"768:vRuK/3pj1x7snpYtHupL0EY7aqgEsqYkD6CapQ:X5j3snGtHupL7Y7aqgEs4D6Cn","tlshash":"dfc2e1859bc0241d4808da35e2de9c3cc262ad14e5e30b3af0b535d59e9bc76712aef5","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-06-29T07:04:40.706885Z","times_seen":20,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Bring_Bridge.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.271Z","timestamp":1782329721271,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Bring_Bridge.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uhYEt362r51F6lUdIF8Qy%2BnSZBAmjddclNyJNfXGKmNwuZClLV8%2FP1G0%2BoUzNcK28%2BvjDhSTLMlPX9xv5WekV%2Bi9ZR%2BpARW7xk7dTyJScVux9ga%2F5qPehZI%2BlOby4bMFCxITBg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"35dd-19e8af97202\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13789\r\ncf-ray: a10e2cd5fc47723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13789,"size_decoded":14782,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"cfe06efde7fe6ef2ba04faef6784c467","sha1":"2297cf2dd7c04fd28191fae81142b8af24ccd523","sha256":"1edd6c94c68e42640148f4c19301c48eaa384ae5f15c546ab698a6999064ea28","sha512":"08cc78e6a8c35636d0d60aa6e8e699d2f5cb1fa588bbe9fb706421a68ea701918a7c77a9ab8a7cf1639c72d56d423f638af3a40ace06fc04bd5d8c31225f81c1","ssdeep":"384:GtuV0ahZtmeqw+twWvExBdvVcN/G5hoq9BLH:Gt1apvj+tzw/w/GV9FH","tlshash":"6052c0bc46e5de8f95a90b6b9e265970df231e560f16ca231dd4807bba8103cd5f13c4","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:41.145961Z","times_seen":19,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/DEXStein.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.362Z","timestamp":1782329721362,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/DEXStein.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eu8oV3xLx%2BvJN5tyOgcHmcK5aRdO4QD4vTZhP941c4wqwxozrUJEBV6PDPXH%2BNgLlFgRul3iLRPe7iQrl89mmyXQ5th01jwS30JiNFmW5m1sTQqU4h4wHXJ8pAko5%2FzSWLBF0A%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2319-19e8af97226\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 8985\r\ncf-ray: a10e2cd68c91723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8985,"size_decoded":9967,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"e25e327410636fdd410c2807d448527f","sha1":"8e66e76415dfb72a86dce84dfdcc2c55b65444a4","sha256":"d2e1b55f31b768bc1d3e1d6dfe65cdfead9535e8fe49d099e813a82d41491ace","sha512":"5a8ccd285b6417376b89bd5faf507791bd279254321b811520076131bafa0fdc8f2288200c27188cf6fcb34e3552855cbf691ebce70876d189640efb15d23eaa","ssdeep":"192:3E0NpFPBXEejada5G6iv4caBe/cGngs2x3v/WXFwbU:3NfPV3G+lijIac7F2XFwbU","tlshash":"d202b0027e70fe0ff3a686f94f9a57f38842b129c704021b1776d27ec8c856e1055c52","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.83205Z","times_seen":19,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/1inch_Network.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.376Z","timestamp":1782329721376,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/1inch_Network.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RQFVPAM0pJAk3qUz2Vli9cauEWtPElYevwQ1Kk8Bho0UW8cpGh8QdB1EM1Ga%2FvilIVpM8t%2FwgxXubaP3cfEK4WeoPorge4RK%2Fxuq6EnfEtq%2Bes5C4S3Z%2Fho9C8syYO2M7%2FggiQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"5699-19e8af971e2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 22169\r\ncf-ray: a10e2cd69ca4723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":22169,"size_decoded":23158,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"dbf95d45a728f420fb630cc6e023025e","sha1":"8b8bab80116aeedd2afc748bd0f58ddf574b302a","sha256":"7aef22a1cb3d21a92f1fac71cacc366a6e13e2a90b2ff17c48ffa320802d2705","sha512":"b16f95cef2e6f7c2cce97b3e60acfe1817e6ebc069cc495ae5df023df52187e1b73fc38368e121f9360bb5f973ae1dd2dfee1d4c7e08b6bb439f1a88cbb8f427","ssdeep":"384:xilV0Crxuygq5en9mQkg75f3EgtOYO8fct653JrViHEONDWzMpG8X4K1EH8A9TUg:oDlb5qOe5fEgtpOht65JrVikOwzh8J1e","tlshash":"65a2e1da0a6b31d4e8ac045035acf7f4368fd079639bfdcc8195398a934e94c29264df","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.680848Z","times_seen":19,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Supercart.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.413Z","timestamp":1782329721413,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Supercart.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kikgIiLMbxYOb3qe82ZS%2Fo6YW5N4oqbruxoE0wYzXE2lqnPSi5LGY%2BP0pdgkf02lg4Uwi1k%2FsRZRytw7v8xSe76OkUwmk9vsOLcoiT09f6dd3fNWDDzOhmZii9b8%2BHymI7NQjw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"17c4-19e8af972e6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6084\r\ncf-ray: a10e2cd6dcc1723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":6084,"size_decoded":7068,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"b43930598a04925a0fa0c5b49c4bea33","sha1":"d66ea3b98d940dfd0994451dd7a30b1761469017","sha256":"09cd66a901259a98121361b0465e675c5807b6a99420d9b9cf9530394961971f","sha512":"f0baf135d81411f342b1d9b80cc5a625afbd0d3084ba958a04eca25c94fdc0ccda7b261a7d977e88ccfedf6fe86dfdd76254511b1920362281bf93e7ee527954","ssdeep":"96:qw5DbYF9z/f8pzte8V+AB195+hKiZtLSgA6QghVSr1JJqsWokgDJBeJ0duvsCHhk:qw5YFp89tyAt5yPLSHiG1JJlWokgDJBt","tlshash":"80c1aef2234bae819e458932ff12fc3a57e480c157a56d64b2a683a5542f2c872820df","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:40.677388Z","times_seen":19,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Polkadot.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.219Z","timestamp":1782329722219,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Polkadot.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VCl31j51J0onOGqQz490Of6HFc8%2FzXjAfK5ZRe2AA0JYFsvmlmwju8nxEqVj7rJIlXqr3e1swmXbx9bMGLnVZz6QVKvcFDLhKIdYm6h7NSkT01%2BoyAnKxHhuThsxRGze%2BzoBNA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"1074-19e8af971d2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4212\r\ncf-ray: a10e2cdbdf16723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4212,"size_decoded":5194,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"82569d3150fa29c871d1cd5c9ee6e44e","sha1":"da32a8af5037807bfea7ab6ca618c5c06c02d176","sha256":"1628ac2222387198d434924526ab95535a245c8fb6735a637b4ce87218505575","sha512":"f1831dd9e8c993d8e45dcf1640f78448c9bcf1c7024af45be89caf8d9850dbf2f0bab515ca969adefa730cfc4fede69ca0e06a06af9946b801c9076024a01124","ssdeep":"96:q3CPv5GPS5N2KeQHiJwZEY6lmk5K2swP2H3kABSDNp:q3mMPS5N2KeQH8YEplOgALBop","tlshash":"f4919f833f3b7e0c663406d14629e013907cd0cd51e3e99c882727fca69ed13a082eca","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-08-04T05:59:25.935775Z","times_seen":34,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/HashGuessers.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.285Z","timestamp":1782329721285,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/HashGuessers.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J1bs6ofJ37RmR9qBNkmP%2Bz4oCbueW5LcNUevJP3X7VNUsFSFHuY9ND5MGDcUlTfI8SaMpdjXRjL%2BXtrCCMHXj49Q%2FXiYAhFh%2BPUfsLNcX%2BA2XB34TYnTt4Qk1XfNtviqaLr9nQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3597-19e8af97252\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13719\r\ncf-ray: a10e2cd60c56723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13719,"size_decoded":14706,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"9c2e71566b69a365c16950df048687ad","sha1":"cf57a5da810619f187bc1e93b921e03b87377cdd","sha256":"ba1d9921b095be2e5e71e9c1b7b8331254edc2b0cf58980f625c4f5f53fb1017","sha512":"74616d3efc81997eafe46e8f7791995df4d82dad486cbee16dfb955ae46698e5c660a09594c5297230ba51272ead5dc6b5f2a18c1b95326dc822a3f3c230ce4a","ssdeep":"384:R9/A5QM1Nl6X8vnama8sk3AA3Sifx0F3r7fJn3Z8p:Rmbl6XKama8l3nRudr7fJ3Zu","tlshash":"1752cfd3cde1ae84601b8b6e3a8919146f6a40e083594bcb5f118fe953ecd803293f37","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:40.587489Z","times_seen":19,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Illiquid_Market.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.429Z","timestamp":1782329721429,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Illiquid_Market.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vd8%2FWiJBKQbdrOZ2hjk8fAEmkLlhvodldMLYaG0%2BX9lCf6Arofp7Budg0sK2IZSVm5vqmjOeEPBWSycger4JXQRrS9dbPvMtW%2FiWYyZAcWTeW9SCXzNgq0pZu7YTO3qCel5kzg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"858-19e8af9725a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2136\r\ncf-ray: a10e2cd6ecc9723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2136,"size_decoded":3117,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"d1390adc0d113d68411e2f8a845aa974","sha1":"47991f519cf6b819340b4a5d7edbe5835694d49e","sha256":"478023d036b749162c07f92c3659fabe6b59f61cc58314003362da9e2ad3a772","sha512":"32d2250b733d9cc482437e61c392ab18729b0d41863eab8733a258444f5c6311fb261df66c57b50ebd8c2e3060c75aa8cfbd4b4d4e10475d0395131e5deeb1bf","ssdeep":"","tlshash":"ae4151925f20ff7e69f802de5ab55ed39db58731836f9bf3688153350c326148a02093","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:41.232097Z","times_seen":19,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Enosys_Bridge.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.557Z","timestamp":1782329721557,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Enosys_Bridge.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2n%2FdttlDcpkvyVY34PLpZ8DQkfVCLF8rsezHVGsyhLrAWtN%2BzHK%2B%2F%2F8m99Knz%2BlwyS%2BD4ZVRH5Onphs7cGzSnUJU4Tt4MQB5kGEqaAmgpTi1KRlW9K9E3wSFUX2szrDttGr7yQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"188a-19e8af97236\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6282\r\ncf-ray: a10e2cd7bd15723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6282,"size_decoded":7272,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"c48e36e8e72317f221b10d3c7d5e89e9","sha1":"9884e8e07c93d36dfd8242d79546725fd6b7f467","sha256":"8fd86f3508f7341b279d5484f7b9ab89aac903e3c8fcc0ab3ea06d540688fe1f","sha512":"cc63118531805c6ce511af5bce19e9d01babd8dca4eac75a2e248dcbb8940a718104871f28672b11f96c6ce5112d1a6892b0e4efeb7358f72e6ff8c474ca5d3c","ssdeep":"192:5qyTytFnmrq8zkQbvZTm8ozZFqapKZPGUS9+APiN1:innmr5zHlGzhKZeMV","tlshash":"26d18dfd6d49ade9eb03f376c6594c9c221f62bc98e77346570a3684d3688802fc0e94","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:40.682402Z","times_seen":18,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Aura.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.716Z","timestamp":1782329721716,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Aura.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5gaxa%2B0MFak6OMfh9Qut3Rteqmi47ks0FEhcvDUYILXn055B4C4KJJLWfLDj7Oa2UiF4Id4XskGa7Cj4lmxTRRhLILWzFOgP6XzBc9O%2BeabdNL6ofqvxciusetN91CZY3eJnTQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"ead1-19e8af971f2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 60113\r\ncf-ray: a10e2cd8bd57723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60113,"size_decoded":61094,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"2b2c4018291b26cfc0cb0f4557c2cf2d","sha1":"5ebb2d9049ea19a3d64a7f27fa024e5ec664ca59","sha256":"3c8ad49fa57d2a73fdd0880ed7b97e4babcab3ac47415e18162c52f573b28bd8","sha512":"5eb28928a9dfe55231c575d62a80f996ab85aba6a22765e9f825574f66620299f9b8a9f957a1ca53f4ca67b874959099a537ebd5ec73f980d7dab511f80755f0","ssdeep":"1536:06WRQVgKJ4/vi9AGxnW7d/JU5FMi5IegsBrASF14:06hmKWvi9Zxned/JU5FMie9sFAI14","tlshash":"194302c7c2960408ee386eb7a57284f309b7de65946d9891de2c31de36b305bed09329","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:40.711728Z","times_seen":18,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/KyberSwap.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.081Z","timestamp":1782329722081,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/KyberSwap.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zaUMjjEc8wb7vQW3MRnTlT5lafKpDEzZOxyHTzlQ3aobPMi4jB21Y%2FjV%2FZUdSuJ4E1ANbcamaN5SS%2Bb7naZA%2BVC7hhYjvzS0JSjxvKok0rWw%2F5X4AhsBvkTkpZOLqh%2FQ9u%2F8OA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"a160-19e8af9726a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 41312\r\ncf-ray: a10e2cdb0ea3723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41312,"size_decoded":42303,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"a0e2b129906df80bc92843a07196da10","sha1":"a7af8f73c79a31ec344c70a06bd96fe842503988","sha256":"ea444bd95cc603929de620440518da1cf8f0be14aa296bba517f0e3f96e7322e","sha512":"32af5a7b46051bf29424fbc1feea045c735bc367a7dfb178efe58f19c1c8b865c9a1e78e07501ba7ce3bc38386b51fa0163c0fd269d230cc772a3163c1ecb474","ssdeep":"768:yV8N9UqF+LB7DXruvCqCVAdUzjXe3w2LPVLNZgxqb3YIrLyoLhlHFujK:E8eLByCVZjWrnLvFX","tlshash":"3403f16bddf0fe4a6411c8c44f91188d763c3eae70fa7853db623ad2c01da6a469b914","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-08-04T05:59:26.005936Z","times_seen":33,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Bybit_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.981Z","timestamp":1782329720981,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Bybit_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z4M3EpHZmpRtJhj0pU9bRGhHCR9VjQutczLDRDX%2FRMQ8Z5b0KMJcUaO2HlBe8C57oXiNPc66Ob2wJH0olWeyBHb60dBCiEbOC5zmrRtGXcU%2BGQraYrEx1bWpKXBxj%2BGRsgaRmA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"279e-19e8af9734a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10142\r\ncf-ray: a10e2cd42b34723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":10142,"size_decoded":11125,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"f24940fd9b53176085b887f31655d638","sha1":"83872580bc82a51adb63cf1eed4c20be18f8477f","sha256":"ff4f5566dbb4ca37f03810c05919a36ce02f52b194e2f379fa8f9ae089b09886","sha512":"5901fbc01b04e7c97a5be298b0258270055a658c5c0cb0d8e3b6cfcd142926be9c4c65ecc8ecc3195fcc1f52e3a72a7f533b8b79b97fb9393f4dd6d3f879f96a","ssdeep":"192:2Qyh4vksTGIf8p6xJOev0VoJMiU4Mv/f23MOKT81kwnnwpy6szhDFSiHcEoG:2H8nGIUs/vHJPuv23tKT81kwnn+nyFSk","tlshash":"0422bf6c7b79b0065f452dd7a11c6a1ce96f7f189b8cf6cd3180bda85e703d842119c9","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-08-04T05:59:25.971945Z","times_seen":37,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Gridlock_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.079Z","timestamp":1782329721079,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Gridlock_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ATlEfpwhIh7DHD1EWYUVCWMel7SRbuarnOIjUJRds83bhUpSKO%2F6dzLZmDzhN%2BN9RSxIkyoVf2R%2BfCWoVn4yyMbhGtK5VbtCTIiyTFfR0UAgmY%2F5SCILPOMgeMKIdIFCzkBGBA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1fac-19e8af9736e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 8108\r\ncf-ray: a10e2cd4bb99723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":8108,"size_decoded":9092,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"6b4814cec1d5ec3b8768f7ef35836913","sha1":"73b1b7fc345f19736a9b1c6856dc50f69c959977","sha256":"0048cceedf042e6c376509ba615d2faeaf50baf3cc5ca64c1ec7391584401064","sha512":"c0fdb2cc3046e106ef9555fb9b2d10cccef5a6e4685b53fc16ec725a76b0d406205c8c4259fdee74066309493b0d543734756ca34f738fa8f8756ffbfa677ab0","ssdeep":"96:uEgkplseTjrFc21fwTMIcYUJq6+nKUr5KP732sAcltjqn7iJIJ9eRhlSILk/Z+KK:4b+FQ2Jv+KO4732Q3qWJILeD4SgPIVr","tlshash":"0cf19ec792d76089c7a03e33e501591069a91b49f70614aac43f3c81b8fb9f7299c373","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:40.761863Z","times_seen":19,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/12Swap.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.424Z","timestamp":1782329721424,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/12Swap.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YaLvI%2F97sLH0PTVHVO6Ag3a9bIurZBuvyeugnEJhe%2BCCgz3StQqZ9rgpkkduL%2Bw54t6CnCTI1SvHI7ApYHGrFPPY%2Buva95Fig8V%2BjPm8wQPL%2FDJJ8okg2u4NxH9lQZGlU%2BZk2w%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"d64-19e8af971e2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3428\r\ncf-ray: a10e2cd6ecc6723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":3428,"size_decoded":4417,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"6dd851a5d05ad691aa4cd8bd43a173c3","sha1":"218844ad2dd10a773d49b151c0b5a55f20320d84","sha256":"141a45e7d73131e0caf1ab7fb9cd4354dd598c3bb01507b2d95ae65ca82267e8","sha512":"566fcaf878bf4dce3040fd4d031e9fb15f7ddceea58e8927885bc92217e3eacd4838f29ca96db593b3b09e98d5306256f6e01693fb3285e67a79a6328a418301","ssdeep":"","tlshash":"df616c1099a20b77d7284f396717287327e0632b7a5e4f56b84cf27d07970a0a68d13a","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:40.717623Z","times_seen":19,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/KinkBNB.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.453Z","timestamp":1782329721453,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/KinkBNB.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qlM1pJVv2b0H%2FO4duh7Q%2BcadhRqZ%2BJJRxB1gyvLfyQbpfPKg0H2nCa1XM%2FczvcB7i%2BzSgSUzhw%2BqaBrIMPZf%2BLhrOwFHEX%2FNfoIWQ9vJ8bwvP4XbxjSc2D3KBDqzNj0zCNly3A%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2fad-19e8af97262\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12205\r\ncf-ray: a10e2cd71cda723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12205,"size_decoded":13198,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"92495137b1608dcbf64a66b2aaf5704d","sha1":"6585c658a1b50eb4e0693c1c2f852df0d277cb3d","sha256":"3272246eda6209d744fe323e015391d3548eee39a0a110df069c3b0b5e61b106","sha512":"50b7c919ab3f047ae49d72d5d308bb4bd966270de7bd822014b337ab2a030fb0bf8f5f373654051f198034f6b72ca27f1cfb71d719e50c13fac9b7f6d05819fa","ssdeep":"192:IJzjBaYxW1YspCJ8+PsWsynY3+yf7TJirA5xzIV+YblBdkzpcxrhKJUmOHp0uFMJ:KzjBaYU1YzJ3FYLJmAPzI52z+xrXHp/Y","tlshash":"a642bf5190fbb604df5860ba1b9742b71f739329ed9e4414e2a608cb006863d1cf2ef9","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:40.736129Z","times_seen":19,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/AlphaGuilty.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.513Z","timestamp":1782329721513,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/AlphaGuilty.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WkzN3K6ogJqjrrE%2FKqMNmDilNaNTMkalN042qdcSKpKaQUuzfhKZNm%2BYJ3%2FCK%2BOeWl7ozYbFUzoxqxsjOhCNV8FRELrYbz25y%2FXvZTOP9uLMpDYcZy8fkezARs%2BVDFDbZRQIUQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"3441-19e8af971ea\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13377\r\ncf-ray: a10e2cd77cfa723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13377,"size_decoded":14366,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"67e7a4a87f17791824367cc676f6936a","sha1":"6db5aa1100d7cf5c6e427c9c669d7e8ef83719cd","sha256":"d387e171a435a9864729bdee20f2cc7cbbf474153949b0092938b371b528869e","sha512":"67bf7d4973d7f788d9fa1fc9c86f21cfde24ae0e0b25228cf10da6a64cc2f4e303687fd4cafebb6556f1630508468915cfa738dba73d9658d63e1655905b4bf8","ssdeep":"384:M+kc23DtFHTWM19BoSbZwiK3HCka33egg5681:rSNXagwiLkax1W","tlshash":"a652bfc0cf2e59b3510941b52355df30dc628396b62e733ae69f28e06ca38579d4f8b4","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:40.96105Z","times_seen":18,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Radiant_Capital.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.793Z","timestamp":1782329721793,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Radiant_Capital.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SRpgty%2B0iec35GeVpqouYlC8f3JFLoQyW8gIq6jtW5Io%2B5LfuYyrRcZ44iv6QVwefQpbFgDF1QRRxS0J60EADG%2BMYfTEuKxiEhg9xJDyJ%2FnlXlbr%2BRvD%2BzkxMdBkDVXhsupEkA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"14fb-19e8af972c2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5371\r\ncf-ray: a10e2cd93d89723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5371,"size_decoded":6359,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"76c5c872e8ca38061175851c4735b830","sha1":"c3c874389088cd912eb31bbb6ef67b1cd70ac065","sha256":"efa32834dd1856e9536952551516fcc659d111f316607d6583e43f6d33362121","sha512":"be78e42c0182509fefadcdd73695ce55d711aa3bbc9fd136f148c583f362c53d469bd2d6697e8e18ceaea5c2f57fe52f9187e76bbd8271f7a09f33550deaef67","ssdeep":"96:2IAj6hDBc7qt6gKFpEtkdRCqTsQfCVlSEIsYC6mhS2:vAj6hD34gAEtkdRFgWsYCL3","tlshash":"83b16d19afe25db1ea5ea2f54245a1c70bc1d22162b989dd329ba499c7cb3e41034560","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:40.810048Z","times_seen":18,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/GhostMarket.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.856Z","timestamp":1782329721856,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/GhostMarket.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jn%2FaX79AMCKu5%2BYL17tC%2BmkR6508LPN7AWJoVq0Bs0LM5L3UaRclK9dcW4Ki0laK0kFrO4J4ndx%2BBJkkW9S8XR6NuoN9j8y71uYtb98wud0wMsGCDxHbLIUD3IHPm3ta0eykRA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"11ea-19e8af9724e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4586\r\ncf-ray: a10e2cd99dbb723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":4586,"size_decoded":5570,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"d0ca0048b7dc079b9ed3c3fe736e1581","sha1":"d10a88ec1ffe70816960df831ed6874092fba7b9","sha256":"bd68c7008f07f23bb83edee48e534fafec29036097af80cf385230004e59a493","sha512":"add9a7b1638b0cc5896fd91abb5423905c73e1fe5da5bdff60bf3411da2a7dea993dae4b541e108e01f03ed3631b93359c1f47547213638bf14c0cec1f085e59","ssdeep":"96:MLLlxUlBp28kB59Bc05RIDRBLTDc2WaU9eDNxcPSQanVOw0+Ta6:4LDUl/ti5/V5IRBLTDpUUxEak1gx","tlshash":"d0916ce5f303da58e1760845c477407de04ca0cbb6623202faba6dbdf91a9c520d1ad4","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:41.239437Z","times_seen":18,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/dropSystem_io.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.912Z","timestamp":1782329721912,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/dropSystem_io.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k%2F4qoPBJjN1D1R131W0PlUy0nMqNVvcntI6jE1oyH6rMcSrtc0A1xUw%2FuY9nw0wsiEuuzaK%2B8qSWgMqQ9Hs4Qul2S%2FLSCvIjwIG%2Fz6R3Csfm%2FO8Qyuir3NlTHe5XI4FGCutPmg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2398-19e8af9722e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9112\r\ncf-ray: a10e2cd9fdea723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":9112,"size_decoded":10100,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"742e8c1bb388c384f0133151f5ab7268","sha1":"0b467857e0bd41fe304524bbad31be8bf95edbce","sha256":"5a8d165a68906a25fa12cdbeb04609ded7fb6a26421516563663c14a817b7ad7","sha512":"9c11f9e33437651145289cc5aa3bf63a5dbdcc684ede74d654caafe0c33353f4de5aa1b368f8e8d47e78692a79ee9cfd69680a01e4ac7473105b501a0fc2188e","ssdeep":"192:I6FHfD2kH7c7a3iZ+4tzdtFaLXjtD7Y3rR4odic7:pF/D2DPZ+sdIXjto3az2","tlshash":"cc12af8a3578e8a1cb451af299c6c4f389a41fa54c37476b31c5bf3fb6f1c05092c18a","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:40.712713Z","times_seen":17,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Mirai_App.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.190Z","timestamp":1782329721190,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Mirai_App.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zx63bx45ffMksDJ%2FKLlo1m%2BBU%2FY0YT4oPSShFITc%2B0Pzdn0QnTw7TMtg3YrcMdih6s%2BIlYO6L%2BWs4clzHz0FgzpMT1Ej7XNOjiouUKjnjQlEItRvb0WPTPh17vTG0rt7qscWNQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"119b-19e8af97396\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4507\r\ncf-ray: a10e2cd57bfe723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4507,"size_decoded":5495,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"ef03a174066ccb5e5360182020093d17","sha1":"707acd68272e64345a7441c54dae4a53e2fa5954","sha256":"3f53ea0cfeddf218b0c173431741cc126016588370d8954f7c3a9cdf939f52ac","sha512":"6a9212883e68c6e788cc0a00a961391520c7a9bd156f7e01c4c2f90b537ca48a3949a62a0252dfc420555e0331065370cd418911962c47f00e780a3f5f96dac4","ssdeep":"96:/zxTnxgEh2F98guSHPNX+pWxL6qoDo4Z+totsKwwEqjUBZ13:dtEF98gTPNu2araoeKmqjUb13","tlshash":"d4914cc664e28d59f920207b5813311e9bf4440f964b5d43709ec2ee475fc73ed8e861","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:40.907674Z","times_seen":20,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/ShimmerSea.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.215Z","timestamp":1782329721215,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/ShimmerSea.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YvjhlA8lzTYfF%2FnWANmPHT7DbxFIv44WYwrE32asC40Ec9MjNVmAyZuZzP%2B7OOPGp3UVIEDF5TD2H2eH70%2F8i1t%2BROyWb3GainoaSICr7H0%2BBJQcoVE1QuEYWsnHlXI6db4I%2Bg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"52d8-19e8af973c2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 21208\r\ncf-ray: a10e2cd59c10723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":21208,"size_decoded":22197,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"7aad35b274917f778c943ee5753cae42","sha1":"bd723baeebf0ed4f94570bbeab990171d0a2a866","sha256":"db4f638b8c8c49e6269694b4497d51e5d8f6baf159bc2d0d041ba7c45a7fa30a","sha512":"36ef16d1ebcb4a3300be588c25f471c50d595f26e290c0aec7247baadd9eee58c34f87467d8937a3b814654a607cb9fd03047b6f23d7d3b0a15c99e42675a4ab","ssdeep":"384:XbdWRrfwWgN3Drv/SJYi/MzlniZPL+6rh8KfHWzw6w6QdxfIYb3d+1nJdoXlM/MO:LdWyjhrv/qxMpuL+6rh8kH2q5dZI1/fP","tlshash":"5292cfec056872b47315ee9dfed212dc33d7662eac1694961364b936ec92a803c1136d","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:40.558862Z","times_seen":19,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Toqlo.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.587Z","timestamp":1782329721587,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Toqlo.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nrDONrpUq9L%2BVMEvD1D4GaRlWuUv26ekZEMFNPGPKjUj6XSJaAQEIklwSFh0iwt%2BPjdrVSgnNXPpJ2SHAYdSGDzFtc1HyXbjgm7%2FYUKOiHZf3X%2FXRKqy%2Frym0YLB6THZS36rmA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"354d-19e8af972f6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13645\r\ncf-ray: a10e2cd7ed29723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":13645,"size_decoded":14632,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"2f485365fc49074922da15b53253272d","sha1":"b9d8653c4bb25e77b6f712709263c0788fbce96e","sha256":"155b0f26889d59a6bb885faf2e72d3e283aeda21cd5f9e3e72fd8af26e60c005","sha512":"760140f0c91c7513314efe21b6543d0ec07d39dd97c2daf6a7fa02848eeb421a4e8b381df790fae2ee18bd3be5f751c012a661e7f5c8a352a3cac91bc4adb01c","ssdeep":"384:+8b8I80mLavXhPcLySZIbbVI89APTERSOFG:+8b8I80A292ZIba8WPcFG","tlshash":"5c52d09162aeea379b2fdbdcf0f0f24e66041cba1a3443161e3b049d64b7b475174860","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:41.244644Z","times_seen":18,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Enosys_Dex.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.932Z","timestamp":1782329721932,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Enosys_Dex.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v%2FdNz8OpQK3BjV%2FljxXWciJ4f0ZdjWJ%2Blxy5KsnBRof1124UrI7FzcY%2BsOQuJzwgcZPti9TzL5Kmfp8%2BgHYIi9n5kx8nvn9lCPmsK8iDh2mZs8jmupVfOpGXv0T%2B9I7fpjFjQA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1459-19e8af97236\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5209\r\ncf-ray: a10e2cda1e16723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5209,"size_decoded":6197,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"99df76c88ac0b059606e5eb6bd7d16d5","sha1":"eca126433a158ce03139675980a96af9952c54c4","sha256":"ed1bddb4dd251385ad003849ff59b297b6818bd991c6dbe1e6f7a9f8947c98d1","sha512":"634a29611b203eae141750ded344b7ff8c3a8bfc50119d4de4e0ddf8e04027da39574821c5ce4ec9250feeffaeef4d934b687e0480ea51813c5f22afd6ddb0a2","ssdeep":"96:3jDjk48V9C7m7swc9E7lZ6UR6DdMk7PXzNdg36erV87iculcJ9wVQPq3BJkwud:TPk7nsYT6o6DakNA6w6G5lcMtDBU","tlshash":"60b18eb62d6b35a2ed51b33f52ece7706cc5449d412a5d36f2284abe0b60951b0f31d4","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:40.785112Z","times_seen":17,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Doge_Coin.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.207Z","timestamp":1782329722207,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Doge_Coin.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fapy2HEMZ9ZMu9bweBKPk2m0dwIRzRoiJaGt3%2FUxuZhgcFn1CKtF5KBbqbFEqlS%2FfEOetyHBSHJXfYpRqj4scsI1XjSVfpmObRsC4pklfYRz942%2FbV59gSb6y5Y1SuPXyk344A%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"36ff-19e8af971c6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 14079\r\ncf-ray: a10e2cdbcf12723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14079,"size_decoded":15064,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"278a9869826b2a4eaea431cdc6453b54","sha1":"bd594481f4b16629a8c64592d33ec958940497e0","sha256":"a9f5be31e69a51dcec3252921a5e79b57d891aaa1b062ba5e1795d91745c29da","sha512":"b286697c604a63ae173669d9d490e043c3ba275084218c38a5dfa51f03e28f1e6585848355bcc9dbee810c5dab2dfe203ddfa7c51f1e39837ca283e44b2463ce","ssdeep":"384:uJt9XdqUMjYnK2FjV4OiyaLwBGEKDQa4ORid2mmQgKL5tKrBT9:uKJK54VVQtOuf0D","tlshash":"8952d0ce3e4d5d3cfec01a252923dd58ad52c70c7a13ac9f961b80ed842d7352b425c1","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-08-04T05:59:26.02813Z","times_seen":34,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Gnosis.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.310Z","timestamp":1782329722310,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Gnosis.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RkvWKZRByf6J%2FD4EjetKiEyjSC7LrJKKA2OM3%2BcH%2B4q0YacE9Eb28fuegwutBQjAZ1LhXmeFs0byU%2BVAiyEQoBLdGcaCnE0lZjgylgeIFfZ0cqXiRt2kg4klQHCf2C8zUumKfg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"816-19e8af971ca\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2070\r\ncf-ray: a10e2cdc7f5c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2070,"size_decoded":3053,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"d6292641e03ed065eab7cff775640fa4","sha1":"05204f8388296563a26b2393d3838dbe424d8ffd","sha256":"a5859a3a0e4abc4b00c66641ec343620914b1f9e05e04e90cde640a6a6354935","sha512":"7bd4c920d9921c6d7f0986beaace2951d42ca3957a6ec26b160661da045804f30655c7c2dd1dc2b7c6ef25868f244e19e9a1c072f3fbfd21cb21dff0bbdbe9ba","ssdeep":"","tlshash":"8a41f89339487ef35e165232b976c171c988e26af03348b589aa522c63403613fbb11c","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-08-04T05:59:25.937974Z","times_seen":34,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Avacus.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.863Z","timestamp":1782329720863,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Avacus.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mV4sgcUE7WOFVRW8bChkQ37AYW2vHcoaMIpjVA%2Fb17fGgbX%2ForyZAAMQLp5a6ds5wgIKSp1c7Y4cZF9JGmdenXSfo6VHq3L%2Fa2zupJhKmXLqUWwnixY1cP8RTAlpK0RpIjWxtA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3174-19e8af97336\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12660\r\ncf-ray: a10e2cd36ae0723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12660,"size_decoded":13643,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"7ceb9fd74d03c8f4620e1b4b44ddf588","sha1":"8a0e639ddc5fe5046805c246ab25f77e0a4c9fbd","sha256":"58e48972b25c65d37a5b6c0c360086e947bc2cc6b65655e76dc3a74aa9cbee19","sha512":"1be61590fd370d9f04e7495db922d4e2a3e4e70461b3e516ba4d54e4061d2553360ff6cdca3466f9afcf77aab008fc6711e77f883f0adb951bb928f920fd1972","ssdeep":"384:etURa1vvR4gM3HNF/j1IUpcYi9kLDiXMrgyE73:eSa1vvc3zj730Mrh03","tlshash":"1f42c08bb5317f0fcbe717e7af60cd016248246c0edf12bea39049261fe9b4a5093658","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:40.742186Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/MDAO_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.884Z","timestamp":1782329720884,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/MDAO_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3nudgArNuDRx3kXBbtymgpUFG915vGozcWrqH35JuMrXEIFjjU6L3cjy%2F5aN40WUqIWtgSFlTjy5eBD0B2wHXwNZ0J1QJ7hHCbiiuguO9Vaj0gGIoALWxKTGJkxm0D1GDB4OhA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"23ee-19e8af9738e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9198\r\ncf-ray: a10e2cd38ae7723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":9198,"size_decoded":10176,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"65dc106538ad3d8e919508e337d20346","sha1":"c22457b6e98e20eeca5ec76244537fb31045ca95","sha256":"f632f70ac21c311a50c633caa01d5424d29da988ad10596c0bd2a78498326f5c","sha512":"bb47598afad42ac1c0ab0f3d3002a78e25025919a4d0ed3a65c8fbb1f118ab8d10c1f658e0358cbffb7f54f5810e6253b8f9dd4eec9c7d534ebc0f1e57a91f77","ssdeep":"192:g0EEkvusmh7juXAEcMu1Ee3kSCxREPNmcf3zm5gyq5:oh+vuXA4re3kTUNtK5gD","tlshash":"e812aecb8b2ec825ec5fa53f1ca2d8cd8c4dc55464810de936a7619a323d53e054c18a","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:40.607237Z","times_seen":20,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/AQUA.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.396Z","timestamp":1782329721396,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/AQUA.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=llkHGVmjG%2F365i7Ksq5kcSCvUOzY1OQYuMOU6TCB3YyxQ6%2Bu7oLbESe8rU2cRc6liHBZkk%2BffIHkelWLmYbhSfuPAPkzCvUNSsPvFQBQpVcw%2BtxndXeI7KKQBOBCYh%2BrWQ83zw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"126c-19e8af971ee\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4716\r\ncf-ray: a10e2cd6bcb6723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4716,"size_decoded":5702,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"6710fd1c058a945ebabc414f545106bf","sha1":"2c6ee0fad0320774ccf0e7b4440de957fca2eee5","sha256":"f0ab8b26d98c042f40017655e08b04ce33065bcd865680a2939290f0b30102c2","sha512":"41a7e2d9d8320224914f12b7c21da042a26fabe47d3473dcb57318deabfe0fad6d459ac6b163c1be3ebe97b5d8ec57386c1551e5bf9dfcd3d410620020c2cf93","ssdeep":"96:cSTRsdrlMKAUe5Bkswv93NQD8VfWffC0mXGThVLp9ucB:3RsdratiZ93WgVeybIhVnucB","tlshash":"72a17de65bbcc1381d6beb3b42980f5b068b71672ae31456c8a73aad508bd10a090f56","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:41.00086Z","times_seen":19,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/EVM_Wallets_KS.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.100Z","timestamp":1782329722100,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/EVM_Wallets_KS.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I2dp4wk%2B0PwGw0nAHDE%2BCLhUtEbAkCFINf8tOuRpx%2FmoFx7H2r4qc%2F1GgWeawUFNTz%2FKmoaUay2fNgZhoMC9AhqtsWNGe5oQzjHcMHL1Enh3ZUAN9%2Frfbb86pt4SXdo%2BuvpLeQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"cc4-19e8af9723a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3268\r\ncf-ray: a10e2cdb1ead723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":3268,"size_decoded":4257,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"94daf40f228eb6f72dfcc261ea08bb1b","sha1":"125207b8a02311da16b45419a6a44ab123fb9691","sha256":"01e2b960578d6da35555d6cc8dc59af5ba28dc90f106483c4c9376223a9d451d","sha512":"1b63682ee159ac4eb3c37a2c722a8e4c2fffa763415e424e3f5e828095036573e6713c4929786fb4463039541b3142c611383128784531050ae45d867b9aebec","ssdeep":"","tlshash":"aa613c5902dc6ba0cef68ab7f9e5b7ac1531811432c259b14fcab05bcecdd0820857a7","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:40.842705Z","times_seen":17,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/EthereumPoW.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.254Z","timestamp":1782329722254,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/EthereumPoW.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a%2FX0pdgskLljEFY86OlsEN%2BociPaAN56XvDGCbnUYwQSiNzNBb3EmX3D3UgUmf7B0L0ZrgEhC5OGbDOklhAIfIZx3eG3V%2BGxfkOvX9Jp3q51WoP48hnFyn90vKm68EyNZ6lq8g%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"a51-19e8af971ca\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2641\r\ncf-ray: a10e2cdc1f30723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2641,"size_decoded":3622,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"796a52863b872fd65f5e389cffe4490e","sha1":"e0b542a8ba20aff53d62382c4d26e824eff41b40","sha256":"1f59986b4fcbf98c4cf1e521adf8142bbdffbfe60abcf237e8438474073f64bc","sha512":"efaf49d3f695d84b0202ed7de5545ef2e098afbde51a27446cec1de9e4759c8f70ce28045778d9c2d77f283c2aa804fc78dbe622cbfcb5c786afc250ff741255","ssdeep":"","tlshash":"98515b89c2b0969ceb1240514d97089bf12f2541db7ba4ce780eb161d2f4ec8fea91b3","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-06-29T07:04:40.833991Z","times_seen":18,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Blockchain_com.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.298Z","timestamp":1782329720298,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Blockchain_com.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DS82CyVuj3JiA0JQ6OWkzuQc8q3wCvRSTd9tV%2Bj5tBurzw3sm3%2FY8yq%2Fab6fRNKTMZRo4BJnHEjUMGqzQr7wWF3Tp2foA3%2Bp48QtEEa1mtmGVCYqTsCBAwwxN7F8k1mpk%2Btb7g%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"129a-19e8af97346\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4762\r\ncf-ray: a10e2ccfd9e0723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4762,"size_decoded":5748,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"978e1517e3f4d4a3f6839d92ccfa1719","sha1":"764e8371fe81f3e84032d0d7dd0a40740e07440d","sha256":"8cac4121d3bb0485cf593c136a20f16f799fedf8570dccb9a48ae6045be6fa24","sha512":"1ae42b1890be7a1768fbc2dd1686f070534056bef90257a1312190e506f2bc16b6c5385e61ac3544b0baf2e6b473cc710ff52b4a9770cb519a29ff20806ff20c","ssdeep":"96:OdDiGhgdA9+f7iZuP3mtzoR6MwbstdkD1B9/OdYDdBDI19K6shtXil:O5FgdA9yss3tR6MwWmD1OdYDdBDY9Whu","tlshash":"c5a14b780b23849af1df5f618887fbc4d40caa056d60d62b41ffb7959a2f10a32125bc","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-08-04T05:59:25.983587Z","times_seen":37,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/A4_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.675Z","timestamp":1782329720675,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/A4_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GmdrVWVd2oKmtXxkmt1E0LDri1umayc62O%2FMxDeOdjeGUAiNTXpMYJuHeqnMQJxXjX9Z8fFTZhYW8qF8cueUxtJHkXqSmc4Dx%2FaLfqlwi90fySV6H4Qr7n036RzLAavgEpaTVA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"12a1-19e8af9731e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4769\r\ncf-ray: a10e2cd23a69723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":4769,"size_decoded":5749,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"071d6978575d36d41333fefb748ee381","sha1":"a2607f338ca99e53bc2f54dc76e0bc38565da360","sha256":"cca341314b59d4ba352a8dccc5428034d18fcef709a102c5ee50550a4225eb25","sha512":"dd8a38b4ba006f4743312740d964f66926171fbecd6af20e57959869e2157d3fe941dbc8a72e7ee09ca5698cd4f0c56d64f5a75ae97be6ba75640dfcc2ecc659","ssdeep":"96:Q6MW2tYfHICX/36xuvLy/KY9Cz0zySw63HUBtb2SKQnL:Q6+tYfogSI22LwYtb7KQL","tlshash":"aba1f7f0540ef5527d70e49f9569fea970491e3c1e4bb3b90181ca846eab9f0c67c351","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:40.998239Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/AirGap_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.888Z","timestamp":1782329720888,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/AirGap_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6eLLrAwgI33%2BeO7FIslfFOBrSzMMXTYjr4hQxbQ7XWw54vrEJ220QqRG2WeQ3YYyLQGBjHzx2qxJXo9znKv%2BXGQaZaCqPThyhCwjAiOiwfRqmKyTzFAX2LJ1cJM0Y7xyjtFH%2FQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"201d-19e8af97326\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 8221\r\ncf-ray: a10e2cd38ae8723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8221,"size_decoded":9203,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"b5c6f06fec858c9fe717fb18d5336d07","sha1":"3ed793d408291d5a6a506571776585bc7a485a55","sha256":"bea00825792ec134ef0f98ef7fcc63151a15ccb4adeafc58e991485b4be014f8","sha512":"fc421fda22527a6905685d39a7fb9f3beaae1388dc23c18b7a848f5edd14695158d9e2ababf70853ca503c79c3fc224cb1fffadba3bbf11cb68eb331e16092f9","ssdeep":"192:l4PttttttttttttttttttBq9SZodys09poY/wGJt3NL5CO0VdGl80FpNOllvvvvS:ll6Ps09po8wGJtdYri5Ollvvvvvvvvva","tlshash":"2b026cab3471a0eede3604a2f062b176745c8c5a8d26529f32c896b274cb4c76c49ee1","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:41.016969Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Baby_Doge_Swap_Widget.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.509Z","timestamp":1782329721509,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Baby_Doge_Swap_Widget.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WATIUkktNkr2nvMUjalc4NSTKdOJJxVPWck05p4%2B3S5HQlLzkwaKi5vzOq2uGDK8cYckP0ePhSHgqBc%2FcapV6mRZHmn8L4%2ByNplda0ensDrffx%2F2ERuKMxqr38FAxGutBbL%2Bjw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"5bee-19e8af971f6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 23534\r\ncf-ray: a10e2cd76cf6723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23534,"size_decoded":24521,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"42fc5e9da2427e02048ad6d2c3c6aa7d","sha1":"19186c60fccd19052bdcc1bdae9288794d2a92b6","sha256":"96129640e7c07d79d9c4999ae718758fe7617ad522e7725a92c47a856a1c9e94","sha512":"e499fedf9cecf4dc33698e8b1c9d86b5a5b858c617e2171c422fd9454b801e987d89b506deb3fd3709b409851433fb2469ce958abff76813cee50340278e37f4","ssdeep":"384:8hzrvEJIV+xZKD20hHrJW0pTiUH36CVPGtVFSOphSOVjadn1jJ8tBvUri5kg2ZOn:8Es+sTHuUPOdSOpMOVi1F8PMU6OyGr39","tlshash":"deb2f031775c463ad830c0ff579a9b3b67d618273a7c3a12dac859058ba9c3f79b0921","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:40.602102Z","times_seen":19,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Smoldapp.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.570Z","timestamp":1782329721570,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Smoldapp.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5uREmVpAh6vbUrhczpJeSyIt4RjiqQngjTuRASFE7abB8ZE6d2kApnTc1Q89e%2FIYNIjeUUC8cqnG%2BeRTxaoT93ZTBNqMNi1vcQw5FZBcsEbmvlCYfCiOQf7qrfxXy7adhsZ02Q%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"18c5-19e8af972d6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6341\r\ncf-ray: a10e2cd7dd1a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":6341,"size_decoded":7321,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"17a7eba09122d8f2e587a5dbdc317848","sha1":"6e581ad78ce7357c1c61f32e4adb72408ff5443b","sha256":"175f7dbe9337e545b4f2067090cebb23e61c1f39f537ac4809cdab5b1b687608","sha512":"3bdb6bbbb0e0404c00793ed77f525664d3253200ea08fbc0422aef531e90739f51462f27ec30c470c77db0435360f392b4d9f5a0fd5b588565b4cae56e6907de","ssdeep":"192:3CeKkm+mMBbrWg4B+iyLdCKsWBf2Wg/2GD:yZFm9f37BU2GD","tlshash":"86d139ca91418a2cc8daf07d6b72c0a21b211f0b64c5f13fd85bbd05af610d76936ac9","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:40.594018Z","times_seen":18,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Pal.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.914Z","timestamp":1782329721914,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Pal.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U9iAVgTHosJLD7ABepGLom4cR%2BMb7Vo%2BIf87TFvjSmQ7C7g9WBYXfcLqdxFVgvkUrQFDAK7DUMlKVBaRjeWuFYR6CltiUG3RLkkrOOKEmKqREgryFxolZ3UPFX8n%2B%2F6uN0A0aQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2ced-19e8af9729a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11501\r\ncf-ray: a10e2cd9fdee723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11501,"size_decoded":12486,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"46923dbc17fa177d88b0fead45f3f96a","sha1":"d6bfea2651b2bc4fabdde0c17f32fe1ba026547a","sha256":"c170ed25eebc6816121f51b6f7db619f64fe2a45065f407812cb4f9fe382e6a4","sha512":"c59337a9ef57f7fac21b04a7015515b331e60a6a54bb13829e09e2c08b5b9de37a925aa8e58b5a5246ad02fc044b4881194ae40e53fd7012f51ebc176bc50bd6","ssdeep":"192:/2lnH/VEoHQ9nkFEbACRVGmI+M25aKX17qk6k8iQY1/JYGWldKmgLHXywBeiXIGy:/2JyowkFMAOVVI+NHpok8uYGWldKXLHu","tlshash":"1832d0ceb008894062223d75a3715ebd6314871ff4ba43d7e5bdc2a1dab123a11335a7","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:40.713214Z","times_seen":17,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/ONTO.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.389Z","timestamp":1782329720389,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/ONTO.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KPQvQTODwcAhrDANbG3XTySEJIpPyuaOYCkM9TUKdzrcoOm4tocQHRpYx3FnKaUWpOsL%2B0VyHa%2BOFLr3tbSv6GaceCkVcwOe1MPUrnZtXOy%2B81oXIGNsNManyjOAjCXGLsmoWg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"5019-19e8af973a2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 20505\r\ncf-ray: a10e2cd07a05723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":20505,"size_decoded":21488,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"7aa4f21984d82c4b27068737f8b7af34","sha1":"1f9745a0f8671c2e139eaf96bb8d61a960a9184d","sha256":"a53e9fadf1d8cf3efecf54ab39ced10f3406b09541f48592cf9d6d47d0d0854e","sha512":"aa309cbaa0767eb9a9c235ff20d7186f8aab3023ebfda249110739b1309cfafedb885e5d06670ebc7ef7a8f75e732a3b0f83d7d66c1146f0682e428966f996cf","ssdeep":"384:vwuCTBWYh2AKT16hfKT5n/esWfpFK1MFQSJqLXF:vad52AzhDlPKyQ6kF","tlshash":"bc92c075711487bca7a18699a295fa3f724f8a0822c7bd3fc24bc5ed6d11e9f10a24c0","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-07-21T05:16:19.677879Z","times_seen":175,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/PiEthereum_Hardware.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.954Z","timestamp":1782329720954,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/PiEthereum_Hardware.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3DGpFQz2iGiaD8XxsnqyQQA95KME420uMgYyWR985SupY6pgU4NQhWcnZORuizCcp8KUl7RBKvCrKCtItGcNYLaNbIwJ%2BwzjQ%2BujWSM2SYHlBlhnjOQSH7k3lmzkr5Kl4bHd8w%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"65fd-19e8af973ae\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 26109\r\ncf-ray: a10e2cd3fb1f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":26109,"size_decoded":27090,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"88338cfc7af25c02aaa5761b2f367986","sha1":"7d0771d4b1049ab853bcdd0e3e6687b7b96c4ad5","sha256":"274645c5d17a4fee1ff01bca3be1e4caef4cfa883a0c8618f65e5218f1457069","sha512":"f7daa4c3e27255ce25422bc2dea28bcc76dd6ba1644ddc045f263d1a15588c93e50fab7b0a0ae9097c227d8ecbe7e27c832183b559a5f7920284b9b8ed908613","ssdeep":"384:0puWSJRQiaFr8lQjCzK84TgMOpffWgEcpfilejxSya9b/6R7syxcvCTElY6NUYJO:0mJPMFC284GffLnilSE9D6RldElCYgR","tlshash":"1dc2d02ec18c9c867878abd785991eee6a23e2be0743d80cd531d5b74b1c2a4493d783","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:41.224424Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Meter_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.046Z","timestamp":1782329721046,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Meter_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L7hQ7S%2Bc%2FkuX6MH80CshpAEqtyDPTrVEahPEqEGNAtyp5uKnEPtR56KEyMf5SSREa6ytr9tUc4GDpljzUPx7AjsfiolGn9Q%2FnqWL03rZg07777jG8FXLayrVWtHLt7zCd02TRQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2977-19e8af97392\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10615\r\ncf-ray: a10e2cd48b74723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":10615,"size_decoded":11598,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"e2b1f6304d00ab65e652e08d44797433","sha1":"2f8bff85aaf7f77d340f2bc6efdfbf7037553116","sha256":"36a763b241751efcdeb8bd6766e0fae40f4375e72186a61dd9cb5fdd74721f4f","sha512":"147585e05e8d30e49e26363f138df7a5fb9e1c6dcc28854aaa32d3083f939aac560eda6b69deb7c71d851ea4e92496ebcd1702a6fbefb06780c5717a46985ada","ssdeep":"192:/Bipw9I2q0ju/T2atqUEKfhbt6Ox1hIakRXdRpbLH6GnlYljbJlkg:/Ew9Xq042wEWhV9IaiFbeGnOjlp","tlshash":"f422c048ce65c636aef70b6dcc9923d7da0c643f6c5a0613614abddc432522f08ed14e","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.690989Z","times_seen":20,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Alicebob_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.228Z","timestamp":1782329721228,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Alicebob_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4FpsdQkfCKFcOKGwhs%2Flf6dq1oy8MGodAA7W9hZGXaaM55Pu0QixlFO675FPDd1qGG5gAC5DZCfKvN2ySM7zxWTyWzWa%2F5ep0v2lcV2ilFCrATqobM7cWz%2F5z1hu29LrmIGIOw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"285e-19e8af9732e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10334\r\ncf-ray: a10e2cd5ac19723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10334,"size_decoded":11317,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"7a238bed49613eeba404f527ab1fc99a","sha1":"eae6bf0ef14e633a530e4a1b9ad7a88a7397c65a","sha256":"068e8ab6c0154acb81450df5705a2515c4af2e895d22243cc847e95444b10262","sha512":"3c17545a7a8fc9c7ebf142553b272532aadd41a033dc37321cabe197f5079eb8bf2ea7a5032da27c22c5c124606a22c30a7d353c2345557967f920d9adfccf02","ssdeep":"192:mnRIoPNTtkWGLxo/jR/zpCpritXrKv1CIFX4s17MhZJYaPGUziBXQi:HYd9YujhzpSriA1TX4WMhXPAZ","tlshash":"8222afbe922627dc098b749104979ab2f834c5f78ddf8034cd181ad7e76e49a217e329","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:40.679593Z","times_seen":19,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Wan_Bridge.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.364Z","timestamp":1782329721364,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Wan_Bridge.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ozBsij9NA5zWNbnpc1%2Brr%2FsiCiFfedRFd%2BOvolDbY236%2BrjCZapco3SqbAxg3YyyL4G6RnD4ZuQRW6UbpSQmjyJbkDBuWNWXAkQzHany41eG9ekU0JgtiSK4IPArpmMJSVVwA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2f2b-19e8af97302\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12075\r\ncf-ray: a10e2cd68c96723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12075,"size_decoded":13060,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"4c1b3c389c3a63c3e5a7a730a8633ba8","sha1":"45edc1d34aa982a676685d175faf2c7897b3eb50","sha256":"425e9357e5d3a6e6e8de3c61b84aaf974ec922222768dc21fddffd8101190dd0","sha512":"e513e7bc6e821a55b783f55bfd2354fa9d6cccb4effba91812cdf7cbb184e180c29c32e6fafa72af07dc2b73bdb9557390bb56e31dde71eaac7b4a630c7327d4","ssdeep":"192:KB++++gs6e+MM++4ai++++d+++d++a++++wGXV890cZjJxyE7Yjl3GmTRmmaGkzo:zGs0cj7YZ2JLce6Un881kc7k","tlshash":"12427d6c04046f74b4e6366e3f57ca3668d9f9ee0733e291632ad6ba0418ffd0149d26","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.780538Z","times_seen":19,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Flooz.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.553Z","timestamp":1782329721553,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Flooz.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QxLSYBZFosUEDaJrmAHE7yivHQplRS5nlYhhUJ3xQf%2FNv5WPomHdRD%2BjLbHE%2BrL%2FCQ1ekD8E5DakWKFlCqJeroWPAmFnwhdTicsgP0dFdU6D7FGZ3QiqRQRx%2FCdZHiR%2BECYinA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"114c-19e8af97242\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4428\r\ncf-ray: a10e2cd7bd10723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":4428,"size_decoded":5416,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"0401abf82470543fcbb05bd6dcafd030","sha1":"0ff6b12d910f5c0ffb109fe4c2fb64fd240b7228","sha256":"fab64462e72d85527babc47870150dbcfaa192a4aa6c68d9d3edf115bedaabaa","sha512":"226dbf4bc475a9d79016aa3ff5458fccb273fe23b582aa6ebc3ba5b24acc6d992fa73ea3d2e3046a724641ce8c4e48e1fd90825fa104903fc4c909254343649b","ssdeep":"96:0XYYGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGpQFjrHKlp1w+LMRhGTRJCihigLVRt:0IsjrHKlp1xYRhgRUikEOvxk","tlshash":"76916e293a6966320c7cfeebd83cf5657b429745705e0f64fbb7f2444921db0a148270","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:40.585917Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Refid.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.590Z","timestamp":1782329721590,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Refid.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6ZxkdTYIFLT04sz2x90IpEgJa%2FvKtNy55wylLRL%2BG29tlpVGd8H81akGbXvPb81SicRAfiJfoflL2%2B7Nb%2FJ1pg2sKFe8%2FYgsiyx00v%2FIojKaAvma7UgiqCQbMxkBptIu1jZmGA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"8ef-19e8af972c6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2287\r\ncf-ray: a10e2cd7ed2d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2287,"size_decoded":3274,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"eeb90310aba77a4b36f169d44997bb2e","sha1":"739b72e076aeb76091167ebc236ace74e433753b","sha256":"eb72f0c1cfa1519ecb791210c249ffda822f5a4f3e64cfa4a0c663a7b01fa1b9","sha512":"ecfe35428a92a4415ec841e74a1a32d08bb5f73f02311290edac5c5038e47dbc465b644373e3fb7f0e60494a08bc5c7cebb260755ae79f66b1154b1de014d683","ssdeep":"","tlshash":"e24143243ee89b55c5b8b5cf851857758e503335534c490a32ed0f6643ae6f50f7f920","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:41.270498Z","times_seen":18,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/gnosis_safe.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.731Z","timestamp":1782329721731,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/gnosis_safe.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jcWkg4e48D87B17Cp3ubLMnsIF%2FkkHa%2F41YYwIHRFvmG5nXRPWna%2FvUU7x6vhLqc4x%2F7LbQO22PSwjWoOG%2FpzAcLA01RsyHwLtJOc9XzQhTnk8Nd0OuUmpTauytVq5FCWQnQnw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2977-19e8af9724e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10615\r\ncf-ray: a10e2cd8dd61723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":10615,"size_decoded":11602,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"e2b1f6304d00ab65e652e08d44797433","sha1":"2f8bff85aaf7f77d340f2bc6efdfbf7037553116","sha256":"36a763b241751efcdeb8bd6766e0fae40f4375e72186a61dd9cb5fdd74721f4f","sha512":"147585e05e8d30e49e26363f138df7a5fb9e1c6dcc28854aaa32d3083f939aac560eda6b69deb7c71d851ea4e92496ebcd1702a6fbefb06780c5717a46985ada","ssdeep":"192:/Bipw9I2q0ju/T2atqUEKfhbt6Ox1hIakRXdRpbLH6GnlYljbJlkg:/Ew9Xq042wEWhV9IaiFbeGnOjlp","tlshash":"f422c048ce65c636aef70b6dcc9923d7da0c643f6c5a0613614abddc432522f08ed14e","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.690989Z","times_seen":20,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/ioPay.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.854Z","timestamp":1782329720854,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/ioPay.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h5%2BwCI6UhhmUmuEuW9lYDJHft5vivr8FsqnFEf%2BOAHlohaldJRNV3MfuH%2B4ToAcIrHbNqZ%2BpELsR2xGuUusoBybcIvGGTmxASE8WvG1veJhQGoP6xwcRIYk5M%2FETQHErZmLLmg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2874-19e8af9737a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10356\r\ncf-ray: a10e2cd35adc723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10356,"size_decoded":11343,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"4c4cd2732adef083f76e5e284ba40470","sha1":"2929fd2a5c97d8a77d33924ca69f3707e70dd973","sha256":"a1239814dd877e8e69eb6314ce0003f324ace52ee4ce11f17558b08f80836fd4","sha512":"1c552ffe6cbbded7f1dc96c127ed10cbe0d8892eaaa31eabaecae85801955fff9f9722857130a01025a7ba0dbca110a210fadb8bdf3ecffa10d71c313ab07c98","ssdeep":"192:zXpZFXId3uUr/PVcCAnExGq6puwJNRm0k3scMHNVr/K3uIZXYEQUZ1jP:9Id+UTaCAEcq0pc0Mu7rS+SYEQU7jP","tlshash":"f1229f54f6957d13dd9b260278d136fc36e0bbf231fa47a276e750929d50e100a0ecb2","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:40.582065Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/PlanckX.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.308Z","timestamp":1782329721308,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/PlanckX.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h8kBKBnEkX%2BsIeY28azo7fK5X7gO2RofyU456k22vI8tMmn2hxCmKqnT28U1em0zpKH998AjK1OQxgjCTIziCN0CQ4nxdXbwNvsB3Tlvc6YWAdPJHvgYlfdF8lP7HR6uke%2Fe3Q%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1505-19e8af972ae\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 880\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5381\r\ncf-ray: a10e2cd62c65723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5381,"size_decoded":6360,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"b179126cd37bd1451050dfd3ac39720d","sha1":"8eee653accd06ada8b413b43dd2192c20a849dd4","sha256":"99a644aafcf2f99fc34e0f9e2f503d14f5522efc5283f259a3ded781ee989224","sha512":"0c84eb6427fff1eee2ee257c87cbad52a0dda5f4f00a12f08da7d55635564ca023f5fe02956d52d660fd3278525d7b3164cfd0d534ce03c46e74edf847f61289","ssdeep":"96:BLgKCYMLHDu/kbM6czYm7qJuzypq5JTN13X3bJ6YzPO4gG8R3tvLTN:BLgKdMLHioMTqE2pqXrkYVzqt","tlshash":"44b16e8911e22b7fc2d3d6206368e810773b372951d3d96f848b23e71a0f5f0a466a5e","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.73288Z","times_seen":19,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/zkMe.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.032Z","timestamp":1782329722032,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/zkMe.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1%2B4TeVUFeziKP8LxYw9jCRT54YH4i1YzjQ2D1rHfZGBuQUWyHBrkOAO4Fq4wkt8GvUA57uNeIqaqJPxiC8f3ava73CXlNGFOoy6oFUT3BnG5FOLeu9XKTUMstXr0glZLGihvzA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1044-19e8af97312\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4164\r\ncf-ray: a10e2cdabe74723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":4164,"size_decoded":5142,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"c8abb01a82068a31dc92983aff464867","sha1":"b37364f89aa90fae62825eaac30b4dc6aa89d1b9","sha256":"6d6355582a302755b3cff9b5ec7cc00716b0ca4525dbaafd069dfb167c13d3b5","sha512":"76292aaf1f5d2ce79925e65700ff04ccb40ed421597d81cb7735779992e61cb12ec9da3812990365b99c60161f692c97b031d5cf1cab5a1935366ca9fc2a72e9","ssdeep":"96:IfBwGy/u9BRiPYurWEDvbGMjbALDNNTVaDFRVxbSLvUmvxHlVhil8ntHJ:kBwGrBV4bjbIDNDaDFRbuLL5HlVMl8tp","tlshash":"97817eb96f5bdc24ded81dfa91a6801958129786333f1e1b341c8f418a676474003afd","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:40.649923Z","times_seen":18,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/DEX_TOYS.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.137Z","timestamp":1782329722137,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/DEX_TOYS.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SuNw9gT%2BmdC%2Bbnw8Phu2CiBUIGMxDP7bejNGu2Ea4znaIhoHjKLY%2FDZweyVXsJXdkRRViiPMocScti3i3IDLPJhGqhpOF5S2vA9EDO3sVZoP5%2FZfnG7aRus8dKOj%2Fiz7GLpqWA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3181-19e8af97226\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12673\r\ncf-ray: a10e2cdb5eda723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12673,"size_decoded":13660,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"7b4cab6ec176ec7906dbea536a141b34","sha1":"28d38bf05ce61868ef398cb716270c1d0270714b","sha256":"fc8e2476f0d3d6617451a9164ce16ced9229eab638518b5543bd6beaa7801399","sha512":"b769a1fe3455fc6fefc8425bda4e6d3623293b6584e8215f3dc1f0efaff4c810ee7d9dd61df56f578b7f7b9c74069b512424845c5da5f9a1d192df8977e9a56a","ssdeep":"192:Q16g+Y7/vjWO0kLkubHk8u3lNPdMYgFABM/jPVon/bwrThhQW3VVe8cd7CQSmQKp:mfBdkN1nraOnDs3Ve7CQSfh76","tlshash":"5142bf248b7ea8a063534727c18274a5f541afaa6d0fe90d26cff4c8149dec90593ecf","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:41.136509Z","times_seen":17,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Cronos.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.229Z","timestamp":1782329722229,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Cronos.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DDDq7FQuSU3f2vvE7l7KcMjTtRjZFD%2BC7hZoGMIjwYK9Gg2iU91z8lTmzGakbBHdDDZzuHdAbxUgISYJFHotRhc%2Fya0f4y2zL7Uj8zrbm3oBl7UqQYkAKb222y0eJHxQW0FQRg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"6ea-19e8af971c6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 1770\r\ncf-ray: a10e2cdbef1e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1770,"size_decoded":2749,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"aa4fa158e10d665536c930c083c9f713","sha1":"2cb748c6e9acea781a299b67c54d5645544b1077","sha256":"78c97e5f65f412ddae1b41ad8acc2a402a1e580f4ba985a5fcc17cc6b6785a93","sha512":"64f16fa880dfb8d01bdfc6a4ed5a2cafc5ab460be8c730eb78431951a407782620b2e80ea1e059e62034fd66ee77f48d00c248a1933b36b97633e58294d67d5b","ssdeep":"","tlshash":"1a3129da98a7247f8780e23ec2d6c4186c162d335de3b648f0d0b712831a0d68bc1c0e","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-08-04T05:59:26.029259Z","times_seen":34,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Binance_Chain.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.328Z","timestamp":1782329722328,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Binance_Chain.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YsYA1qe812uRwX8iRuI7ZT%2BzqPNfpdpat%2BykiicHx9ySqk4qLY4sYQSqSXz47jMyM%2FgNi30SZA2WNV37jeeoa4u73ZNrmBqK8NN%2B1GroNFn0TRzCmmxBOrLiIY1FHwsO%2Ffa27g%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"62b-19e8af971be\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 1579\r\ncf-ray: a10e2cdc8f6b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1579,"size_decoded":2564,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"649398a592e87e58b371019023d44dcb","sha1":"14aef221f38941b095208a70c018c961deaf60d5","sha256":"ed855c7f101c977abaedf453c58670093f95eb7b24f0f4352bb637509d294b4c","sha512":"0b735e66424c7651fcf5901b8500c0d384197231274f183aebf4868433d6d7066dd9748b83f5321b44c112bd05dfaecb9dbda958954964d7b767fffa8b931d34","ssdeep":"","tlshash":"fb310a8bd81d3d17e56106feff35a9c37a006b5bb0628f0218d1b55ce172402750b323","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:41.129121Z","times_seen":17,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/2942752374:1782327629:65HhKOO0Whg_TZN6wSldL7IBQ7NF-FSLEAoshlObDAk/a10e2ca71af2c759/yIxCxBQoavfo8XEE9JCD33nqtJ.xqO0MsVOtjAVQHGA-1782329713-1.2.1.1-qj1q9WEU8jfeGaIspm5tCIiUOyrxM6wfuFMr4IyQuQODB9F05mF4mbS_3vUkwn2A","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-24T19:35:14.158Z","timestamp":1782329714158,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/2942752374:1782327629:65HhKOO0Whg_TZN6wSldL7IBQ7NF-FSLEAoshlObDAk/a10e2ca71af2c759/yIxCxBQoavfo8XEE9JCD33nqtJ.xqO0MsVOtjAVQHGA-1782329713-1.2.1.1-qj1q9WEU8jfeGaIspm5tCIiUOyrxM6wfuFMr4IyQuQODB9F05mF4mbS_3vUkwn2A HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\ncf-chl: yIxCxBQoavfo8XEE9JCD33nqtJ.xqO0MsVOtjAVQHGA-1782329713-1.2.1.1-qj1q9WEU8jfeGaIspm5tCIiUOyrxM6wfuFMr4IyQuQODB9F05mF4mbS_3vUkwn2A\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 4652\r\nOrigin: https://challenges.cloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 24 Jun 2026 19:35:14 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: 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$5MJDxyGwie5aTYtM+XqSRA==\r\ntiming-allow-origin: https://challenges.cloudflare.com\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a10e2ca97d59c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":383512,"size_decoded":288694,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"31aef2e40e9d67ef8d9419b39363d93c","sha1":"db7b9a3ed18e5e4dd8ba2d2830728a1834f97928","sha256":"803c33adcd556224c148779eb70c0d47ed35b2da58a68fc4165a584db736a664","sha512":"13ee61745cd6b3eea293d93a27f069bbaabfbce8c549321a61ef100e746e96f092e8e5c2cd724e0a666d475cd544d8e6a32c7dc41cf62823c2da25dc70716637","ssdeep":"6144:TbvHs8UUAJjVl9R0zZBfIaaL2dls30rrYlbl6IMrxJCaGntEOtqKrbp8llPzsYCk:/Hs/xrmzT3M2UllpMrxJJClrbIPzN","tlshash":"248423fdaa3f4b6ecf8c4f7b65b405325a415fc704728668196d23eac18ee506e2047e","first_seen":"2026-06-24T19:36:12.91474Z","last_seen":"2026-06-24T19:36:12.91474Z","times_seen":1,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":145,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Callback.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.989Z","timestamp":1782329720989,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Callback.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vDtmdotH0Qxou01IoHv7vBBpi1neCItLUCOyW7SPYwlPU2aa1O9I%2BZoXLzTHUPlDKAgt97INwBRE975c35eerjF1Ms6%2BQVqLJyt731pU5XON7rUcX9AEseK1Wl5kDJecPn%2FiZw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"294b-19e8af9734a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10571\r\ncf-ray: a10e2cd43b43723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10571,"size_decoded":11554,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"2fa23439d35a6997b7e6522d677762b9","sha1":"596ce3a3aa6c0b7c02e2f0b724245c624b6be866","sha256":"8a51333fd5ac18b77393f2b434b4f937a1c06fef7242a9321a407aa55d0586fd","sha512":"f0c60f5d23985da119408414737c8d7fd153aa3da0a1eb88a7a43afda389a0dc32e59d39c24dd791a7776680e021b07c347fc44fa8533793a58d01592f46af14","ssdeep":"192:yEyfCycT8maNAKD68XxVeFohLY8OtKdQT5myWY5fZeSS:yRffudarVeFcYXtoo5mHmfZzS","tlshash":"5e22ae497461e6edcf07bc8bcb9d4631e2eb88ea6c1a9959f146d37c20242bf4e542c1","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.757163Z","times_seen":20,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/WalkingDoggo.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.398Z","timestamp":1782329721398,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/WalkingDoggo.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jlq%2FK3BJpfPuPkS%2F8mSLerfqdPDYRFndnjbTqO4EiFlU%2B3sxBHnYhliqmVd0JyHGaqgst1ltEyBIk2N2rxpcus%2FlVHBxoUvYDjUANOFF%2FgSXZ1%2B9hZU433dfMsXfHk2sJHNZAA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"362c-19e8af97302\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13868\r\ncf-ray: a10e2cd6bcb7723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":13868,"size_decoded":14857,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"42957c5c056d90883d4ff352dcac8d9f","sha1":"4fb0827364ff489251b15f59fd1ab391739317fd","sha256":"0984a4492f8baab455125e54be2b8738f1f3a101ad32628ec31dde30db3a3274","sha512":"248e2c2a6e8b503d023b00e57e58faed3295f8aae8c7ae1bf738675854477fafbc9c88d8195592ed61ac7eb2830c5481777f0028d2f9626bb817a8a90407c50f","ssdeep":"384:PpYSdhsKrZklmdcwEHQ7B9+E9qyCwpsTD4vPi4L:PW4scYTw0g+3ssTDH4L","tlshash":"e652af63d3b0e869db0b8d030a858919fb7491d8d241e73edef15467825393e0b59be1","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.693883Z","times_seen":19,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Scamfari.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.948Z","timestamp":1782329721948,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Scamfari.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=20zocGLxyAcD8zE2jP6Rt00r1ADeC6i8s2hpeP60%2BaumUWzjLsH3u0bfr6GmWOF%2FaZfuNp%2FqPr11mpKxdD9J99V%2FKGMkFrsdM%2F81eJXYLaNOGigYGgpVFuzQ%2FyqYj56hQqTLug%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2f92-19e8af972ce\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12178\r\ncf-ray: a10e2cda2e2e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":12178,"size_decoded":13167,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"be3b7e09347f64efd99de797ffd12460","sha1":"c9e5a1128bbcc4ea29973cc8eefc2388581c626e","sha256":"63c591e856e6bf313ab3f84c51684806df2b67e03a9f15367b95290774847fff","sha512":"3d81a71d7bb1420bea96fe6c8cbeab63fd820b658a641c8b5bc9f1242509730508f37b0ef2caafc829e80246c8ab640654089997e04bc1aa1689cd05891f6e1c","ssdeep":"192:Ie+NCARb1z0Kd6T0/fy1W9siesrRu1rPnQPYpl7UyZb6qa+McZCu0OLwDp:U71IKd3liars1LQy1UyMxeCuTLwN","tlshash":"0242cfb6ce972001f50075fbb02039bd9d6277f127565a8a4d681d34ae5a30f0af0b9b","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:40.725547Z","times_seen":17,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Spark.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.993Z","timestamp":1782329721993,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Spark.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lnEAK9mWJkewLXldslTDbbaT%2FLT2cQYcHbClmofKRcmiuqTltC6W9HRPdWMfSbVRVz9cDhKDAMOKME2lOTgwQ3yZNWolEFSBPoa7Wswu7nHNcK7rzso0sMBnKlA3RWk44gx5Fg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2fda-19e8af972da\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12250\r\ncf-ray: a10e2cda7e59723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":12250,"size_decoded":13229,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"e0b08a4c79488b6f6be1a230de0fe7dc","sha1":"761204003bd2c1a0456ef7d19a6ec16befc22c7b","sha256":"31d38c3194381af038a8ddba680129eee3f83f1e98f5c86141b6e9cb366169a7","sha512":"dac39fa78579a739a51d1158bdc704d79e6ee3d2c12464d0cd7b54e0ae2f7ea9974f09c95ba4c5c93b1e03e9c12ae456e05fddb63e1ad86e0f5aa14fb4c1e0d0","ssdeep":"192:jzKGAMIpnPiOELJSuFqkeXkaRUdAjGlTpf6Zc4LX7Z+ZsoDDMfVL/vRkz6nWDPp9:Hcp3EVSGqke9i7l9SZc4LX76LDQfZ/JQ","tlshash":"e442bf27a3dc6b16d22b165deff7d9772311c1bfa1430a1cb8f2a605be4631122e0b65","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:41.060627Z","times_seen":17,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Certhis.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.498Z","timestamp":1782329720498,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Certhis.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OL4XSaWOzPse9mQg97Ke6qY%2F1usLR4pjFz87TdI3%2FQ8o1f0ronCdN%2BOV4Gik16Y5SZoozc41B%2BNCifEkqjCeez%2F6%2BJDPdWzCPndABPTHlo3VY4khknF3WiNid4o3D6L2JGPFHg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"530c-19e8af9734e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 21260\r\ncf-ray: a10e2cd11a2d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":21260,"size_decoded":22249,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"9795ab19529445242b549a460bafd48f","sha1":"43b9087aa7b8be491d44b0b0fe0038c6a08564f0","sha256":"5d51a563aa4a0da365f8e451310b950b5ed44486b96b388bfbd6a18cb194b3ef","sha512":"54cfeb684765285aff4181f81cf03e7999a9c36b7bb3c8585a599d8d45807acc2e853aac305f9cd0abb1bfdde3ceede34854402b8cf0fd864763726c8b04cab5","ssdeep":"384:ft3muA9mKKz+3q3MjNEc2rkvO5rxDnvnSOboUS8awpKaVKiKk4S1R2Pbe0q4l:fYuAAK2a3RExRhna+oUPFFP5R2DBq4l","tlshash":"1da2e0e517ff23f346e9fac0825396a126d0de11a9f752cf6793aac4004e101c32da29","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:40.836204Z","times_seen":19,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Qubic_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.891Z","timestamp":1782329720891,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Qubic_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JDTYMbOUJobwLuq7IDnLa49DNRjvHfsUhZrKXUnoVWdk%2BZ%2FfHsHaNi7si5EndjjgTzrKhPGJhfBui5%2Bz9rPtJXykrQAm%2BL7amQVOtNUkpfWRx%2BzBtAdJ9IJF9k9YfFutLDm3hw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2cc9-19e8af973b2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11465\r\ncf-ray: a10e2cd39ae9723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":11465,"size_decoded":12452,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"954e635768dfa31848db5804ddc9393b","sha1":"b1c4216569abb56a564d06b25356b83ed11c3f09","sha256":"975586c82193729ab4cd41423f5d229eca5f030fcf0cb0eec07fa4cacf5b0c2c","sha512":"60557a2850cf474d952d841a3f79d48a560148e4abbf3ba00d6d85e211c1a24204f00988c4f2c41db209fd6e6e74448a6f9d840053c51b3100a63b9ad0b1e051","ssdeep":"192:I2M5ZJEbPdXbHuikoNOt63rQcuK+UoeUD9+DG4onyF4bkMpQ2ogc2kIU:MCFjuilccuXxJDxnkMYgvkD","tlshash":"f8329f36d01256398a908fcecf11d45e3ef8d71974b7aa30087e156f0921661e57e5cc","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:40.708423Z","times_seen":20,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Bitso_Web3_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.170Z","timestamp":1782329721170,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Bitso_Web3_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2H5S51qEoc2lEUJiBtknKEmx7SwRzHpGp96bJchnhrTKN5aHaws%2FfquDdqOt0R3x72c0zwMq3%2BwDHrburgvx6hG8%2Bdljl2A05z%2FtfWKLN8Nc2W3c89HJLiUyTocB4YvjEBdNEw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"127a-19e8af97342\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4730\r\ncf-ray: a10e2cd55be2723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":4730,"size_decoded":5714,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"46c2f2058a0d477895d8e8bc835e7a2f","sha1":"b93ef76642347b00f82a56eb5a35f51d3f38c517","sha256":"6446feca6d69a925fce05751beb44bd489ca0ed5e3c32c0ab2e485d73168ee51","sha512":"5ab77d27fdda04df0f85321735e66e112c861fb5d8647582e90b067fb24b87899b0217d9a1d76cfc4d4b9bba4ac3a99045eddd55f84bdf6a3a0eb2c9e3b98ad4","ssdeep":"96:fZO41yz4gW07fUmEayfQ0LJbXBiDx+vVg0fKvzRBd1l9:fALspiUAL0JKx+W8Kvzd9","tlshash":"4da14a52a9292c88bb9d42147c4fef154303fab1b0ad7b78054e24989b7084bde5ddfb","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:40.790167Z","times_seen":20,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Furucombo.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.251Z","timestamp":1782329721251,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Furucombo.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a%2BbUwo1S63ZXpFLwhoUln2hOwCPYfQcPxM6FrL%2BagBw6dCM5ckK2YdqwPYbQ1KlnpI0hgRRGqRR4D5x%2F%2FoMv3Pgt0TnQR3D7IjV%2Fvx%2F9%2BNmG%2BrJzHII0BSibbEksCkeH1ajAvg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2e7d-19e8af97246\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11901\r\ncf-ray: a10e2cd5dc36723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11901,"size_decoded":12894,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"bb9f35c4638ae07afe62cb90844f16cf","sha1":"158d46b91e7a704fedc928dd763b5f37d8d032cc","sha256":"76161bd12a29d93b6e7d3ee81b45c8757985ff83cf570ce4a153df799281e926","sha512":"f54d316fba2077a903d8f024a19e2c00074095115da00aefa614c184765dc917a2c9b66208eb72b7e6658c228449fbbd9dec7172ff24867eca28efa88ea8d4c7","ssdeep":"192:YMAI7Sns3jkk79d89a5scX9FaEK6eiHCXgFGvGTRFRyNajJUltZuPyAkbFcjB0LS:B7erUeavFaLrwYvG7UltvAkbe+LRQ","tlshash":"3732aefe8337fa7eadecd490332c94487b23617d8ae1f7a388250115c55d34a6a341da","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:41.023114Z","times_seen":19,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Perpetual_Protocol.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.325Z","timestamp":1782329721325,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Perpetual_Protocol.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XPdRvtLv740KnM1QYR6WBGCzjruZvFuxozHkhUdQrokfK2nZqurhdMsDd6amkKuezYB3BOya8XF4%2Bo%2B%2B0Vtsk74E%2FO7EGChLM8HNX4rZC8NxZgvwpN7m3l%2BQosNKvqV8t0z1%2Fg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"247d-19e8af972a2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9341\r\ncf-ray: a10e2cd64c73723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":9341,"size_decoded":10329,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"2a5094d49132f6231baf8751513038ac","sha1":"f1dd30b4865123718640aae0cd28be78d8c1a076","sha256":"1240727ce3d910c02587b13c6414b45d959a9edf873b3551af9f79b009ae20d7","sha512":"4beab9adeda5c541e9b3144b45946e28060867f767478ffde366c0e8c8415d867bb2aff8c1ab43db2606125cead80351a63e7b34fcee449b51443f29a8abcfca","ssdeep":"192:IgX1NB0QkMoonB/K261nQfy/7q1xJb2eFm74WyKfMqS9LVXRg6e7:RzNk6ZKBOq/9e+4Yk79VXa6e7","tlshash":"3712b085d23411dbe7c4dcb77def0a730e8c55e228a78707a165913b1c228bdd1874a1","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.676133Z","times_seen":19,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Gangster_All_Star_Bounties.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.525Z","timestamp":1782329721525,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Gangster_All_Star_Bounties.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VzZa%2F5WQormjlhPaH5Gb4%2F%2BM6za26cSjM3idJ9jBv6kOeoTHokSQQ79Nv%2BCnIqaQNUDV6OFcKyTMQTvcAM2ifwss9yKZAbE5Zc99A8bUmH1nDp4Pnmw3kXM1vcdJfreKnJBNMQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"e81-19e8af9724a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3713\r\ncf-ray: a10e2cd78cff723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3713,"size_decoded":4696,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"302fc71943d2310d16348828c4d91f7d","sha1":"2d40bb0f837b71f283e298fdd815cd10f4f6fc15","sha256":"8489b38f61239dca5775fdd2b68230369521347bb0a1fbc26e55ef6ec4967467","sha512":"79e99f6a4053cfaf3d8d253230ec46e9ca97c3a79e8e622e2287d1c6f81d985dc89231a01cb4e436dd19e2f32c58068efe5c8dd4ea29525626289fbda7fdcadf","ssdeep":"","tlshash":"77714c47170b497cce4b447a8f724e855629aea92a6df31481c1381bb02ae7c8094c83","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:40.977083Z","times_seen":18,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Solid.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.862Z","timestamp":1782329721862,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Solid.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T44i44F6OMhYwxz%2FBpIgz8AeYgy5XilQOLfW4f0fYcG3F2heh8PTMZfgFGXFxNqymutK%2Bx%2BpTftLuZ9ZMFZ2I2loS65%2FCDrIQxfkjKtMh7fCvjGRdWkgICZ605fMcRBtxjnEvQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1439-19e8af972d6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5177\r\ncf-ray: a10e2cd9adbe723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":5177,"size_decoded":6161,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"79b1771ee678c4dd2c0d76a647767bf9","sha1":"42fd736f315b8518c2b7a9bf499966693c535e28","sha256":"ba919ee94428dd1c77751502235bbc4bb38eea5d2c91e7f128bace3c83c7a961","sha512":"2d461b65a085718ecf94140749f6eb354c17c568fbbe5ba984b029d23c6dadbf78613dde347df73725fdd71d1c8dd17e91d8d1bbe6a293f7ca42f798f66c4c67","ssdeep":"96:olhje3Bsy/734ja/wC03333333333333333333enGJkUR9/W2k9m0vqtjybezbj8:oqRs4/xx9UR9u995irn+hjOcJTpOhK/","tlshash":"30b14bcd0e105a95d7f92dfeca3e2905869a935a197026becd55288e78fcd4dd224140","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:41.051891Z","times_seen":18,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/HOVR.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.889Z","timestamp":1782329721889,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/HOVR.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G%2B4g%2BtA9CYB4ATMHoWAKeJCX3Ksh7rfBzuSd%2FFxlTfOejXEOusSORwpSV5AlV4sRIE60TVzoFGKiRgE1TLKbfdEeX12lC1DeEzOuNoIUqdZ46VyDk7Zvyj%2F%2F9RXEAmPNFb5rCA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2ee4-19e8af9725a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12004\r\ncf-ray: a10e2cd9ddd3723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":12004,"size_decoded":12991,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"e12a27dc3dfe6680d3ba0d3a2ecb4a9b","sha1":"7b77688b624b0642e965843f4573e80a9fe63ee3","sha256":"fe8ed719599a22020ca51134e8e5cea5d3d409fee775c76bbc4e19086513555d","sha512":"5416fab737a95218306d5fcca0aa5d429232012a6e96de1959953ab24008090a7f2ee3d73a7cd9e58509d947dd540b71e9bd746cbf01062fd669a7f5d8b33f2f","ssdeep":"192:IG1nW7naaPHffuH/jKo0eCJ70lcv3ZW9DV1eKv7VbiVffWbHkauEW9b0DlRC:vcfffuH/j709JfJ0DftVbiVfubQWRC","tlshash":"fc42ae581404c62cc7e9f53a01c35a69477a6df2a3654f13cbb7c0ab48a73618a4fdaf","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:41.138496Z","times_seen":18,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/StormX_Staking.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.811Z","timestamp":1782329721811,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/StormX_Staking.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H9xDF7R6xM04Xz8gcr2y2OBxNVZ8JBPbjyFprF85HE9vsC38YrftNJbwmNnDfXDJxQUwqdhE4vjEHPT4fzC2Cs%2BndK7INcr81lj%2FELyR9mcIoc%2B3RMY5h2CVEZU55GN37ytF3w%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"f8b-19e8af972e6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 880\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3979\r\ncf-ray: a10e2cd95d9d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3979,"size_decoded":4959,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"cf93397fe5ca6ab4b71ef0fdc2f1119c","sha1":"804d815ad03c8e2fae532fdc3d80cf5c4a3e1865","sha256":"72e0a936ff1b7f66d55e00f1495758729a7dc2f6d570a4e2929b584666dda541","sha512":"29220b382d674f51643641d7469420fa8e6fe6f9b01ccd6eb8d0dd25256795eadb0428cbf9a0584844408ed1d8cfbce7681aaeef9ef0a3dd4135cd157355ef8b","ssdeep":"","tlshash":"be819e4e5db5054a726f8192bb0ce860ba3d6a03a76336358a7dd2f14cc10c7b444374","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:40.986865Z","times_seen":18,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Protopool.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.828Z","timestamp":1782329721828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Protopool.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3tiH2GpZQT2OjNQtaYbsM9%2F1rx6Zwfa18osvm4J9%2Bn1vEfK8zdYG1OIGYs9uTocsXCraIWam4WDeCAhdA4umFvJ2VbqmelaaorgvD6LKjGD9npKRbMxIrMT7kQayH64%2FTHGa4A%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"134d-19e8af972be\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4941\r\ncf-ray: a10e2cd96da6723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4941,"size_decoded":5923,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"30069f1e5329b1a073bdd933a99a0324","sha1":"3edb0475d6d3ba5b16735d1f4154c3f6124368ac","sha256":"35e24e15d5d167dd20e271429e9095a446ceaf7a333fb8bc04a5bfaa4776f5fd","sha512":"3663f017bdfed4752b66ca092bd04fd536f3cc3b142c16c18ea2830381f44f991d626972aafbeebfbdc12e54dbd014c8346f8a96dc17606ad6baafd9536d0e37","ssdeep":"96:gez/IKTgqqeF4lqd/j2yMOGaWF81ItiMaVABeztPyk8F6a65:DjIwgqElsrSOlWu1ItiMJmRAF6a65","tlshash":"7ca15d8111391959edb4117b2b7382ca0e181a3ee32c9e2f7e14ec4f5720a1703c357b","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:41.099183Z","times_seen":18,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Core.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.271Z","timestamp":1782329722271,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Core.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eiNUxLrhPxndl5kBVHtB3ARgAtsZXr2u5C6n7AgVlQvcJIKc9JaV8I7gjbhos%2BZiI7jpxEULdQ1KfKTbDccZ0KzYR8Yt5AFOrbeujy%2BHNpAD%2FcLPG3WSm5e7AObcGcd3ZHgj%2BA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"676-19e8af971c2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 1654\r\ncf-ray: a10e2cdc3f3b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1654,"size_decoded":2637,"mime_type":"image/png","magic":"PNG image data, 121 x 120, 8-bit colormap, non-interlaced","md5":"7ab53068b332079a06c838c91755957d","sha1":"62bd15eaca249b9adcdbcecd01d2797d4d14e35c","sha256":"c7c4569cc1bfb487ca2b8a5542987466421e0629126e4b8c12b4924674957b37","sha512":"d484154c1a0fe888f1e5a7bad78c57eb0903f80ea8df43fa59bc79a8b45976bfe62537782ea0c3d8b45c30600239c9562970c9ad13eea4c54b03c4ce36436bd6","ssdeep":"","tlshash":"6c3118ea22f6497fe00a0ec2c206ea792f21e947fe381600f48b7c2c65580083161cbf","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-08-04T05:59:25.999644Z","times_seen":34,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/BlockWallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.556Z","timestamp":1782329720556,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/BlockWallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4t52qImfvVLkXb%2FOWHOqKH3XvUxuaHpyFy3ZQ1%2Brhx1gNBUszYOUS%2F8qLBdQe7hrcNSk1ACBQA9mjlFfFp3CCjFwjgn%2FIGDNooSZOw37qMPZOsdwrzsrT7RtQdRxesrEuwuWOQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"4748-19e8af97346\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 18248\r\ncf-ray: a10e2cd17a3c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":18248,"size_decoded":19233,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"4f6508a86439425f69ceb66657d60f2c","sha1":"499e163b8872b6c72c32210369151567e0765ee1","sha256":"532084e8064f6f657e024c1c0d67508b68eef34f835de4c072bf4f2ecee3967f","sha512":"76f94000d3300993ef990a5080750db776d7b6931a1e3763948cb19ba1be3d21c702dac41787d36373354191c95049ee3f5f09ad2e1658a84d3e43671c92b519","ssdeep":"384:ihFNtuwZdPYjdoAX6SKXdRJZrF3LGq7kYjzeFOy9CARoiPPHSKSJ:4N3ZEdovF7Gq7pmOy9CcoinSKK","tlshash":"6882d15da88b443a6fa1d3d4431dccced738e3988928b4b701099fdc744b3ed94e418a","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:41.118639Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Rabby.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.576Z","timestamp":1782329720576,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Rabby.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MOm3k4cg6zOMkhVxhBJ9EHtibs%2Beg1z%2BnnAIUErt%2BIj2btTltly%2FnwhU5hgq6QjEITtLucqBJ6dlV%2Bpwwe2Z1rgcp2DWZKrZlDMj21O%2BcGEMbWdHQrOiohimgh6%2BUspQ7iKiVA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"48c4-19e8af973b2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 18628\r\ncf-ray: a10e2cd19a43723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":18628,"size_decoded":19619,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"60a522faebb9c2a18b8dba1dcced27b2","sha1":"88eb94c9677db77009459d61d922e6ba4a0dd755","sha256":"05d984cbabd64ffb327cd3eece273e1a591abd024e0a079f18cb114aab39881e","sha512":"25174cfcfb61a93c2197682f898293ae820a81ef58bc9f07a16da94a8b8adf8e3fbc888f78c495c48904883c90f188289e4d49b7823dd3d9f843b2fb2523b7ab","ssdeep":"384:p743OXX0ecg3vMi/kSVyeXjIP4T0aMvJnqv6YxNtIv/esA7UL:p74wEVIv9ZAezIwQXq3Mm/7A","tlshash":"0982df14e22f285d8be91cf76ed3a46860ed0d7d89b20bc2971c7cd9c23926d9cc11a9","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:41.107479Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Sequence_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.695Z","timestamp":1782329720695,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Sequence_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LgGciTVhsYiu3KhayRmvcWmOh3%2Brgg6%2BQYquAnSFh7g1LeODNMSr3e5T3CLUWUeA39FT9W0%2BEdDMDnwPcv5RvzCo%2B3w2Vm2wGgICitjgVF2bQuPnY6Z1aBX6lz%2FAL5uvhSAg6g%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"545f-19e8af973be\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 21599\r\ncf-ray: a10e2cd25a74723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":21599,"size_decoded":22586,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"17720c9437e2dc8c13fc92de8965934f","sha1":"7c3e44e2f6b65fabec77b41cb8ee399e998da7ed","sha256":"cc7a7fd6ec071e22ab57b37d5325c53f9be74b61d472404672aa582329eec9c9","sha512":"c1ea29aeaad47cc62b9eba6fb0cd67b8805d13e01fdc2992d5e6d64cc0deb2638ac8d53c78909d6294088f6883c14a7b69bf56e717d25cac9f3bb4faf8eb9bd0","ssdeep":"384:f4UYGaX3tjGQm6JZl5uTYvZxRFebaJMxv0TlQ3SfP88pnw:fZYP3Nmol5ggxRyvh3iP9W","tlshash":"82a2f118450be9e30db4dbca65dbef4200b03573a40662ba6399e35f2b8ce513b8d8d1","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-06-29T07:04:41.057785Z","times_seen":20,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Ensurer.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.391Z","timestamp":1782329721391,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Ensurer.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2BAqkb2PJVNIZyIKfziJo6pacM4cqqCQk%2BZGJJkhbv2Bv6LS49hZj0pRltEAY2CBFVc8eTQspqYVBn%2B43acnCiPQjg27m4PNe0y6VieS%2FIwz%2BZSVZPkrGyOGntbXk9nO7kVscQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1778-19e8af97236\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6008\r\ncf-ray: a10e2cd6bcb0723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6008,"size_decoded":6994,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"33cdfd05b1c2b334638f94d15eaa9c29","sha1":"c76fab9dabc7da770f8f5b9b41deafd30b6680d9","sha256":"748e5482c8cea18466d2c274a9477983752c810e2730a2866c0fc45046b52c26","sha512":"22d5d44b3101c4d544fe533d632b22f4fa3692107c5531e450dfc49e7aed989eaa57fa108508c261870ef2a50965ca64dc0627a018c04ed38e45604c9d1a27d7","ssdeep":"96:iZrd8vtrLEtJK1/LqXvOexJG453/uSnlKBZYGgWDvFNcNsbdv6927NSTw2FYa3wf:iZrSvoam/1/utZXdvDSs8YaC","tlshash":"4ac17de709f49eb3c6ea97706721f21118d740481f1c6a5daee4a93f0f8a337951d532","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.633668Z","times_seen":19,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Moonpass.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.075Z","timestamp":1782329722075,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Moonpass.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=724FBx3u1BB2%2BhV6nEjsfwsrqbBE7qmucCuvCVKj1u%2BU4IcIDzBoEipHO%2F0SFXYtTn9bXzJM9Qem%2BVz9qZkNvwVBrqfkBdhTXO%2BAP0wz%2BjXyIJMUsTVFRpyHr7ofg23rddFa8g%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1425b-19e8af97282\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 82523\r\ncf-ray: a10e2cdafea1723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":82523,"size_decoded":83513,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"0fffe655b45d0b67f57cde63c24a2030","sha1":"23ccac563b7e7831a1c2270d7cb5efad54da04ac","sha256":"ed7ac817f20e3d1838c13c9e8ebfd49529f84b853de1fd579b598e228c184abf","sha512":"717cd3574c7e07efe524047cd5547ea93cfb163ff2cb5be0968c0d11048c882487868c79eae3c43a54bc3bdfd175ed037def575eeb7a13aa5a067bb48c33f0ae","ssdeep":"1536:tSLtTIEyMO3Cl3qbxxxWlRkKAXHroi8040Jx/nqSytuztgDCiiI4wInsZA:tWtIZ33Cl3qbxxxokNXD80fbfq1uzU/s","tlshash":"628302e752db8905447757057a931ba3292f9fb64340d3ae342badeafc12933ec07618","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:40.875961Z","times_seen":17,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/MoonspinCOM.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.131Z","timestamp":1782329722131,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/MoonspinCOM.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N%2FcMPfa8eIz3uRTeqLjYgP4CyoGHhcrMgjdRw1fGD1cWf9p0SoxRavhsle74m3zzg6LwdI8YJAwbDI54KDOYAdx8SCFfI6AU3NN2BFnigxzE8qwXU7uEKnFKF4Vv6DAD2bjLmQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"16f9-19e8af97282\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5881\r\ncf-ray: a10e2cdb5ed4723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":5881,"size_decoded":6859,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"ab4b18b2f24993a9e60860f722bb021f","sha1":"c721bce5809d0b66edb5e7b7a8f7816fd9e6b1a3","sha256":"d4637d9ad2060d93db878bed862f1326400f7c653894864cddad5819bdd9c1d5","sha512":"567d783a666b8882c44cbd575a84778ba9cfdb21ce9beaf8436838aef602482fe7d9846b9146f36a7e6a908a789aab80a806fea0ecf5e0419a91625625f24cb0","ssdeep":"96:B+an22P2PkA/5+Mgwvll0Ty8uv9OXrdqWMBn6zFUDmhApUzn0fBK1vSeYFJup9fw:B+an22P2Pk8oMgwvETPuv0X2BaSM0oa3","tlshash":"1ec17cecab25e59d67d4ddffe312836d0b8c820a5b045d664832a6901884d48c65ecfe","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:41.036044Z","times_seen":17,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/WEBVERSE.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.132Z","timestamp":1782329722132,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/WEBVERSE.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Vyfku1KcjoycJYMhS7UcMlLGjTxmfo8mQk0nn5X4%2FvOx%2BHXhy7SxwXV23bu4BnEwHqh7aurLyalSIlPPH5n5YLaDBkAL%2BUfiTUbi5HLckHhF%2F5zQs9yXQPy13U2uqr9zVCtZQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"28c7-19e8af97302\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10439\r\ncf-ray: a10e2cdb5ed5723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10439,"size_decoded":11424,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"aacdc8e49c23218a226457f69480a4fc","sha1":"63e8ed8afeb9f040b958ac571a61cc50a2c2c06c","sha256":"96746408b9e915ec8b7afe6415cdba4ad87c4e8dd8038f40f07ff85b11f82947","sha512":"6cca0b3ff74d0d910180f84e3dd07af5646963089bda66865268966045031d7b8780b0fef9a2f8ae6bb6ec92edf8967a3d72598877179a6289a625badb577aac","ssdeep":"192:q70Y2RTOgG1Y0LaXooBhcPpY1pjPateWnHo9JoGIKwIGtTaAguN+mYsTWPh:VVONjR189VqBg/miPh","tlshash":"9d22bfbd42a090b7c85e07b69944c5750e6800aa083951faf57ffcfb6896030d4f6b78","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:40.876752Z","times_seen":17,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Kucoin_Community_Chain.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.233Z","timestamp":1782329722233,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Kucoin_Community_Chain.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hlhKvIJmElU6scn3qHtOq40u88A%2FjmS8I3W2erFL7CYzb7LDN2BnfiSWG9bmCNXZwq63CSk%2Bo8susGSJlWvQ0%2B9Um5pZWHxMmXm3GGXuZX2VuRlT%2FG4cmA4jv4qtScmmTdArXw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"591-19e8af971ce\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 1425\r\ncf-ray: a10e2cdbff22723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1425,"size_decoded":2408,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"ed95e4cce660adab58a8d07ee3fde480","sha1":"ee77897c2ae190cf718afb57bca0306f3b03d1ba","sha256":"8def17dd70485cc6650ab8263742f81bec42b94c57f2766b3d998b513f1b4e78","sha512":"95a1b2983bf6d051f2c6a2e0d580027064b276b81e571c9e005b880629d87c0b502c725af6366dfe463901f449c8b3e7128b0d196adb9e086c7cbafb93c739a0","ssdeep":"","tlshash":"3721b6fb053ce6a0bc45015a30206e5da8246c4d09add7ab4ab0b2627dbf7e54adc632","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:40.691476Z","times_seen":18,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/pockie.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.036Z","timestamp":1782329721036,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/pockie.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Fav36vhlkrqVXNjvjYQJJ0i7uUdbdrHpZQXkXMXnvSMH9WiBulhEXPCpW%2FwThY2AIokXXLAGoM8j26cLGY39UpzIS53bPL7cGVJ%2BiHNeZABfaEoqKk2VqjD2isYtxSI7dElEg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"5dc9-19e8af973b2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 24009\r\ncf-ray: a10e2cd47b6d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24009,"size_decoded":24990,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"0e105590d3bc256915575557805be1a1","sha1":"3676e533b3b634ce6b98d4b5d92af6a4cc77bfa6","sha256":"f18d351cd7a43147b032b3a5a7bc22a2244231d1ef0216181114b5e6f9bd2a72","sha512":"571060bd038937b8b132af52dd0793ce58ea8f59bd1cd13d89fd7146a9b1c9f87a460eeedc3ae30df337953c57f2a7883da7fa1bf68d3a86b65d14ad20261a01","ssdeep":"384:2PCaBcbEI60L/mdlCT2VDVn3EFeSvGqnvvtGVvvagOCKVSw+N36qcMoG3gIHBMm:2PCaBcbEI602UaVJn3E6qnvvglDzw+NX","tlshash":"0ab2e0f86b3170d8f786f9aa6818a7a91345ef9ad7c2ecd4c1c23098a2f40046b1046f","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.604334Z","times_seen":20,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Kresus_SuperApp.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.065Z","timestamp":1782329721065,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Kresus_SuperApp.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lp0Ym0QAl0FBtrq82cfyU%2FhCDdRmsxg%2BcTYFAEb%2FB8J9VMjjxEwUjp2lAlmwu3QFt6fU9clCQrYEiCc64T%2Fv3rFEyqciPWqfTSOnT3OB69pw98qydVdWRGIAHelag5MpenXuXA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2f26-19e8af97386\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12070\r\ncf-ray: a10e2cd4ab7b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":12070,"size_decoded":13055,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"99bc84db14618e7a7c756b723d799672","sha1":"e0f763dfbe2b3db330bd435f7a0674ce80fa8d9a","sha256":"0c9397a3acec2946afdf2785cbbb92d6230d5724714d49dad1afb5339018a2c1","sha512":"ec9e89df5741c1f8507a2be2661bf973a3ca3bcb12c93b03bbbe6db9165e6eedeb4f8528fc80c09fa14faf4a71bf1e287378c6c9d888611a910ef0b984d4138b","ssdeep":"192:UKG7iRLf9fAyDkURWUaYKFUOtMkTEl3TnVW0FoERglFOw3dlZ70Ayqx42ZYM5R/R:UKwulfAyJW4KXfTE5TVW0olVL70SyM5/","tlshash":"d042c03c579f55ad9b2a35a05d7d374ae4324312c0e0a73c8d8a852bdcef42653b9283","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:41.067999Z","times_seen":20,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Numo_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.137Z","timestamp":1782329721137,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Numo_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zluMg11QUq5kfXutMP8iJy7EzkuaTIJNVDLtGel17%2FQFU73otk2DkK1gZEbEGiHdIKuU56PLWt03LPrCVyj%2FVvQv%2BrWxBxbaEH67s%2F7NvQD3oxuUBv4ekJwap6nwtZ9IO556yQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1828-19e8af9739e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6184\r\ncf-ray: a10e2cd51bbe723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6184,"size_decoded":7168,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"a36ef402bb4d7bb70ac231712eda3974","sha1":"9527426495231d881d93d224386ecea61c2f33ad","sha256":"4f18c557c9b5c0b7d5644f413c317c430f9e21279b04958c5be98a272ef213eb","sha512":"5fa29c8f1f272fd5c2063a7039960ff2b2c033bb07fd73ea5fd67c09b259dcb093c4c36103c1514d56346ab9c01c066250fab74184bc1d36feeb92f03c980574","ssdeep":"192:bg2U9k6JM5ITEfVj6vx2Xsj5ZEuadDAe0:h+Q5XgnHbQn0","tlshash":"05d19e670108bdf1f0797270f517b0e8a2a54bb06ee631d9269a0945363a304f08dd5f","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:40.67473Z","times_seen":19,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/PancakeSwap.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.584Z","timestamp":1782329721584,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/PancakeSwap.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xNAzzc259jFU5RowdRDFhQD6jAqcbPIAC957T42tQWlqeKzZPEcGq%2FJBvGYK0n6xrUqLK07%2BYE5dFyYPgahK%2FOGVAVZZL6%2Fxk15PmkDtqFK8xH6G5UlIPDPoGZyzZYtfDCYFWw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"7e30-19e8af9729a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 32304\r\ncf-ray: a10e2cd7ed26723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32304,"size_decoded":33289,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"5456fcc222a9fe2dff66996646d3acaa","sha1":"939a577bd09c35cd764754164459a41ee313082e","sha256":"cfc2b3baeffd950725e3184e3410ea9c3b865c308f68fe61ea2069b2eb5e8215","sha512":"a230e4bf82292fb7568b8ff5ea13ca0339540dd064b0f91ef2c2f87e450f0cfc3c5aa83ea3fde4b0237333416b548f2d4ac8ac3d3f06ba36f355d1fab229fee4","ssdeep":"768:swndtPB/JTbygJHeDIXalbbLzZfxuC24l9fY0/E9JSjgoHnOXq:hdtPbTtJ+DvvZ48dY0/4VUnl","tlshash":"81e2f13026a3894224f350056948ffe95d724293efb9fa7e288e036f518e48c62df765","first_seen":"2024-05-08T09:53:27Z","last_seen":"2026-08-04T05:59:26.019741Z","times_seen":40,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Bydoxe.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.791Z","timestamp":1782329721791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Bydoxe.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6tvFAY0%2FY8GdazEljq7as4rN2qHUlkcOxuVOaf9N2%2Bm2ZGZ1IYTGs8zWQWHwmo7ElAoGgMTW0M0ENV6oaEzP9KF%2B9JWTpX1XqtxNQymCYzea0QPUPCYdnohorKRGk%2B4q7eqPDA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"603-19e8af97206\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 1539\r\ncf-ray: a10e2cd93d85723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1539,"size_decoded":2522,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"a307c740bb9a11e2c579500eb8326805","sha1":"8026b456b62a9b68db5a3e15aaa564e864034d9c","sha256":"fde8d7e3d8262c94e63d4abd9fb693010877d81cbe5e7e919f457438890b1538","sha512":"2992b68587b81f2c764b258a0e0c037009de905d13b47c0648fcef6cd22e1c1593a50f28b9b9a3a29d8492fca77b6d889f95bf29d39d0118c4705e08c7848531","ssdeep":"","tlshash":"db319a8947535b3dc5e24b31a9344bb49fee8dbc0aab28057782dd1ddf8c021621a17a","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:40.703878Z","times_seen":18,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/web3xms_com.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.113Z","timestamp":1782329722113,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/web3xms_com.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gJNclvr8MlBYmP1eVZttyBIGvJdtPSQEhREnDFnLBgOAmIVcEP8knRVbN43doopu9RBY9qZ1exyAItF7kSF3XYRQeONKWHyrhx0dhZYnx%2F5iN2ObbOEFFXu5gD3%2BSWlBJiWEuA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"948-19e8af97302\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2376\r\ncf-ray: a10e2cdb3eba723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2376,"size_decoded":3355,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"a414c8a750606de8831a8f1fa812aa6a","sha1":"77febd4bcf6b984ccb1bb2d89325fee337644915","sha256":"b25a2e7a1087e7e807298ee798e18e65c68ab970d0828d871adb5a37800538ed","sha512":"3a683456121cf39382400f595df9855867d4575ab89917a3d96bb0314bda2da3b4e910ca1d8ddcf8a664f47cc130b1acf0a96b6469d63d0c1d1fd1089346c2ca","ssdeep":"","tlshash":"ba41ba625f162f2e8db623ed8a250ddb4cf5cb5a87aed7a76ec047344c22004cb49557","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:41.006414Z","times_seen":18,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Celo.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.257Z","timestamp":1782329722257,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Celo.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cJp%2B6VA3LNsqsvZciUUxMH2%2FCA%2BL3rTB3FQciUd548T8EMtD0akzf8ir6e%2B6Rysr26ArAr6oc%2BUZCmwc0UhbZNor8LBQsW45A9TigR8P2kcdB3xqH2yacsmnJV3Ug2FkEbaszQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"83b-19e8af971c2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2107\r\ncf-ray: a10e2cdc1f32723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2107,"size_decoded":3092,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"59d27569a39494b121a98abbba94a3d0","sha1":"399628e69e39c7eabf42e0fee32d01fdba08122e","sha256":"bdab56569d83556b558a130550deff7d4ea2d19140acdf0593e4f8929e3a1909","sha512":"8f9aeaea160e005e9f32f571b9f6f16f2767bcd52eb4eaa2250c18d4960509e8dd1a8c32a524396752035e5c76893f7229a0df871da45d36090f0e3b74c27228","ssdeep":"","tlshash":"9c414cdbddf438408438129de67f91642f250340b86c1f5e430b7e9a297309ec1c3168","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-08-04T05:59:25.963331Z","times_seen":34,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/CoinStats.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.962Z","timestamp":1782329720962,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/CoinStats.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hnph1%2Fx9XXWYt1Vo9npsAf%2FB69ssqdwPTK8gDCzf8QqMW3VPKDDzweRCtE76gVI8JsFGDnCFHepPuqFnw8PqTW6o3FzLESMdI%2FqV5PLTC9WXcIqRb1t7MOTZ%2BSxVaTjoPWEXGQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1fee-19e8af97352\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 8174\r\ncf-ray: a10e2cd40b25723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8174,"size_decoded":9158,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"77f394ee937d4225cf42600e1b77174a","sha1":"f94624f1e0528634b304ef7e54cfba028d564cad","sha256":"030c6055a0fcabbdc93498f8954beff9922be3132f9d7b5f2237e4ead2f2c563","sha512":"500b4eb477694523ce74c96a6318f8a7de316aebba363dc4ab6ef757a9000b2072b298224dc82326235377b2ca3630a662075154a247459c9aefd2b2a13886f6","ssdeep":"192:Elw5QPrg345nw+9Ch4YVWh459CLzDAQpnKMP5dMTN7l1VS1rxzO:ElwOPUowoIgunefMh7l6zO","tlshash":"fbf17ea0f75c125cc7b1f1f1b875a88cec442299a0a7e8948c0fc138d9ec9ce99cdc11","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.801717Z","times_seen":20,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Shido_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.994Z","timestamp":1782329720994,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Shido_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8rO%2Bn%2BRZSwvqE9AI5Bgm0L1CYlwVJZdyCIWHg5B85y4ybrfN5RUXj8NJbjxWegsD5rQRCSdVameDjPvAJi6kX%2Fv9ZkiUOdSgqiPh2oHLtSYnTqLnvFHjnt05UPp45wG4Gn2XgQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"24e8-19e8af973c2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9448\r\ncf-ray: a10e2cd43b46723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9448,"size_decoded":10430,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"dff08df1a9b7a64c6b219ce52c5cf1bc","sha1":"6ae411083d73b88617b6d9ad51dbf418849f446b","sha256":"0aa952289c4a101ff806695fdd66bc295341c498a170c528a344949e6089b3b2","sha512":"34c79f5d44a2b9288f8aaeaed782620739f64b296cfcfb645c9ec40e12926cb3829d97bc8fff8fd84d40e8a1d727c285f04c7e41ed43a3fd8f166c588efedb8b","ssdeep":"192:IWQJiKY7TPVndLJvVaK64z3Got3lbIGm0xy1MkPCs/:rQHmThP9ad+2i31a0xy1/Ks/","tlshash":"c112af23f1c3bb0201b24879f845951dc756a5aeea699cd134ae692ce201b85d86ef48","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.673429Z","times_seen":20,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Plena_App.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.135Z","timestamp":1782329721135,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Plena_App.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B5G7Vv%2BA0evof1ZCpBzMfGz2DxYQ4i1RN3D9B1o6ZY%2Bu4beQ5sf%2FTMNZcksiRbuf5caN99ShIrG0gGwW%2Bc9ELj3RT0hxUtrRMs2pgoHubszCeKeIqLUh%2B%2Fx3t7%2FRFupAl51VyA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"41da-19e8af973ae\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 16858\r\ncf-ray: a10e2cd51bbd723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":16858,"size_decoded":17851,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"f14e1acffebc1e6b74214f6cca9b89db","sha1":"c0e852c07717c8ef1c0098e1f52444a428877fdb","sha256":"f2a1dc070cad3c647ec5649633a4b4fcda80c083296b4d42cf3f921ee2727e10","sha512":"7172e977560f1be867d924e692da3a3ffe9a337262df14c0c616431386a3dd0b3106a40f04e2e3a188bb7ce781cb1bea693e9155bd37616bfd80ea4f30b84eea","ssdeep":"384:1At6nF+AlbRSPUXjmTdWrWKTP6e5Ea/xHxImVl:uQbRSPgSkr2exIm/","tlshash":"6472bf3ecd8190253c2ce725bab01ed2179445b177ffa219c862402aebdcb5286f1b52","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:41.121083Z","times_seen":19,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Emmet_Bridge_Testnet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.916Z","timestamp":1782329721916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Emmet_Bridge_Testnet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wXcNWuTkr71hlmwJ%2BoaFVj7XLiVd11CCe4cafyJjKIa8ah7UKzz3nWAyTdjaHnk%2BKGAGTRktAIDDTYWHVEk%2B2WCy%2Fm5ZzXl2hoJIyjambB3tjBZtVcj4JkMEZuj%2Fp9pgQW59sw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"18d0-19e8af97232\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6352\r\ncf-ray: a10e2cd9fdfa723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6352,"size_decoded":7338,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"c24c22beb5589881fed04ead65ed1a2d","sha1":"66799eadee73a822a15723a737081372a56f0db9","sha256":"406b76168d204d3c99d0c5cc0cd88b27cd24b6514f72dfbad681e96b2b46e1db","sha512":"e0095c593629ff09b149dfb28507946ab5ee2248d7e7ec4f05ddb1b7e1f9de7fa0dcd57a821355bcee5b6bf6ee8febc583ad2d5de45e02e9d3c0689a0f89a817","ssdeep":"192:4q0yjtBhZRJqhdTIbGdkqaInMLXpglHDpMy:QyjvTqhdTi5TpyDpH","tlshash":"1cd15ce686e8dd768374af219b491ef358fe6273c625c7012302f578b33b28249646c6","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:41.260079Z","times_seen":18,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/chartjs-4.3.0.min.js","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.147Z","timestamp":1782329720147,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /chartjs-4.3.0.min.js HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"13128-19e8af97402\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 1671\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AMxABuXlsuMlwzpYkgq%2FDpGHoRCK2h8bMSoKNdcuMBSC5MweW0Vi59WgAA6d164a%2FPmxSz%2Fa7UWFHGhqwx9JnIaSI577JBh2sZyV4W8JDYBcqEcmIiya8WJju2KdzqW%2BmEM4OQ%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a10e2ccee9a8723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":78120,"size_decoded":23987,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7572ca49413111a3bc219093843dce32","sha1":"93cbeab1667219e67763f5210a5f18f3d1a3d498","sha256":"8293ba3fb1f612e8dd3cf4ad8c13832f7b81eb9484a5cc0f1ba0ee23dad4edc0","sha512":"8a8acb5a22be29145d2e4796eb766bc1495b5f80b146feeb9d38695299058cb72b184e3453b509b7393eefd3d08cb1ed60a533bb94f8df9aa3dd4d831c4d707f","ssdeep":"768:Q6nfJcVU0ndK/qiF8pf9tQ3ymiHqcVcbvoyY2w+wdc7cxq6OmdcDcbcQchchcTcF:n0d6JF83tQFiQU9JArk","tlshash":"747383d6690bc4d98e5111ddc477ec08e4a80aa3cdacf193ba6cddc6b45ef26844723b","first_seen":"2026-06-24T19:08:41.963572Z","last_seen":"2026-06-24T19:36:12.963931Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Coingrig.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.809Z","timestamp":1782329720809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Coingrig.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VJwdFs%2FzhJQuhya13hEhKcyTh6HO0vfGhE%2FE5gC4lFTcNM2xOcMlLXcmT%2B%2BPwRHyBX1qKnPmeejYwzgqEzNBkD53LQC5eItf5lBrV%2BW9yvdxXf3SvOpcK4zzryNZQIR%2B%2FaGCmQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"e8e-19e8af97352\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3726\r\ncf-ray: a10e2cd30ac8723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":3726,"size_decoded":4715,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"9698cc254cb1d6c14cf1a383c5ecf34c","sha1":"4d5b176d1d7bc61e72b8c65204952e81bb2288c4","sha256":"d30caaaaca3aa91f4bcce845eadef3d53e6ed0210dbc9b9dc45500696a2dd9b4","sha512":"552cb817b6cda90190ac795fc1556a8d8af79cba566a330b0cc97908c93d5971c7d12cdfd66713e25c53f0606de8b351414125936231f29c49a8d2180ce01691","ssdeep":"","tlshash":"2271823a38c09e745cfed341ee870e6448990e2e10bff3046759a66a371b2b905e568b","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:40.684369Z","times_seen":20,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Defiant.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.859Z","timestamp":1782329720859,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Defiant.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nDzWE8TGLkJEv2xzFlq%2F5jKSs2IUlaetwHUFUquBcqNqCwte2suC21uxUi70N2JqxJPydf5%2B2fBOe7CvpwgmsGsK9PujyeY%2Bbe6uyHD02YMSUKOmnO%2BWtvBroUFalXFBPJdSRg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"21e4-19e8af9735e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 8676\r\ncf-ray: a10e2cd36add723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8676,"size_decoded":9660,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"a42f2b64a0f330dbef196781629c7810","sha1":"15040b850732bca469aa2c6829767b577f44e0b8","sha256":"b74c47fc7257d17adeacc960db7b8ea9e112eba4e23ed2da87d265c055d3d3b8","sha512":"70fc61c3eeb4b31cf053f1c1544597d26694687debc2ea6142ac3150ceac135e8f84b044ed7bdc1171565ac0c084573c6b1e86a1544c1567ba8583a2860aea32","ssdeep":"192:mvtFSy4JkzfSaFatl/dZyD2kGxokUFDRGZDr61YV7Q8:itkuSaFkTZyKkGxKDMDr6qVF","tlshash":"4d027cdd9cabbd25fb343f981f68c27701bd3d063c239c919c15835aa929871951ec68","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:40.993704Z","times_seen":20,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Sinohope.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.052Z","timestamp":1782329721052,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Sinohope.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sxMas4zPJu4ZIEG2AbiYHs0%2BxCD4XzgcPjdLfcXGpt%2F9usJRnlngO%2By%2Bv3W5LaxGeU0sbQfMyE0K96O8N7sD7tOBBcrPVy1aW99Nk3FWHOm9G0Ogp3rFPgl7C39UQnVyUSbuxw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2010-19e8af973c2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 8208\r\ncf-ray: a10e2cd49b78723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8208,"size_decoded":9192,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"409d6a3c09ed18bc913e53a368d8cd02","sha1":"3e806fd30892ac070a67e3441a5d4a99687b2a5e","sha256":"6c427731afd8f23a726f2a28814d252248455eefa0002c45e1fe01d3f07170b4","sha512":"999e80b0187dbdf1c47fe48c21524dc0f490ea28f119ce4d7998534bfd8adafd71bb0911a294246d577d2ea5ff5e5f26eb2085c2630845e04f77938a172a0124","ssdeep":"192:YtxtYLm/pICgJrHzmtSvhSF8jao+4akjxqTFBSgWzA:0xSLmhX2ytMpjB+4akkTig4A","tlshash":"53029fc9dda7580ef4f109f5e93f258076dfc6ac1c8f9b86ac0c261b86bd80650de694","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.779055Z","times_seen":20,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/anotherblock.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.390Z","timestamp":1782329721390,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/anotherblock.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r0VctD%2F%2FSy5QpGsdzO5doGe4CQhB09xHNomPghPhvRh7f3abxST65y51Yt4KagsKdrzc%2B18D%2F1h5s4N7vdQTKFdkUvroVbXjJRMbUmFdqGGJ6gOWKL4o5gOc%2Bw4QLoTwJ%2BGpAg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"223-19e8af971ee\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 547\r\ncf-ray: a10e2cd6bcaf723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":547,"size_decoded":1533,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 4-bit colormap, non-interlaced","md5":"03f7b37d16feaf94d52226795d1bbcae","sha1":"24512f80d85cbe1fb884cdeb4728990c70452136","sha256":"2d88df7a4d27c24be05d8429812615e9f03c20dc933c76b75d3217c3ccde85f7","sha512":"83871ac9d35ffb9346c8c8a48305edf84d1ae5e0ec8225a082690c88c3ea7b0e47c76c6632f576bf1c0a3615ee5dbe77fdfdb1ce5dae7adccb282ea40b847dbb","ssdeep":"","tlshash":"4cf0e28ae3438464df57fcf81310c1911b30ab390975d41e030fd41b3b2125c03ed10a","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:41.018662Z","times_seen":19,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Agave.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.428Z","timestamp":1782329721428,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Agave.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aREhBSVQcyC7brKWPtFx6n8x8HEcyRJGzXRLTZOMF6Hhkjd4A3BkZyBxksIN3shLNG7ZSbHIpLcJoLcgd%2BIrsDiyJ4CvT3EHeTah%2F1HJZlJkO50vK3rGkW%2BA%2Bk8iC4XsYe%2BgLw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"3031-19e8af971e6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12337\r\ncf-ray: a10e2cd6ecc8723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12337,"size_decoded":13324,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"b8a4dd4bf2ece93f35ace59b9d5c10d4","sha1":"78e988198cd70bbae96b815241fda5fa719ade18","sha256":"2a8b7f7c21d0468a4b32f7cd10775484e5e07bb8f3d0bb15740e2b8e31050cfd","sha512":"d0a058cfef0cfa43e69b995e17ff471a5bc8516724a9bab6b8a2ee222799e13302e8dcc947de10e9c262060d0923ca3766d27e61c2a7f4f0a22057378873db4a","ssdeep":"192:soC05HCmuNbiBcQfFSLTcSXQHHNrnXuZd+eWX4dZmXkYfAiHalXdYe5FXamd:s/QHINuuQfhwGHNr+dCXGm1frejKk","tlshash":"b942aff46a24197e1b696dd6f9df132aa7f2e401cd85aa42c12e8c6129670c6453882f","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:40.64326Z","times_seen":19,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Air3.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.055Z","timestamp":1782329722055,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Air3.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hK1pweO8OldVJ1k925GSpFBBNQRLE%2F4ze3o7u5Sriz%2Bey%2BXYk15i%2BlfcjMCVzkHyQbw8PSI1B8FUhoorC27IzWtqckn3qSaNLnYd0HRmwBmNPvLa5QFSPfH3GRP8Xs4nwsUX9w%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"7aa-19e8af971ea\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 1962\r\ncf-ray: a10e2cdade8a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1962,"size_decoded":2945,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"7bdf4b7c77e00bfffe2a2d02ee8b2515","sha1":"3054023b3d5c39065ccaab7ee00ad54ce40a9c20","sha256":"bb93a535f3977b71a7322f083579222e500d3dde47bdd53ce6da5351f2716ff8","sha512":"7a9076b22e98e6be5f30f49fa1da788dedd21a65c79232b5e813285c33c2bf43d370234908e5379e40da785e274e9cb70ec337011eb08a3166528dc7a357b167","ssdeep":"","tlshash":"36412bc41185d0dfe7c78bf864c96d8add24663e020ac9559594bc7fa06ea1afc12c81","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:40.813618Z","times_seen":17,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Terra_Classic.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.303Z","timestamp":1782329722303,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Terra_Classic.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nZYVfA5tDmS1PkVKr6%2F2wtcBkdTx6ml%2B%2FxmaSHbL%2FPgQvoLPQfB8bp6AeklJz6QAGSQVfAad2NLKpaJTgqmUWcHTnuU6b3f4ZD5EwzegDkvh2kQmBFfDyaIKarfD%2FEvLchV5Jw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"2859-19e8af971de\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10329\r\ncf-ray: a10e2cdc6f55723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10329,"size_decoded":11316,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"57c8d2f9fc0b785083130e1eb04a5fb5","sha1":"74ad57a1d4f9f6f3263c051c95deb03d5213a777","sha256":"b7c73c21c9ad11296e229671e98a9bf0949d83e2646e28cc268e28168290137d","sha512":"48b73baa567085f95ff15074d5926a445eb72540322270de3327e6b85de9c0077811621ac0face412a837c65f83bcb5a6a8565ea2c3414a28ca572939099eba0","ssdeep":"192:ICDLsZLJEF7TMvXRhSsxmva9pZPiOR23aSCX6bA5FN:XgKF7TMvXRh59pZKOR6KFN","tlshash":"a622c0d9b6acfe38ed807946decd596df5be49a1c6d1bd0941ad50228094cd4cc03176","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-06-29T07:04:40.73458Z","times_seen":17,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/ID_Pocket.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.710Z","timestamp":1782329720710,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/ID_Pocket.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=utqKFpomoOY6qI%2B4kajhyhNZdox07pS1ZFvfhGzfQ0gLAczGjLIMec5DbUq5HPDkc0opZN3dwKQoopcEg%2Frsdn6X%2FQEG7h%2FZDd9QyJsMLFFFTGxav6RgwQY2C3Ae5TUcxCu60A%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2936-19e8af97376\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10550\r\ncf-ray: a10e2cd27a7c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10550,"size_decoded":11535,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"f4bbd80c374bf74fdc3922c2a5560564","sha1":"58785325b1148fec66b1551d864955f35cea8cfc","sha256":"ba9476ce4817a24d5012dcb9c8699c6c84bc8e87fcca38ac1893b7057d95afbe","sha512":"0aa497a88ff00f8c99621043f6d08f7987e8fa0da17a3f3162f7f1b9038da35ab4144b6e9284fab57143a7b7a2da6a074d9617cbfd50d0f9fac01a57fc0d266b","ssdeep":"192:IdxCUBpdi9dqashFqc0vjlXzgh/6ViYq+fnHfi+Pgjuz5UzDcnB8+5581RsBV6Li:qCmpdiur07Jzo/QQ+PHa+IBcVVqSTjT","tlshash":"d422be6704a6f577c143897dce053ff1d9a058ec16a2b0930f27a0de8b6139d5a8fe82","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:41.120287Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Unlock_Protocol.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.267Z","timestamp":1782329721267,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Unlock_Protocol.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lHM3xi78PfcgJMLKtLgAcas4RMyKsz1vGD7T%2F2pA9tSIS1AodHxQYXyW1HnjxmZ11nUJF%2BfQETReB5GoIuAlrWCR8gT6Yecylctt66DjUgmFNpwHcCoRySSWD%2FJdW620cifGSQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"157b-19e8af972fa\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5499\r\ncf-ray: a10e2cd5fc44723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5499,"size_decoded":6481,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"95de278f6015e03f0146ba6f78f3877f","sha1":"f85f47562824005375ecde6ff911a4e575ea7f7c","sha256":"3ec76b9bf811d614ce3ca00bd6cde9894d764f0935f358c7cc00354d2e61f24f","sha512":"48b3756408fc8d368934b16cfacc5a4bb43cba0cd1f9d431307b3301649c4fb199e32687a98886bf8074c1662f8b88ee55f0d569879b783d18e375780bd7f427","ssdeep":"96:1N51oSjHyoL760LyRmtWMtluGUQ9TvoOTqlRuw3NCBT5M/lsFrCb:MSbRPLqbGPNqHuBMOF0","tlshash":"85b17e72a821835f019d4b6387a9ca645516b5f1c929cea3314057f71becb047bebc3d","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:40.929682Z","times_seen":19,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Snapshot.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.846Z","timestamp":1782329721846,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Snapshot.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Qgl15eChDxsS36sycG1A9l7W6hP9cS3WpNtAgmQNOOWeJwYVFb0cN8%2FZg%2FAkutYrDyqJE10Ghu4s7rL6k8PB0saikqfEzcAyQb%2FlhAK239kjs%2FsRyWtyaBw1OTAS3QzXZMYYQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"ccd-19e8af972d6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3277\r\ncf-ray: a10e2cd98db4723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3277,"size_decoded":4260,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"d1fdaabd66938f31ae3615eab510ede8","sha1":"38f01afaeef2ecd1c648da924586fdc20744e8d9","sha256":"2aa6ad4361e58dd9feab68657bb1f714a2d992842e16c8facfb220071b29e63e","sha512":"437b6a99c4aa60fb36b04c0f8a00ac7996b459a0621fe9ac64c6cef209319744f8378727f2c71b08fc7bf10ecc75002d38563497380783024815696058b757df","ssdeep":"","tlshash":"5c615cd99dc20e0ac3474374cc20442c9f630046619f2eea1b420f767b22dfd7497a63","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:40.561527Z","times_seen":18,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/MakersPlace.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.961Z","timestamp":1782329721961,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/MakersPlace.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ipSlMFzIdmdNPSlQjR4BL6owSS3H6DnCA9xY1gGSk0oJUYWsa2qD%2BtONaFMeL9l95tTdcbHyrGZhG6m9BrIMyB3Jo2rATB5YUJLYzjxzmZqpMhuNbmZTG7rASd69ouo3H4hYnA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"a95-19e8af97276\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2709\r\ncf-ray: a10e2cda4e48723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2709,"size_decoded":3686,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"eb5aa0f71ef9da5a1551401743901c4a","sha1":"e06d1183a6741c9ccca3e0090a8dd29eab292701","sha256":"d30bccd4053c3fa17a683be44b8a1a89af20f93de40ac44493dab86a5a564c6c","sha512":"1aafdb2e3012b97a08c482bbf4c61c54f6bdfa8355ecff2b7a6dfa6879f381bd6631ceb322a1bcb62fc874277e1ff19201d7c5d02376fb78f45763f7c45f8702","ssdeep":"","tlshash":"2651a70a21a3276eda27db34a5ce4a427be04969a153fc42e9434a5bcfb3805c7c40b7","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:40.704485Z","times_seen":17,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/SanR.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.978Z","timestamp":1782329721978,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/SanR.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lv%2F97%2F0UkZLSwwLG%2FpySAiFYuo1vn%2FpERZt9W0Qy3AjN2VokENE0ETfHfmxxbaJyc9U66R%2FHpe7PHV27NTQFid4mFQMXUiWpd7Xd3DPalzdsZntCZ9V9WDf7F4tS1z2gewAJAg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2d39-19e8af972ce\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11577\r\ncf-ray: a10e2cda5e51723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11577,"size_decoded":12564,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"089ea9caf6732f2f3fca2c9c86b4c154","sha1":"34f1da6f3f07093d7872121e6bb85cd6eb9aae3f","sha256":"7a709c3481d2e38635fc1c20178b73cd8807d64f20c88f2c5a594466954a5c73","sha512":"bba133f00d2e93325c71f00c5c01fc477e8109ea921927d7185e751c4ca1fad5c3c61b5998dd4409bed36a9e7741f9083609b6156cbb34b3d86695b61943ee41","ssdeep":"192:fFeiCy7mE0wjDCiduhQuTqx4dG6ZPehSvK6QlcGZ90mHg6P1yczh+GrbfS9qAkkr:fFyy7mEzj25hQuRde0vK6CcE90m0ctlq","tlshash":"7532cf352170b5819e619b4711c05278a1846be2bdbf71c7c1ca4672eab63af07e2e36","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:41.167754Z","times_seen":17,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Morpho.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.094Z","timestamp":1782329722094,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Morpho.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jEnsTZhkUz8YWmJNV0o4iCQHxIWAK6FFFXN1GiGBdLg0sFRz7%2BiA1WXPWkmgsP4p1yvkrCeXTazJNDg3gEFewdHrpe0Eh7W8rKGnHQBhS%2BQoxggbKbvFGEHLNIKdtJ%2FkBExFdQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"e27-19e8af97282\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3623\r\ncf-ray: a10e2cdb1ea8723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3623,"size_decoded":4604,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"9b6ab1f735409704bdc0bb2dcebb1278","sha1":"813a8238eb7df0acc1148f8592dbb5a079e63ffe","sha256":"d04c076b826a099fc18adf327ea8da2058c71178b62ab050c0ec3a44b15c0748","sha512":"18edccde3e990fe51ab2bbcf649115d34fae4167ff27518460fedf6102755962004976881e60d574d1efb68811890c64a1e93adb0b6259f98dc5638e7dd73baa","ssdeep":"","tlshash":"f4714c01d5a5bcadee2fd4b53592c2948a9c07ba79c96098619313da2f7b20c44848cf","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:40.704949Z","times_seen":17,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/favicon.ico","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:13.430Z","timestamp":1782329713430,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://skyroon-claim.xyz/?__cf_chl_rt_tk=spPIa73jbcVxgayMT3JHUvpK2AGA7G7WC3kcs2Lr8T8-1782329713-1.0.1.1-7bS78dYZqN0yP3aqqp9DWsFxILZwhb_zdFRbLJgI3Pg\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:13 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff, nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=6,i=?0\r\nx-cast-cache: STALE\r\nage: 1671\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FeE3P3xJwz7tfU5hhtV2GeyYslUVTXTIf7LvBWicsJUN9J7X8MQUIgnxRuB6tHuDjJo0QVJDovbHQpyC9Wrl0yPyvQoKrxPFjUK5WYMEidhfU6KAth%2BzHRjCgrsoS2L5jFCNYA%3D%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\ncf-ray: a10e2ca4f816723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":150,"size_decoded":1085,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"84241342d84ac29592a5d9516f8edf7f","sha1":"03c53980e18e17625f439c20e7d438f066202428","sha256":"6e21162bc64073fe9e3d3d6375ca24d04fed1912a5b7716aac0cb0f2d16fae7c","sha512":"7509483335c7a30365f7f403098491ac0b44fffcc68a5cdacb86ec191f02dbda5b16a20a09e924b6a29ac938578d43bacb9a50115db5c5668ea27fe1811bd530","ssdeep":"","tlshash":"34c08c9e140012010b2087042ac1326464973b992de685006a87e027ece8a1ad987288","first_seen":"2023-04-05T13:59:49Z","last_seen":"2026-08-18T22:24:26.134233Z","times_seen":9017,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Holdstation_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.895Z","timestamp":1782329720895,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Holdstation_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oeBZmbB4%2B%2FRmbjdPRuojfdwQB0YCbYzKXGQ7MbKVKG0ofPzXKLY8kCCY%2FrsgKAgYA8tIzytCYIc63H1DcQpiHggKsu%2FC1S6JU9vvW2EbZQLtbnVC0vswTVAIhV%2Fwyq237Hb4kQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"7031-19e8af97376\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 28721\r\ncf-ray: a10e2cd39aed723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":28721,"size_decoded":29708,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"5a6e333e10e22209f48ca82db439094a","sha1":"65c1b79ce7dad6aabdde0eafa74840d25754eb5a","sha256":"d1078456ce08b6c110e95d57029a779f7506cec510fad8eb32f8a64a6da0a689","sha512":"e37d33e53123f7974bae25b600c6c905bc778cdfc057197c4a16f20ab61e9acce8eda38b88739ef115ed0bc529d31f7ed55dd58ccf4ef491fcf1a655b424220b","ssdeep":"768:TAUy2JGVjQ2+tCLj85QGfKGw9omK7H6xn+WLvzgIOtu+UGW:TADMGq2+Wj83e96Hq+WLvzlE0v","tlshash":"d9d2cf417b88489ef1ef413ace45dfed2e913838cea5919893fe494060a5f2cf240fa1","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:40.672896Z","times_seen":20,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/GoodDollar.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.068Z","timestamp":1782329721068,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/GoodDollar.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VD5fBo8EHHWjLyyu8vIOjQMZXjxGcOgxQEnTArv7reyBaF8Re3VaTKFkvhh%2BLnNJW6ecRDoYhvbuGnTi%2FQT1pu5Sd1GYHyJdLa57f13NGF3UW1JWOxMAxtYG0sS11jPt9lifAg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1525-19e8af9736e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5413\r\ncf-ray: a10e2cd4ab81723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5413,"size_decoded":6393,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"eea39cde9ec74aceeab901681371f3ea","sha1":"8271c313409dad080066283709468e6ad5d15cfb","sha256":"1dfdd95fd42462fb2163678390dde65a9703c4482d319b556b7028406dd78147","sha512":"4d6e1a2c15ab225173f22221bbe8ba2f7bc36b9b94d2443deb083bd3f04421f9d07da35f29d535776f6bdf50710e6658637c2de3e4acdd45168055b0f03b78fd","ssdeep":"96:IipEDTo80y8lrpzIkFxIz1Y0uPS0hHylxlehc3R8bneFHOUO4tbX:Iip4Tyy8dpzIkFWS7lGlx3yitOUOSX","tlshash":"b6b139c5cbe80469bf6fa377fe876ff970cb18f2a4391190413994242782726f687046","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:40.861736Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/OptimisticLoogies.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.334Z","timestamp":1782329721334,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/OptimisticLoogies.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bv%2BI%2BBWNKD%2B30gEpeKVGx%2F%2FpnOEML25l%2F1u2FfR%2BD8yQVvxeb8l94Z3JE2x4V5GpcETyrCo3QoFT25VbMUDnjTlfoKzoG%2BuPVITbqdHKu1LU0JM9Hod0kDCMd7k5Y8xY%2BjWd5A%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1145-19e8af97292\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4421\r\ncf-ray: a10e2cd65c7c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4421,"size_decoded":5415,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"4ac2f585d5a1ad017cdad843410d1aa8","sha1":"abbbd9b7a8391f4ae71e6288c2cee482201c0f1f","sha256":"616c6193c37e51d0e5821c62f48f52fce85d1e830a0dfaa3cda7a79a9ac0df41","sha512":"a637c3a58ce3c45b1ae463439a121c9c78105775d79ca5a9f057709cf6d548531dcf5ff24ae23a3173613a5a6fdc0b9e23c31d63d6b303ef9db64f18312525f3","ssdeep":"96:vXEQuQF3722euLNWvU9MqHVTVPKyVNP9YgHyX8WSNXsZV9I6:vPF36/YuU9Mq1TVPKyNYjVP9I6","tlshash":"c0916d67cbac9fb5c6c4177db941160826705f3619901d24a74678f4277370638bff22","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.883177Z","times_seen":19,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Native.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.709Z","timestamp":1782329721709,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Native.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WF9%2Fm2tRI%2FaZfvCIqpn4uoJdMH9Ee8vGXeoNEkQqZhC8OAv8vryQ8n5joWCT6x1BfUBq3sDLDGKUq7B7QgW1L9fOjlY2x1USUquFqxmPDBi6i%2BjZWdfFJUkDhOj4geRZO7x5Cg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2e2b-19e8af97286\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11819\r\ncf-ray: a10e2cd8ad52723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":11819,"size_decoded":12802,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"be5e804d7e688ff6fc5032602ffe86a7","sha1":"b26a97cd9dd82ca59ed886dd8d48a441b0391348","sha256":"62bb8f17a8f635f1f18024a211394f7afe18033ee8f3027cb0e7eb3a53c5337b","sha512":"350f85f6bbf913b9ea2dccf659ddbd2d79c9df6e4adcdf630caa03ec14229483d76e92073ad8ec78a25c720e93ab1d1e160034d10adaf56fcdf24431734c89db","ssdeep":"192:3Sm+X8jO7WD5rIf8aCZJavIEy7PSsq2E7SwlqH8ZcMZrY3WU8L8jKD/pHFWz:3SmjUWSmIIHc7tYH8/ZrY3WZD/Y","tlshash":"4d32aff0e3c94ffef251c7a378f85d403515ac6567ac814e682ff608d6ea4cb05a0899","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:40.695055Z","times_seen":18,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Juhnz_Tea.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.836Z","timestamp":1782329721836,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Juhnz_Tea.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AVdBpHuCc9olTVYomKYkQG2Q00tqxU3BcIaS5523aXwkzfe1RNtM1cxzE4cSiwZ6ypbRFfzJ1%2BX%2Bt0nEE3Mt2WGZ9Q9gP95mNF8%2FWOWbezypK39v3jpI1%2FK6tw1tDtuTFI2sMw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"32c8-19e8af9725e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13000\r\ncf-ray: a10e2cd97dab723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13000,"size_decoded":13985,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"4515de758cb03754035e2acc12a44684","sha1":"703f3e59542f3869eb71e82bdc8b16176a415d06","sha256":"6c51f1cd0414e02153df1db26a8839592569f9d6d85dc83529fdfd2568f6d560","sha512":"5f8a2c00c20dc685a0ce45db87a3dc436547b80848398fb944cc0bc400a273d9ae725cbd4910a8d9a053ef132814f000f50f593a6a6c0fded74e2502fef9673d","ssdeep":"384:ypZEkWgM9Xq0LLcWUMMfQCAr488Oa97T4+kb:ypZEkHrozrCD8c7T4Fb","tlshash":"5242c062149fc2858e964061ffe3267cdb18a2f51b36ad1ef7cd499cdff0c109258861","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:40.925203Z","times_seen":18,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Rareboard.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.143Z","timestamp":1782329722143,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Rareboard.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7KnlfdTxcX9nqcO%2FpH%2B4Nkn946z3%2BmLZtTNTdlpiNgs1SkY8CVu%2FCflLxulaEMIe7m%2FEWldThVG7ge76rF711%2FqQgKuSqYmhFgh2hkSj%2F3AZH7r352OID3P%2B04aU8ZNNo9KIQw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"eaa7-19e8af972c6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 60071\r\ncf-ray: a10e2cdb6ee4723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":60071,"size_decoded":61064,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"4799fcde34414d90a1860d4478f777fa","sha1":"0eb64698c7db7b079d0c1f89de25e76d4bb47d17","sha256":"797fdd9be62f1fad3d682327a78d034985d717ed5aa03698a1161c0ab34fbf9a","sha512":"4b7cce451c8b72b6f84b982ebdbc972a76d1813db4d832a8202949e1fefc4a00697df92c9b6ef550c7c8a56b23d801ff87f4490e2826f4222d2dad55422861cb","ssdeep":"1536:JpEVXaeyum/yXoqP4HZCepN7aPefCxSQmqACChFpE/Tg:JprClPknaWmSQQJFpR","tlshash":"e143026b2af2152610bf0d68975e02558f72be96e154dcbf6df5077ac3408afbc28203","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:41.168621Z","times_seen":17,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/imToken.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.253Z","timestamp":1782329720253,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/imToken.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vqu9DENSnQtk2dYZnV4btNm%2FZ67aI%2BNfBQF2V7anNy6o%2FoIWQc%2BYTrWfNkHG8bsrIKsnm0BTIHPIaDja8AS7P9qeI7hJ9NtaUvq%2FP7uxWFaGy2jVX6HqG8JXGYCENCacDPu7vA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"32ad-19e8af9737a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12973\r\ncf-ray: a10e2ccf99cf723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12973,"size_decoded":13960,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"3b1bc72ac3f134b641f2b951b5846997","sha1":"370651501dca14578e1870e657b29b7ea3adcab4","sha256":"187d3771f101afc7d83b66adfce2fc062d9c4637f2c611ac91924a3a76dd133e","sha512":"73f705331f43fb23cd338ffeddc7f65acf045c2a5223a410d31f79f6c0d7ee18ed0035541adb32d14f6d026db9b2c9224396c9c1ed79738d64f5c884df145b21","ssdeep":"192:yh7rPWleIYmzg/wMuCmwZxQb8RiQWBEpQLYs/qgSvF8rZ/pz2BuPhWr2ODAU4MPe:yhfWxM/AFoVMLYd1SjS4ZWiATAeQ","tlshash":"ee42c14f4b741c806ade1cde8d9999edbd028f3dbd32d58686e070af3ab5d238431529","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-06-29T07:04:40.760498Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Fastex_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.211Z","timestamp":1782329721211,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Fastex_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AAhY1bVkZCD9tnMZffrJknLcflFvaYi%2FQJe2NXCinlxHaRoeird6TUWvQ4UbgAutc5l3NCR8c%2BJLBdJIQ8xwvEb%2F4fEaN7dzKWKlQL%2B4oTuzUTGxMatBLPF3q6YU4t7%2FFaFc4A%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"c57f-19e8af97366\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 50559\r\ncf-ray: a10e2cd59c0c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":50559,"size_decoded":51546,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"b408663f3fde2ea9a0e04ec40688d0c9","sha1":"b39abd913db6a08f911849212d02aad3746992ac","sha256":"df7471b35ea1d4aec283d722ea72d00b88fdfd85fb0333bb69c3b42f0d3a840f","sha512":"4da98e9b4ae1e642d5fbfdd1fbd68e0a1c069e956f15f1ccaa9841150ff57e56fb496fa304cd49f4b23f9d67aefc3f3e3a396fff756a063c381ed4800564d51f","ssdeep":"768:aY/BsPqSjbUNYs6Jzwxdvd7aJN4X63YkNKjB69UyUjDvr4mTmTwAYrEZhmMl2TRr:ueFF7as63XaB6qyUr0IAZjMR1wav","tlshash":"a43302c1a1c6d6d84026e44b296334eb8c7067290cdc6f7faff09aa38615710cb7b905","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:41.036729Z","times_seen":19,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/DeBox.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.402Z","timestamp":1782329721402,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/DeBox.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9KarTsWcduPVAY3pyRIu4Ogjbj5RVJxyMs1Yfuiq2%2BdmuVWIh1a6SElGmwaWL0n3Adv3xL8JhoIHpq%2FL%2B2Te5djgOcE6w7djOJVRAoUaWRAVJj4DZmRAQRZea73uR8P%2FVyrqkQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"9915-19e8af97222\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 39189\r\ncf-ray: a10e2cd6ccbb723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39189,"size_decoded":40174,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"bccc57030ea9b3ce6b0cb6be9757f28d","sha1":"9568d455e7f4d671bdd054bad5f48058429a1d70","sha256":"508846c4552fd586bc165ce5c44533c1cce363a265590229ee32b4b79b619b3f","sha512":"52c2a64fe9ecc802e3c690591495f6d63cf45dec05638d19adb451b14c1e317565f5575e57ab3e7d989df46d2b4493cfb85480e0c466797cf24b17472fd511c8","ssdeep":"768:2XfbXbr7QhgmQQ0cNJ8n3xED7gulfUqrsmabJySTv:2XfbXDQW6IhceqrsZJySTv","tlshash":"2c03f1510e2d87dc04aced95569add0d9bbf8e7c12a9a594cec97860217021fbe313cd","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.54403Z","times_seen":19,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Artwear.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.504Z","timestamp":1782329721504,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Artwear.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j2V%2BSxfxOvuAbJSHh3mOrXa745dzUUwTS8CVoWv9oIZZWjRZ%2Fz9VtxRxj42sJ8yioZiBVTCno%2B9yyg2KASMOeMLvdGnh4ELoPW7QhNNBVzdv8zWDaWdJMHfm6F4daDyls0Nx2Q%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"1a76-19e8af971ee\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6774\r\ncf-ray: a10e2cd76cf1723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6774,"size_decoded":7756,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"18ad0fbf7c38f8db1d0b40dda001156e","sha1":"80a311698f6188f78be9028b3e5909c1c95b59b0","sha256":"70030102864cc828e8638abad19fb066da2211341d864ec07b18aac3dc3939d2","sha512":"4e1633b51123ce40589a76eae9d1d5c0e93ba6ae9aa846b81985f8a2ca357cb28a23ace09c4caaceae185b8a1d974d9bba6c555b2c277bdf0d89ad52efd6fb8c","ssdeep":"96:Bn0b7+SrEwA4UVb4y0VTXUZ3LlPTpSvKtySnrb4RhUy6NJO5zHwBQfdRqnkO7JG/:Bn0/b44ObT3LxVft4EyEJ2EQ1R3gG7MC","tlshash":"8de18fbf2fe925c0e5752e7cd1403c28dc5f89515d8eb24ac3313f64de09c85a5a16e9","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:40.709531Z","times_seen":18,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Spot_on_chain.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.806Z","timestamp":1782329721806,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Spot_on_chain.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jg2a142j0YFZDLRcWaxAhkTd%2Fg6KxPRLbjx%2FCIUYNhUdcVQIxHXHRKGmapwSPLy%2Fw29P8zZTwXK%2F1pGsABXzTjS%2B2cUwhLGZ6yBbdBQBVJOV9f4oNAagn1CVQze4Ldrne12pOQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"17e7-19e8af972de\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6119\r\ncf-ray: a10e2cd95d98723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":6119,"size_decoded":7105,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"23ba0c802e91d5914e5c9f9628c86b88","sha1":"f843085f99529a3c06bf9e5b52421beb772fd535","sha256":"c9a2f40ad80b4eb87b85e9b14ca323930ce4a44698967c5b0cd761272ffbbb93","sha512":"f9ceb7c77425d9e77a32b527f50c860cd075654e69e68e297fb44d96f9ca18518ac068a81074eeaecaa1b1f550814b448195700eaa929d646fbef0341b25c6a5","ssdeep":"96:KgBTdyYxUzd8cpq2o4F15Gp1yHio8RknXAvb0a5MG2rNeXGr:KgX0nF15Gn2Qvb0a/XGr","tlshash":"31c18efc1374346e988f55f8fbb324579db00b6616acfb48d1948ae550312b7e31b285","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:40.892714Z","times_seen":18,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Jamit.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.827Z","timestamp":1782329721827,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Jamit.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UoYDlHm%2FrasakIwL27ProDhxPzGjgQc7xq7TcDtWLez3L1NDXam3qQFQ99WIanuFUO5wRGhP%2FmlCz6o9BRzCEDO99QBhDWpo%2BPc4DqD7vu7DBWpy%2B%2BXSXVpbcop%2F%2Bhz5Ye%2Bebg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"32ab-19e8af9725e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12971\r\ncf-ray: a10e2cd96da5723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":12971,"size_decoded":13964,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"5defeda76f992accc09edd96b3374fdf","sha1":"c35caf2149ae4134e03a6d07588f615e8e1732db","sha256":"8f828d8a61125c5e5494087a839ae76bc68d2c74d87d981518ddc2f949749bc0","sha512":"d5d68f572b73dc6bf05e0fafb9d4936f96ec023f3b4db7a308bb39c3710639e814d12890994a0b2cf4bb9084f7ce7dbde19ee41856e814920f7960b4d40397df","ssdeep":"384:4l5vCU+Vzo+x9nwYO/8+a2ChjuppI/McZsb8ol:47vCUO3xJwl0v2Chjufcq","tlshash":"a642c07f7bc024f75217f22a43c76e6d5480985e8cfab658da408965a40b7c3f6444e5","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:41.024958Z","times_seen":18,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Moonbeam_Dapps.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.921Z","timestamp":1782329721921,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Moonbeam_Dapps.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wauKId3Gl2MjOj037U%2B3pkrmIwrZYSeMEsO2BrqmRWVTqKDGyzOh7VwKV6QUQS9A0MwQr%2FzwFHFFAXUmY3WRXSCSeUwLqjcbFJU91uxem2ImLJ%2Fvnk5t5Vr8CiGufLHNGW6ADA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"a64f-19e8af97282\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 42575\r\ncf-ray: a10e2cda0e00723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":42575,"size_decoded":43558,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"16c756cec42b12ef5362a804b2704d46","sha1":"40a0e89db1eebd6daddc8160a6446a5973198925","sha256":"d7915b97ac7aa25dd3f11a534f6d13427a4cb3536b0dc51cc773c554832c048c","sha512":"d9d888c3253ce45c3fcb63d032db56d446282c293ed655d3c4fe9eadfdb5b426cc9496daa8eeec71634d4b05a08f0daa6cd356073a4e051d870ca13f4de7c2b1","ssdeep":"768:6n/6ax+Zy529Q8EjAtjTraGY2RaPHqNwN6J77v85BryK4XZw72bTBulCzoRzc:s6N05RApan2IPHOa6JXvqlo2QZoRw","tlshash":"a613025d2596263a13e0a08a524b1ecbdef4599f3c92c514c9bb5324b03da8cb0ffed4","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:41.255939Z","times_seen":18,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/MyMoment.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.941Z","timestamp":1782329721941,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/MyMoment.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7xc%2Fw%2FlRdjxYpNfkG8SOOgoavsbLhkl5jerlNTiaO5QS9xJjCFwSuZRHGyqHGzDu6YAiT1ZyqPsmEfrEu1v8RUT1W9sp%2FX2RKfewmiid0lk6oLpSxp%2FWiTH4GYR1VwSnQBYyNg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1049c-19e8af97286\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 66716\r\ncf-ray: a10e2cda2e22723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":66716,"size_decoded":67702,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"f617a319aaad7e6cecce428eb476bd36","sha1":"b62e46902460f17bc1b3da95933ab76c596b8c09","sha256":"a2cc5a5b1adf5b185e7723294db8f0678cac37ee7f11d2fcf44b546fdc123b1b","sha512":"7125176a49ebc1d46fc2d3be0b69ee23eaf65329242558b47360e31cb9e342297ab1bbbb2438ac9d37be5730be9642cdb61d5b1655828d355350683d0ddcd5c2","ssdeep":"1536:DlPz85Tkxol33n5kH4vl6QTXiCTFj7c2qJ4TvKxlXnFXr+9:DBzu6unn6H4JppjNqJ4TOI","tlshash":"bb63f1ff140de544a6ea21a3ea7719906fb3b94544d180411c0c03793ebbd64af3af6b","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:40.573561Z","times_seen":17,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Enjin_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.551Z","timestamp":1782329720551,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Enjin_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G%2BJragP3cp7mMlbwW5%2B85a%2F5IQSZE0QkGrFyU3uJpcAHO1lXhly2nx%2BMHtCszBq1boMeKgF5F330w0KG%2BUc3jf1speroiprs%2ByR%2BKZeh%2FBQzmS17QXwOlBKYJ0j6iWwNDNtc6w%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1ca2-19e8af97362\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 7330\r\ncf-ray: a10e2cd17a39723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":7330,"size_decoded":8322,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"a9e1f3ec3f13be7fa4082b211c7160c4","sha1":"ba56910eed99ae4fdf88abe9cdbe20c0d51d31ad","sha256":"6f77dad1781f56c53938ecb3515b8b7f8853807393ad8fee39662da15abf7717","sha512":"edb43d552b866402ac85870a430e92c2baba60bd16deb09ba5eb38ede505f31aabd6a5383d3538cc77a22bf11529443ba609766b80c0890c246756fd510e519f","ssdeep":"192:l5s7uUfEqiDHhwePviNJ1TAJJbiUd3IB8rwb:l5s7qqiDHhgEJb3IT","tlshash":"67e1adb41ffcb6cb7bad55a2ccc60b9cb910b255169a54efc4b0ebaaa4e125443017c3","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-08-04T05:59:25.962235Z","times_seen":37,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Klip.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.961Z","timestamp":1782329720961,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Klip.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2BzN3QuTfnK19T7TOIFl8SaRtIDEHSYF%2FYLmf%2B3IHVrgWWFQn9b%2B3qbldn%2FhNlk5F6yS5ytf%2BFmiKCkGC6kjKf%2B3jGOp2ky5dvQ5NCubYm%2B85galQDOcAtR1hg90mvSpQuQECQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"cde-19e8af97382\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3294\r\ncf-ray: a10e2cd40b24723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":3294,"size_decoded":4285,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"18262f73ec2ab061588d791e024d7416","sha1":"77ee7b362b3247144c33534721518e3189e28e8f","sha256":"398270a11f7ad95b215a2188e99027b010a491b90eff05f7151807e1251c25df","sha512":"2e1d0df7e9d42c6af2ff5e89fe7a8353f7cc247348f15de107060bed75d0e8ae51bba8e12ec33803fe7d63f2a0a252d0b3ffa8ea0aa6f83cd2bd526d085c698c","ssdeep":"","tlshash":"d6616c714a70d7e0ce5c2a380e209b47ee45096c5489b2b3f1e0753a3765920e9f9321","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.746818Z","times_seen":20,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Odos.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.257Z","timestamp":1782329721257,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Odos.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=StKQDgnl2Kp9pECl0ctyIuc6CHZfdhVUTZXQIGmuJeA5iZtVSevKvxCNNDMBaED2RgIZ5XEHZIPF%2FIa3gCPK0JqA7AxWiuA2CpuyPIPgNaMePMFwi5Ls%2FODY6syJ0yoP%2BenbNg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3b8c-19e8af9728e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 15244\r\ncf-ray: a10e2cd5ec3d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15244,"size_decoded":16227,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"2dd28197420c88801a07149af68aa4fc","sha1":"961dc0c7df00126371ed8f1a5c8b63f913abc820","sha256":"2353262ee03af952d9769b4b59fa3b82cea2095d791d2e5f674e6bcce7bed7aa","sha512":"93c414dbedc2dd88fd807ca5876182a5fdbf136bd9bd57d425e0cf4b32c4178d2bed50c29ba0ec3e4724dec262a41c03f00b4c982060066fc196f04675e497cb","ssdeep":"384:jhThaOD6hBoOz9/2UAcH3n7mL/tQ/HFlYUjn5/qZZQi5DoY:T6AOzM+37mbQlOUjn5/qZtR","tlshash":"fa62d0bf3cd991355d6a4f266701cd1ff2e1c807e154418b2f83139a44724e4e687eda","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-08-04T05:59:25.981281Z","times_seen":36,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Decentraplace.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.545Z","timestamp":1782329721545,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Decentraplace.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BogEQXOkMPdlWCxJSzB8AIseTmhfaxsr71%2BxZP3BccBKoAY78cPWKxNegngr0Rlh0D7CV57tbJqseNdg8ML9tiWGPpXe0EUQl%2BKIhQw%2F74ZOkv6pRA6WAjIrgyXbXbjVnQQYnA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"5dd1-19e8af97222\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 24017\r\ncf-ray: a10e2cd7ad0b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":24017,"size_decoded":25002,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"aae93bf1dc022d3f8fb419a67750eaae","sha1":"fc4234334e503ec441cc9b3bb869728e14cf33cc","sha256":"82d9033a82da4dfafd7aa9ac782fb6284b4fb806eb3764ab422bdc516d847466","sha512":"d68e88f850ec166039bd15379b308a1c2e8db5ff0a3d1d6c8fff249f163f4f6010a3cbca00e65cbb750fa3533c06fca89b074168debde1bd4c60a4c6b9546182","ssdeep":"384:aO8WCkXwtZfkqyn03M1uh4EMvjhQ8zet0FyM9Qi5YXTM0cmdPpuMnS60P8B0C1b9:EWXwtBLy0Ouh4PVtHB+M9QSV1gbqzG1","tlshash":"a2b2e15b9281c7c40d0946066e159eefdde2b5fda18823012f57daa21eacce1496b3f0","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:40.728262Z","times_seen":18,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Link3.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.735Z","timestamp":1782329721735,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Link3.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v5vmO59WQlPzz4rR9O9bdOzHrW9AIbzgKIOvPT0lcx%2BC8n7sL4a2n%2F7bQEM8evT5sraY0KBxhgSZNyoCFeYRca1ro%2BKuHqdpDSrK1ANSyRdJmzC0fPJyB9fSz85gABXiqHYhag%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"231c-19e8af97272\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 8988\r\ncf-ray: a10e2cd8dd68723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8988,"size_decoded":9970,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"40bdaae2e1089097cd9e9a6053ea01ee","sha1":"4585e866266ef121c995bc87e0b1b77c4b966819","sha256":"4a3477ed541b97efab9ea802d9c6bf53512da42d390f11bff1517f2b718eeabb","sha512":"95924469935de4143335c590933003430bc2cfae3636258cae53f79bac48715503982ff809ab04f5fc734e0a8f2fc9ddf8a8c7b9c83c6e5fe1fb0141aff50af2","ssdeep":"192:lQ5JDjcgoE0iJG8ri6LZBj+/1RHa2cPNtxMJYULBVQqLtdUkPYVC6kJ:lQTxhvJG8rXLWDHa2ANtWHBKqLLn1J","tlshash":"a3029ea5c7740caddf8cb9a236b53db0e89bc242484afed056cd4a2ec717435174bae0","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:41.127818Z","times_seen":18,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Dyson_Finance.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.809Z","timestamp":1782329721809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Dyson_Finance.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bIuylcz9mgyZeE9kVGghzkOR9rp1LO0qRnxOVqH7dX8WcBHWwb42mDd9wggxuiBLnv%2F31at9UrCs9Z4vvq3P0kK4JF%2BHO7YBxKQnk3zTyjU%2BWAvWjDUs6PKlkX%2Fedqo7J5VLFg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2cbe-19e8af9722e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11454\r\ncf-ray: a10e2cd95d97723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":11454,"size_decoded":12439,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"e28105fc1ff878492a04081ff9f513f5","sha1":"6d1481057341fe386fd7a49f26ef290dc96414d3","sha256":"103f9ea092b1c5551c3769d7ae36ddd2625de8aa41874f0be0ff569c4cfb8249","sha512":"090463d328bd4e9f48fbba209485dc3d2630ba17a6e9c7ffe1794acaa6de188c5bca7954cc4d4dcfd009fd99ead1a0975d34ddff9f361178e90c69e22c92d0b3","ssdeep":"192:bkaY7kGjOlHKI5wqfnF0EI3IhohTlKFcgY5kIGzhYhdirlt3u0VlBwJwE:BGjOsxqfnqaaTcS5Q6d+lAilBw2E","tlshash":"5a32bfa73f2876f58ce3301b9085dd42852236f5da462c1fc6466bb0a71fc26e82430b","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:40.626874Z","times_seen":18,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/mini_bridge.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.033Z","timestamp":1782329722033,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/mini_bridge.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hFUjmFEvY8aoPvucZun6CSNPo2TbjP%2BXIOgq2kUe9i75aHPDr0vkAE58LHVvEmf269FIgj46qct409LmjaLZ4wRdqFktL0voP7fCE%2Bw9mwe8Q3T8v7N94peRTqXVXq%2BQeih5OA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"327e-19e8af9727e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12926\r\ncf-ray: a10e2cdabe75723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12926,"size_decoded":13909,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"028efad2a1bfc1ac79967fd14c72b689","sha1":"96fb58d546b7943aeb0a407e2b445e69283ee536","sha256":"e4505d17c6cec30823d8913b2adc04557f0bfb2b8ad670e4a24507873283b407","sha512":"a7343f39a16614fc4fc76b7c060054f1265ddd9d9b4b917ce726baaa9c18fdca524155cdbc5ace445667bd05ca4051fc8ed243aa2c1ed9a86c9ac43fc4820923","ssdeep":"192:IK6Sm19FWvWak+UoPZfFoC2TmfhJ+MdirB3ftNj4asrg6Tc2G8ztJFaO0LDMS:0J0vWak+Uc0mfhJJ43FBXs8kpKD","tlshash":"c942cfecaaf80d8eeacc9cf18e5745f3e4414214887793a105d1de1b83c652fb24d9b0","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:40.595427Z","times_seen":18,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/XDC.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.244Z","timestamp":1782329722244,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/XDC.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F1eb8%2Fcfphe16QjaVo%2Fizmp6gcELd3puU%2FPbSw%2Bw3cZ3vzRlueuXyjjPjS2WTtjs4fhM6WFtQsIOqvVCsCRkIQd%2Fu3bgsV5be2UnSWfluzG6GiQw3qEU5Mi0N4JPSTf88S%2FrfA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"859-19e8af971de\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2137\r\ncf-ray: a10e2cdc0f2b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2137,"size_decoded":3126,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"7c93fdc354940ef23b0b9e95b31072be","sha1":"afe981a9bd64ecf9180d6d22f3ed953210b6fa70","sha256":"dc3fbd2acb5a8c6995b56762c6ea0ee7f674be5ed57e22ae69848abe22b9b9aa","sha512":"d1e34dd49891074e03a1881915f02f2818b9759ae19ed966ae7f24ad5b71f49ff7442bbaa05357252250e901aa2d2da62b5be8337ba27b1e1a0e2efd33eff7c8","ssdeep":"","tlshash":"8e411cdd05067c248468073aad1d2d21ac628e2e7f4592c937e57863e69bfa2a3f4343","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:40.580863Z","times_seen":17,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Bridge_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.425Z","timestamp":1782329720425,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Bridge_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mRKN2%2FN2IyrbDv1kqc4U%2FOTafdqdBxVDiYDA93mG4Fi0dqLSCLzMj5n5ADh1HBpJ2nawI6lJ1pKiMUEsauKuC82VB6Mk4EI982g3QWQi%2BJt%2FK9aDZo4855JMRVUFjGX2YlD%2FTg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1794-19e8af97346\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6036\r\ncf-ray: a10e2cd0aa0f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6036,"size_decoded":7022,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"b6dfac26c87baf49b03ea4d424a69cff","sha1":"5d45eefe4f26d1ea16649106e5117a3d9cb19f77","sha256":"a0b7203c0ebb4099efa9d1bb3fdd91d5d84bbf8e744d9d5ab934d6f7c87010d7","sha512":"f7a7840792e0724267a0dc6eaa5c163fc63ff4401ed29dd5a3aad6211f6c0c9c43e01ca84c8ac8ddc6f740627c2a829cecd7efd8f3d92f1943f5ed0fd11377f4","ssdeep":"96:N8GtojPSbVBRFbDQuS6u2Htxr1hXCVAVXnK79gX6Q3VX0viEUkSMqdmkyF4kdbN2:NDbVBRBQlwHjphSVsLX5VXt/Y4klu7pZ","tlshash":"eec1bfd1ca9c344cc0e36ff4022d2981373a87595a927f40b9b7ead58807f554237ac1","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-07-21T05:16:19.591785Z","times_seen":175,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Catecoin_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.983Z","timestamp":1782329720983,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Catecoin_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cURC8vpi7qTzNxSDTFum8EfAByzy64l8kNfVkFSAc2Hh6hgoAXEDpfStlnYiDFMXc7Xh8hA%2BsoxnS7OloGM5b%2BYZBrhRYex4q3RXqWRVjEsEueoCMERQNdeWKYzJMaQyOYHqnQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"4a3a-19e8af9734a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 19002\r\ncf-ray: a10e2cd42b35723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19002,"size_decoded":19983,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"ce6bd8c149ba23ae42cf0126b40cf17f","sha1":"a3924464828af779594286f086a832da5bc44faf","sha256":"e4446a733155fce850175e8059fc1dd3464b8f980335d348369343a82f3e6d37","sha512":"e18cc1a532faebe9a69ed6abbfb41610475024e737f179fa91a96a73b293ed4aae60c04c2bba79d6cb2705bfac6ad55cbcc7c49f9b75f70e27ed9b52b7337307","ssdeep":"384:8bOXl3wbczv/oJ5mg+uv+7SQ1oosoDWpBpeKa/IezPrkvyakGxu754/Yk1t5/Y:iGl3Sczv2mzuUVG0J/DrkqZGxSYfY","tlshash":"8c82d12b8ca9139ddbfff146061efd9023332fc3b553315f262809392d4a8914b6ae04","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.774239Z","times_seen":20,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Tellaw_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.985Z","timestamp":1782329720985,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Tellaw_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2KWTahx2X2dbiX7X5AqRCeZomub6tk%2Br3bBA02t248%2BFGfY6JQmOWxhuzvFvetkidXxIU%2FHzeuyLTrzH0aOBHJHXGUvjVHqJUT1xYIYsesuCcNY8LmqMbTCA2eDFTX5rVJdzMg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"35bc-19e8af973ce\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13756\r\ncf-ray: a10e2cd42b40723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13756,"size_decoded":14739,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"7ede55b677186b2737d2dd377bde0c82","sha1":"7bdd19ab5100900a1a0be4cfcd8b62ea17d3466d","sha256":"f52420c51ee98fc2741a45142dd4deee3c3c08223ff12e5be37ab6170c6f6c94","sha512":"343669f7a3c6667ea20fd5ae21a50fd0414d43c92a0bcf3838ade3d31c26bbbd9b0c6645f9324eff615a0e6ea8884c0b8b561dfa328bfbfb74dbe55030c83d37","ssdeep":"192:AHY8hP2o3WKL0kt72fcDA7O5Gh8PrWVAtvDpTH9Z/VR2ecr6mlev9zTfzDdVqAM:AHYuPck4f6Zk8PrWihpH9N/x3D3G","tlshash":"8d52c0641a75c924d77177b228809e5c81f839589469e4cb8aa07e633723277ec2fd90","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.723153Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Solid_World.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.580Z","timestamp":1782329721580,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Solid_World.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8bpaaB6N7taTc%2BrUyft1LZEVgCt5TrY5ZwSCmIbH7R7%2BkKfRvfH%2BSXW6l%2FrUhSp9woTAjW2Ivnf22FaguOa51z9ApY7uqMrBr6s%2B%2BzD%2Fls0W%2BjSX%2FnficDhCiOayQsaWOd8%2BGQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2d66-19e8af972da\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11622\r\ncf-ray: a10e2cd7ed23723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":11622,"size_decoded":12619,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"de7b65d9f8657b213ebceabd81151040","sha1":"536409dff72cbaf0b2c2f6aabb6d8bb4b49c074d","sha256":"7e4c553696ec4447c06050e39fe06cefe3f38443d2e15c596face233c318db79","sha512":"9aa5098acecd4d9dc3d20c46a82b3cba7e324ced590b49c4b8616f227396d4296f7b96ddcfcbb49f9d1600ad8b934bd743be01fca0e52c0ec132ff117e565639","ssdeep":"192:kVe/jDnn/8crkfBRygWQZRTb/t9215BaKuJuvKjGpW0J3RzMrd1tr1N+WuPQQuga:GqjpwJRy/e3/tgBaKu0KjGjv011wWuPE","tlshash":"5232bfb387fad1124004116df0a3c5b0e4a5466cde5b2a4638152fbabeef44fa67d8c2","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:40.573074Z","times_seen":18,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Cascadia_Block_Explorer.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.909Z","timestamp":1782329721909,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Cascadia_Block_Explorer.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LjQzl5X2UrJZG0jDfY%2FijomlyfIdSPlnyLGxtnQGWdh3QAaV%2FpqHU7VavlBaCFBY%2FIVfH%2FLj1vIkXMM3AIj1krX0PjaLO0m%2BVWq3UwC9ITC4ammVFvPDL%2FcIXtq5MuTKxnHjSA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"7d2-19e8af97206\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2002\r\ncf-ray: a10e2cd9ede4723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2002,"size_decoded":2989,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"5fd3aa680bbc55efe981e08eb907b564","sha1":"38bee8d0b9d69c21d793311a2d44a3a5a48fad58","sha256":"b94326b26b0cc98e3251f5aa6e1a4348fb534fa680de0e839432fb5faed234d6","sha512":"a9ddae7295961559e20e22e699f62e05d58e75eefd9abb6a0ccbd157165122f5c075ebfdc1ac15fe3215c7950b57fc32f988543cf5e69d774277ab1f697a6667","ssdeep":"","tlshash":"e241f9ef4dac5c344d9f476546bc0d588444d23c8eeb9532ecb852bacae9c74455ddc0","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:40.787598Z","times_seen":17,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Crypto_Gift.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.010Z","timestamp":1782329722010,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Crypto_Gift.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C8F72%2FZJQOtHbQef%2BhJEb0y%2BvUsZ%2ByXNgAAKQCMJlAglZiLd2he3kYkhis7mD8bw%2FrZFB8WGZr7sKS8g1kvK8mBg9%2BnodOC3nktwQ7hUXL8wHUm7zsOinkFs3LSqWQbTa%2BEA9Q%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"298f-19e8af9721a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10639\r\ncf-ray: a10e2cda9e67723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10639,"size_decoded":11630,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"4789c481828f8b80e3edc93cd7b63477","sha1":"749b1cd7abd601be9c4143373b5e2b894dfbec9c","sha256":"cb44c55c92717fcbad70e016236f887a8ae6f93fae8f85aa2e01221c2ec11c65","sha512":"ddee543f044804b53ef1256a0574f222be1ad2dba0a116d0fa4f936d4837d908adb1f010285c3072e2bfc9ed9acf3c432767c6d4cc09a432444b04b41c0f3795","ssdeep":"192:gPEHb1VrWXkZ/TVkcTx18HZribwEO0MkOk4kG48VL8HFXpeOLsxoVV9ZkwAIFXTu:oePrWXkZ/Thx+AbwEO09+HCHFIOqon9g","tlshash":"a322af6767fae0d2c1fe1808b710faaa67731552242c9ce164ec43f7ef198b64c40ad9","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:41.053844Z","times_seen":18,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/GrtWines.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.139Z","timestamp":1782329722139,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/GrtWines.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=crd7jIx3s%2BxkHwaWaHk2%2FuYowrBwZmoAV9%2BAneLuxtFzT6%2F%2FL0kAfYhB00luu0eaIk5cEPbmHkqG4SkUW2AhYCmg5eoTKFfuHSMI4hwgPVj%2B6M9ITLqW5ISyza3qgMa%2Ft5g0yg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1abe-19e8af9724e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6846\r\ncf-ray: a10e2cdb5edc723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":6846,"size_decoded":7836,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"6a250cff56c2af5ef37ec93866bb324d","sha1":"063356c273e6f0a6fcbf2630bca2bb96b5f8830c","sha256":"bed3e2ffe646e1215145114e46ab03a9da1fb8b51815d1b2520be323fb9ffaef","sha512":"ea231ee359ba8b347641ac832cac78356c35ab5331f66d7ae1e63761ebc9085890f2aa42d4f6741ede44c8382498a7b3f18f6b19fc0c69be15993a4e69ec33c7","ssdeep":"192:MzJaqfCeayrTWnBhJMdOb53a3c+ZQGWeLvGuoTgP:M9aMlYBhJsOb5lXG7LjOgP","tlshash":"21e17dc9c0f1573ab1f5e9c84fdb691b906743680d291e3299281383fe34b4c00613af","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:40.85769Z","times_seen":18,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Robinhood_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.292Z","timestamp":1782329720292,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Robinhood_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7zO2RBrKVxKPR8pTs8yV7KrYRKzt7hE0s9WbAZwnTZfR3R9Xd0ixuVBiT9gRUYGfS3msDD4TACv8yydkUE%2FSdF%2FX%2Bkm%2F9kb3aauQ3nJGbxGwS9CsSgwu1yeUqixFUigLIZdRBA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"232b-19e8af973b6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9003\r\ncf-ray: a10e2ccfd9dc723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":9003,"size_decoded":9987,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"53394c6b850557f934fa2f5f5832c20e","sha1":"f015c140965fe25699e19e61b2e417fe356f940a","sha256":"7c669bf88b4af64917c9470ef630be65c34ab887c36f4001d3e8ed799696e2a3","sha512":"8f20c8fd5924f37ab7547cda1280ec3d0dac2963d04a44b3eebfe37bcd9c214c407ce7789d6571afe3d45ad88cf520cad495b647c7efa39f77cd8fd783ec7e2d","ssdeep":"192:lsGsGMSO2fUeV6ISKmFUKLR1RwZlW7zZ0oExSYuGE2z0pAuerzVtBTVM1iL:lsGzMSO2fN6IrrK91i3W7zCoExSYLE2l","tlshash":"6702af748cf9615ce88814772f26cf051cd8db3eaa809785a0f76fb00d8e3465d4c896","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-08-04T05:59:25.934474Z","times_seen":37,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Jade_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.466Z","timestamp":1782329720466,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Jade_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5tgynQkAI5lQSApTeNVfOe%2BGtUfh99wbdOEBkN3gM8GKToVajZNEWWNdO0sDLeL2nx9D2JYl0NurW1cSdpp38njKETUxbQeN6OiRuFkOP%2F%2FgtRa%2BTJmTbPY44A7pP5Z5gHQ0CQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"149a-19e8af9737a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5274\r\ncf-ray: a10e2cd0ea22723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5274,"size_decoded":6258,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"ac76ab49586c74f4c84827895d8381ca","sha1":"2b809a54d4082091e21a8cadd5e32c48763e92e8","sha256":"5eb498256f4e75e0f82c66189f76ba041b368b3ef2c9789d86d8bcec237fc9eb","sha512":"b56ab3fe56c137d153a7581adf307c1dc9e8e5e7d52a7f75f1179dc228a8b11a59b2302346c28268b31b30a33e3f9061331078e9e1d8e486fdca965fda0cc07b","ssdeep":"96:r/TrxEJkUHLE2J2h8isxyddTtfRD/gUZAGzHX+uT+2OtRi24AIIdgx/:ny2UHLNJ2et2TteUaG6o+Dj4AIygx/","tlshash":"b1b14a75a6e7c57deea4d3b0ec02fa1425f16e2edb83e548305a99a53fd152403df081","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-06-29T07:04:40.804191Z","times_seen":20,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Cryptnox_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.705Z","timestamp":1782329720705,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Cryptnox_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xqkQ1Hhw8PqxOyB%2BLd2734mmH%2BC9K%2B0yWH8z3Q9CpX%2FJ9oRPNRRalhRsmejV%2F3tN3RYHfQ6R5NnBEBS8rTKerfWq6ykQg5LP84GPEDLHnwG%2BevyIF43qiC7btXU%2FoRfRljuysw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"622a-19e8af9735a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 25130\r\ncf-ray: a10e2cd26a7a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25130,"size_decoded":26121,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"6e58ac62e935a33c4d054a5b334d9822","sha1":"ca874b58a93bf9abb51376a6c8bb792a3a20317a","sha256":"42885cd171b8da9d46161791d5b20867e0838331c22f54922b478d73e756e118","sha512":"6e9a519aa905d88a6057e86109250b3a2be8e24f0471b5717b605c99a01066ffe425b8a133d79e458d4e1d4a6a9fa6ae32730063d7863bc50a607dac04f4ee8b","ssdeep":"384:48Pswgkw205Ch6C/zNQE3/LKCaa4K93ksYhBzN4t9AVeBwqcvVFiJPqdCCD3tT:4XtQOfk9Y32AVXVbsCTtT","tlshash":"20b2d09a6cc858dc7b5c2998cd7c16b446d5972fa9ef02e1c181fe3c904c806ee48e7a","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:40.777719Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Bifrost_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.923Z","timestamp":1782329720923,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Bifrost_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FyRkaiIf9BwG9Im%2BAunbTLbwdS4g0dSUqRAn6w1adMkfB4mVy9wFL7%2BGoY8AeqTuB%2BM7hdKyFLjMj0xZ9wj8DzDML2lKS6QWqAtAkOdlc93zYHqgRB%2BqOCfgkBhTSHazmgX1Dw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"12544-19e8af9733a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 75076\r\ncf-ray: a10e2cd3cb01723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75076,"size_decoded":76064,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"4768aeb36f237afe24453aaec0932f5f","sha1":"c943ef38272edbdbeb0a7163b0d18d1b879fce39","sha256":"df8c69b56d08e0eca16c331eec4f6f3bf1df0caf66ab4e7862b9dacbf3f3227b","sha512":"b113c720ac8a3fa4fca09e6e934ad7ecb5f2c71f6a9ff8a4ca62e2fe477e2137e3eb17328f854487d581e364156eab3079fc7fba42eb2eca89d79c5e5e52778b","ssdeep":"1536:z88wDg0ayifph4Jugd8TgiVuEUWrV1I1A3irtTHKTHxpHxjSr30:z88w00hsphSuvgiVTTjwASZTHKFvC30","tlshash":"5b7302eb59ff82eca9247ccf6a645c1902210f0665533b3d9e62f0a1babbf5114cd057","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:40.696671Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Solace.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.045Z","timestamp":1782329721045,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Solace.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Rb5NBxXTPRkrfW2LzwJiXvltIEwhp2ij1yKnbyx8wigd2ESk3FWwS8XpoIyEG70LhgM2QiTcEhBMOC8rF45JlAZpLPuGKvwz8PA1wvF7OsvLI5izD3htrC8Bnm3P1EfphOUIQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"e2b-19e8af973c6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3627\r\ncf-ray: a10e2cd48b73723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3627,"size_decoded":4602,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"04daca7f8a7042bee958e6d9c1ac6bfd","sha1":"77eb2b472b4aef528470064ce2ce78e488152c0c","sha256":"8eb5d63ad5a7007d0d5be6ccfea48f80770ae5b2d0ad21e38cee4912f988a3d1","sha512":"e11370f216d77b26c9b1384fd961f9be41fcc012eaab22be476e1486d7f8079a8c10e5627c1534d659aa845e576b497032bfec349ad5e2f9178e96552e3db8d3","ssdeep":"","tlshash":"177162323ca15b714efea3128be36f9415844d7e11affa912344b71376075e540f1aca","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.548701Z","times_seen":20,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/JoyID_Passkey.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.199Z","timestamp":1782329721199,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/JoyID_Passkey.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bg3ixTkx9mMmzcHKtPSDkqu8Xy%2BXw%2FbSikRHzXqLmQCkkQeEZi%2Bpz8WJFxkvbAGp0bwJc8qJdx9gw9e065KFOgLOvHE%2BRSmp2wadDMUhN8x6Z2Rg4wuz2NXcIqBUX6MvQl1qQw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1926-19e8af9737e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6438\r\ncf-ray: a10e2cd57c02723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6438,"size_decoded":7422,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"4147392afcc409549805d2f3579fafaf","sha1":"2bda13c7be81ff4fb67c48f38e25e994f12ecf53","sha256":"5dbf4e0a152b6d3d8010fe39fdd086d5940ad8dc2d458e03bcf6b369f515e916","sha512":"17b04f155fb13d96c1a04dc3511c1d79169719d2e76db1b04a56665091212b0eb212cc1367fad2faae4b9080bed3b84380ae5346085657d1d705391e3f5a0cd2","ssdeep":"192:ALojFD/fDkIibCw5BgfbgmmiCmvDhE6Xp:OkDTk+egDiDmmYp","tlshash":"75d17d4ed47c82009fe2087b9f616a85a77103130965624b42fcf468bf4e97dcb416fa","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:41.238123Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Cask_Protocol.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.349Z","timestamp":1782329721349,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Cask_Protocol.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ky8Xl0MIUR9S%2BcQkWVKtn5cOETLeX%2B6HXgAVAKOv7TQELTc75lCoYdHkBKwCFuLty7spjsaniwttYym4B%2FFjQq9%2BFqm9YipjezzASzD0rsp0wCm7UmTTiNFmeUs4077kT9wLeA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2c1a-19e8af9720a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11290\r\ncf-ray: a10e2cd67c88723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":11290,"size_decoded":12275,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"f4e26aa249efd103ff6a144e9527dd3d","sha1":"4ae8673fadd9eb3ba3bd89aa84ab888eda7e3396","sha256":"98b42bfd420bac260b1288e9b78191b6ae83c105707d1b9013cd4975b4e42058","sha512":"479e66099e4f5fc699615a2dc9a6a5123a7ad52e4cb23f9d119d02d87ea52cd9dfe333d71dbd3f7d945ebdb9865928efbd78082f1da34ab1f3ec315407aaec7b","ssdeep":"192:9JcZ4sFfnC35o80moJO/itfhMATgEqXjDxri3q1x+77r1Amv5jJstRDF8/fmD5uc:9JkB+LFAfhJ2zDxWG6nvjEy/fCuc","tlshash":"4932bf0fb21e5fb905615a1f4dfa8a590ad17294c198813ed2e120f2c4fe4b128c3d6a","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:41.231429Z","times_seen":19,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/DeGame.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.416Z","timestamp":1782329721416,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/DeGame.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vc4%2FkT%2B0saluT%2F%2FIwtUQnIt%2F9whh2B5NX5NJGNe3VAyp984k8SaBVrQZ%2FO7iBT6IAY2l7i7V4uw0xdaR1tPYzGLWhm1kS%2FdHg2Wz45epE%2BOeV%2F5CpBDnTdWGCU%2FQkNk9U24gag%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"28f1-19e8af97226\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10481\r\ncf-ray: a10e2cd6dcc3723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":10481,"size_decoded":11478,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"7ad86752298585e714c0e94d4c81fe50","sha1":"ead354340aee9fd880d5a6a92e48ac46548390a4","sha256":"ab26ffaa08b595366ddb23dde7a0eff9794794df4685a4ae72bd18ade3af145f","sha512":"fb07445ba662a6a421bea4e5b5346c573ce6051147dcd3386cf495182edb2c379e507a90deda2960dd93be58f372a4f33908e56721c299d2530404fc6776227f","ssdeep":"192:3j1RTZfDDQIwG+QMYU/USDlIcr9erDpnlac3SPF7Eg/bcxA3uw:3jnZfQ6XQqrDpnsRREg/bcxAew","tlshash":"b6229dd803389f439f805c0728243bee971d6df24da8d2b9515734792bb19c2e02addb","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:40.795906Z","times_seen":19,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/TokenPocket.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.288Z","timestamp":1782329720288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/TokenPocket.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7NQPwRYO3wls%2F3n5tJ9jNlmMNTugkk%2FeLrUQG9vtwS8sI4%2FnszWhzNaMjDg3CQLt9rW%2BeeeIfzRceJFiucYdmav%2FtoJXEZiP9SW28ZY0MYlyXHymv1VE11uXGbhf8BmwZ1pYtw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"ebf-19e8af973d2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3775\r\ncf-ray: a10e2ccfc9da723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":3775,"size_decoded":4760,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"19b12702fd39253324ad06adbffe01c6","sha1":"88f94d953223ef516aeb7660b001e386b5a1e468","sha256":"0ddd0d230b780ef1095ff64ee475036ca5c76a7cd015198bf0d26a1b0d516c05","sha512":"219b4938d6b2d5aa307b1397a6e29ccefac6ca855429d773d15bd58e81278fb70517b286438a00ba5b1c9d7c7c02bd3764935f3130a036e2c4f3969988eb4a12","ssdeep":"","tlshash":"837171366ac16e3419ffb310d6d26a8154905e2f46bff2652355e242771b0ad01f0b9a","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-08-04T05:59:26.010427Z","times_seen":192,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/BitFrost.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.140Z","timestamp":1782329721140,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/BitFrost.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gtb2bDlpZHzvphpwVuJEH8cT72OS320yr8v7u6SPbm8sC2atyTeUBHnyvtPtmkv8zLib9rxcAwUHnLbTNsqQEEY9lMDCk8cFDAsMBNDJv34eg1ogBmBHMBwA85ItBOBbR9%2Bttg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1515-19e8af9733e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5397\r\ncf-ray: a10e2cd52bc0723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5397,"size_decoded":6375,"mime_type":"image/png","magic":"PNG image data, 1000 x 1000, 8-bit colormap, non-interlaced","md5":"8fefcfede96bb0e205d000592ceb4a95","sha1":"73a490f4d30fcfef809966b57204759703d06c80","sha256":"a7ff7bcf8c671f30150ebfd7c5917cdbce39cadbe8d9347f671abb30b23accbe","sha512":"7382c73e41de139354e90af75426de28c44aca1d067f7c15e5fe2cb7086e96fc5f24d6356184f7a049bb90f1475bee504ca8b853aa64b94a42dda25a98557334","ssdeep":"96:xB7xrtTBfB3PF9f33Pf3oX8wzw1/wjw1Swo8yGeUF6bGjFS0kPx5vfNVQLtYuOSQ:xB7xrtTB5PnAX8wzy/wjySwo7CjFiZhl","tlshash":"87b1a64753b16923fa2b03f74dc1490a0828c6734eeaa99547abbbd8dd04cf8200bd5b","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:40.582591Z","times_seen":20,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Mailchain.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.365Z","timestamp":1782329721365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Mailchain.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9T9pwbklqY5dOOUrPQG7zUnG8qHw%2B0P2RdX%2F62%2FEgQSZSBpfTMWFKgnOfAW6z3DPSnP6vCwPjKEB%2FXWhBDc6mEiePwV31vCKgHzDBDBmQgN7%2F6N6VNhCcNhE13T3v3QlM655RQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"99e5-19e8af97276\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 39397\r\ncf-ray: a10e2cd68c97723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39397,"size_decoded":40384,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"7ae81a0a4abc32d2dbec1b6c6fd670ca","sha1":"0443f8f363578f6b264f9d99724001c440dcd0b6","sha256":"42bb5ee8559726e4b7200e1cc94c4b359ee7c7ec0944cea017fa34be7d75a8ca","sha512":"18131c3917238c3fe6d95292dbc9620f59bf266f72c45040978f48c648d7f09e6e7042cc8f076831852793b645c516e0c174a4480d45ef4d75b9111e1cc7135c","ssdeep":"768:dP5Ot1L28dXFNBGwGFaTNZPhFmmQyh3iiKWaxdDX7X5qi/:dgt1KOVXkUpZZFR3h3PKWarDLX8g","tlshash":"1c03f1c3f676b6dfe856188d3085856f60f62a23c4cc80e9e0c183df9a5d7a946881ce","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.551872Z","times_seen":19,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/NFT_Jungle.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.540Z","timestamp":1782329721540,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/NFT_Jungle.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m%2FeeUh6qpFpw60LoCssBqCv%2BprWvJWnzL5VE3QxCPHrA0y9PN%2FeWuFvxD4H88hU0BPclP3Xv87VflFYDH4lzIxTCsTvnRQOdCYcw9kZLNT2RnknrMel3KM5U30fj1VOz8UtZsA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3b17-19e8af9728a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 15127\r\ncf-ray: a10e2cd79d05723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":15127,"size_decoded":16110,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"6bc901c9baf87722e5b506ea97111d4d","sha1":"0977c963b23cb6ded090139fdb201e75bd3b6a88","sha256":"4bd94eff173321d5cef180b1ec5dd6dfc9541e3155edd13c7c3c4ac3d78269be","sha512":"e1c3481aaefbaf4897e7d8708d1c13790fb395bca05b4953b8a15cd0a9343842b84293ec9b4e469a6857f28aa4ab2dd7315348b384f5ec8900f709760c13f80c","ssdeep":"384:j0cccccccccccccccNtvU0GA5n2jsIinHz3ZfVNd1JnBhcdiRzvfcccccccccccL:j0cccccccccccccccNt9BAs7Hz3RTrJE","tlshash":"0c62bfb316c210d9e9fe29a4d2ee9645bc58c01c7197af6bd4feb9ba5f071840d41700","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:40.869422Z","times_seen":18,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/staking_dxpool.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.574Z","timestamp":1782329721574,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/staking_dxpool.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pH4W%2BaR8rADNtTYu92%2BvL%2F6GPmjKJPJThr6hJVEQ2%2FV9Qu5qwUvx6h7Azr6hB%2BTylfsLmsfxLCU3oxBoccz7ONX2vkVsuaS10hMNaTg2iEBWQ%2BIan9iOrZo8X1XGwpFHOZMbJQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"160c-19e8af972e2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5644\r\ncf-ray: a10e2cd7dd1f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5644,"size_decoded":6632,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"9b9b905c88e3e0da2f2b864e813e33c6","sha1":"d0f477f91b171699f1084776e02411e952aa4d11","sha256":"4e35365f86af0aefce6e7662a9932cb2c3dd4b38d420b5f9adeaf0803de8702e","sha512":"f5659ef6578182772e64f1a609b2522ccf2640b6c3027ecd5c99d2829b58be5fbffc706d81dae06fa7a31014867651cad9c650475639be2ee606e722bfc941ee","ssdeep":"96:9kxSH5bJFlRCXgmAd1K+vCU45B8q/Mag4kSeIQh0e:9kxedCXTA8B8q/MaJif0e","tlshash":"fbc18e41c2f785995e7b13b10b2d3ce4a24f5ca01bfd1ec94d2481b45e5293d5c8159c","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:40.618Z","times_seen":18,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Pantheon_Business_Club.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.795Z","timestamp":1782329721795,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Pantheon_Business_Club.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m900jVM3p2Jk2lzSJOuh8MvrISOB3NNPOLi9CUetz6z%2B1UZY8EqRDV%2BD45THDxh8ei2uIIveQECcm9r2o%2FxXm6gIcenIx7Hhwo3YOlA9BOV9O22ruXeilqLGd2Z9BLdjeeYaDA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"32cb-19e8af9729a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13003\r\ncf-ray: a10e2cd93d8a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":13003,"size_decoded":13986,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"ce2c166fc0f6ff6d5c6c16df16a54fb9","sha1":"6c96f87155e1d7b04024a3704556c090128147dd","sha256":"aa14c0e3f351b6b172534c7ad59c2d98f4a7e8352082b9f4f87ee0d031b921f3","sha512":"bc6f2d5f672700c2798a4b061ed3fdd6f1682dd3e62d7fcf3361efeb35f4e7c94abb58229b46892ccbd2aecbcf8ebd706dc6e92074de57bf65df8ca3cb4684bf","ssdeep":"384:Eap6gVPV09S/cM5+x1kZyRGDzSP0d0beT8K:9Yg5V09SK14yoDG8abev","tlshash":"a342c0db70e0e3e538ccfa1f05618c0866d9c6fa15c6c22ac57fd4b7405a80e66d86f4","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:40.914476Z","times_seen":18,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/BLiV_Presale.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.845Z","timestamp":1782329721845,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/BLiV_Presale.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VqUieLUPodNi8QlpS8v2sZjHKz53OBc7WXCPN%2FFUjtk4Bc7F%2FMQMfJiAHpYHvK6JrzY6oHBbrE4U64R8VqA%2BUTu0Vw62xSAHR8ZwSbQ89%2B8tPc%2BV9j7leFQADauPJsZOrI2YpQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3002-19e8af97202\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12290\r\ncf-ray: a10e2cd98db3723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12290,"size_decoded":13277,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"9c4076d3e525c565f51ee6ef9119ed2f","sha1":"aef3811fe31a40e4cd07485fe723e679ebef213f","sha256":"db98b7d18301a763792d8aba9a5aee876fdbae86bcf63c4915f4848408de83fa","sha512":"8d8aea7ba9e5fb1e39639e9d580396da65cb2a4087b6b203b3d495264a2020e4ab64ea3b23babecf53c1aa3ab44fa340bf65fd9668d1b2243051bfe9c8a05170","ssdeep":"384:lrv3ElcVuhFjT0+sQd6/wiQNbfmhxlz2XEC:Z3EvfY+s3YUlaUC","tlshash":"b2428df434d295b2812ee6e11e6f3e0a03ce7f5326a1781e7453f91673362393627a19","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:40.810843Z","times_seen":18,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/SocllyDev.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.951Z","timestamp":1782329721951,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/SocllyDev.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BNz1J8iOT3K1KzfteUvEIkxCclSrJ8Qj7V5QsGVqEKZ1SFTdreRNPi5EPJIvTL8owQ5MnmNK7%2By9KJMdmJ2hEiNiuvfu%2BCpxASHK9NW3PLJDTJ6vxZRLQT5ObBbXzFZq%2Fk4cFQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3491-19e8af972d6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13457\r\ncf-ray: a10e2cda3e34723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":13457,"size_decoded":14440,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"5ab303927aba09bc5a9ee8ffab960737","sha1":"1fe80a673dc9f100a39b27ffc4bf1f815c945a5d","sha256":"4290404102da6f9dc4a92ea4bea736736ac388aba28cab393fefe27d7c37e8a3","sha512":"d5c34ce504381a25e973c266a3df7b31b11f99593d69f1bf56e4f15491a156a24f0b4c0d5857f7efcea2cd32d91e4492f72140201ddecfac0bccb8f31e749aaf","ssdeep":"384:6dF0w0JEv1UKcMkZ/ieh78aOmVeyAmzgWbWBkDjx9UAYe/v8q:6dmKv18787YAmUuDjzwOv/","tlshash":"1c52cf6af538156acfbac4547d18f121564fc2bb8eefcd60c4eec2c7500e19762618a2","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:41.025723Z","times_seen":17,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Linen.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.697Z","timestamp":1782329720697,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Linen.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TkNpWLDHwvAl75vP9GsA7xWr7vMADZL4OgcmU4cqltFOQCTJr4f1JE7ea2SpI7aejVU8IJxk0ZtxEvbZui12wPnzvZdKmznemXuX010Xah3yg4wqd1YMWV5h%2BJOV30XMlTLvqw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"127b-19e8af9738a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4731\r\ncf-ray: a10e2cd25a75723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4731,"size_decoded":5709,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"ba0789c6b585e2a5b5cc6fb1dc2653f4","sha1":"27fee79e7dcb08fb46bd1f0bdb76c5d8c77a34fb","sha256":"1f31757e2b5187bb37fc1e2dae88a47bbda38f7282660787087501a1f2e38604","sha512":"30940379be92a7091ed24ba3a8cabfa4d6eea30e6778a417c0d0ac21d2d7ae4c5878380ed94394cb54324cf31d6ba3d84f9f1de81c062587cce78fda246ee41e","ssdeep":"96:QW6GuZ6d84iCGLTln7c9HkItGX2cZMo+xm8DCLq9LU2c28i/DDBr77qGmvbxADXR:Qgui84HAT5WHwnH+b1I2cID9zqGSOB","tlshash":"e9a16cbed2f1cbaa5dc681f7928446355bf4a8a7f40c163c2a0239f065572b9872c5cf","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:41.155208Z","times_seen":20,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Cointacted.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.498Z","timestamp":1782329721498,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Cointacted.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H0UeX6XM%2Bas6FBkk4OtJ9FMO366fFrhuIdV%2F5TqYcbioRdJesLB9baLkfYPlWCklnhuzzjrnnBDOoJmu%2FcSGGDKHj%2F0Mec4Gi1drdbuhs6xbk%2FRY1AgIKt7iEgqHSS8z%2BjJl8g%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"99b0-19e8af97212\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 39344\r\ncf-ray: a10e2cd75ced723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39344,"size_decoded":40333,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"bf70a00e516c6962172ccaf9b2507e5a","sha1":"bd521cb51fc6c5e23d280043ed24035e9eb7a892","sha256":"68093019081e9447dbcc22e742a0ed8dcf697a645cde4c956f0e19bb9168af79","sha512":"0a8f18890babd9ff6b0d9c54b3869cacb47d0f679498214dc7d17d12709415f709eb3f65e6f572656b2fac80687571ab45262462f20954e2536200691d3fd780","ssdeep":"768:kl4oJOvrNwTGaC6VqLntROEibyN90w3FqJrZdWi7QNCVBQrYgDoRei:GPJurcYHrOEibyN9zFq5xEPr3Ti","tlshash":"c70301944820c9984da4a6ba55520b14e7732acdef5f1b0c20a8bb2c09f7ee4b477b71","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:40.718944Z","times_seen":18,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/zkLine.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.638Z","timestamp":1782329721638,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/zkLine.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OCRzAx%2BfDpRR1N8QDvHjR1%2FpCXYt6lhdvAX6uQKZq23fv%2BpmXkXPYnx44Yox9wyUji%2Bswi6Eap7DrV7%2FzB%2FN70%2BKBwnBJtQOV85QvtgfjyhAOPXe6VfggySINO9XCXH1JEKIgQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"10d8-19e8af9730e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4312\r\ncf-ray: a10e2cd84d3b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":4312,"size_decoded":5302,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"4714120a98a5072dfcf545786629b3f6","sha1":"bb82cfe77f3f143a23d7a0f7107e84686d89a68e","sha256":"5cafc61dcc0e182923315a8a57a73b43a11283ed72619f96f42a63263f3adffb","sha512":"254c0de86f759baf12842333bbfc7dccb3d90bdbd07eb28aca02a52e1ef43bc0c20a8e4873c4a63e09268c84774e22b183fb016c63270fcd1ee5ac65f997489a","ssdeep":"96:1IhnDdWca8AEwMK2Px6EOT0vn/IM6j/jAxDw0sQegzr5hsGGGGGGGGGGGGGGGGGj:6hda8HxvOTmn/Z6osQeUp","tlshash":"b391a4785f4d12734e3cba8bd87cb5a46351d366a55c0f75ebe6b6148030ca5f40c135","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:41.173054Z","times_seen":18,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Uincubator.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.065Z","timestamp":1782329722065,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Uincubator.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VkGCI%2FNmmcN9bAFctebVWuzhOiW3%2BYwE3Pwc9ehfeC49WVbdveo7YUBsKHX4V48Oyyw44L7i5z0dHX9JjcgjA9t8PwPR%2BvYULicWbK5%2Fdg9jBofKnIHqe1464B39V8eNM2MHFA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"a44a-19e8af972fa\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 42058\r\ncf-ray: a10e2cdaee92723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42058,"size_decoded":43043,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"558a6c6f808036254cdd6e6a8220437b","sha1":"450877f642d56205fdc573a20b13873221390090","sha256":"a9348718e2e1551103a897448c2e1449beb3de4084a0c42115fd85c7bc96b231","sha512":"e1b4f4a291cb1eea80b2fce872505d6da86649637e2b7b4761de9a90d3ba7afbed0de388c1254153a995f24843f274eda755d510bd12430c3ad7cf7b4089e3c7","ssdeep":"768:8BQUxDM47QgLPQ5uHyKU/h00TzVcEMa3r28MzIKRxMMxFpEQ:WhM47/r+uHyX/1zcab28MzIkWu","tlshash":"b513cfdf25c4f397f9204141f6aa9c3b9919d406bed4222584be52f4ef63b0b14439af","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:40.824197Z","times_seen":17,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/guild_xyz.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.133Z","timestamp":1782329722133,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/guild_xyz.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9pVTxBQMsAs6dgay3zJfv28rAd6FwOiLpjHs%2FVToGu1chYbKlJS0LWm7qdir1dqSGG6Yj5lXCKMzZsEBTx6uxNu9zW8Z04%2BM20XJXxRxDCdmggDMjce3Flq3ae1PDOKC8XXkyQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"87b-19e8af9724e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2171\r\ncf-ray: a10e2cdb5ed6723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2171,"size_decoded":3150,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"a0e8519f7a17c98db22ae732639f4bdb","sha1":"29510498e3510763e370373d9e34f807a131be58","sha256":"3fee664fe7b4e20fd8b83454a2b9b99b42bd77275872294d7c549f4397990e0b","sha512":"7d27f98dddb611ed3d1d086e949e3b18e6c0cd94cf291b3b3878105c7830401351d8d7352c1b2fa08998e927d56c4041a5d6fe218a7c7624ef7fd671eaa8fd0a","ssdeep":"","tlshash":"864151c00f40cb99cab9887c753c92d2439573374de16a2fa8ee266f7ee0d16c845243","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:41.128456Z","times_seen":17,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/REAL.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.162Z","timestamp":1782329722162,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/REAL.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sUk5lNwE%2BD9LOuSFoyBIQi0ClnHdsQcmOmb7tubHFR6SZ1ezOp9KZCJNbWBiRuRBqE1JseD23%2FOQJwDR1G2or1A61EgKxZpfS%2FMeSbmG4%2Fvurv6M6nURMnHmcAPFM%2BqJcrillQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"191f-19e8af972c6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6431\r\ncf-ray: a10e2cdb8eee723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6431,"size_decoded":7417,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"9b41fe4c6572ba27afeb5f01b95f4c2d","sha1":"612fb1351b2cfca7985b6b8c3ede89f07fa6c731","sha256":"d19728c58421497095d0d10b160c7eeaf9d9801bf62ceb84c8f8b5065bb4f2cc","sha512":"81c4bd5204f0786cd6e63644efc9abfcfddaaafed38893e88162b2315ceef7ff87b596ba0d35db3221d542d16d6da37528f084a594e38bae1f576342d86cd733","ssdeep":"192:U44444444444lKU4+CIZBr651DXEF+lFLrELmMcRbvIPz4444444444i:U44444444444gTAB61Ds+Pf7Mcdvwz4b","tlshash":"c8d127cd2016aa7ad7922eda3d132dd055b2a614ff141e0f3048f88d4cbdd28069b1ef","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-06-29T07:04:40.776868Z","times_seen":17,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Fusion_Trade.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.171Z","timestamp":1782329722171,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Fusion_Trade.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c73nHa%2BAeG9RuqrirwaZghOXJG%2FyaYUXE%2FWAxXWEJsct0zg31VHjA5DMtn2G6f1BNhlg2W3gM07y6k6RlA6HzNnmWTdE0lWKhkB9NtYxldCptGX7wrQIHHNfmujnK9XAOnR2rA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"159c-19e8af97246\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5532\r\ncf-ray: a10e2cdb9ef4723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5532,"size_decoded":6514,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"74418a3c1e44d3b41c9021f9d1bad551","sha1":"a8789084f4ec3f053898a37fe8acd6267511f82a","sha256":"094810c27366338b94467476dd272e3f2d2b542aaeb4dc4f5b71b7e25c7758c4","sha512":"51aa8ebce6cafa8de69a22e4ff8bf2c516deff8795a4bcd93219a93d3e09dabdaebb949462af027192886c1d33cd569253f27a34228b4205a14a7df432c5d57e","ssdeep":"96:55VTLtjAfGnwqwRnlovlH9auS07d7HS61rkoVd+gvrykj0CBKl6NS:ttjAfMg7ovV9aR07djbAoVd+KzICeWS","tlshash":"bcb1c6fe24a4d49096e1cf955dc9c60eb98905ad4bf778caf663705d3a3fc4d841e802","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-06-29T07:04:40.706432Z","times_seen":17,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Ripple.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.188Z","timestamp":1782329722188,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Ripple.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fiDhsxE01T3pt9VlX9NUO67bDXu90ETW6%2B7hFSrb5%2B2ByKnLefKWsqBKvwcxKolzWmWXuHVVDG1KvbggBhL6rclbe%2FD2LB2YaJ5i9lWZyPrNggrY%2BtI%2BewsfbvIvjvgPhaP5ig%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"97d-19e8af971d6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2429\r\ncf-ray: a10e2cdbbf06723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2429,"size_decoded":3414,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"1a5f18588db65ba41ac53d40ed0cdd6b","sha1":"b3ca18c378dc47002adba3d2ba6d1033610d9259","sha256":"d575f7fea9438c329f714d798934eef8edff8b163062900ced5e86f25bab7928","sha512":"8523c9a6e27ae67d91637d66b3060a31205a270cf752185ef31b868ff47d0f4e39b436cf1fda96b0791d142261abef9fc8b1a07826b51e8b34abec8317351b03","ssdeep":"","tlshash":"9541daa7b9fe7c010a8d51a4fe3876988d560e13a43f28dd1e1730ee1072221f6f154d","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:41.137186Z","times_seen":17,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Flow_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.945Z","timestamp":1782329720945,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Flow_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jQUgWwvk3VQa0XQba0zNg0lD%2BDM%2Bc49LPUp4rhqfOcz7EEBi6%2FbNBkywWHKJ%2BWWevvB2fp8fUc%2FpZ5p4N1EFRShZFZjFzVOCv6rlDfpaysrHrZkXMqpsLtDxFzoryqnpw3Anug%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"476b-19e8af9736a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 18283\r\ncf-ray: a10e2cd3eb18723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18283,"size_decoded":19270,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"880028fe8586f7d1974c2509f0c948d8","sha1":"5f308ac35eee6faff59f540328fc86afc9725486","sha256":"7107925e376a700320d037ee2754185ec47d19e26ed209246ffaf393f05450a3","sha512":"5c25e63af7a54f773aaa81250a4b78e56b9a6f9293ccdc4414f9115105cb486118958a61e2e32b304c4c42ef68bab789c5374946913eee6690ab84c71bd9d55f","ssdeep":"384:NzZmtvkQiy7XMpzjPVlamjzjcwe4Iz8kfZX0l7SznqtPd:NzZ7QiU8pXVl1zj7iz8sF0Mznyd","tlshash":"ab82e1aec3536600f0dae66c9278eda823788755bb850f1a61bc62338156f45448e7ef","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:41.074006Z","times_seen":20,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Impact_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.000Z","timestamp":1782329721000,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Impact_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SSiSpv5l6azx4jlPYcUgflmxXw5YmTrEOpGhnwA4Sp%2Bpk%2FUeTdP7cUOBRCC7oAIsVXjlwceU5Al0%2FU9RCHbdmMIj6jx5QaDdE3MUhRsrrAT%2FNtkrLOZqaldzFx78YTCTccUSmg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"f18-19e8af9737a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3864\r\ncf-ray: a10e2cd44b4a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3864,"size_decoded":4847,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"0f27ab19b7ede2270989116ee6d3dc7a","sha1":"f8d62b94d3f566a3cd069a13ee01370667ee2ab5","sha256":"e4b31efc278318aeb750b82e4976c29eaaa0173a3414160d91d9cc96d2455b6e","sha512":"1c5d1ad1f4ee0e16072658fcdf994feeb037d854ffe86d42d0f7f8114e33a6bff7d80ad405471db6094e0402cf18bd7cbf2bdcf2d2e70fc7ce8c832be75b79dd","ssdeep":"","tlshash":"17816d51719a96295fe6fcf7ff84564e0cf5938c00942305bd61c6bf9c49b03867d502","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.828155Z","times_seen":20,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/una_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.127Z","timestamp":1782329721127,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/una_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7VyS79XBIF9S1kbtRfh9WXe2wsQf8dAGw0Om2bmO21pQBgwNWKtDjIvVPxz1xYZwFSaRjHd2D1jqmZyNvbAjXPST5d%2Bjum4yi8%2B4a8F6VbwtYboh2BRq%2F7FHRtQ%2BNr4wnS%2BViw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"38c7-19e8af973de\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 14535\r\ncf-ray: a10e2cd50bb8723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":14535,"size_decoded":15522,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"eaa9cec127ad0b8468bc73c451b45193","sha1":"afccc72f8e93d1c4c1dc6bd7bbb0d0c83604ef81","sha256":"671355e62957a9dbba6f6e11db60a96ac673f01846b9a3b4bbe343856743da22","sha512":"4b9f50cd597026a21d484e90d719b9e3bee68228518c62d284cf6cb9e1a7b8da7ec1e6bc5bed09048df7e35540065782de2388d3747452af391a999f2e50dbaf","ssdeep":"384:PuXr0ATFQxMtS3Qf8ne4pjMydSAly9vDh0I7:mnh/EQ4pjMu0JJ7","tlshash":"3f62cf8216e9e32dfb84317080972dbf8f43eac2d1b5cdcdb583a469c41c5a92962683","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:41.093808Z","times_seen":19,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Zelus_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.213Z","timestamp":1782329721213,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Zelus_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qFfkPoBZ8CnjFBDeKnGZVLs1i12ls3bi7kVKC3waEyLZV9dnPqLsewXcIHuUH%2FALUhxElMf5C0u%2FAhwVfBtUdkLn%2Bb8eAHnRef0q05yRiT4S8DeMKe8Dt1fHyP1b0c%2BxJmnbXQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"12063-19e8af973ee\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 73827\r\ncf-ray: a10e2cd59c0e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73827,"size_decoded":74813,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"93d28cbdf240c249c31a4b981cb193b8","sha1":"187e926f610dd001cffa8b13cf90777298b90b24","sha256":"5649f70348568af3866434a6498aeb46f56ad5e16a52a71bc9a615034d7897c0","sha512":"55e73a0dbf309cad9dcadc48260a24ad8a8fe4720637e913ae4912f1486b6456935d26bd67d39c58d17924e90e5afef2bf3a1d2da72c4180f6bb14e2f746d187","ssdeep":"1536:TY2D+f7ZrQg+zPBN9Af55xD5Qzv6VBF2ATTBnwyGN+5qiIMqH9K:bqDZrQj7BzYD5QzvEBFpTCyGqZqHA","tlshash":"3e730264b701362a8c70e8a1ea57f1169c4b1af83666d504f9a3d075edf6724fc02fe1","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:40.908476Z","times_seen":19,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Profit_AI.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.274Z","timestamp":1782329721274,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Profit_AI.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H8QwrX9k1X8BV%2FFhtSzDJvPa47Qu6qEtGEZ5SlDilTXqkvAhHTYSqXSQ74xIINt8iNTynVn1%2FAFqbnG0gimVXxd5ot5hOyL5aOFMK6PCQXIpX40h6ceYNyFDiy4fJC9YjrEBBQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"16a7-19e8af972b6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5799\r\ncf-ray: a10e2cd5fc4c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5799,"size_decoded":6779,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"4d0b3b22e934b0708c638ffd597348d5","sha1":"d4e385511f93892df7e8b73de59f71c583da594e","sha256":"9bf725e94e2da602ff6baa9bdbe3b0453ab751a5e7271b2c57e7fb23abd45fe5","sha512":"ec58671f1622bf318dca33e2d04732fab34861506155e1dcb67ec2fd1542d2bd937f5fed390f13817ae1d7af56980c7862c59f4340d86ab2c633abe83e3179c4","ssdeep":"96:gqa4MUahM++LgMFJNzgOKgZTKfzMJOYmh9n9+mmaLnOGj0D2aFnV9JIs:xahmLgUusKYOYmhXzA2aRdt","tlshash":"1ac1ae6126d73f69fd3918f70e1c8db10e94d5520114bc01aa2198f23afa39c2a3dbe0","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:40.7797Z","times_seen":19,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Stickers.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.818Z","timestamp":1782329721818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Stickers.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hRVlbgVO6YoKLeQI9ywrLrZkb4SWQzjJtfP58psDGSIa5qqqL9kggveCxLu7EXZYQbMQpjYrLU3A7fyR9mRNBOTbaEBU1dTJunrFpTlFCeYTjlQVcfVMBqI3iZxrc4sDDKPMDA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2f20-19e8af972e6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12064\r\ncf-ray: a10e2cd95da1723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12064,"size_decoded":13041,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"9e915b6912ec173dcbe6ce02d2a9b390","sha1":"2a7d8895cc5685f8cbfd2fc78b9c8592c648acfb","sha256":"ee6cbb47a783d6f87160287efebaea12a63eb8170fca6c03736b699f5bfb151b","sha512":"9f5338d1e819c9283e9f0bf1ae30d8efac3581034ee28959d62a66ae64b85f6abeacf35f3479d685dae5ecfb170747a77158b63af8f9f8338f0feebba951ef61","ssdeep":"192:nAa88V9mBAM6Oa2Q/wt0NS/u3YYzH6cMTChkm12j1XBog1yx59zupdEpBJxKyjD4:n9V0B1Pa2Q5w/IpLRY1XSg1yfg7rMQ04","tlshash":"e942be21037c1695cdd49cf3b1e43488babf15bc56796390798349faed3368ec164e58","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:41.15407Z","times_seen":18,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/everdex.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.904Z","timestamp":1782329721904,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/everdex.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZMlCPTo%2B5Kq0pUuBufpZc0lg5npYfnMpZ2tMdMtx1sOQYvN%2BZV89YNCCN%2Bqg7uyAQN6p2lmXXrLJt9BLEkO8ghzAjObZpd8Au91%2B%2B2sw08f8vomESLU0ZR%2FlTKuApEBn0sKEBA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"334b-19e8af9723a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13131\r\ncf-ray: a10e2cd9edde723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13131,"size_decoded":14120,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"a45615cf6fe45e7c146330ddb4994007","sha1":"07018485ee95c9370d690f7814eb9cc3be86951a","sha256":"d3b08e9688c4a30169ffba2c5d29292a0cf5593708335164652b4b84c8812cab","sha512":"adc545271a55aef347e11a0bf178032641de6e0072a1f9f2806bb27328a67a7e88c0ac7e64e81c156ca45f50a8ca994f1fb2a6d07c341a525002facd55fee827","ssdeep":"192:kkC0Ylztfz5QuM2hPlDgUjOO4ZwFhkFN9lagIhvZYi5pHeuThL34iMwLtsh:k30er5Q6gw/Oz9IhvZYi5Jeux349Wsh","tlshash":"3f42be46766b81a14fe02646e12cf4f34dbfaec2d717a614aa41367681f84bfb40bc80","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:40.712249Z","times_seen":17,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Overnight.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.022Z","timestamp":1782329722022,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Overnight.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nd4XIOhhDwXrZ8z3TRoq%2Fo9rfYwTUIClJGTxk0p9cgNnm5LsTYHNbjfC%2B8jy0JShl5mMlUNNU2aiQjFaBhux2FZ4ELLZOxFu8hWdNoioH%2FiOnyOmXDX2sSjIUpFraIVr4rLOMw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"33db-19e8af97296\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13275\r\ncf-ray: a10e2cdaae6a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13275,"size_decoded":14258,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"c563fbd614abdf8cd8bd459804268df6","sha1":"4f7611ffbf0bc38a066d9c1fafd51cfc40692443","sha256":"e9158f34b97bd47ffa4f65f0014459102c667efddcea690396bc52babcc63171","sha512":"85d020331eaa69657937c8b3597de203fc3a82c2ba934e30225a82d0343ba19faf61b31250dde1a4f72c52350d314b62c0b9c41cfbd5aa66e68a25dd443cd294","ssdeep":"384:zYkwtFLKrNj2E3chp+DpgwfW90tjLyeOy2:WtFLSj2E3cmpFfW9mq","tlshash":"5252d073d9f58f9a7016f6b3eab692e61ece532f6a94271c1287c159843a0cb40387d4","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:41.020475Z","times_seen":18,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/BRISE_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.624Z","timestamp":1782329720624,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/BRISE_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BVhCJzBRe6u9mWTBxgjhJQhi1zYQjql501pUKJoCr9Ptxjbkh3QdthEG4s3OvpZQFdz1Sl1dkEJ8ge%2FlROJvRu0QxaCJ1JwxYqavitO%2FbRWGSHZBlfV24lyjBKj%2FBQjrRMJ4mQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2295-19e8af97346\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 8853\r\ncf-ray: a10e2cd1ea5a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8853,"size_decoded":9837,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"cb15e6cedebca25719c8234d17db9611","sha1":"fd4f0ca4b8ef314256f34eaa85b67247e0211311","sha256":"d2d204b91229c62edef123fb66f1d3cabf9c26aebdf9c4435da4ff2aa1f79da8","sha512":"68fd94d5654ea7295cbf9a2f10253f114af14f0224b90866ab351d014e7598be71bd1c9862a97440a456eed66ef78f3aad6f56a97a7c35badc15ea04b47eeca2","ssdeep":"192:AWcn+7MrUvAdxt4FrHgAi73P4+pPz0HzDQzO1L8BISrWy7AQ4Ke:hWdxq9AA04+94f+IRSJAF9","tlshash":"a002bf3c1c89f511c38b88c8d785ac316fa6057e3e5e4d5b24bc4a8f889a9ee087cc52","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:40.773645Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Cryptokara.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.154Z","timestamp":1782329721154,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Cryptokara.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XR73I2kW7E3kUjRM2V5MJ4PrNlLdFzCVTduI29DZ%2F%2Fpd%2BLXp3czG49Jji4wVpwAb%2FdYWb2cJV26tXRjILMb4y8ZeHlz1WoVh9uPpOvlBO95ELryzCXZWsHmclpB6I4gGsgOKRg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"37a0-19e8af9735a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 14240\r\ncf-ray: a10e2cd53bcc723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14240,"size_decoded":15225,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"ce9df0d4197c26107254c3b2a6ac331e","sha1":"9e9a3e5ff6f1a878ca838b1701b2373fa31565e0","sha256":"59ce6c6d448e4356fe99a5ec59faf24aea2fc799197338eccdd2ccc2c2406dce","sha512":"552645955fb202c03cba1c6ca0cc220540365f3aac57325484af3adc8bf17360cb0e571a73032922c81cf68887161d65cbe93884ded4e0083dbe99d4d0ec0be0","ssdeep":"384:wP0cxb+Ds2O018ecFOaAMNRgHU/m+CQ48QJB:wPPxb+HOI8FOaAMNr3477","tlshash":"1752aed59081e9a2cb6206486b0423cd6f679212f85df00e96e768b3d35573d9c7dfc2","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:41.003871Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Kazm.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.316Z","timestamp":1782329721316,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Kazm.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aU%2BF0Vq9vJHk%2BrzZK9SX2fFLxbESD%2FU1dWi%2BkwcVhjEuUS%2FuDhpMbTuNhTQCKUkc7SXF3Ja9AhpJMJ%2BgW%2FUjPwGPA6dSz2xHyOIpCbaleM%2FNqTtm1jizXclkWvmJcaPAEJiMYA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"26d6-19e8af97262\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9942\r\ncf-ray: a10e2cd63c6d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9942,"size_decoded":10934,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"4214c7f0198f6b0d930402c9297b155a","sha1":"5adc9d45037ff83c3b65d2b4f14c2cbf92e84351","sha256":"632454e3ef3523bc638ea7e81fbb5a3573d77d8c6d9597989c8f0cbc9fd8c174","sha512":"ec85b7696f63e3cc1761ab50f145f07119a7758e815371a13dfac5a7422b9f57fed48203d9f0c6cb67c51db8cd2fa5cf40fe334672d4d619e13af73716ae4a52","ssdeep":"192:7Yeu50amWKM/bYhv71VM/sgjStMUx6uZ+Wpxpa+T0dTtt/5E5jKVHyD:7Yt0TWKMT61AsaSF6EFc+TqTT/8+VHc","tlshash":"2a22afb2c5edc6902d33446e3ad2832694a87ae3625858088653dde87fd6da45cfc287","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:41.088996Z","times_seen":19,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Oraqle.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.320Z","timestamp":1782329721320,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Oraqle.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lT4Wpk4lqsWAMEY2p14yFA3WBKcJmvflfEE5SCg15xTY4XRxUxiMQ%2BEmoGr63QM%2FMou23kBUQwrjVTX4RihFdkBmb0OWmPjEgvg%2BCB1a1DfDCgeljY8oZdWJQGQHxy7QrulKmw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"163a-19e8af97292\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5690\r\ncf-ray: a10e2cd64c6f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5690,"size_decoded":6672,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"694353a2e58550891a63ec452fe1a715","sha1":"f24ff9615dca703fa4bf50c748bd0bfbcfd17073","sha256":"d35c1bacbcea1f9aa2f0d972555b6a80fba734c0171f9f811ad29e295d5814d0","sha512":"af5189396069a7588b26c7e00c6bf11e3170b14148156df1ac6922641c2b7654b852b549e160b5bf4e3f8715d5175cec46605fec0c87b9711659ac6fa1393506","ssdeep":"96:uGBkw5+OGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGsqwJ0WTGygyF7QxFxT:1Bv4hpo4NDOJyevd+C","tlshash":"69c1c2b93f1803768d3cbfabc83df6a866058712294c8f72e3f2f2550428da9b449175","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.637936Z","times_seen":19,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/sablier_v2_interfaces.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.848Z","timestamp":1782329721848,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/sablier_v2_interfaces.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1bmJp4rWfNpKT4EBQAfM7hvCm7AFAq5vzUHjOI3EhMby6nnxeQ8sRJGutFNrPw7DbxXfAX0Sw6I2X%2BSuJMuKBw64mlh3cgAjx8tl6LITRb5G%2F%2BJvZb%2FRMnZvdWmfmj65%2FfDm7g%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2ba8-19e8af972ce\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11176\r\ncf-ray: a10e2cd99db7723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11176,"size_decoded":12163,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"853c78165b7ab0c88aa9e35ee163a502","sha1":"2e37225e103a677c6ebd499982b8e258391c4ca3","sha256":"4ac900b937064ce539d79b4a2fee8093a35b766cceda7f5d22625c4615c4b6a7","sha512":"4777aecf98d28cc2824ac6c6e9d5fb8ac30cfd515dc1fa19bfde47463c92b7c529a6f287435db47b2915ee82cb1c4d05c6416e8e71d5f438a63d07cb996cb729","ssdeep":"192:lJu5/kEX9UYeV7ib2ZPUInXRV+Fij4zteP0Zq9om5xdmN7cYaIIMCzLa0tBZ4azx:lu/kbV7ibKPnKDztePyq9b7WYYgam8Sx","tlshash":"4b32d0e4f8a478d3856714a9e1d042737bb7703864857f42868c0e736693e9a1dc49b7","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-08-04T05:59:26.031165Z","times_seen":35,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Endemic.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.002Z","timestamp":1782329722002,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Endemic.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1fHDtaSQROd%2FTE8GmZARWToe7KteT8p5vd4s9Nm%2B2SywMfSqGN5Kuf03w6bNRvjvd8m7DYwNINY5qTgjYyqkSDonL1OIgpBB%2FURy6UILutFksoHpBVKPmJsmF1ZjWTuXpKdEkg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"5dfc-19e8af97232\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 24060\r\ncf-ray: a10e2cda8e60723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":24060,"size_decoded":25043,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"51bed9d3ec5948c70b7f6e1de456479a","sha1":"76701d0e792e963bec5c6f68d356cc8c94de5cea","sha256":"e32824bde8136249866720280c14798c2c9290e9a1b560ccfebe4cd880b70180","sha512":"f964f922bacafdfbe6756b1ec04a2fd9bf9de72b1d5db6ce370a095c9006adcbfd65aeee3b7b99a73abf95392289f2a16182d0592a6ca0405a5273f982e9af44","ssdeep":"384:iqwklSHbtsSz7henTG3J3Pk3GEvkkFoOK2XGdv9vL9ZQEmUbRu3GalRSXnNeNswi:dlSHWSzwnC1EFFX8vL4E63Ga7SXNehLe","tlshash":"65b2d02e082dcf5b693327146a2105c9d0e4e43beda0ec4a996bd836f9ad561d7f0731","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:40.721222Z","times_seen":17,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/X_World.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.063Z","timestamp":1782329722063,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/X_World.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hVrmLVIe30pM1ukLfCsyjvLgJE6tMJKtHec5ZIirbLpb5TE6llSFwBYAHOMwAjmNaP3SHgISbBMXGv0pT8le2vaP2eR1uVyxmtPcmJpfKrUGV56B%2BnyPspLYVnCuJpHsixA4fw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3021-19e8af97302\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12321\r\ncf-ray: a10e2cdaee8f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":12321,"size_decoded":13300,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"2ac1537902ec328c031f552ffe649e28","sha1":"38209cfbf804bb9ffc130b2aa5b5f7bfa4a76dff","sha256":"056f514421a863e4ef904cf687eec4d7fc6845a2e536748932516453b7c10555","sha512":"023d7361328a52da862f8814cab1e60abfff35df1a1dde13fb39e0cdc86810b33928a42d04ee1542dfb9ea924e9292f5caaf6254a11c0ebd6aaf49d6a4699ddf","ssdeep":"192:enJt+Q13wwnolxWuMcUxV5WmdhfxN5V9t8tsw2/hKwg/bUxTrGewnEf8C+uo+41b:UH+MvsUomdhfxN5+sJtgjXe+E+t/D","tlshash":"7042d0e68f40d458fba6b40fe26ac1d35fb5107423f84ff496f2159a882687e1c11ce9","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:40.629506Z","times_seen":17,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/UKISS_Hub.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.984Z","timestamp":1782329720984,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/UKISS_Hub.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N4PyxkRw2k49f66qskhx4gEk7yIk0xJmxvm5iQzhUOwcY%2BkNOUqF0wkADxKUPUl609qfy6Vu%2BAbajuRW8omfbYuELkvkETO6iE9SiaqchtPVtgsT1dqrI9BBl0FkwlMb%2FMy5Aw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"21d0-19e8af973de\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 8656\r\ncf-ray: a10e2cd42b38723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":8656,"size_decoded":9638,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"2d2a7a62a9d602e81e3c3d67bc1eee5e","sha1":"b46fd856b4d51d68c98342304d5fd0bfcef8df7f","sha256":"10e0789aca1099cd29331703cbdaf003cdbed288a816d634feeca5b914001e00","sha512":"a7e1507f184aecfdfbb72dd63e789626e8a8e493fbcc4686f86f2f5a92c603a5bef122ae0a010cefbce45b7c75da5eed4717ca9b68a24c5ce3ef10f7b5b48785","ssdeep":"192:ZGDN64i9N64i9N64i9N64idxNP+28+A3kzixtGIGQqPe745Ro9S9JEMD:cDN6h9N6h9N6h9N6hp+28+Ne0IGt2GRR","tlshash":"00026cf25df3ece615b1008c56985da63d6d26bc95b8485be0cf9417cca5418c067df2","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.663007Z","times_seen":20,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/X9Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.189Z","timestamp":1782329721189,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/X9Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fI%2BiES8dCOlki5L%2FydQPjHIf%2BuuMT1x9CbG7EkENZsmIi%2BOtRCXWYbMGlO5%2BdegHKoiT7%2FdD84Xrvod%2BJvOJk%2B2escqCc41D1BDWxLN4KagwbQM6nFSY6w2GTo2r4hGfcyxRMw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"5a12-19e8af973e6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 23058\r\ncf-ray: a10e2cd56bfd723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23058,"size_decoded":24051,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"36c52dcd9d942c89f8bb6e4bca680505","sha1":"e33a8e5ae6615abf1eccfcae5b1fc65c0ae3a176","sha256":"8fca9992872e82874a1ae165c311eee78d5ae8a7c6ccb8e422da99096d0b1fc3","sha512":"1acc32cf7c73275e765b49ed700b5b175f0725bd109164a247a70bb2e645a0052fa0a9314c5ec3ef06f63b30f92618048ddade4f446ba0cff27bdea610ad91e3","ssdeep":"384:VyI66gJGWk7BqoB6xgddNJrD3L0rOs3CkjVW7T1wksZDnx6w0VNX6H:VyHGzwoBhddNJ/3M39VW7OkfAH","tlshash":"12a2e1e343ca25498c909b322c781bee36695ff15cafe312d6c6fa4843f371962a5251","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:41.000189Z","times_seen":20,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/ETHGlobal.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.491Z","timestamp":1782329721491,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/ETHGlobal.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L3HICJeWKkIKPXvd4lWffE%2BvKfO46rSQwL9SmZHg5gq5j%2FPmJeWNterDYblqPPEHJiXQAnLB%2FBKGyGeryFLjiM46tw7GsrjkvO1vkKtNrPP71sG0pU6w20xmIJo9cniBiE8Nbw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2db2-19e8af9723a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11698\r\ncf-ray: a10e2cd75cea723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11698,"size_decoded":12681,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"0a59a8c4ed5f00f1f6acae4d2eb21bce","sha1":"17b9019b84b36434c4cb9eef679ad102f2632c00","sha256":"4a5856ab9bcfd1bb6e3767b75193be5778031016c37a5aee1b27e76db5d81128","sha512":"fadba2298ca8c88140fdd7c527e916bea9332ba0acc2f0617314fe3ec027fe1977446af26247ef4ad3d2ea1b0a0802a92e03d28d3b5e1efd36c43cd1ecdce438","ssdeep":"192:DbFLQLIl5Fr2ZifcLUkfidtgOFF3aFaLH1WUdmg46dMZ/8fHrTiADeC3TtGAETBI:DbFEs5aifcLBf6SOLqFarYUdmv8rTiav","tlshash":"2632bf58e296ce39ca1b0201ddb6f2e35fbc50d8d25e17482cb19fe3549e3298c96cd8","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:40.803355Z","times_seen":19,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/PartyFinance.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.546Z","timestamp":1782329721546,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/PartyFinance.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bo6%2FFKOK7FndX85Mfd9JUSPTyXI8EKgnuXDJFxSTSvt47FETA4XR7Zw60pqoX5JFNuwnYJhgCh1csaQOyjlCHgeBiEpcFdMgm4kIeBonPuWnt4Q4r6Tkzi6CWyHvnkZG0qgOtw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"a57-19e8af9729e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2647\r\ncf-ray: a10e2cd7ad0c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2647,"size_decoded":3626,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"36a867ddf4c21b57ff9411e0b4dbbb2b","sha1":"fb41de6ff1a67dbd2dfa140b6f63700a041d5287","sha256":"4a42e55785d2ef138e293c624f3aa3cddaed9979d386e84445261aeba506e485","sha512":"76d86e2906a188112aa162d18f0d6a064c3b415f462cdd2689b160a2c461f66a42b89614d9a68f9846b30ce0ed9f30f9f59816657a3e0115a1b4d21493496d2a","ssdeep":"","tlshash":"bd51094a3250021dce3647b29f48f175da86f1ade364c6741e2fa5f429c9704e4f69d2","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:40.719531Z","times_seen":18,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Meta.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.589Z","timestamp":1782329721589,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Meta.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BsRhbPPpfFu9k1NkQdRR6hgYG3sjpVaKfSSk5uNjuzwYN4TChoznD9JSBmdh7Y%2Fa9mmRWFxHabGT9ezvMSBhJbbLW5llVFTw7xPUPGyAsR33P9KnDyO0ORJqfRL61LE%2FFRbcVg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"15c1-19e8af9727a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5569\r\ncf-ray: a10e2cd7ed2c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":5569,"size_decoded":6549,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"ad5ad7fdaf08de199362c95483836591","sha1":"08f8ff69cd1e87f792ccc425612f4ea90fa5e187","sha256":"c548ec6941fec80907224fb72d122a1ebcbc7883272308e8c3132e3eec592033","sha512":"3e2e666aa110327ac10d65c1e0ce906c7d5c4ed127df74e6fa5812cbea1e4cf593282478f8a35d022603d0486494c02927779ec29d90ee944b59c705df4c0a24","ssdeep":"96:vitBZ5FlLl7+uMOHPuy3XCaR6ECBrFn0olTb2jGuMzWtQph:vitJVCaR6EKrLTbRuMzvh","tlshash":"e8b1e7ba0580d47b09ba0d710d848a4f78ee95926ff6099eb317309e2937a8d92ee454","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:40.622576Z","times_seen":18,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/The_Tribe.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.071Z","timestamp":1782329722071,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/The_Tribe.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nksD4gWKV1yZzI%2BIL8NMRkL%2FFzC48qdzKQgUF12HF7Myfk93MqA5G9Z3%2BIGlSGlZGwR7ec4xqzlt%2BxY6V8OBEcMBBnllJeVoQiuF8r3Nk0bYVB4QuzKnGj%2FJ5U8Fove70qx%2B3g%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"331e-19e8af972ee\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13086\r\ncf-ray: a10e2cdafe95723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":13086,"size_decoded":14075,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"99db1f1bbc3f828b68edf07706f634e0","sha1":"213efca40342ca120722a623917039aaaeb04ba1","sha256":"600cf123e302fb46d6e8b8b85f821efb7557eaec3c2df59a53864444dead1bde","sha512":"9fa11ff84643effacfe90ea8f186668730de870fb504bfcb5b2e55ecdc58e27fd64f61bdc3e491acd981eea04186de5c48ff37ad921d4d040843a7d9efc694b4","ssdeep":"384:aUHa7/ZBGlFYbiXDdB45tFlX7bSRO0Ypivk:aU67BklciXI5TlX7bSRO0YYvk","tlshash":"b442afb2d7697ad36ac236398005bc3b11d24473785c07f8324a0c6f95dedb65c5c99c","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:40.6439Z","times_seen":17,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/VeChain.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.232Z","timestamp":1782329722232,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/VeChain.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NNFWtv8hznuqfaVkPSJmNYvfUEhMmRIIlsWo1Gt3Dy4Vxu6R%2BVifiSDzUeGDWqvSNZwcbhhXJXu2mK6CgzTdgkbk67FvIvdWvaS5LbTKr1BMjKX5Oo5fQ2Q8claUTY0og3eqBw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"59c-19e8af971de\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 1436\r\ncf-ray: a10e2cdbff21723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1436,"size_decoded":2413,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"46dcb29cd8619306c26cea1bf1173506","sha1":"c01ba6fbedffcc7c1bc78d326c2f95407b9c0606","sha256":"9bbe417f2feb29f61e10b6b27b32d9ca7fd26383d8eed4d29b03afe00c3798a1","sha512":"1792950553e466354ce3f38bc174eb9720dbc7fb4dad995cbafb4264bee7957e4827e4f1356eb63fea8a425b733084ac119a528c6274d5ae19ed92e8f699c858","ssdeep":"","tlshash":"f221d8e0cf6699f8abfb492949a8885ad24c7c3d3495433888f875010b7761fc259868","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-08-04T05:59:26.009331Z","times_seen":35,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/chains.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.330Z","timestamp":1782329722330,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/chains.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hbJc8IbIoOUoB0H37lyBQK%2Bokdy64w3WAdqb%2BUwj8OwpB9q6bXMgDE2rCThedOwPkON2feV8HvsLivpSsjfCnZafcC0snupGq5lj9tUWEYr6kCNzllJJZTT7iwYgmI9FbmZDMw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"cfcd-19e8af971c2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 53197\r\ncf-ray: a10e2cdc9f6d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53197,"size_decoded":54178,"mime_type":"image/png","magic":"PNG image data, 800 x 843, 8-bit colormap, non-interlaced","md5":"3989acdcd58270475ccb41af889baef5","sha1":"f4b54832627bdefaca2105b2c9ba2a016b53b21b","sha256":"e7399cc871b6a624642b6b78f2cdce11046f0bf2d746f2bf9126c712374e9343","sha512":"bc926b125fe881362e1c261787e24cf0677f813b44a2b1459375830cad77fe464e3939ec6c0495d5f8617d418acdfd91c175ac5afcf36d84612222dd82a554ab","ssdeep":"1536:h2vH80yAcwJdPSTGXAy0tdKmjv3L/GTalRlH8c:hw80yAcv7y0PXjTGgl3","tlshash":"193302cdacdd36a45f6e32d5bc8c07b0c5da1e1b34bfa5a2126180bc563439d443d9ea","first_seen":"2024-05-08T09:53:27Z","last_seen":"2026-06-29T07:04:40.78675Z","times_seen":22,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Sabay_Wallet_App.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.479Z","timestamp":1782329720479,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Sabay_Wallet_App.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B9axVqws%2FPaJb8gznr6t3N05Ceplra4t9VgO2TTVOGVTyo%2F8CsZWf65LVL57gEYGYJa0FUeQk4PjbGD1NEwdSEMgu6SEF9EahKnaQULqsfWeqHYscYvfvgG5tfpzfrI27QLGsw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2302-19e8af973ba\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 8962\r\ncf-ray: a10e2cd10a27723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8962,"size_decoded":9942,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"fc24c4f46de7f2677bc14f602ff26c0c","sha1":"0f7c135bf8b8677a083911eefa580bf2ecf8e760","sha256":"10d23871797314baac832df45a73f84c933b5dd8e680b2734918e3b3fbe73db9","sha512":"03310e9116bd8281fd0e4591cdcbfd44f77be3907b53f1fdd011656381b0f97c6b50061eebbb7fd2bb9de27f64bc34456a8d9633dace86d3f9edbb6b4b4e1001","ssdeep":"192:MxPpDzDR9iPeixABNdrWtx+RjRtL6n4F2P8pQp2:MxPrsxxAVgWHFQ4","tlshash":"fc029e7cd4f8a0f10cf16e7b9a29622767b38a771201a81c602ab1acde5797d470371f","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-06-29T07:04:40.597946Z","times_seen":19,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/LocalTrade_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.684Z","timestamp":1782329720684,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/LocalTrade_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o7Mtjfz35OH8oOfb%2F%2Bt375kO%2FVyXHx7aqLD23DM55vesekXkEXD9cWwfcDP1svtBKzxeAtCeacH4CxLQeH0JFluSwHyHOxkRy9GAJQd2VOfL3jim4clG71ELervikcv3WziFuQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2937-19e8af9738a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10551\r\ncf-ray: a10e2cd24a6d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10551,"size_decoded":11534,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"a8a9ce76569866084534482f61f0feaf","sha1":"77037da00c9b2be4579689b90f1d949a406d23c0","sha256":"d4f6f73dff9266e8a2f90bedf9f13d8548e55f98ca3ee155cec0ba772012c649","sha512":"20fe8a55650cfc8dc1f287af65ba50331b7678aa3e045624ceeda06620f7a5f6a5d3cedbd349cf97affcb9ca491d03cbfde1a68f18470aa90740d1105664ce6b","ssdeep":"192:e66wNst+ilLGUOG6TasJjVCmhOF6iDOW8xleYq+QbO/qR:p69tBK5TPJYqXiDO50YQbEqR","tlshash":"3d22aea963dead6cdfced072d0c4570953ea7e1a19c64e2a48e7cc3c221b5e3022b855","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:40.603701Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Kigo.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.192Z","timestamp":1782329721192,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Kigo.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RjP3lOX8Je9baDtwB7niYlJ26qETql3Mu7%2F2FW8dAw50lhVMA1g2cw67LZ9cXyy17y%2FaWuHURObCeZFz6R%2B%2BWiUmKO41bXIFFDSnOqcsOkArNe8t92yHaxnDMlSk8lEBRMAVsw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"dda-19e8af97382\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3546\r\ncf-ray: a10e2cd57bff723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3546,"size_decoded":4529,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"d8c4dc1f0b4961555bf879e7b88766ed","sha1":"464c291d253d18ba8a10882819ea8987de2efd25","sha256":"d34f84a139b57c512d9a87826924a4c99e9254a2de87ae7b308bce0c88657499","sha512":"417bd76c370793d4d8ad3e6e1eac4b9bd1d3cca2a2961aface926e98505914896f3f8c6d30a0b5879750c557733385db04d95eb91c5ae75aa58fa6c277121af7","ssdeep":"","tlshash":"397129a3b7211851c961567890326d4bb6c93e32391d212c5930613ba5b357b24297db","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:41.059426Z","times_seen":20,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/CryptoGems.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.683Z","timestamp":1782329721683,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/CryptoGems.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UvVytKBVpYqu3XHQAnTbfEI%2BqTVnjpx7MeAshphMgxqcNJSPlTM%2BRr8hT0IL%2FVdcmqUYdh1CGM0fxIdJUXnIycTOBY5J%2BKV6pz3i499SuxirE0wcJawExC%2FMGvOsxkaL84S0yw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3649-19e8af9721a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13897\r\ncf-ray: a10e2cd88d48723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":13897,"size_decoded":14884,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"f6fc35e6c47f458c2ed6f06e278771df","sha1":"1d18e3f6967a5906fcc327b8749617dc3ee9a319","sha256":"28a5b28f562e7ad0a06a547ee54af6d9060b706ef55261cacdba5ad583ca747d","sha512":"fab34033b178eba270b274069e4e8c518e25356db6bb69a8290ec0ac69086ade8941f8d34f2f3eb72966d07824cd000de35f6f839c525868b2fc61ecfc1611b1","ssdeep":"384:fLpDEuqYW+fihuSo53zpxP9HH2GmTONqBrBW:Tp2Ylfiabx9HwTON6W","tlshash":"1452bf8fbcc508113da01548191d939770a6f885f3e9aecd56e7eeb826371c5aa102ee","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:40.653264Z","times_seen":18,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Bionswap.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.817Z","timestamp":1782329721817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Bionswap.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XuB2Lgqb0KKon7XZvQ4bucWcTbgzZOcHQCBqCzQLDRi2iWobjsKN4Hb7iKqHIyBn7u8i4qohO4dSSY0qdE4skPIqenqFZ6IrX6Y2Fo7G4cCUHx809HhOy5jcSgCOHA6w6SJ43A%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"24ca-19e8af971fe\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9418\r\ncf-ray: a10e2cd95da0723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":9418,"size_decoded":10394,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"2849e96de2308111e5e22497dd97ae8d","sha1":"2ac7d1fb1316342ff4d773204677cc379fbb9ff9","sha256":"f44f6ae093049e80d242af29636f27c645c2796940f90e199b483957f1839390","sha512":"3739d16b2a4f4990f0d98fef9cd65e8bb775e3a7956c47016ef353dec0c5c8da4b0c8d0c5027efcec608441371b1a7353900410ba37cb02c4d1395c2e1e105e5","ssdeep":"192:TYI8A5PxQZNFIm5olsJCiRuWNN0pR2fZ1:TYI8SuZNFIljyORq1","tlshash":"5012af9eb279009afcbcb0fc4da2387cfd1ed03a0a951b476c97895b4f01a9e4275b00","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:40.764723Z","times_seen":18,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Aerodrome_Finance.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.835Z","timestamp":1782329721835,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Aerodrome_Finance.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6wVBMJCjufTkHiI6q4LmVbwiQ5%2FCeyKNJG18VKxIt9y7Yri4GjgebozmhduAm34nMd8lbY3YMwztWqOydjotsM49WcShYxORPMkWVeee%2Beab0YC4mJetKZ0AWw5RE2pLmZVb6Q%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"22f6-19e8af971e6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 8950\r\ncf-ray: a10e2cd97daa723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8950,"size_decoded":9930,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"68cd1f8c7170bab1993423eb8f02f80d","sha1":"36980713ce65962894dcef230160470bbbf267a6","sha256":"b08af218c9928da711892da9f9027b03dbd499c1622127132ed3d516e37662f7","sha512":"079d586faafc9d33bdb845de9b6bafe06b0a0875e41f88ce58b60966df053db8a472699d3daefc906cf9a0a5b123ec5a740745b05007d3f2473fce241a1c832f","ssdeep":"192:pknrqFHIwOufIVgXS3XV3Pho9eXBpMRI8jW+1pncI9e0:pkrWowOROgl3qbRTjzv","tlshash":"fa02a06212ddcc19f153823387f6c4af3d0bd9e9f137aa055528600db11a6bf8d05ea2","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:40.89357Z","times_seen":18,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Superbridge.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.879Z","timestamp":1782329721879,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Superbridge.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DROhOuVLa1ETw4vCXwDnb%2FYqx42UYPgFlpCyj3O1fI0ir4rJ6C5GPp0ko%2BM2nc2sZPWR83vt%2BbgkjG1b%2BnWkI0fIf7sZGkKnDh2Hw98V7bzdxzNqF2dmtGEJetNcjxd2D7YzdA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2571-19e8af972e6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9585\r\ncf-ray: a10e2cd9cdcc723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9585,"size_decoded":10569,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"fa46083b8450ad701e2580856bef40ae","sha1":"bbc5a12560cce41a66329ec9f3b7128a27cb63b9","sha256":"39ea20ce8a067960dbb6cf5faf264a509a2c0b8b7f0d4a1f3dafb87f89a68503","sha512":"8c49e6c2fccb2db7ade02c2e350d997952d432f4afb79042b43b195e0ff829e8c8bf812fa7769de015ab21c23b71638a47d70f177622e8b2dc26e1d8a7490139","ssdeep":"192:C6uYP40r8nsTNTLo96AV7CuhfJwIblnJQ3GxZW+aKUag6eS29enmb9:C6uhY8nsTNHoZVOuhRwqWavlg6k9ene9","tlshash":"b5126b1a5d2238b97eff3c7e671aa50704ab041a19b77aac8188184532def436fc1e4c","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:40.739373Z","times_seen":18,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Monerium_.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.976Z","timestamp":1782329721976,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Monerium_.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DkMkco8sUE4g2m0LRr7LkqXG%2FIbAtW5NOGeQSv2uenEmwHpSIDShWSU8q8jRPD3et%2F0Ra7XziLzZkWET8Ib3cMx5IH5BNtSGHyhIhPJflDsbVg1Zs2bOa%2B61GIYBph2LQPvOJQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"9b83-19e8af9727e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 39811\r\ncf-ray: a10e2cda5e50723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":39811,"size_decoded":40794,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"6596816ba1274350e97820169d5709f4","sha1":"add9beec6a4e696cb9b9ddca9b1b7a461cd4f220","sha256":"d05cd6f38c3a98dbcc7e0586ab5b1c0689988c53e049c1e5253c038b257a8551","sha512":"9d1ba0b5effdca2535939043dd57676c265e2aee0840a5123ade3852a68b8ac33fad3ff997ab23ec188f436d9041bdab1b7882995575c6f0d988f50acfa1bd98","ssdeep":"768:Iex9/XR5eUGHCjGmN05NIt2SAzD13Iu+9bAweVOQ:1/XRHGAzN0vrn13r+9beL","tlshash":"d403f26133ba9654a8acd68742760bcef6528204f1b1c783d7f6f8cc30957a1c5ed197","first_seen":"2024-08-15T09:23:16Z","last_seen":"2026-06-29T07:04:41.080932Z","times_seen":17,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/1inch_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.308Z","timestamp":1782329720308,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/1inch_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e4S%2F%2FHGqKJsqUBaP2ObV1TdpDGhc9Nec4d1oGUwn%2BypObfom0RXvZSo1k9yT%2BabsA74idBlR38%2BcGuhuxCLw8b%2FcXUQHNWkEuiExKwmib8pbW7wR5c39gV2hgH5RRM79k3BT8Q%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"9457-19e8af9731a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 37975\r\ncf-ray: a10e2ccfe9e7723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37975,"size_decoded":38964,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"16a4dada70b6244b1cf4c217c78d2388","sha1":"d3fef9310dbc9680b813071385054daf2517de17","sha256":"eec121a3e063410d253abee1e725f0a6c8bd36e81ea721f5dd778aa9bf9acd0d","sha512":"dcb31a456ae146be9c1dc475c419c7dd279eb4fa449259ceda9b43a593e8665d64dde1c7201d00e75161916d57bf66e82abff268f2b8875cc3c8c342d8724cdd","ssdeep":"768:itH/eyjDgQFaIuy3ERyMWGukX0ZPeYUGEUx4I8HC7rf7sCCsWOkyT:i9vjL704FFeTGEFdHpCCkT","tlshash":"dc03f2e197a0f551b6fdcadc806afab38447699dd09400533ab1dba290d71e2a1d5c3c","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-06-29T07:04:41.187208Z","times_seen":20,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Libera.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.495Z","timestamp":1782329720495,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Libera.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hBeKRj%2B4Ui5cSxNyml1gF%2Fc65gXep6clBPpS3ppKOjYpzbVYphjMCqmo9gtZi4MkwMIqKdWmxMYcpliQvqZ%2BN1A9IwZ2TuYC%2BzwLMtgrrlQiameC6IklgRIaRP6XjAHdaERExw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"6214-19e8af97386\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 25108\r\ncf-ray: a10e2cd11a2c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25108,"size_decoded":26093,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"4cf26ad533efbf72a54dc008ce8c1a16","sha1":"f3df270d513268094ead596a51378a4a53b56968","sha256":"e2ccce2901601a3518ca94462d8433ea51931df5fcb371a2572754f1805edb97","sha512":"aa17bae063376d0a619d81e306ce88a87530af25ed449772409cc1481b635812a9b570f5f79e9be062c92d26967639386ff3489071c9795a8f218ea996a749fc","ssdeep":"768:qUadfL0GEdijskVL4MLQyV4rjAkScxM6mB:qbdfgdij1VL4MLQQ4fAkOv","tlshash":"83b2cf9cd46a72161a61cb97ac4fdec3e9d320967705a2cd894bade0c9c34b40f887d7","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:40.789323Z","times_seen":19,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Ancrypto.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.504Z","timestamp":1782329720504,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Ancrypto.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FAJr%2FaS2aCrkqm6G9uYV7jeIRcRru33H4ZTE0G2maPNOQa1ZAJJbxq2FiViTjzvZ2drNWh8JJGOM2zCo3ynI48zMGlRPm0oeAmvuHsPUcT67QbW4nDxJEwPDT8QNplJsomrL5w%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3a45-19e8af97332\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 14917\r\ncf-ray: a10e2cd12a2f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14917,"size_decoded":15898,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"65657e7b994a5a7be1d2dc41e6b2156b","sha1":"3faca958769e8df69610476f71f439f9421d79a5","sha256":"4c173941c759448319f3ac1c99234b31e54ace54461b5c9f8ea25b99f3085710","sha512":"ebe5a2ca6915460587a84730c65add185e81dc14e39478ee39ec36909f105c8f456f518c432012fed640f53bacc4969a9d09301e6e9a4ecc76ef6f0d43d6d8f5","ssdeep":"384:pZqKDf/KBQH1U4mUjwhVzHDhK4/t1hlML7XJ:p8k/qWmWw7xK4ObJ","tlshash":"6262cf4c272efd3f283f986a88e0792bd5818eed7e3f180da616596c4396c87503174e","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:40.648664Z","times_seen":19,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Transaction_Manager.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.321Z","timestamp":1782329721321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Transaction_Manager.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eCdac7HrLwZqe2fDWVLUWMYPmQjWgnuAZK0CD%2BDr2iSBvN7NcGVfrlkFKrYOaaZwXFLBMWRh8iUsHHFOhMSHuwf2%2Bq8lJiamUhcFES0kh7G68fMSUa59Dxu%2FdNpBYL2oeUBlmQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"18ed-19e8af972f6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6381\r\ncf-ray: a10e2cd64c70723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6381,"size_decoded":7363,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"796654d2ed680d26c59f4b25be187d0f","sha1":"bb9b439436820c1f7c66a7c7b5dcf80040b6430e","sha256":"dce120e642febd6da52e718959ed4f04e03daae8d3f6a7a57127c8151e821385","sha512":"64cd73c240c864f0d229415ad77c1115bcf045c2a5d2ea095c3c61c19051b3f8d1bd2b1b1d72b8d14a8832a31b12edf061b3e1c330ab57b04bbf42d8bcd99e0b","ssdeep":"96:o5D4FqAejwJ0mpYCb7dXHYHTdZ/YXGEg0nryHJS+wU++kARsQSGGlU5drmc:o5i5es1J8DYWY2HJS+QYsOGlUTic","tlshash":"a5d19e930519f9f5edda153e4ba2ece23efdc83c2a1899e48892649ce39114eb484709","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.862659Z","times_seen":19,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/orcafi.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.387Z","timestamp":1782329721387,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/orcafi.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VLwLBagEAocyWNTz6vt5mcAyWgwzjHqC%2FsQjTEhQvnzUCJ54pshovzckcerxIy9xMtPrj52IyBrUWCIx8q8vxhpIyf4r%2BvZYDL5bI4EKvvrCnKioOXL038B7nRCxDCl6R7aLKQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"144f-19e8af97292\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5199\r\ncf-ray: a10e2cd6acad723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5199,"size_decoded":6179,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"9cce7a44fbd85faf0913284d9751f17d","sha1":"6368a6653189d674c66c0c0ba4aec972b5a4986e","sha256":"29cce2adcf6d9673112e1e83e12bfcc638dd7f7f504d2e136e34f4ccfc3ca0d9","sha512":"e61d5a4f9950439cc0f57ecb3d2b52230813c0a0aac8c1d3ebd5f72b54714e8675b2e5b4943115453f5ed4fcedb9c3d5487f5f8cffcde1148fc6a4a3fb89f39d","ssdeep":"96:quQ9jzelQNdwwfiwtp5HYzYk0jgh1kjfbyCjgo3JXTd+HC3kLc:4elIdwwdb6ED33tdWckI","tlshash":"85b18c4ff7d21a23d1d5a8734cb2f25211824e4cef2e11e97010d82bce79a0f2add818","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.5879Z","times_seen":19,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Unvest.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.440Z","timestamp":1782329721440,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Unvest.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rnlnHmV%2F46I8r8pVmct70xa6MzRWCauQ9MoX3ZhzU1M3lb7RnZxK0bWvtJnq3ZbEiPA%2BxxJsdq4cr84U1BMxbcYJxq21uHNnaK0pvrgru6Orbi0DhzkWgVZvmwsz4pdQIdK%2Fng%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"927-19e8af972fe\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2343\r\ncf-ray: a10e2cd70ccf723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2343,"size_decoded":3324,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"71ae5c6e13716b52f8c86fa8b95e24f8","sha1":"3aed891adb27d06ebed2644b84d2582e9ccd61a7","sha256":"72416395b82fd2450a7f34d84f14045c82b6a1037cc7f9e68360731287657e73","sha512":"a927ee08965581d4f9b427f59b586bf384e9bbda913b2e7fca1e32417a465cfff74158d8b88dd0217c95c8ab70339d0d27cce0318026c57627e4371d38198781","ssdeep":"","tlshash":"63417f215add0873ff524bf38aa06c8852a40c7f91b19909388c3a9227b6b65c4d5ff0","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:41.125289Z","times_seen":19,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/FinSortis.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.707Z","timestamp":1782329721707,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/FinSortis.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VTsRpmJxDN5a5FkPJsoWzV%2BrUAYlZ%2FWtCVzfCfWIiJUllhHBA4W7RqvaOztMT3Q0hTX8BVFfDnClstwEImy8UkENwh0hX1ZHJbG6xBnzbYk9nOkDKWBWVkT9VUsyLBxGaOUMGw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2d80-19e8af97242\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11648\r\ncf-ray: a10e2cd8ad51723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11648,"size_decoded":12629,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"1e419bdd2c94da0de51376cdac3a94e8","sha1":"de664db950f60dd41a3977ab40eda6e8108a1802","sha256":"04a43b7ededfd235f6094871af81fc3de1032f7c064f99f51d0a0f8177428303","sha512":"7cb04350ea65ba876c6af790139a26369cacabd2ec2cab2b129830a82b649347ab780c3b879fe48b1c5ee2df55cbfac8e007ebcc971cde5b65097c8f76a717b0","ssdeep":"192:eVfv/M7EBZNmBIyt8podO/XfS/Y77bIKFLlMUujeVVBE2veKbQfIUV:g//ZASEP/YPbNFBMU/VHbCV","tlshash":"e932ae261925e492c3940f4dbb9a59227f36d04b7958c22ee8f04243d4a41bfef38cc5","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:40.663608Z","times_seen":18,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Cryptomintex.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.000Z","timestamp":1782329722000,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Cryptomintex.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GoPeaKWri5zeTbVpYqCESg5YdJwd9hOoR6XyISiDA24OC%2BRPOlTPa4ByYAzXyOIFdNBeBF6AzsFWuiOpk6jzvUdlYthDl%2Fw1gD8ZFFpzhQmbBMqLR0dc25Pv7dxMVRdHhGpCFw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"289e-19e8af9721a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10398\r\ncf-ray: a10e2cda8e5f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10398,"size_decoded":11379,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"475b2e1524bc722891dae711361af1df","sha1":"8a945450ad7f31def8b131f148a26e95098aa891","sha256":"8c468d497915d3bdad8bbd2b9d8f482a46004a47648af68c667ab560c33dd9b3","sha512":"7c79b4f63abbeebd943b816284d8ceb2981ec678f102901ffc6f772e207ec218e4264273558a5ce75c856d76fc900c0e4e01eb576f69f8dee2da263ab3289b40","ssdeep":"192:Iys6aQwiE+j5j/b1rfrCrdyeCM0sq9LbH56wDwhz36eSxd:O6Zs6/bgrs9L756wDcKvd","tlshash":"1022bf93313a8fe2f8b5bcbbcd01612bb14f6653ad80718ecd65a4d1e5fe1061350597","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:40.919233Z","times_seen":17,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/CoolWallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.872Z","timestamp":1782329720872,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/CoolWallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8J0OwORmGRdUpj5oulSqAAHBe%2B4DaYJUftXBa2lgPBdENuZtbyqwwgOi4%2F83Ins6zMCXM9Bgm8MlGW1gvM9lr%2FS8sVwiVht5k3Cwa3j7%2BUYI1P4P4riFpshJPYF6nYPYmqY8zA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1534-19e8af97356\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5428\r\ncf-ray: a10e2cd37ae3723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5428,"size_decoded":6412,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"024e83a1e5aefc2f7a26a88a46bc4e15","sha1":"2d624f31adb5709d80a103ae34f890bc066b4671","sha256":"543a21d28acb0de7a4cced8c8caebe7892bb06276478912352b82db72de963e4","sha512":"eb344ac3a1f55e98916e7b313a2112d0a48b57a305450d3d91cbb2af7d79ecf2ca252df88dde4265af7193c39bc24b866265902658f342ca897b03e3194f27e2","ssdeep":"96:NrpPEI4rK2CS7C3eSGCEEKWVGvQj8emFZPjMplYIfRN40nXsBURql:bWewBEKW+Qj8LFRkYURNBsBNl","tlshash":"e9b18ec0c6968b71c7135e349738f9f201018067683a1b59898ba1ccb33d39294b9675","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:40.651743Z","times_seen":20,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Coinbase_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.939Z","timestamp":1782329720939,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Coinbase_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zZxBIZR437I1dNxHV6QrNbzfXtkveBE%2F0tpS0OFNIUVqBghMThJPRhqtwbMHNIAZgVi2ordD9YPdyV%2BLpffaMTUwkiSN9PiOEnvuJSd%2BJ2VL7WvpY9flCpzeXhHqvPNE7P9Mtw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"70b5-19e8af9734e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 28853\r\ncf-ray: a10e2cd3db0b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28853,"size_decoded":29836,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"dadf7348d316de30940e2df53ef7b9dd","sha1":"5314e6750935c37261b6067626259d0178999262","sha256":"92c25d2f2fa086804791debc19d569c25f5d6871e750a3379c72cd287d45b7c2","sha512":"fb49ae8e53ac88a50d85503a3d512002082ef48a40f764d453dc935f46964c0ffd7721e7ff4673457b3a9316122738d0dd63b1ed7187628d189d36ac1ef2a8fb","ssdeep":"768:rhSjVpFClxno3yfmlMokejeCbmiuAIiupXXMU:rkjzY7mlJkUbkjdXMU","tlshash":"26d2e0e33f6e6501a439057cea6a02f6495fa376bc5fafcbb49d88db2045e0496c401b","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-08-04T05:59:26.030262Z","times_seen":193,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Spring_Land.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.252Z","timestamp":1782329721252,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Spring_Land.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i6QRRKaAAfqqol1r5uzryF7TKgznzYId5U6k5yvrVfsdEwJBOcSJva%2F5ZnL2awvVG9mJcO8Pot96O8FUlhpoEJ4l7P368IJXS8%2FCIRrEI0euNKVzynp3Xsd9ttqKIiHgqyjU4A%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1a4b-19e8af972de\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6731\r\ncf-ray: a10e2cd5dc37723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6731,"size_decoded":7711,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"bca237a3d6811239c1ed0b1f69c78950","sha1":"4b26c75d77c6a709cc12bf12a028dffc22bc891e","sha256":"ef79a712cfa581fc62371e86545a077caddc709efd6f9262cca511b7e6ce5b9a","sha512":"fd868c4e9a737278c2f2b5856b515ed25163beae4aee9f69f2a7b2fe10db765bdb3e09cb7fce2feb8afdc51ba32f857ea0833af45b1cd6618171c918308b7e6f","ssdeep":"96:EDG2aXEovetXncixQahIQFDq1otChXrTvZlYlMlsTsvdRRwesqT8aaaaaaaaaaaG:Ei22zgXxPh3Fq6t+5lvv5/2yFRa","tlshash":"6cd15bdaec4ee0a7c888283891a4305afc9d9c7587076ad3d6cb4c6426de507bdb9880","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:40.571688Z","times_seen":19,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Quixotic.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.268Z","timestamp":1782329721268,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Quixotic.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AbCF%2BgbFmyczgvdZt4kZoFmfOSmqK4%2B70iONDCoz8J65rOHkfbrlgYR8KDI60px%2B%2BkJZzdc%2FxPbWdVQAuk6EHj0lox5LYhSVveUJDPzVX7hZJS5HvQX0KJ4PhLO%2Bx4gRuRaJ5w%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"14af-19e8af972c2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5295\r\ncf-ray: a10e2cd5fc42723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5295,"size_decoded":6283,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"23bf507530158abaa88e54aaa68b04a3","sha1":"9d0c39cc60ae2ef36c5e1fa74aab6848ae8d7222","sha256":"95c58f90fde2f594232ff9ee2f8bc5e69cf1dde8d87e3a160906e0a17fa459aa","sha512":"a4fa2b5b3de4d27b55f300484dffd36e68c3a68d877f1c88bd11f03d555bcf1e68161fc5168ce44601b387e2f5ef541a1bc2bf99e26511a15b0e75623985950f","ssdeep":"96:NRZAsj43oWopszYxxDFmxjDvAj7g/NXToJywny34TL4YaZq3ARtq8eShx:N8oW/GSKg/BEY4TbaZq349eux","tlshash":"c5b17d4d87fc0a81fb41712df7c718ac8581dd3554e15616200d93b777ef29049eec99","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-06-29T07:04:41.011985Z","times_seen":19,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/zkFinance.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.843Z","timestamp":1782329721843,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/zkFinance.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4xjLtAsVBvSFrN07l6uaQpE%2BORfKjYczrtrZis1DW9IPxaEjs1s3Q%2FV7m%2FNitClEgB8r%2BU1m0c%2BelgI29M96jGqXU5Lul5vD%2Fk3kRlPueJ%2BHC5qe1VIdjpsPWI7mHgHQ01%2Bo0Q%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2f32-19e8af9730e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12082\r\ncf-ray: a10e2cd98db0723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12082,"size_decoded":13075,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"7fab73a2537e46e02b9d0cffabf9d758","sha1":"4e21727155b585969643165f86e04bb63de309b3","sha256":"d70daa26d425954aeecef83b1b45ccbe4984453930761edb829fb70d4263da92","sha512":"abb868d3dac9eb864044d26dcfc6a22742d8217febad81ca02f3a09a6c12b5746fdd6fd5e8c42dac2b45a50b12be020bbad54e54c300d8d8b15767493a93bc1d","ssdeep":"192:0e3pw9ohpAsDKTHBirF6TclhtW3Euplf96oL8bXTwiSTXLz9ruuKM:0e3yW9m7orJlhU3HB9668zTwiSZyDM","tlshash":"6c42bfd5c023fedb5e6ca0870a016077c0e46b94983d6b2db65e8e0ed7c55918c39a7b","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:41.17449Z","times_seen":18,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Tokoin_My_T_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.483Z","timestamp":1782329720483,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Tokoin_My_T_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SsiIcLgA8QAubbqugqgPPo%2BwHku8qDVr8Wdcb2PIfl94n1bc2Osc073RClgdpwqd%2BNlQKP7nou46YJKMKmt4EDiCyxbKqwOEJ4toVUKJOo4eaKvco%2BUyjwlDQTV8f2MF%2BQ2KXA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"23c0-19e8af973d6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9152\r\ncf-ray: a10e2cd10a28723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9152,"size_decoded":10136,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"6bc00fc9c4939b63648d58f9c8d35ff1","sha1":"545c05d059cec2038f35e4890989f764d1a7a7b1","sha256":"2f54041181ba5c94c05d52939f0835ac977248f2a540a48dc04fbd1107a8e2bf","sha512":"67d5a917bf6adabe541be4b1e383df9c2664fb438affe8e21d96e46343985603d553f9edede32ef5ec72cb55a15f2879bbd88609b90b40e1cdfc4bc7666127db","ssdeep":"192:q757U3kTzEiMkcgRHWauryY/XxwgHGnF98QNgdUn7nXV3TQ7:qdY6EycEWnbXCXFaQNYeXV3TQ7","tlshash":"a012af642ca8df0ec05776339189885e253293341d2fb7261ddc0e45c7acc208cb2fea","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-06-29T07:04:40.878379Z","times_seen":19,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Monetha.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.470Z","timestamp":1782329721470,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Monetha.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mndSxneeRD%2BjtHISWzxgVrzNv1Qz%2Fe6UyCyeB%2FtijRy%2BRD%2BR8DFKxg%2BgcqKPfYAv3OLRTUqthOYQujMGSBeu0zNRFL5aDKsRmKCMZZkQl47gjbYt9j3IUjWaBJjiKID9kAiK1A%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1ab6-19e8af9727e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6838\r\ncf-ray: a10e2cd73cdf723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6838,"size_decoded":7826,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"5f6275a290e2a3da2990932160e21eb6","sha1":"eb77610224c4fef3220be395a07ba6c2ca880ff0","sha256":"fb171a6437faa369331e08a5836b258f2cc58b18bcf908cd172cee58335d0fb0","sha512":"c81d38866848836dd372802dac24b363eafe32e31e2b029be8e7d651567de19d0a23f293222df913bf13cf3ff3f4d43cb11ca82334d507a41bbb996bf168a01e","ssdeep":"192:SC8y7ttqdlaj0Ta4v7aAf2oTq0EDOeE7Lriu:NfISj0GUr2o2ZDOeOfp","tlshash":"efe15bd99da0ed100d5dcf59e8f56b0cf4f6212bf4464fc8673ae963a64836008cc75a","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:40.622026Z","times_seen":19,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Curve.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.501Z","timestamp":1782329721501,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Curve.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=suxuIcVe6c0%2BxTfgV0IJRr3rwD875J9gh0WH4tbxb4dAwbE%2Fm7coyoEYPP%2B8Lk7HcDsWl0P9VfrX5YNT2F%2BMyCMPvtz37ehymZOWpDf9htQnErE%2FtOfLxarrr27bGd6K5SIhlQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"9f29-19e8af9721e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 40745\r\ncf-ray: a10e2cd76cef723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40745,"size_decoded":41732,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"c4ca041eeaac5211ca2cdfaf5d3f1a80","sha1":"db4d235aba4a145594965069887566bfd26961ad","sha256":"35cbe9c99fa9be18f1f9b64e20d92c6cb325e7698751202cc6559d25ebc0c5e1","sha512":"7cb96682bee6e45b379ca527aadf22808cb2834398635f2895ee3996119e1fd6038e78e6142b7a85170ff559403901c2cb3380235ab68aa569a8ffaf99d00201","ssdeep":"768:+Fv2UHaRcf0fz0S0CVSbJU2ejKann4UMwaCUIkx+cPqIX5sXzhYNIS:+EU6cf0fYSoNU2CKa4UJaUk4cCpVYGS","tlshash":"5503f15631867e4b1b126582b8140ab5f94c5e3603f882f87cb6b4bce374bbc2d9d319","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-08-04T05:59:26.007113Z","times_seen":34,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Violet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.105Z","timestamp":1782329722105,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Violet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yKINXqNCGSqN2bEuvxDOo4dNxrvi86dNiybn4nxwIG%2F%2FDYJGtJUmKwnJZUQJcLqbLUpuCaJuf1ZW%2FpcnGyLoGCxJPyah2Cm4gc7t6XlKbTKmNFZML9aucoHUeCxyHyYc8%2FFOPA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"f9f-19e8af972fe\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3999\r\ncf-ray: a10e2cdb2eb4723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3999,"size_decoded":4982,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"4757fe681226ed3d0376b8ee63f95285","sha1":"f4801b4a44574142465d9e27948a17d573910fb6","sha256":"3ac55f7c0883403d36435a848dfe4d7336d07e06e2d81807af82344ce58bf1c8","sha512":"ecb0a97f787d499657a8bd263c4163e12208fe69caa38ddc01ff5ad7374fc13b920878fc1fe16f8bf6ba385b659293660ec68f8805e3a101e4f6e28c2c15d925","ssdeep":"","tlshash":"80815daf7f95a7d58a6f1d57420bce804ec4538e8118b311a5db493bc3948f62f0d248","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:40.772457Z","times_seen":17,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/JASIRI_dApp.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.114Z","timestamp":1782329722114,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/JASIRI_dApp.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fp1QQvoKJkXPE1z25yGChLX3jFwEyEzOmbplVpLvTPgrfgtCUNgvOA8iGesO2WSXrVJsj4OAvPTQ1oJudoxuTv5TknZFK5PU5yCDARh3xdXS58Eb4%2Bs6OS54SxPfL7PBnt2pUQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1858-19e8af9725e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6232\r\ncf-ray: a10e2cdb3ebb723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6232,"size_decoded":7210,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"ad8b3a4b66bb40f1f259b66ce2401c2a","sha1":"2439450d8ed5d37d69e6e8660b3260d18c3caebc","sha256":"4ae225338597a9f958a19ab5ec4a97c33f154323255d19dcb1312124749a6d56","sha512":"783fe50aebef1f5023cca43a1e14e745907093a98241a0a6cba61639fed3404987470a103f78c7a89d5675bedfcad4d8aab54af6c8f747b85ef5b9b1d226abc0","ssdeep":"96:nsdAdudGXdL1uoGo/dv7SLcqHIZkg44WUiNCDAl2dc7AbqgI9ihgaLgzWhGQ0xLy:pdD+c2Ig4WUiu8eI9ugShGQ0xLy","tlshash":"fcd18e7eb8f4e86066466253ff3d7a0357dc83cd6c0cb66628bd16fa282a292cd40561","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:40.644457Z","times_seen":18,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/animate.css/4.1.1/animate.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.579Z","timestamp":1782329720579,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/animate.css/4.1.1/animate.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://skyroon-claim.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 4216\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\nlast-modified: Mon, 07 Sep 2020 12:33:38 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\ncf-cache-status: HIT\r\nage: 2695\r\nexpires: Mon, 14 Jun 2027 19:35:20 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PsNrTdzwHP9tI6tGsfNrKrheiuWfswonkZS3A5N88rOsDZHxKXb82PHLXbcrNcY8IHst3ZYoDa4sbkB2%2FPnDGhq4gJx01veJa2lu8oPa8P1iM84dBcZfkP6sihCMuXNjDtZZ52Zz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a10e2cd1ac38b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71750,"size_decoded":5228,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65348)","md5":"c0be8e53226ac34833fd9b5dbc01ebc5","sha1":"b81ef1b22de26af8a7a4656f565fbc91a69d7518","sha256":"5fbaeb9f8e25d7e0143bae61d4b1802c16ce7390b96ceb2d498b0d96ff4c853f","sha512":"738daa4d2c3fc0f677ff92c1cc3f81c397fb6d2176a31a2eeb011bf88fe5a9e68a57914321f32fbd1a7bef6cb88dc24b2ae1943a96c931d83f053979d1f25803","ssdeep":"1536:h6uNQ3fdPwwanleMf72yMPkZ8PFwh1nAukdDO3Xyr5Ir5eh0dTo:AkZgwh1nAukdDO3Xyr5Ir5eh0dTo","tlshash":"a66329ae4891128990230f6787cd5ea84b3dc6a355721cee33552c0b8b46fee73de617","first_seen":"2023-04-05T05:17:37Z","last_seen":"2026-08-18T23:20:15.722163Z","times_seen":32744,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Phantom.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.938Z","timestamp":1782329720938,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Phantom.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eIh3hc6nwmPiyJQNn5RTGVmphcMpKn04TzaQUxpIj6Y2vxM5OI5v50lBpESHuHPbyIZk%2FeXGUglEkDnYvtMU%2FkpEgK8XrbhQ2WnsGk9fDZjDR6B0KyfvG6muRVLaZ3jzKC4h2Q%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"c515-19e8af973ae\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 50453\r\ncf-ray: a10e2cd3db0c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50453,"size_decoded":51434,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"3f384b3bea69cd31b407da901df2678f","sha1":"a33a8b4cb7f3be090e6fede5f58a5a15695e708f","sha256":"af639e2fc10cfd9a51c10e12a56a2cdfca5b2017d57fc13e1b1c3e8d3518f31d","sha512":"6d954f01ee0be7582a3b57c5202ad7b608d95db55f42d8d01c8bf346fd79da97aca1ce2e18fea55e0a19a425a17764b314bb92535bc78dee786baa62808b66b6","ssdeep":"1536:762F8dGEn3ysQM7AFINd4zn6q4imiXQze:fYM+NOq9S","tlshash":"933302cdcc31f7050aa5ac2ae0e4471b2236b8bb8ed23714a8d52543e76f49730b029f","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-08-04T05:59:25.980194Z","times_seen":192,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Fizen_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.063Z","timestamp":1782329721063,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Fizen_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zJRWKLJbjl6qN8pK50y7n3j%2B1TCiRehHvsPaW1dZQpTieel83FHXSG0YA6ebB5rGegW6J0effwUkKwGyLFNvp%2Bjd9AzvCLAE1p2zAeoQaEkNmm9NIqc3HR5NBC82xyFIibjV%2FA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"191c-19e8af9736a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6428\r\ncf-ray: a10e2cd4ab7a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":6428,"size_decoded":7410,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"473227ceea3cb0fb84f9197b717e5806","sha1":"4ff76cab1e990701b14362a6681d2547adf448a5","sha256":"3abcc58c58c2a60a3f35eb8bd72c81c34151509576c33d22f6841c8d5728080a","sha512":"e741a7dac7695b61caf6381b35400530deaaba9207b39789be66b9add83020e83773f040e2070451f1d844a705abf1a123987c126afc67472128d1b97d13b6a9","ssdeep":"96:qQdWf/U7DRzao/DqZVIL8tvQkXQgQcT4cVC0h1zuUfvSZfPkH5QqqXN:HWHqBl+ZbBTQcUcVCc1HXSo5BqXN","tlshash":"48d15db15e707b0e025ec8ce271b31339de7375cbdacd311c3531590256c36a526a683","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:40.715851Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Nodle.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.151Z","timestamp":1782329721151,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Nodle.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6c1IWiu0RKFaGYunbxIeYikNRYDkiWPB20WLT17A6s87cjX%2FZOr6cItCyNo7J%2Brh%2BCKRwwwTBJukha3%2FwvBxtGDb1tteTT9XgTqhdLWyfGg%2BvmID9HCYnaRpYccWOxBEjxOJEw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"37e9-19e8af9739e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 14313\r\ncf-ray: a10e2cd53bc8723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":14313,"size_decoded":15300,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"01861973390f3804a736531736c129ce","sha1":"5fb1cb9634b5ac5a3bd08447b7d7d9883d1f4b75","sha256":"c4f499915997884984fcd3ce47dc424d775b53ea29742941a5bc099575494126","sha512":"9d65e864404773ac1e4f86123821c16fe99cc2200a7383d00babd9707fb68cee14dbfc4a40948cfff9af11e79c3f97784a72fc4870fde4d0a8f27026f34f45de","ssdeep":"384:YLph6xaS3kKNe4bezPnWa5SreRqNFms7OE:wh6epjvX5SrMYiE","tlshash":"de52cfb109a90a65a9929ec4d6b0fddd040175bca211f9f31782cc4eb92b1571bc35fb","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:40.670483Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/VeWorld_Mobile.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.156Z","timestamp":1782329721156,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/VeWorld_Mobile.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YDYypUCN1XDhbAiKJb7EfSLcx%2F%2Fv6K9ljNUEP8fXYifSg5aW90Brt0HjedY%2Fd%2BZ6zPRdKsSJk1Jn9h%2Fi2MlYXbrE3KSyemrmKcxqn56YhRcSDGBE8AFuDJ28cySeEI6twmEJFQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"21ef-19e8af973e6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 8687\r\ncf-ray: a10e2cd53bcd723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8687,"size_decoded":9673,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"6f848173f8fcd51716aeb9ba25b228d8","sha1":"74e1381ed05606be0b2dc55bdf76b8c9f7a1b791","sha256":"2395704c71fa85d44c609626420338c6bf1b64519f36cdb03e8b76a012fbc2ad","sha512":"4387438f0e038bdda2c5cd85a82762b22936f5c6886081106dbc7b7e732dbb4d9a2688fa738e69b37d5a9b0b9c17a8b61d52f54addff458ed04bd5439b05f3c1","ssdeep":"192:5zEz8sh4kFps/Yz7PzJ70UFZptADc8jLVDn27QdMY+LmYPUPFCmR:lEgmHFpsgz7PB0eZLA4sZ27QdJ+mYPUd","tlshash":"08023861cd104842b498a5b9dfb20d442b0d6f3d8dbe9a72fd634c7a2fdfe4581b4064","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-06-29T07:04:40.954275Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Platform_Gameswift.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.571Z","timestamp":1782329721571,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Platform_Gameswift.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N64%2FH9J2sxPx9DxAoVZSIu7E2OkrilRF2VXztzLJ9WMT6%2FqAIw%2F5DfXPupwvIyEroAjK7APbw0zQIq26jSlfBGbrQjQSjAJcuhDk6oM4Zxg5PhRwlwdKTTVpsTCYAl3v2MxnyA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"1279-19e8af972ae\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4729\r\ncf-ray: a10e2cd7dd1e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4729,"size_decoded":5711,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"4ad6baed8bf9da918252fbbb3a8e7633","sha1":"03e6342ed8ffae10b201e833090afab1f780e9fd","sha256":"0374a0d4c91a991a70431c49c56fee93cc8f53386f31a988df30c9c5854f1916","sha512":"88497f0803082a7699219a2f4cc74757f0310ce982a14655e957808ed42dd204f933d573a87525ebabc8c11978e2a3e0432a42b734ab8b7b585b4679cc57bec7","ssdeep":"96:R5FYqgSlOiELojshDswVeYIY0qEMq2Wz5DN+XU81b/6T:tVg0OiEDJhNW9hWz1zC","tlshash":"a1a1e4232cc06a705aeff7108fd75bc061d49d2f46bff748272aa20a360b4a804d569b","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:40.978243Z","times_seen":18,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/fry.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.712Z","timestamp":1782329721712,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/fry.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G5j7SQmVBc0Q%2FBQW9XkVA3jfmSnlg6Wb6M%2B5PNuqV96XiooCnsoM83y32noKD%2BUo2nWDbex6ePiijhQpf%2F0iodGgNobcXd6Gkk1xYAabHSHfAdfSsiRtVdsjWCyZIcmHBViZYA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"335e-19e8af97246\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13150\r\ncf-ray: a10e2cd8bd53723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":13150,"size_decoded":14135,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"dbe6d42995f92931fe58924b8e907355","sha1":"5b2a2f510f326f7f78e0b4aa0bf123f2f5ed562b","sha256":"34c47f80129a1b80345e7baa48b325655383bf5c8928ade70f921d5df51e553c","sha512":"307edd3eb5460eb9ef1405e18d46a3c56719fc0bb393e6b30428ae3483b553a5919da78006befc641a25b6e1d5b1a59fdd298c0e75b3a323e8e194bc686b993c","ssdeep":"384:5DS1l2avT7JdsqL271A9hZ8to7ghWyXGm:J0Z7AqChWhZco7KWm","tlshash":"ca42c048901f0726e21ad57ac096d77f3d303eb511ea458be58a1f5758c4fb48f1650f","first_seen":"2024-08-15T09:23:15Z","last_seen":"2026-06-29T07:04:41.051174Z","times_seen":18,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Roi.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.103Z","timestamp":1782329722103,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Roi.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7vz%2FTGNN9RNxPwELWaq6hnpcK0mpIj6XPN%2FjeYnNYF5R4m0f1ZfWRSj8moavA9rACmhuUwx1vVn5H6jdOF04WMijlqIfbr6j8%2F%2F%2F7DAqU%2Fj%2BH%2BGRvyJu6UX8YPlE%2B83bVASLDQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3507-19e8af972ca\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13575\r\ncf-ray: a10e2cdb2eb3723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13575,"size_decoded":14570,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"6bedb2d9a3aeb590d58a2d2fbef71f34","sha1":"be16ce989e5318d596403d3729e5058e9d11d918","sha256":"f810c65c03eb0e5671ac7e64968a7c9245ec036f3ba28abde23d64c87002fad6","sha512":"ebe53a94223b2983a78d0768efb3b0ee0aaec8457e6586de1e53182ef2234f608843dc62f5cc4e1b6602731f1a70ad77c5066fd67a5201402074c47300dbd1ca","ssdeep":"192:wdSlT+OM6UIHuAsOwZldWJEl+IaLqJ3FTT5/j6Z/CLkLGvsBq2WB2lp0Xb:wSNvj15sdEElVaGTTsJCLoGvs5W4Ir","tlshash":"4a52c0de5b98def673f982d56017a335b0628e654c3859017b9cc3289e74b3741911d3","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-06-29T07:04:40.797598Z","times_seen":17,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Altme.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.023Z","timestamp":1782329721023,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Altme.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HsvWBrrBlHmUd2NfJfkMjI%2BUeZJi78C%2F3OQ8PxR9Sk2cYMRo7A%2FrStO2%2FqI5Qww%2FQxZcKc9U9mvTioXacL1vmUgRS5r6WfmDoHtNBNTQxxmvpWeuDOcJGQ615fxaglh0zu0jQw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2c03-19e8af9732e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11267\r\ncf-ray: a10e2cd46b66723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":11267,"size_decoded":12254,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"2bd5bff0a56afbfc2bebe918201c2af2","sha1":"bec76774b6048c3ce243bd5e5deb8f9b1f9c1082","sha256":"54e53182dedd8f5b9ab1dd4d46e2529ac1b1803ad217e11f2c4f17b5fec7c4d7","sha512":"524decc8beb0cb2b90d666bd5de4c3734927703f9b3a5441413b2f7d7263de9e3d20dc57ddc31c9418a81481e4301fca87525c28d7efa3123768ec35a2ca625b","ssdeep":"192:I54JvIH/LuVpPzrsKN9JYEqgKtCxPxn4/s7NChA4LHMoQfBu4RnR5:IyJQfLgPlNMa8w4ERqA4LHCM4R7","tlshash":"5f329ee454dbfbc0d8789ce3d842c47682938949739670a39ca9f72bf896863c2135a1","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-06-29T07:04:41.276596Z","times_seen":20,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Riverex.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.315Z","timestamp":1782329721315,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Riverex.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IwCu8R%2Fy98bfZPXTqHAksKZstMgG6Jsv5T6iJdsL7L5ydLg7rJtJzRB2XW%2Feq%2B9%2B0I%2BP%2FGrx9d0il2m2rXlKiry3YIP1F67%2BwaiEmZIWNrcVWCRCBwUXbEZTbSGUzpAFCGIwSA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"34a3-19e8af972ca\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13475\r\ncf-ray: a10e2cd63c6a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":13475,"size_decoded":14466,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"f7b52922bf16d0e6c150ffd2e391afcc","sha1":"72e136b47da805ee04da3f25a14c5971b6492478","sha256":"5816e72e5b9cb094c5059c74fd4b3664d1c88ef7fb97e9bd46755986b4460a4e","sha512":"ddb8d5693deb286e42b444d5e857b4d66e931a783cb084e27d65cb4f56d1918b3cf465e4075211bee2c5dbbf3cff282d3df1a35348fafd435bc0ec51ae10d405","ssdeep":"192:eNJV0WDRoBBcgI82HqRE91BLKcs1oukrEuJZtoZ3YdNIZ54BKoxHMYdkZolGyava:eN3UcgAKW92c42JZBC9oxH7dCfx0F","tlshash":"b452c0a8667bc257e97f3b2598282e1202c272cf5e4f5df78dc1819eeac14a4c0e3549","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.918394Z","times_seen":19,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/PWN.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.344Z","timestamp":1782329721344,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/PWN.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hCl24JEz7KRSCb3lfO4bVApyIgyPav0HbLg%2Bkg3QO7Mtg3L35BD%2BTDdKCtCJPp%2Fj%2BO6vWOkaO7XRNXz%2BHzlgqq23u1A5itjm2nVZuDWuIqaar30m7dsytaG90Hds7D0Y6%2FzeZg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"a72-19e8af972be\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2674\r\ncf-ray: a10e2cd66c83723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2674,"size_decoded":3661,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"83622cbc4820a73e3c64e7b7eab14219","sha1":"c80e5ed355a0f7a6201d809191611f8571258ad3","sha256":"2594d28109d8ea5438b50968fcecc3f576de4792e6afd2a2298ef5ce23aa6d90","sha512":"99716d5198047214cf9403a8fae4742613befb43e529e3b1cada64fe2050370b199c225191ddf14f27f0f554e285bddef2af17f1e40849a140e5213b0e884c59","ssdeep":"","tlshash":"49514da682d154e1df8fc27a54451ffe574016097bcf363ea80bc075a78d1641a3870e","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-06-29T07:04:40.735392Z","times_seen":19,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/BNX.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.733Z","timestamp":1782329721733,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/BNX.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cv4bLQo3qTydlthlO0dfvzwP3UgsNksUIcDDloMo0Apvetbf%2FbGKK1h8Q5kKQ5ijS783iX7%2FuCMiutKs7GEVCdjTWIM47M3CcqojAxpUYS91itQzDWc2GbPfi3VhX8%2B5QtoYlw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"3113-19e8af97202\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12563\r\ncf-ray: a10e2cd8dd67723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12563,"size_decoded":13546,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"3f342ab9a18f785b0cc1659982ef3f31","sha1":"c30fe0761e7918f4eeec1a6c2a7adf17f30cbcdc","sha256":"732b4bfe67e90f47672b51b665dbae043615d1e9c471215f2c2ffccd28ebec53","sha512":"640c304822fb4a51ba520daad8d55172daf2acb35465f24cea6508e6f2d869269bb79d46da3f510793ed9aa22a526ec2ee88684ded15d966caa6ce6471a9ca0e","ssdeep":"384:euyJ85DgyBCMT/UYf7M73XQMJiCZAloCX8k67En:euegNCMTKHQMN6tX8tK","tlshash":"7c42afd821fda753ec8670fa14d8b0ab5b1fd315203e584f3694e5f4df989a928d40c9","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:40.979241Z","times_seen":18,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Chainnodes_App.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.092Z","timestamp":1782329722092,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Chainnodes_App.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6uCWsY3JAh4DP%2FbZpAHRiqpLKloIF9%2BdSPIWHeVVJUUi4WF80rNuElt%2Bkr1mcrDPXMBfX9h045q1FOnlVjfsDzDPZyFTC31tmqkNPnDWKDhiWWpiwP2KJJEVebFKBrJq4tk79A%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"e9c-19e8af9720e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3740\r\ncf-ray: a10e2cdb1ea7723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3740,"size_decoded":4721,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"1d0bdda67c16c789422cf2adc068e27d","sha1":"634e8d85f8a5c2d6e5ec18819394fa068e724c21","sha256":"6d4ce515b7767c9ae0104576b3e201a09a737f868ba990c6372628d3eab27860","sha512":"1774a9156938ad995a4d824c298d7fdf89f9f12e9c0407645f6bccb9c3440cc988c31b8a85b74a88315f6a4cf2c38e74746afab343aeb241acc05f49d779758d","ssdeep":"","tlshash":"98715c539539b769c6c060b689ed02bbf2250dcb5c3d537282a338786d945918921b07","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-06-29T07:04:40.879229Z","times_seen":17,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Ethereum.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.182Z","timestamp":1782329722182,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Ethereum.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mILbIxThHwKLilFiDlJV2OTq1ScLIJXR%2FM3InhQWkZDNzIQgmaVUKdLkNiBGyGo42OA8sa1MjIdVdQ4%2BjFTQolOgLyY3WBba32e1Hd8SKSML6yxwjeScjqdBcmgPpSUb9OiBSg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"15a8-19e8af971c6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5544\r\ncf-ray: a10e2cdbaf02723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":5544,"size_decoded":6524,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"361a603c40b0472bb1ed540aeef52cd7","sha1":"6b406ee5cd82146b386cf1b99cf63d805bf88b73","sha256":"5c880b63fc1499657fd6a87120b58762b01c3a10313479b82fa0d832c49d7076","sha512":"ace131a5e4a2257a9ec72407ab3cc0559d3565f9acc562f661bffb0a293e36e05defdffc9dc53baad350435eb3fde6dc96c6ffe4e9f182f438f2e7afca140861","ssdeep":"96:SO/FfvUrzNuz/bFN3JFu9b3+4WtxrfmH8g3/hMgWxnQj36pucmE4JOEWdtmXGG0c:SU5vCzAjF3Ah+zmH8gHWFQjqYc54QmXP","tlshash":"21b17dc04a229886962cd81e5f21cd7cbd8dae6a862498ad464c821b5f0b71646df9e2","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-08-04T05:59:25.992891Z","times_seen":34,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Avalanche_C_Chain.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.215Z","timestamp":1782329722215,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Avalanche_C_Chain.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xGZpfWgI1mne4PuOstwW2QE3ek5BnN3eQrgL3qCTcK%2B%2FEOGNeMc3UTvjFTE9WKQmspRofy1We22bDn3R4%2FOnDAuJ1SbXQ8CYEY8oE3N1a2skLWBXgfa84PA6oxQ1%2B9Xf2CKAzA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"87e-19e8af971be\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2174\r\ncf-ray: a10e2cdbdf14723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2174,"size_decoded":3157,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"98e28cb28231d3355f69f5ea622fc68e","sha1":"88eaccba3b148c3a52a7aac2c3a8c9d78a67e2a6","sha256":"9b3b353a402ad65e72bb7c01e568f913d077691a4fca4caa62bc1410cf01d837","sha512":"0d91cc2931d2edc7936208cd9dbc086f2cbce8ca59b80b06439cc5e903016271336737d826f8f185a2a434edcaad986fadee68bd9971435d8db8defdf612e1ac","ssdeep":"","tlshash":"71413a2ab31afcacc06f12926f7d2ce6a48106225e47bdbf8e5bc01800221f573d0623","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-06-29T07:04:40.548114Z","times_seen":17,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/chains/Bitcoin_Cash.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:22.223Z","timestamp":1782329722223,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/chains/Bitcoin_Cash.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:22 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pa7o69rGsrGgc7heiVsOb4Oewj0qh%2FJ19%2F%2Fyzop6etfOG6%2FTnoNBoZGCK%2BEtl6ncdJNQSF%2BS%2F4B9rCuHZ4VgPcmOEx4QZBn%2FWLn7oSHlwZbxbfBFrFtmWqiZoOUIhHlKDCM3oQ%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:23 GMT\r\netag: W/\"824-19e8af971be\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2084\r\ncf-ray: a10e2cdbef1a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2084,"size_decoded":3075,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"cbf476a3202d42ba95ec710310b14df2","sha1":"71d83d06bc800d93b000befe055b6f938dce8bf4","sha256":"686a73ac72821c524af6a0079c355e242405e1180b380f9a37088019ff46f4fe","sha512":"2165cbf92a3833c33727b4fa04da0d894b70c625de9718ddd599c51cbd399463b32ce2d4819b1fe85d158dbb408f2028fda26e67144981a4b671d9d6779112fc","ssdeep":"","tlshash":"3141f86083ade5724588307b64e8a049f53c1b695962eb15a19b1ed742d591cc07ecd8","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-06-29T07:04:40.57781Z","times_seen":17,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-24T19:35:13.885Z","timestamp":1782329713885,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/8siru/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 24 Jun 2026 19:35:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 86\r\npriority: u=6,i\r\nserver: cloudflare\r\ncf-ray: a10e2ca81f82c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86,"size_decoded":305,"mime_type":"image/png","magic":"PNG image data, 2 x 2, 8-bit grayscale, non-interlaced","md5":"80956d178fd832be61aa896f1089b8f7","sha1":"f9fcd76117d116a202fcaf8811fd7b5206455e80","sha256":"05a5e44532da2690b6b1e2e68ba0be053afa83241420eba02ff2777b48668df0","sha512":"9efbc932022f553d7619ed2ec8dc5d6d5e62d7d29b167c2dce40bcbf8dc1fd317c28a6f04214008dc35fd0a1159e82ff067505f778fddacabefcb89c6cee70fd","ssdeep":"","tlshash":"93a012c56180ee26c1890273c1540120fd302142010219b0044bc8110411e09d294b42","first_seen":"2026-06-24T11:53:29.485883Z","last_seen":"2026-06-30T14:28:08.528453Z","times_seen":113,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/Essentials.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.554Z","timestamp":1782329720554,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/Essentials.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E92oGBixiWKWEqhU%2FjaGt%2B%2BHOHhZ1QO8mVk%2Byte360%2FyQOmIhCXvTIc4j%2FpTEa%2FfapgzYPecSYaMBLNt80SULzz4QSFSe5nyLBJQk3MY7XUqMDK0f7%2FxH2umFAZM9%2F9znR07MA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"11bf-19e8af97366\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4543\r\ncf-ray: a10e2cd17a3a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4543,"size_decoded":5537,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"458c640584c9e8bbd7d092bd39edaf80","sha1":"cba6b837e3a9fce722b92e7f0d882b2c2f0571aa","sha256":"baf3bf39a29f4b45b9613d9e3a0620afc69f4edbd248d4d089e33a12413c7701","sha512":"b886ebb3ec49be8f1a3d8776d58f25a21431aa6de8fe80d013ee26ed183b91ad21accaadad120c8758a61e27e417ffb3f1e838d3a280520d36c74344a62cf5b2","ssdeep":"96:M5biBTpKo5xepzPNPwUWpPwayjBogEGrwz:MlulKR5NK1w/BtXrK","tlshash":"1d916bef1c31568ce0f1e2362537075567f418d903c9a766f17bc74c0a4a1dadea814a","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:41.04813Z","times_seen":20,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/RealT_Wallet.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.636Z","timestamp":1782329720636,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/RealT_Wallet.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z%2B65WVnwBI%2F4Bi2wEd2zs6EnE4p415dDzpgIH7mTVYuZQyFPR4oPlL6%2BfQUnf7IX6h2qe6XYM4fleHT0CpuZ8AW8%2FmCYW7s%2FAMd%2Fx8ma9ZFxwiuJ9x8F3gOCJI%2FwUX%2B0orbsJw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"245c-19e8af973b6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9308\r\ncf-ray: a10e2cd1fa5e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":9308,"size_decoded":10300,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"d7a7c21aa3a43328d45392c92fcb5f3d","sha1":"4f9f7beec609a626e8e00f5da1175210d499af7b","sha256":"b3c238ec36ef472c91871aad3325d714ffaf96d7c22c75cf541b627537266563","sha512":"86f2f79bf9144ec41dffb94063c47e582c15908a8e892e271710c25293d6f0bd9e62d5cb714020ce6d29794bf3bcb8b51d9dd103026e6887b865ca8bb75f94c8","ssdeep":"192:pHHjSDdF9c+2SEU9BHYh0d/LgzyijlSwcHwmup46:pHHGJF6Y5m0F5ijlRm8v","tlshash":"5612c01e8a6d08776dbd76230787c147fcb86b3376c5a60e214f1289ac9713899103eb","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-06-29T07:04:40.649239Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/wallets/iMe.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:20.929Z","timestamp":1782329720929,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/wallets/iMe.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:20 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=li10egwt0OL6pkgQvu4tkdXOflc67vRoj0yYMkBHnHzQDfzun36yHFv1fRBP70amelU%2Bch3Nn78F7zexKynCSiaM8o7ssYnEfpKL2SePXkOJ6OB1Vdqeebf9dTLv%2B109%2F7ugvg%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"23de-19e8af97376\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1670\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9182\r\ncf-ray: a10e2cd3cb04723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9182,"size_decoded":10164,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"a058b8e001b0f0645ef8e04727bcd20b","sha1":"62a80787a76a6d98c4521fa03901897a15ae6730","sha256":"81152ac7de23cd2787545454a1ee188de1a132ac2506101e41155e78be1b72cb","sha512":"8ab350379334cfeec1719929a8edb299276b63285d317cffabde54fbd91db84551c2fc9bb64193de3477e2faf531006280f8e6fe6674effdc447e825e8a303c4","ssdeep":"192:ikzVkjjVWrzzBQMz4nYc5RhQpCujHUBHGATMtvkXvIrSon9inhxKgK61EiZaETGl:t4Yc5yjH03TM6gOo9ErpK0U5K+p","tlshash":"4812a0c72f6b11bb4db80107f7155a51cc69f52ab8c7263cd9e40dedc9083a4f795806","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-06-29T07:04:41.257718Z","times_seen":20,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Collectz_xyz.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.468Z","timestamp":1782329721468,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Collectz_xyz.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YUUMMStcDc21supqUgY7wCzWK%2BmlxU3MiP5DiBuBITcS2Fsrx8MO3LhAAYWlLnO15IHQNQ6WwK2cbVdgIaGZPpvgMzY9nvwgm6122GDZkf9AkfUYEzJ5zFp%2B6UW9y95F%2FKsKdA%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"2f30-19e8af97216\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 880\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12080\r\ncf-ray: a10e2cd72cde723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12080,"size_decoded":13062,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"c21178b5069446aee748f60d938cb260","sha1":"cb499187e74acc4c9af23e733df182f556a61ed9","sha256":"ac98d0c3b90515b9ee7cf869b93e11b2c7bb5fe9bb105395958771c61a9f652a","sha512":"1d95938242088c102f11455a695397e2dd6607f754699e67e8fcaf130af050ee4665b55b250b5af9892ba8fbcc5595118fb21f78de4928e6c3d0b4dcfd6f609d","ssdeep":"192:97cnRu4fkUYdOyH+rTApEZYZ9kyfHTiPQEdXn1dD4hfktzwenCSjOUo3bUugX6I:972ECkHZaACZ+OyCQY1qhfiweCSjOUoa","tlshash":"e042d132444cf123903f2855f16d498da1d2e858ee2152bb349472bdf64d575d06af4d","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-06-29T07:04:40.66771Z","times_seen":19,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyroon-claim.xyz/0x_assets/images/dapps/Gallery.png","fqdn":"skyroon-claim.xyz","domain":"skyroon-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyroon-claim.xyz/","date":"2026-06-24T19:35:21.566Z","timestamp":1782329721566,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyroon-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:16:57 GMT","end":"Tue, 01 Sep 2026 01:14:27 GMT"},"fingerprint":{"sha1":"48:25:2C:16:23:EC:35:61:D5:9E:21:5C:28:34:08:20:93:A0:C4:D6","sha256":"BB:2B:2B:B2:DA:AF:94:59:08:FB:95:90:F7:BC:7E:4B:CA:CF:34:60:BF:86:37:9B:A9:F0:FD:4D:41:8F:40:9C"}}},"request":{"raw":"GET /0x_assets/images/dapps/Gallery.png HTTP/1.1\r\nHost: skyroon-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyroon-claim.xyz/\r\nCookie: cf_clearance=FUKPTiTcMqS1i_ZhigadrLbFBjwcras0Ch3Ooix8BLg-1782329719-1.2.1.1-Z7BNebJfOVNw7O32YDNdz1QkhCrLnGN.zmSmY.qJKWCWxk8gj00gSVsI_vqHRRDAzTvd.m9McRXfYgPcgV8MGmp7JCge9hlRUCf3Mpk4YIdE_0.dAJ5Sm8iGDg2rQVJg894PeNhUcNwrdllhCkIUeBsN2fqQBuSrsiM8GE1hD3frz2nX1HswG0Ad7m7kRJE5reE14yaeOJemfh_WfWrDz52T2uThXhBqY8lH4oNQJfzBkIkqE7NxhjmOyPFk4r6RriYxsj9yD4X6UtQF6zUa1Re7Re0TPb5VBw3fuPQiU456tuyv6meM9CpOpRgwxUK_w3Ub.SsXZx7QrxjGmG8F_fYrhnNuz2Alwglu_YO9ghWRRgQrOQAK1Qq9FHaAuyAxMfaDPeeSKbGQbBmLsjKa7eTO8aCPoWke63P4HtqwMdkK2lNeO.9BB0LpZpAXOukLSi8UOI44ts0mkJv1I5XkSQ.6Tnfh3ocV6szIziiOV75Zy2O72GnL_uU.KtXnxmpR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 19:35:21 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RCNUzMVQbhw9udRyyYlEKy8SV1TcENX8Qut2lEmBuo3wMkTCVqvI%2BQJTIrCcXO2I5hR8q%2Fb%2BchyGHTmqIDAVvS0BdEqddf6ung8qettOMM51wjoHPUmNYQXW4RElR2YDjLg%2Bnw%3D%3D\"}]}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 03 Jun 2026 00:54:24 GMT\r\netag: W/\"171a-19e8af9724a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1669\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5914\r\ncf-ray: a10e2cd7cd17723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5914,"size_decoded":6898,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"f872aea69988c46b50db1d04760c7234","sha1":"e890e333f8a3b7bb2fe7a74eab116d01abce3090","sha256":"fa1ac1e497ca2ca94f5a6608087b650c3b967b19b6a93590c27b19de46f9b004","sha512":"5f0ebe3618181b67e0bc67d3a8bfedac3692b430ddb31c39f629fe52a55757020da16e6b2e39d4fff175c2fc27d177673f9532811b18011e042b14e36d126ae6","ssdeep":"96:2I+a3FZj8zSwR+F2YF73mIq+O5Stm3636ZvthLAcbReB3M0Nav08Z3:2Y3UfR+F2CKIx/tmK36pthLAcb8Mw8V","tlshash":"07c14c9200f27330bc9d9d64a7f877ab2d635184b565b32552d22c62fe015e7d18370e","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-06-29T07:04:40.682989Z","times_seen":18,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"skyroon-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}