{"report_id":"ff01b58d-1c08-40bb-9934-54e06e14f177","version":0,"status":"done","tags":[],"date":"2026-09-19T14:34:54Z","url":{"schema":"http","addr":"claim-pharos.com/","fqdn":"claim-pharos.com","domain":"claim-pharos.com","tld":"com"},"ip":{"addr":"104.21.17.197","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"claim-pharos.com/","fqdn":"claim-pharos.com","domain":"claim-pharos.com","tld":"com"},"title":"Pharos's Airdrop","dom":{"size":88962,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (54953)","md5":"bbec369c762a5b20ac85d7d67fd2bdf5","sha1":"d659da1fbd32ffc9b7db919a0bd09d4b92142af7","sha256":"52d40fa7d753ce087269c59841e27a41e488c633e8510a75ccfa9766309717b0","sha512":"5d82e6cb9e3395454bcc7ed9b46c436ad24d5af51ce35b70fd2c21713c5aedcf35e16fe43af9990163cf0fad68028bb7deae7127d66100410cbbe4323fc6785a","ssdeep":"1536:5LFQFxNqzMz+vEE+8/bd4Z+pLEvUcY3o9+f4TRxO:NFqxwzYZcLYUcQITS","tlshash":"679396b6514121277407cd8b26725b4e72a9c807d81b76fdbeba5243dfcf9924a3230e","dom_hash":"domhash47361e7587504ce38b0d70af4a2291f7","first_seen":"2026-09-19T14:35:07.953973Z","last_seen":"2026-09-19T14:35:07.953973Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"claim-pharos.com/","fqdn":"claim-pharos.com","domain":"claim-pharos.com","tld":"com"},"ip":{"addr":"104.21.17.197","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-24T14:34:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zennnnnnn.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"claim-pharos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"arweave.net","ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2018-01-25","domain_rank":49082,"first_seen":"2019-08-13T11:18:07Z","last_seen":"2026-09-17T20:08:04.599319Z","alert_count":0,"request_count":1,"received_data":190513,"sent_data":709,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"esm.sh","ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-06","domain_rank":47501,"first_seen":"2020-09-23T23:39:41Z","last_seen":"2026-09-15T11:06:52.746021Z","alert_count":0,"request_count":7,"received_data":1101767,"sent_data":3468,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"relay.walletconnect.org","ip":{"addr":"18.193.31.136","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2018-03-26","domain_rank":444044,"first_seen":"2021-02-22T09:38:04Z","last_seen":"2026-09-15T13:51:04.659731Z","alert_count":0,"request_count":1,"received_data":166,"sent_data":1115,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"zennnnnnn.xyz","ip":{"addr":"172.67.188.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-08","domain_rank":0,"first_seen":"2026-09-08T18:17:57.412337Z","last_seen":"2026-09-17T03:00:37.196749Z","alert_count":6,"request_count":6,"received_data":1446755,"sent_data":3250,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"explorer-api.walletconnect.com","ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-12-19","domain_rank":466611,"first_seen":"2022-10-10T18:16:28Z","last_seen":"2026-09-15T13:06:09.954433Z","alert_count":0,"request_count":7,"received_data":1229427,"sent_data":3920,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"claim-pharos.com","ip":{"addr":"104.21.17.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":22,"request_count":22,"received_data":751844,"sent_data":11032,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bsc-rpc.publicnode.com","ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":2142410,"first_seen":"2024-05-08T23:22:55Z","last_seen":"2026-09-15T13:51:04.516484Z","alert_count":0,"request_count":2,"received_data":1405,"sent_data":1075,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"esm.sh/node/buffer.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"39e6418dc1a8a38a7baf7cbf64e6bc9b","sha1":"036b9f42abe9026454886016987cdd479ce3f33c","sha256":"64fb61aa5f48644d685f9ceabedba60ea6b5d6ce03dac1943e863d00d9e574f3","sha512":"de01074341e2a0ad5d0b74108a593811ef91c72bd775fc2ab20f98c941fc4635f541fd7983f08cd93700d7f6f582c55b95fdfaed785258eef4f0b55322df151c","ssdeep":"384:f2ROO9YwKOX7MW/I55zmhYuC2rUV5w+c7LW+M444MMazyXDNcyO9+C9YDNqWRMzI:fKewKOX7MWwGzCrfTc7LW+bcp9a60","tlshash":"d3d2b694f795b032439e65a50057980ef2b8f928640d198cf6a0f5f728b59ce88eff74","size":28845,"data":"","first_seen":"2025-10-30T08:47:32.392454Z","last_seen":"2026-09-19T15:06:14.296847Z","times_seen":756,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/async_hooks.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f78e3393d375d2bd75ee22e5bf0f3635","sha1":"2b6d82e3a17d6f4596fb2f6df083fcf498edaa99","sha256":"b7862dbfba8bbbca956f19e4e08280b529e4b27468779775a9093aef8c92dc1d","sha512":"280686efdbef542165cff092b795274efb660689426f8f15523b3478d967cc6bea03a0d7a66400552278a777655231d7e9ad2cba1bb4eb0a45f249e76102258d","ssdeep":"","tlshash":"3b515489a78bf9685b9eb176413a0103e10a0ec89d1c722cf049e9ee695e10c8774fb5","size":2938,"data":"","first_seen":"2025-10-29T19:17:04.32262Z","last_seen":"2026-09-19T20:47:36.528386Z","times_seen":895,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arweave.net/raw/FfCWnyHcPa1rzmqvIqwlean__rHkA75vLKSpXQIAKbE/?host=https%3A%2F%2Fclaim-pharos.com\u0026href=https%3A%2F%2Fclaim-pharos.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","fqdn":"arweave.net","domain":"arweave.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"Function","is_inline":false,"md5":"5e84762f7e869b2179c6821c2fbc4356","sha1":"4e18af5601293c2063bc47b1044c6e2f7325a6d4","sha256":"bd8bd60bf759c472c8ea2a6e55985b409e0d2e9e6f64de6d035abeb0bbbe2753","sha512":"64ec68ccfd5705e50b71007837d365680e23c42f3c5a46f2c9fdfc97f71d8292214d1d84fe36161e62f1376f0e758f47c987da69b0e3f5bd5ffbb7b04030cd2a","ssdeep":"6144:wFc4Uig2BOuCanXWnIVgoHQBTJRiYyOA770kF:wFxUig2UNanXWnI2oHiRiY3q70kF","tlshash":"db5484402bd13448335fdfb3a627b2e8f80a697f7a940c6fd3547d60389561adae1a31","size":296675,"data":"","first_seen":"2026-09-19T06:50:08.97512Z","last_seen":"2026-09-19T15:06:14.324928Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/events.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"acd05dc333042e32473eb39c7700cc9b","sha1":"a9ff738706c3e6ab2be579d296faecd67e438f47","sha256":"4c6150b88c1444aa1fe9331013e3f37eda9836206f629f7f3ae8f3743dd90fa8","sha512":"658a1eebb2727249df13bfd7f76d1bd38921ebc2dff63b8c1bf779973bd10483b7138649e7168a1ea7305c88542876be92a52b1da915331806436b0455f9a6a5","ssdeep":"96:yIJAOQoXa9RQ9bKVXQ6Z9cBBEMPg19H+MyLfLYCGZjiSl1YYS/07jfofxSXR261G:yyiZInEGaGLYCKt70WRRD7EE00WZ","tlshash":"404286ccb386b87113def3af707b4146f23459e0685c0408ba75fcf6292a98995a6f71","size":12122,"data":"","first_seen":"2025-10-29T19:17:04.387887Z","last_seen":"2026-09-19T20:47:36.389572Z","times_seen":898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/tty.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"dc159c105e1b73c18cfd63a84cc154ec","sha1":"347664300100736360aeda59495f5017a852a81f","sha256":"c66ff4b406bad449bfb2ced355f15badf16f4d9e035d2d300e33b5aeee64e3be","sha512":"96f99c368bef6857a0e9006efdc8ac0585af1bca468adb103b0c626ff5cada09eefeb07b317d6be3e71915f8c1a1412d4927fb743e4ed59e54c6e82af1b9d50a","ssdeep":"","tlshash":"cf01fef930f7b57246bb047444728a07f388e8f0b49ec4a0ba6599b43c655ced131676","size":685,"data":"","first_seen":"2025-10-29T19:17:04.320253Z","last_seen":"2026-09-19T20:47:36.428381Z","times_seen":888,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-pharos.com/","fqdn":"claim-pharos.com","domain":"claim-pharos.com","tld":"com"},"ip":{"addr":"104.21.17.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6910b0e48648101fe477d861e52aeb14","sha1":"b5dea578ccf0fff42656fc7e5ddfdf67707f5772","sha256":"13184f780c88c3e7e75ee35a20361b8371ec8b596b17a4337d7b46d7500322b3","sha512":"733d59af0720bf2c56837aded39dbd10ce1eab42bafc7026981ccf87217f337a3731f163c35f596df95273d1672eede8b5687bd8507d9f52a622b099179570f0","ssdeep":"","tlshash":"f4118c086f972296782b2369879f128471bc9107504ac806b44cf7421fd0e25a1fded9","size":1060,"data":"","first_seen":"2026-09-19T14:35:07.998879Z","last_seen":"2026-09-19T14:39:19.646842Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-pharos.com/","fqdn":"claim-pharos.com","domain":"claim-pharos.com","tld":"com"},"ip":{"addr":"104.21.17.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"68a6eace5b51890b472c338a85171094","sha1":"94c981ba16d47378c28b3177150e367f5eb84fad","sha256":"556b9d12ef96c6ab5a4c142a731b4a0b7601e0cc73f665a25c4284968dc1eb28","sha512":"66aca9f8e6472c50ce116c7f21f05974f14fdfb7f95d7cd496e1cae98b6e23fe832d12474f45238cf402f19217f20c681933dff29adb51afcafe679fa329d304","ssdeep":"192:ZUIcQ0HEhS+O4VXe0VU6nEaN716Qth7Ao3aUgUtWQXehG:ZrcQttVAo3aY3ehG","tlshash":"c2f17813b5d2b10a06c5477e391963d5d0aade46da8ac40af344eee8b5deca37e4c1f0","size":8115,"data":"","first_seen":"2026-09-19T14:35:08.000593Z","last_seen":"2026-09-19T14:35:08.000593Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-pharos.com/","fqdn":"claim-pharos.com","domain":"claim-pharos.com","tld":"com"},"ip":{"addr":"104.21.17.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"dbdd146a417aa9f3d34f62e31f4cdf9c","sha1":"68ab0c9ba9f7c1ad714bf88a00078fac2ca7e20e","sha256":"fccd5e6df8890b532d3b05b9fc1dbf0e5f45ddadef4361de809745e7a1bf52e3","sha512":"178f96b36e3a423564385edf94fca88d145ab9481c65a0602eacad02defd448ebae1f965fa85078b7cf849c4dd49974093b4a04b2f95bd62fdf8a0cd9d1415df","ssdeep":"12288:cJ/3WRV1QYSBahdYI+X7TNTqpYClli6OF//aG7+nUgYQyhjZbdClo2EXBTABahdr:DkTNThFqGJRk0T8bEVJf/","tlshash":"7aa55a1ea6c394764c891f6d9723b1f7ec3998cd12f9c9ba5b035646fd0722468ec8b0","size":2088644,"data":"","first_seen":"2026-09-19T14:34:41.0958Z","last_seen":"2026-09-19T15:06:14.33182Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arweave.net/raw/FfCWnyHcPa1rzmqvIqwlean__rHkA75vLKSpXQIAKbE/?host=https%3A%2F%2Fclaim-pharos.com\u0026href=https%3A%2F%2Fclaim-pharos.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","fqdn":"arweave.net","domain":"arweave.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"030125497fcc7b8de5dbaeada99c12ae","sha1":"1eeb65c627fb6f825d50b78ea53184a393e61b52","sha256":"2b7537ddbe256bd2b435101e4f8076f4cc225548342ae58a1b4861a6c494a7f2","sha512":"c9d8b59527527c6f24b931e622a756936e5b87021ba851b28c9833a51c6d8ba036f10b9c810cec75f1995dfc26aee4e47d0e5248ae340c4dc1e5daf722b30804","ssdeep":"","tlshash":"310128a54a9700b108f7dae63f5f3f12776201460084c5103ebde7aaaf23d5b84199c4","size":733,"data":"","first_seen":"2026-06-11T06:03:26.798628Z","last_seen":"2026-09-19T15:06:14.333492Z","times_seen":262,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arweave.net/raw/FfCWnyHcPa1rzmqvIqwlean__rHkA75vLKSpXQIAKbE/?host=https%3A%2F%2Fclaim-pharos.com\u0026href=https%3A%2F%2Fclaim-pharos.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","fqdn":"arweave.net","domain":"arweave.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"36e0d151763c42cc6e0fcc8a8b3f479f","sha1":"63152307596925d3b39ed6685a26a039554dd10d","sha256":"63311acdd8c127c5feba2168a46623812359a9fcdc6e5af93eb04120808dd081","sha512":"6c071781f06becadbb5024e87b2877393daeb8053e4962a80f87ec16680621dc02d4785815e689ba2274265ca54cabcef8a70ca6664ea68b81261ed91d66f1bb","ssdeep":"3072:fm3yT9DQLFj1vFherny3/w4kQcLqDQBa6GvyTbCDIwtyQ/Pl5DWa:ZT9aPoqaYk/pCDpLl5Dt","tlshash":"c404029c0826527a168c17f83c1e9fc87e685fe81058427b6571f4e6bb8a5ff00d78b2","size":186616,"data":"","first_seen":"2026-09-19T06:50:08.964709Z","last_seen":"2026-09-19T15:06:14.335149Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"362ca438ae65cfc912b7a743a781ce7b","sha1":"8bd96bb53323eab2db38be0eb2b408ddf2b95b17","sha256":"06449c96378758359a50cc186e8017a20143e74a7dc5b57efaef3ea2c88f5017","sha512":"0ae63ee9d428f583c852ea0456d74d0a9cc5ce6341734c041ee00d5236c364738ca7fe0397c3e3818a86875cd48a7eba3419174a679258ba4bc4ab3f3ac97f04","ssdeep":"24576:fpISZZVokQyZ74ejf2kwwwCbUef690riXt2s0Fj6+6:RISZyyZ74ejf2kwwwCbpf690riXt70FY","tlshash":"9c256c907361b47a539b82a898ab0500f3395859500d802cfbecd9ebef949d9c5bff71","size":1046087,"data":"","first_seen":"2026-08-03T07:57:51.324381Z","last_seen":"2026-09-19T15:06:14.276926Z","times_seen":233,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-pharos.com/","fqdn":"claim-pharos.com","domain":"claim-pharos.com","tld":"com"},"ip":{"addr":"104.21.17.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"197077cec311085fd118db7c040f480c","sha1":"0c61612ab629278027983229197cd4d66c0f44a6","sha256":"8ee887a118b56bd02a2ca27af14e4882d7adb15a6e0b41da1509911b0becee2e","sha512":"aae7411c15a10323194ca6a50e0c2c0b92b62d1603d790ca9d616159d968f3d94a72e09b3dc51dce4f1354a8ec9971553b479e78a8ada87fe12eed1664063abe","ssdeep":"24576:C+vxHwL7DFnV+yEIhYJcYbJCOnOzwEUR9kk9kY6rCsxJlrZVXV7j2w6FctM4k3U:OZDo1Ozwdhstpyw","tlshash":"9f65029a4c334279669c06b8685f1fc83d546bdca088a73b8439d0f6b7c66ef00d7976","size":1434288,"data":"","first_seen":"2026-09-19T14:34:41.091057Z","last_seen":"2026-09-19T15:06:14.329394Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7ca4c1770e526303c8b96ec681271e67","sha1":"040ceca3f1799eb067ee3e0c5c3f97e8d48e8492","sha256":"9b69c924617de012e3a6252d715e48202d0bd07eccae08190bc9d0565405d1dd","sha512":"0180a2c052ce5feedb836fc6a1e5d82f2edaa25574f0951b679029a28ca6c0e4098c0fde61858a88c4dc4fb2ee2ac196f3f681864fab71b3d205a0baf010c4f3","ssdeep":"","tlshash":"13e0867181174b8423b80da5ad81af3bebab1758a945215c334ec633f517654c9441f7","size":335,"data":"","first_seen":"2026-08-03T07:57:51.315431Z","last_seen":"2026-09-19T15:06:14.283156Z","times_seen":234,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/process.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f8382a3858672b98c93fd61c13d21c2c","sha1":"07e4611887908eb9326935084618e4964fb84550","sha256":"79e7646e87709989f575ea4ce02e0877bc9303081567b1c0d412527917ae9e91","sha512":"a1609e8e33a2b7369169fe7dc1f9fd187c4b431e9c7428e4c3929587bff4701d937b8df219b3dfa2bdc3f6b38f63afecc0d9025a6ec8901d91a5e123179ca5cf","ssdeep":"192:kFmwaFSK/rVyQhxkSULErvtAAQic6NR03ao8Yk33q:5wzEr8irU8Yk3a","tlshash":"a2f1d7dce29a743302c1eadaf0bb0123eaf407c855245650ea0bdcc736219e5a5b1f75","size":7861,"data":"","first_seen":"2025-10-29T19:17:04.329787Z","last_seen":"2026-09-19T20:47:36.569054Z","times_seen":895,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-pharos.com/1bc9b78c8e.js","fqdn":"claim-pharos.com","domain":"claim-pharos.com","tld":"com"},"ip":{"addr":"104.21.17.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"079d6dfe007713b988a75a9c190b856a","sha1":"5d1334e089038f2f630a397a96de855d580c4878","sha256":"b5d4f9d2326ffa7ea69e7c946b8b217b8491fb15a10ece2a0aec061be67f1605","sha512":"5c7e954b7df9ffd9696b544693b9183b8842e3db6ef82173f20bcc4f6a90272b07ea9f0c24f387965f547772cb54e9db24f07f0a577268187ce01e8e3afae72e","ssdeep":"96:uL2luOmApaXwKu7LyFMQQ1NdTNGYfGpoq2hRrCw7XGdVvKy8f/7SZ5Z:Y2g8p4u7LOWdTN1fGpYhRrCaGDir+5Z","tlshash":"23b197dd7dd1b48817931fb36b2bb289f526d54944b8880df1026ea03e6943be7c2674","size":5524,"data":"","first_seen":"2026-09-19T14:35:07.958875Z","last_seen":"2026-09-19T14:39:19.608871Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"zennnnnnn.xyz/api/fp","fqdn":"zennnnnnn.xyz","domain":"zennnnnnn.xyz","tld":"xyz"},"ip":{"addr":"172.67.188.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-pharos.com/","date":"2026-09-19T14:34:27.458Z","timestamp":1789828467458,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zennnnnnn.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 00:31:38 GMT","end":"Mon, 07 Dec 2026 01:29:13 GMT"},"fingerprint":{"sha1":"43:45:93:AD:DC:B7:26:4C:9B:A7:04:85:39:49:43:D5:D5:08:BE:27","sha256":"A2:D3:84:55:78:F0:19:7D:75:6F:39:8C:86:DB:E1:22:A5:1E:22:A6:6E:B4:AB:35:5E:D7:0F:B4:4A:34:3D:85"}}},"request":{"raw":"POST /api/fp HTTP/1.1\r\nHost: zennnnnnn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claim-pharos.com/\r\nContent-Type: text/plain\r\nX-Worker-Hint: fb58e9a0446ad64863365e50465a2630\r\nContent-Length: 1316\r\nOrigin: https://claim-pharos.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1316,"data":"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"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:34:27 GMT\r\ncontent-type: application/json; charset=utf-8\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ko0GBydcfwBvLF5UwsFMUu41PMBc8c1CI%2Bi7KfA9G6g4S7540TH5gRwdASq2tUPcMLd7cGNTPHBFriIUy78MCt%2FvjiQ2mTxjj%2Br91j3dTbzXXODjn9YNvj4L0%2Fi91twz\"}]}\r\ncf-ray: a3d94fb1e848b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270,"size_decoded":966,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5c5c4fa0469709f19d75829f3d233b2c","sha1":"d712ae36967449c38ae6f7bbd0bca5d8bbaeb6fe","sha256":"24ec57df3de195d43de53b1d1f8814ad658fd4b74698000aaa25914f74eb2e4c","sha512":"fd9960ee04789c925ed1bded4a1dda8799ff4880c9afc0114a39e6408df9da06eed9804fb7fb5f80fd19da8240118dac3f5491189d0425f7de54ccef8d6fd82b","ssdeep":"","tlshash":"5fd0eb928c1060385000390080f8aa93023b0d398c3e6709551a3218831e7873d23a06","first_seen":"2026-09-19T14:35:07.955738Z","last_seen":"2026-09-19T14:35:07.955738Z","times_seen":1,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zennnnnnn.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=3\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-pharos.com/","date":"2026-09-19T14:34:27.571Z","timestamp":1789828467571,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=3\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claim-pharos.com/\r\nOrigin: https://claim-pharos.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 14:34:27 GMT\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\npriority: u=4,i=?0\r\ncf-ray: a3d94fb25cc3c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":183275,"size_decoded":29652,"mime_type":"application/json; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65483), with no line terminators","md5":"8542be45715796dd26030fa63dc7b078","sha1":"0882ef2533052dd48030f08514f8798f7ee276cc","sha256":"b15c9dceb12e3968639d49d19209bdff454e3bea0b4fcfd1b82b5322125d7f3f","sha512":"b650c507d00af31cd51e0ead2bb1b9c1fcea36f407e1c2bc0069704fc95c00b603fa993547c7f54908a88b97a21630dda6bc351f2153ffa309d910e2468c25ac","ssdeep":"1536:wD6iwBGGnXRyNxQpuCpnEZB2sfPEzW6+0ASgSzr8:wD6LgXQpuC8PEM9SL8","tlshash":"7204526e8b04de662fb25388d15cf9eca15ee117c9cd5ca2e2f1cf3440bc9b7215219a","first_seen":"2026-09-19T06:50:08.962481Z","last_seen":"2026-09-19T15:06:14.27987Z","times_seen":18,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-pharos.com/ad27c676daf4b70e.css","fqdn":"claim-pharos.com","domain":"claim-pharos.com","tld":"com"},"ip":{"addr":"104.21.17.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-pharos.com/","date":"2026-09-19T14:34:23.027Z","timestamp":1789828463027,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-pharos.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 03:58:23 GMT","end":"Wed, 09 Dec 2026 04:56:58 GMT"},"fingerprint":{"sha1":"EB:F3:DA:B3:F3:52:4F:8D:64:83:59:B5:BE:F1:99:40:B7:0D:6F:07","sha256":"BC:DD:6C:C9:9F:1C:65:F0:09:B2:6A:D9:30:53:D7:0E:F0:B9:FA:E3:B0:7F:89:64:69:C4:79:58:0B:8B:28:F3"}}},"request":{"raw":"GET /ad27c676daf4b70e.css HTTP/1.1\r\nHost: claim-pharos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-pharos.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:34:23 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4JoVCjL5fUdSajdaNxqjvicdGowOWRJ4u4FQRMznDmQObl62DEZp4Iw2Wmy%2BzBnv117AueUzjJ88mvcZeqMycXVCZpceR%2B9ejXf%2F02G%2FSToQ4joZVM7ia3VRC83ZDkLPwlSD\"}]}\r\nlast-modified: Thu, 10 Sep 2026 04:16:18 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa22f12-1e1\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a3d94f95ebe356cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":481,"size_decoded":950,"mime_type":"text/css","magic":"ASCII text, with very long lines (481), with no line terminators","md5":"c14b8ec72508d7e0eb2a4c2fb3791842","sha1":"0a7a78766c71dd676e632a5029bd505f3df71918","sha256":"d319dd6d10b8d46ae6ecba761783e9e7454b4cf94b6b5434139e1d82e0ba5348","sha512":"d9340f1315fcbce671bc2c556e509486ffdd8c31104e5041281052f98c6e02c21342af76a05df82b64bbd801f318f1bf3888b9bf3a6079a7e4e0799b65c895e7","ssdeep":"","tlshash":"c8f09ea81091915fb263c87d94e519584108893540b21fecbf36d4b4cd93da70273545","first_seen":"2025-06-18T00:06:50.794762Z","last_seen":"2026-09-19T14:39:19.615548Z","times_seen":12,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"claim-pharos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-pharos.com/1bc9b78c8e.js","fqdn":"claim-pharos.com","domain":"claim-pharos.com","tld":"com"},"ip":{"addr":"104.21.17.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-pharos.com/","date":"2026-09-19T14:34:23.030Z","timestamp":1789828463030,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-pharos.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 03:58:23 GMT","end":"Wed, 09 Dec 2026 04:56:58 GMT"},"fingerprint":{"sha1":"EB:F3:DA:B3:F3:52:4F:8D:64:83:59:B5:BE:F1:99:40:B7:0D:6F:07","sha256":"BC:DD:6C:C9:9F:1C:65:F0:09:B2:6A:D9:30:53:D7:0E:F0:B9:FA:E3:B0:7F:89:64:69:C4:79:58:0B:8B:28:F3"}}},"request":{"raw":"GET /1bc9b78c8e.js HTTP/1.1\r\nHost: claim-pharos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-pharos.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:34:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yun7z7VtFWPBSbJwaaAFfej%2FlmLJbkdcbixPzke3fBzSlCC7xzwxzinP0uxpDjW57x4Xgz8t1nv9Lwshg5m%2Bgyx0exuZA8m4q61N%2BByLx4ZcXX5UNYZjkAGQiOjExKPJmE1b\"}]}\r\nlast-modified: Fri, 11 Sep 2026 08:18:51 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa3b96b-1594\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a3d94f95fbe656cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5524,"size_decoded":3088,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5524), with no line terminators","md5":"079d6dfe007713b988a75a9c190b856a","sha1":"5d1334e089038f2f630a397a96de855d580c4878","sha256":"b5d4f9d2326ffa7ea69e7c946b8b217b8491fb15a10ece2a0aec061be67f1605","sha512":"5c7e954b7df9ffd9696b544693b9183b8842e3db6ef82173f20bcc4f6a90272b07ea9f0c24f387965f547772cb54e9db24f07f0a577268187ce01e8e3afae72e","ssdeep":"96:uL2luOmApaXwKu7LyFMQQ1NdTNGYfGpoq2hRrCw7XGdVvKy8f/7SZ5Z:Y2g8p4u7LOWdTN1fGpYhRrCaGDir+5Z","tlshash":"23b197dd7dd1b48817931fb36b2bb289f526d54944b8880df1026ea03e6943be7c2674","first_seen":"2026-09-19T14:35:07.958875Z","last_seen":"2026-09-19T14:39:19.608871Z","times_seen":2,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"claim-pharos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-pharos.com/logo-white.svg","fqdn":"claim-pharos.com","domain":"claim-pharos.com","tld":"com"},"ip":{"addr":"104.21.17.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-pharos.com/","date":"2026-09-19T14:34:23.059Z","timestamp":1789828463059,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-pharos.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 03:58:23 GMT","end":"Wed, 09 Dec 2026 04:56:58 GMT"},"fingerprint":{"sha1":"EB:F3:DA:B3:F3:52:4F:8D:64:83:59:B5:BE:F1:99:40:B7:0D:6F:07","sha256":"BC:DD:6C:C9:9F:1C:65:F0:09:B2:6A:D9:30:53:D7:0E:F0:B9:FA:E3:B0:7F:89:64:69:C4:79:58:0B:8B:28:F3"}}},"request":{"raw":"GET /logo-white.svg HTTP/1.1\r\nHost: claim-pharos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-pharos.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:34:23 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uqk5kYVOVn%2BiFpIVuKOubB6wEvTfNoeTAauNmchZJeps%2F0ndk1nTO0n7IuFnBVttrRtzApPUCZcTcilFvooAVsEe4QeoO0YnLAPiI3AMTt3tDhVALlNqLbmOphmRQ07HS3UG\"}]}\r\nlast-modified: Thu, 10 Sep 2026 04:16:18 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa22f12-f39\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a3d94f961bf056cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3897,"size_decoded":2308,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"762cc845add3ac8f7469de91d1b467bc","sha1":"706a96ae7bae20e717c91b7a02dc4841b796ac09","sha256":"4506ff8ddf5a2bf3dc0da1d23d9376d0c30f738fb1b78ff36712a207597586fc","sha512":"6e62127db9a8d9da1ff555da3686cc55aa87a85e7280d361317cd3b7d870bf7408e0594517934eefb55d601d4a1f5c7f6c8f076bde8f0421d37ccdd5362e1b5b","ssdeep":"","tlshash":"c68162e177ecebd5d606e3e4a856c039aa2774f2ebc9d294c2a53e4769510de0c18ec0","first_seen":"2026-04-28T18:12:19.539083Z","last_seen":"2026-09-19T14:39:19.586536Z","times_seen":7,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"claim-pharos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-pharos.com/ebe18c6a42fd1ed3-s.p.woff","fqdn":"claim-pharos.com","domain":"claim-pharos.com","tld":"com"},"ip":{"addr":"104.21.17.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-pharos.com/","date":"2026-09-19T14:34:23.179Z","timestamp":1789828463179,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-pharos.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 03:58:23 GMT","end":"Wed, 09 Dec 2026 04:56:58 GMT"},"fingerprint":{"sha1":"EB:F3:DA:B3:F3:52:4F:8D:64:83:59:B5:BE:F1:99:40:B7:0D:6F:07","sha256":"BC:DD:6C:C9:9F:1C:65:F0:09:B2:6A:D9:30:53:D7:0E:F0:B9:FA:E3:B0:7F:89:64:69:C4:79:58:0B:8B:28:F3"}}},"request":{"raw":"GET /ebe18c6a42fd1ed3-s.p.woff HTTP/1.1\r\nHost: claim-pharos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-pharos.com/d697aabeae20ea83.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:34:23 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 10 Sep 2026 04:16:19 GMT\r\npriority: u=3,i=?0\r\netag: \"6aa22f13-f9f0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0gkTuOr6NsLFxg6F5Do7XGENoVOcksmDvqjNHFWeOASPw2soC81zkNqsEDBqfCC1tfSaNtsyQzP1mVOYXE%2FpgkpeAy%2FlfVgj1wo0Fgj1daiKongdlzJAMXnksep1ASCieQRJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d94f96dc0456cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 63984\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63984,"size_decoded":64672,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 63984, version 0.0","md5":"77d27129732983d76949c7a35a81567a","sha1":"7c86c2a9c8f8e428a76e2ac5cc36c1c3bfd8b1e9","sha256":"3025cc59012a7ddceff9ae4e59d4921f5a0b75dc530ce46a15ab6bd019d9a3e9","sha512":"546fd532e773f7ebcd6b66a8f501a19fbc82d69c06ca028935f2240a3787fdce94cabe651b8358b704a9825c6f70a822fe0512dad97f8beb35fd2f2c05b4d7d2","ssdeep":"1536:5KvqyYyCyJfu9lg4ALCqoHIbkrTrKrv1C8iXZvE:58xNCt9l2GBHIbkT21C8iJc","tlshash":"9653f13aba6da038e6e8a7748b25274c35b490179c7bdf6f87025d007e7432253de51e","first_seen":"2024-08-19T17:59:20.218078Z","last_seen":"2026-09-19T14:39:19.631881Z","times_seen":25,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"claim-pharos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc-rpc.publicnode.com/","fqdn":"bsc-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-pharos.com/","date":"2026-09-19T14:34:23.480Z","timestamp":1789828463480,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 02:01:04 GMT","end":"Thu, 05 Nov 2026 03:00:51 GMT"},"fingerprint":{"sha1":"94:5F:9F:32:64:19:A5:50:59:22:7E:16:22:E5:6B:9B:1C:65:F3:ED","sha256":"7D:67:31:E8:80:74:FB:3E:3C:A4:1B:9F:F0:BE:71:56:CE:95:31:97:BD:28:75:B6:47:AA:02:45:08:74:76:65"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://claim-pharos.com/\r\nOrigin: https://claim-pharos.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\ndate: Sat, 19 Sep 2026 14:34:23 GMT\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3d94f98deaec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":641,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-19T20:41:53.858333Z","times_seen":18555462,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zennnnnnn.xyz/x7k/gf","fqdn":"zennnnnnn.xyz","domain":"zennnnnnn.xyz","tld":"xyz"},"ip":{"addr":"172.67.188.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-pharos.com/","date":"2026-09-19T14:34:23.964Z","timestamp":1789828463964,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zennnnnnn.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 00:31:38 GMT","end":"Mon, 07 Dec 2026 01:29:13 GMT"},"fingerprint":{"sha1":"43:45:93:AD:DC:B7:26:4C:9B:A7:04:85:39:49:43:D5:D5:08:BE:27","sha256":"A2:D3:84:55:78:F0:19:7D:75:6F:39:8C:86:DB:E1:22:A5:1E:22:A6:6E:B4:AB:35:5E:D7:0F:B4:4A:34:3D:85"}}},"request":{"raw":"POST /x7k/gf HTTP/1.1\r\nHost: zennnnnnn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claim-pharos.com/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://claim-pharos.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"ICXG9fco9w_zGYzvo3_A\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:34:24 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8C%2F9%2B2yvLbrXYUD4itajTDasqAdU9S0feXA5nf54FjvkcyHqWiEodOBTNXlp92BAvUzASXLygD45D1ekaEzQPASzULB%2FiDGQjDMU0FKihmXSCJsYwSmuRsYW%2BTUlb%2F4u\"}]}\r\ncf-ray: a3d94f9c8c09b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1434262,"size_decoded":1108749,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (25727), with no line terminators","md5":"a919c6f967b6e4d8255e7a1c47ce9f34","sha1":"9ad6118dd8cf57c0ce2ef8a1b09f348a26ee3507","sha256":"d6a523111980fc220d1e5f76f5fe7848808fafa398dedf2ada34f32cfab8c759","sha512":"c807c038b38c0e122ba96e62cc76c52affdc17e2e3bbe52deed901bb6ce2450574cba827789d0c2426de89fb4d99801e807a102bbe1c1c55daedd0d7924475e5","ssdeep":"24576:D+vxHwL7DFnV+yEIhYJcYbJCOnOzwEUR9kk9kY6rCsxJlrZVXV7j2wE:NZDo1OzwdhstpyR","tlshash":"8425019a4c328169669c02b86c5f1fc83e546bdc9498a73b9435d0f6bbc67bf00d7872","first_seen":"2026-09-19T14:35:07.963513Z","last_seen":"2026-09-19T15:06:14.283833Z","times_seen":3,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":111,"receive":182,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zennnnnnn.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=2\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-pharos.com/","date":"2026-09-19T14:34:27.448Z","timestamp":1789828467448,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=2\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claim-pharos.com/\r\nOrigin: https://claim-pharos.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 14:34:27 GMT\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\npriority: u=4,i=?0\r\ncf-ray: a3d94fb18c98c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":165456,"size_decoded":28198,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"deff1107910658ccbc364c4876bce37b","sha1":"563d2be3c8b0172de50e1a7edd398d7cc5321e80","sha256":"a67605b53a606a9437a0c9e1d8333e97af1e4a1d81a96cba2cca2951ec8d8e5c","sha512":"11c6a9d3f8f223ea79b0712fac9d4c5d769efc427722b895cd960cb6185aa417708a7d67f096d75bb912eb799a0c0877fa19c7f0aebbde0f0c579ceec9a28024","ssdeep":"1536:ZtDCyTxVAtE0607Zg8xBx8VqRF1Iiz5K/naLu49Qmqgpe6:ZFVz06UZgEx8eIiz5K/n6qg46","tlshash":"21f3646e8b04de672fb15388814cf9eca15fa117cdcd9cb6e2e5cf2440b89f7215219a","first_seen":"2026-09-19T06:50:08.914107Z","last_seen":"2026-09-19T15:06:14.274995Z","times_seen":18,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=7\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-pharos.com/","date":"2026-09-19T14:34:27.754Z","timestamp":1789828467754,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=7\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claim-pharos.com/\r\nOrigin: https://claim-pharos.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 14:34:27 GMT\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\npriority: u=4,i=?0\r\ncf-ray: a3d94fb37cfbc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69029,"size_decoded":12628,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f5f984fb1cdf8d5d6217612a6fe982ba","sha1":"4871c297f2b26329660ba2538e0da6a3b01512a5","sha256":"579c43ee78397679a05566538bbbe17cb90c6afd84822fd36b16cbe42d832db1","sha512":"8f53042cccd230173f7498a08810eac94eb301b161e9708009558fa4cbb19ddee065b0664355369ef42fb1df1f1c04b606b8a3baba632c02df2e56ffa0046c7a","ssdeep":"384:x+osRs7K0e3UvQtzU1HMupr+BV6w85LCr6PzW9AJUlpuj0q1dQ4yMupo:BcEv+U1lryV6w+5WCFj0qpIo","tlshash":"3263846b8f04ee762bb2138d515c79eca64f2117cdc99cf6e2d1cf1440b4af7226219a","first_seen":"2026-09-19T06:50:08.886934Z","last_seen":"2026-09-19T15:06:14.276339Z","times_seen":18,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-pharos.com/bg-glass-card.png","fqdn":"claim-pharos.com","domain":"claim-pharos.com","tld":"com"},"ip":{"addr":"104.21.17.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-pharos.com/","date":"2026-09-19T14:34:23.055Z","timestamp":1789828463055,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-pharos.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 03:58:23 GMT","end":"Wed, 09 Dec 2026 04:56:58 GMT"},"fingerprint":{"sha1":"EB:F3:DA:B3:F3:52:4F:8D:64:83:59:B5:BE:F1:99:40:B7:0D:6F:07","sha256":"BC:DD:6C:C9:9F:1C:65:F0:09:B2:6A:D9:30:53:D7:0E:F0:B9:FA:E3:B0:7F:89:64:69:C4:79:58:0B:8B:28:F3"}}},"request":{"raw":"GET /bg-glass-card.png HTTP/1.1\r\nHost: claim-pharos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-pharos.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:34:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 10 Sep 2026 04:16:18 GMT\r\npriority: u=5,i\r\netag: \"6aa22f12-1ae0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7X0p9J7R1BY8aVi1vuXD7d5NtwErrw7sAteXW6V%2Fy0HUrP8zpwk4dd734bNY0yBMhEniYLWEBw1eB55%2BCYKVLlIXo0H%2B16MQ4p0C%2FwMcYtx3fzOmD0mW8yjC638V%2BiA9H4E8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d94f961bed56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6880\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6880,"size_decoded":7570,"mime_type":"image/png","magic":"PNG image data, 354 x 302, 8-bit/color RGBA, non-interlaced","md5":"f8824c1603fc64fa3f5ee6d986e09220","sha1":"d5423cadb3c8bf807c2392f1e7c258865d4c9bfb","sha256":"4ce3e1c85f097cdef66eda315f85c6d3d63a813d719c2895ca734e4a74fe8637","sha512":"ef6ed3e374b12175323d9f48c0c4bdb13b360a732b166efaf86ced844b9e3caf1f5e60ba8b352f4085271498100f92247eaaed9a3fc31f75f58a7db9af28c94b","ssdeep":"96:bqG69E+mr4ROstE1WCsL+KZKHvvG4QdJHW3AyjbSgdsEpE7aGnOqUJbAaF7/:m9TCTKojyH6AQbSgdsEmnlUVAaFT","tlshash":"7ee19e939007a175e0df8efdd0d0e2da631217792a6b34a23a6cc4633888dc9544f1e1","first_seen":"2026-04-28T18:12:19.535941Z","last_seen":"2026-09-19T14:39:19.642781Z","times_seen":7,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"claim-pharos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-pharos.com/linkedin.svg","fqdn":"claim-pharos.com","domain":"claim-pharos.com","tld":"com"},"ip":{"addr":"104.21.17.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-pharos.com/","date":"2026-09-19T14:34:23.062Z","timestamp":1789828463062,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-pharos.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 03:58:23 GMT","end":"Wed, 09 Dec 2026 04:56:58 GMT"},"fingerprint":{"sha1":"EB:F3:DA:B3:F3:52:4F:8D:64:83:59:B5:BE:F1:99:40:B7:0D:6F:07","sha256":"BC:DD:6C:C9:9F:1C:65:F0:09:B2:6A:D9:30:53:D7:0E:F0:B9:FA:E3:B0:7F:89:64:69:C4:79:58:0B:8B:28:F3"}}},"request":{"raw":"GET /linkedin.svg HTTP/1.1\r\nHost: claim-pharos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-pharos.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:34:23 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ml%2FjqLV09ZwwhRFzZ7myWCWM%2FpBHiZPlcsEjP7CI0ndA9ttvm1OEEi5uFwOtivJmuyIQe8aPvGKhk%2FuvEj8pCX4lwI5ituPSWiaqyu0xJ9SpA4FaqGKSfYnGimLc6FjX%2Fub8\"}]}\r\nlast-modified: Thu, 10 Sep 2026 04:16:18 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa22f12-8cb\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a3d94f962bf356cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2251,"size_decoded":1728,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"62a4647e36867eeff74dcbf875f675e2","sha1":"f7b0139f326948ce0d25c6eba44c2dfc859f51fe","sha256":"23fd8fda4d204a3e551bf03d380dff65e7efca90981f98258dc18b4218684d0e","sha512":"a5a98f0fa1626cd6a4207bc93050502ead1bff9b1c70a5a13bd4e3cf2f86f239f551f482a2a1aa4f937b66ae0630d69073e451c2dd59a0f1ed6b9e3c9c433bb4","ssdeep":"","tlshash":"384143b8f1f562e059435f81e571b860762b3cfd3fa94b81c030bae4d9a99d48780ce4","first_seen":"2026-04-28T18:12:19.545595Z","last_seen":"2026-09-19T14:39:19.610051Z","times_seen":7,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"claim-pharos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-pharos.com/48a027d31c6a0068-s.p.woff","fqdn":"claim-pharos.com","domain":"claim-pharos.com","tld":"com"},"ip":{"addr":"104.21.17.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-pharos.com/","date":"2026-09-19T14:34:23.178Z","timestamp":1789828463178,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-pharos.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 03:58:23 GMT","end":"Wed, 09 Dec 2026 04:56:58 GMT"},"fingerprint":{"sha1":"EB:F3:DA:B3:F3:52:4F:8D:64:83:59:B5:BE:F1:99:40:B7:0D:6F:07","sha256":"BC:DD:6C:C9:9F:1C:65:F0:09:B2:6A:D9:30:53:D7:0E:F0:B9:FA:E3:B0:7F:89:64:69:C4:79:58:0B:8B:28:F3"}}},"request":{"raw":"GET /48a027d31c6a0068-s.p.woff HTTP/1.1\r\nHost: claim-pharos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-pharos.com/d697aabeae20ea83.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:34:23 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 10 Sep 2026 04:16:19 GMT\r\npriority: u=3,i=?0\r\netag: \"6aa22f13-f87c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=POTEr5a7HcYa5%2Bli2TtsIYmFsGlFJgLnDcmq2O1IHUY9pelfDLnsuEJaiJ4dMkBaIEPj9EKIo5Etz9G7fZkxvgHdFVZKTtlyBky2k2VzVkFq5BXGlkKKbDSlujEbOncIsyYI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d94f96dc0256cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 63612\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63612,"size_decoded":64298,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 63612, version 0.0","md5":"d5fac4d1e21498e038bdc8b3003ea8a6","sha1":"379961ea4f4a0ac9b0cddcc9fc073ba5038ceac1","sha256":"036ef14256cba4a81e7f4a7266aafdfee328decbc735a68abd0ec73e1a054f39","sha512":"cf350f6e02b6878b62e19902041a13e3c0becd4fa89947bacfb24c4ee56105b110fb178417ce9de2568f26fa134d52e36799911a46eaeb84c05e95d6360a10d3","ssdeep":"768:wTaUgttoZIG7hnRfU9O3a/EBuxKoc69+KS29CfvD2Y14mqTvv1lWGuoMHnnUPPlf:wT7KN9OqEcC69tSf1qTTZu1eefDVvE","tlshash":"895301b85db8543130a263efdc34dec83bfc0547a87e99a12119722c677d402ba9ee91","first_seen":"2024-08-19T17:59:20.202958Z","last_seen":"2026-09-19T14:39:19.61337Z","times_seen":60,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"claim-pharos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arweave.net/raw/FfCWnyHcPa1rzmqvIqwlean__rHkA75vLKSpXQIAKbE/?host=https%3A%2F%2Fclaim-pharos.com\u0026href=https%3A%2F%2Fclaim-pharos.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","fqdn":"arweave.net","domain":"arweave.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://claim-pharos.com/","date":"2026-09-19T14:34:27.277Z","timestamp":1789828467277,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arweave.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 11:42:14 GMT","end":"Thu, 03 Dec 2026 11:42:13 GMT"},"fingerprint":{"sha1":"59:11:23:DB:E0:1A:52:22:9F:39:7F:F2:3D:83:A1:59:7D:A1:39:EE","sha256":"03:20:27:BE:48:17:01:9C:74:69:B1:A5:C6:BF:A8:D8:D5:79:E5:08:8B:17:47:37:56:BB:A1:72:94:BD:1C:F8"}}},"request":{"raw":"GET /raw/FfCWnyHcPa1rzmqvIqwlean__rHkA75vLKSpXQIAKbE/?host=https%3A%2F%2Fclaim-pharos.com\u0026href=https%3A%2F%2Fclaim-pharos.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea HTTP/1.1\r\nHost: arweave.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-pharos.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 14:34:30 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\nao-types: content-length=\"integer\", data-offset=\"integer\", header-length=\"integer\", offset=\"integer\", status=\"integer\"\r\ncontent-digest: sha-256=:HS8/2EJGDp7zVhmEz6LteGIDQIg65rfEq1796g4vn2k=:\r\ndata-offset: 391600241699468\r\nhashpath: 7gkF79nmk33p3Hr9FgSHtbTyemkiOp4SrXAE0EwFsIs/MsjU1vI-pjE8VEMBrH0dkuUqB87nT2bPNs7l6tZIR04\r\nheader-length: 207\r\noffset: 391600241699261\r\nraw-id: FfCWnyHcPa1rzmqvIqwlean__rHkA75vLKSpXQIAKbE\r\nsignature: comm-dlcrdx8akdqtsuybj6kyc8fkdy_juwbllaq1j6jrvgq=:q/QWi4ttxs6VpL6EYEixAhSK7CzhN4LKRvdKYfyOPqMU/FcZE5XOWu84cUZmeKLjx42GWwy+uIKbRrfdxi7m4NaWu+dM0evui/+63DXxggFQfvi9EX1ipcWOOzEiLT/6kVkOSRPR2zxDT0BpJpr4hERs8GxcplqFiwFw4nL833WpgLEBgpcb+UHaqdjd3GmpGNqReRUUNndW24HlqAoqJXVUtI/3ApOuY2qRR/Lcry85MaZ4drBMupPVoAskh4pb8qTvTa3Ragxpb8ygBNhlQTK2FKlALrsyaDCEjH5z9hh48GsvrolKW110rBrGz8Nc4cSVQ6t+tis56rztlc6qAc8uwu43X+xN5GwOcn1nS2VbqSBN6V/RW6KQgT8irqeorrKYJkMg6FnFSnZn06JNKGCil4xSMeq7YHjWCrwLx1OVAlK8jXhuhskyGaSkHT32VORDkrZ/x860WM6b5Y1eZHSaJsTv/UvHX5qU+PD2Hj6WiajRP0Zb6hn21IWehot5Rmr5ZP4l8a/4+UzcV6yYsSV6oZosBzFmS5EYWIAU+cCneb9zEbM70kpJfEIdQ/15N5QE5ljF6bgki7UW+yQ0o5sxgy4F7DbN3X94pH8DepdW+462508q5Zcaj/0eZnJ4phGqzZKGEdL+K1YIeu+2PDogHFV6CX96kSUIYJhV/f8=:, comm-ziog3sglkc6kyrwc4kwmzpnijnv0hy00fxcgrd-3aiu=:kQDKkyTC8qm0sI7PXAqGvQJg5OFHzb6OwC9rD0S5VAw=:\r\nsignature-input: comm-dlcrdx8akdqtsuybj6kyc8fkdy_juwbllaq1j6jrvgq=(\"hashpath\");alg=\"rsa-pss-sha512\";keyid=\"publickey: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\";tag=\"7gkF79nmk33p3Hr9FgSHtbTyemkiOp4SrXAE0EwFsIs/MsjU1vI-pjE8VEMBrH0dkuUqB87nT2bPNs7l6tZIR04\", comm-ziog3sglkc6kyrwc4kwmzpnijnv0hy00fxcgrd-3aiu=(\"accept-ranges\" \"ao-types\" \"content-digest\" \"content-length\" \"content-type\" \"data-offset\" \"header-length\" \"offset\" \"raw-id\" \"status\");alg=\"hmac-sha256\";keyid=\"constant:ao\"\r\nstatus: 200\r\nx-77-nzt: k74SHKURIxH9MD4sXqLGLlzI+a7Yc3qL1TaEJPmm4n+z7UHr4rPW5DI\r\nx-77-nzt-ray: 2a494a15100fc82f9b9dae6a26f01818\r\nx-77-cache: MISS\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\naccess-control-allow-headers: *\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":187644,"size_decoded":144626,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (22908), with LF, NEL line terminators","md5":"70b796529d287b97d496919f625b1704","sha1":"0e2baedcce15cdf63db8aa7911abd547ab987f4a","sha256":"1d2f3fd842460e9ef3561984cfa2ed78620340883ae6b7c4ab5efdea0e2f9f69","sha512":"cd69eea4f792e625fae459c82b254e74fac80e0a8e3a8f4476c1aa4552c781357173bdbda8c7db443d1ffebea2c7e65e8215efe7279656f0f4bc879a4baa2fad","ssdeep":"3072:iCCm3yT9DQLFj1vFherny3/w4kQcLqDQBa6GvyTbCDIwtyQ/Pl5DWz:MT9aPoqaYk/pCDpLl5Dc","tlshash":"d504018c0c27527a168817f83c1eafc87e685f991048427b6571f4e6bb866ff00d79b2","first_seen":"2026-09-19T06:50:08.86172Z","last_seen":"2026-09-19T15:06:14.319245Z","times_seen":18,"resource_available":true,"data":null}},"time_used":3477,"timings":{"blocked":0,"dns":8,"connect":1,"send":0,"wait":349,"receive":0,"ssl":3118},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=4\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-pharos.com/","date":"2026-09-19T14:34:27.609Z","timestamp":1789828467609,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=4\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claim-pharos.com/\r\nOrigin: https://claim-pharos.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 14:34:27 GMT\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\npriority: u=4,i=?0\r\ncf-ray: a3d94fb28cd2c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":170294,"size_decoded":27971,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d39deab304df6b158c56ceeb49676ea6","sha1":"7fe93c222f1d6e9c0c6139249bee5e826f3d3663","sha256":"15b36186b19841589268e78cd73ba4ae562f62c7ce0f374198cbc9fea9c75c43","sha512":"81a6b8e3195103f560f1f8be14a3294c511e5d1f1bd3724b35cfa4ced46a683ab8a5bbd76339eb12fdcce948c8e195a259f3352491f14f608a6c8356d75ab5a3","ssdeep":"1536:OzoscDIu+4PCuiBkV7bI4I0d/i5GnaK4ko+p9jE:Gu+4PCuielkAnaK/p9jE","tlshash":"b4f3856f8b14de661fb24388915cf9eca15fa117cdcd9cb6e2e1cf2440b89f7215218a","first_seen":"2026-09-19T06:50:08.95769Z","last_seen":"2026-09-19T15:06:14.280427Z","times_seen":18,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=5\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-pharos.com/","date":"2026-09-19T14:34:27.643Z","timestamp":1789828467643,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=5\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claim-pharos.com/\r\nOrigin: https://claim-pharos.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 14:34:27 GMT\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\npriority: u=4,i=?0\r\ncf-ray: a3d94fb2ccd6c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":222558,"size_decoded":31517,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ea7251557aeb6dfc8fc6b85973b8ce4b","sha1":"8be21168c5fc31b8bad79639588c6890a4cb1856","sha256":"86d1198dc831eaeda4fc56f3cba3b8b014028c16c74bbefebb77d50aea1c0160","sha512":"80fb94fcde55ed93a169dd9f5fb38e69b32cb9dcde136f80635bb0d65e7cba11e0927b5c2a6249e3ec45d0f537acd3648acabc63576ed093b5c6b85680b6b094","ssdeep":"1536:pbinZhimNX3XFQ9LujpygGWudQT6bjzeFedLi:pWnZhimNnEC9B3udQCjzeFed+","tlshash":"1224656e87409e565fb19388d25cf8eda1afe103c9ce5ca6e2f18e3444bc5f3215129e","first_seen":"2026-09-19T06:50:08.925654Z","last_seen":"2026-09-19T15:06:14.292474Z","times_seen":18,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arweave.net/raw/FfCWnyHcPa1rzmqvIqwlean__rHkA75vLKSpXQIAKbE/?host=https%3A%2F%2Fclaim-pharos.com\u0026href=https%3A%2F%2Fclaim-pharos.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-19T14:34:31.139Z","timestamp":1789828471139,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://arweave.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 11 Aug 2025 12:57:27 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Sat, 19 Sep 2026 14:34:31 GMT\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 135193\r\ncf-ray: a3d94fc8999956b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1046087,"size_decoded":381255,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32044)","md5":"362ca438ae65cfc912b7a743a781ce7b","sha1":"8bd96bb53323eab2db38be0eb2b408ddf2b95b17","sha256":"06449c96378758359a50cc186e8017a20143e74a7dc5b57efaef3ea2c88f5017","sha512":"0ae63ee9d428f583c852ea0456d74d0a9cc5ce6341734c041ee00d5236c364738ca7fe0397c3e3818a86875cd48a7eba3419174a679258ba4bc4ab3f3ac97f04","ssdeep":"24576:fpISZZVokQyZ74ejf2kwwwCbUef690riXt2s0Fj6+6:RISZyyZ74ejf2kwwwCbpf690riXt70FY","tlshash":"9c256c907361b47a539b82a898ab0500f3395859500d802cfbecd9ebef949d9c5bff71","first_seen":"2026-08-03T07:57:51.324381Z","last_seen":"2026-09-19T15:06:14.276926Z","times_seen":233,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-pharos.com/","fqdn":"claim-pharos.com","domain":"claim-pharos.com","tld":"com"},"ip":{"addr":"104.21.17.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-19T14:34:22.674Z","timestamp":1789828462674,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-pharos.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 03:58:23 GMT","end":"Wed, 09 Dec 2026 04:56:58 GMT"},"fingerprint":{"sha1":"EB:F3:DA:B3:F3:52:4F:8D:64:83:59:B5:BE:F1:99:40:B7:0D:6F:07","sha256":"BC:DD:6C:C9:9F:1C:65:F0:09:B2:6A:D9:30:53:D7:0E:F0:B9:FA:E3:B0:7F:89:64:69:C4:79:58:0B:8B:28:F3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claim-pharos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:34:22 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 11 Sep 2026 08:18:51 GMT\r\nvary: accept-encoding\r\npriority: u=0,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MLqaN4B0FeF%2FieSJgXtoy%2FIXhPEFSONRs%2BzdsaLGRU5DqBQNIoeGQa0saUzsf7WIOmjfHfJjKyEviDlfPaDt7L%2FzsJD3Cnzjcuz3wFb4dijp7lmCGhY8KjSQWa6B2kJKawJi\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3d94f93fbc856cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81657,"size_decoded":11889,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (54949)","md5":"1ae22899f71bda3b17e2a9c8a1df78b3","sha1":"7008310c6bc618e1cbfea423fdc68a454f8fabd3","sha256":"12fd23715722508cf10a40fa66ddeba532639d529d9f2eb5f8405b8f2a14b5e2","sha512":"45262ffd7eecfe7286dbbf74e28b23b86956d0d85fdadb443bc33c7cba217963844cd8e993293b6e6930eac2b4c7030fb093a11708937c95c815390332788114","ssdeep":"1536:CLFQFxNqzMz+vEE+8/bd4Z+pLEvUcY3obC:aFqxwzYZcLYUcQEC","tlshash":"838384b65141112b7007cd9b26725b4e72e9c807d81b36fd9eb69293dfcf9924a3230e","first_seen":"2026-09-19T14:35:07.973118Z","last_seen":"2026-09-19T14:39:19.607677Z","times_seen":2,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":0,"dns":23,"connect":18,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"claim-pharos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-pharos.com/logo.svg","fqdn":"claim-pharos.com","domain":"claim-pharos.com","tld":"com"},"ip":{"addr":"104.21.17.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-pharos.com/","date":"2026-09-19T14:34:23.048Z","timestamp":1789828463048,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-pharos.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 03:58:23 GMT","end":"Wed, 09 Dec 2026 04:56:58 GMT"},"fingerprint":{"sha1":"EB:F3:DA:B3:F3:52:4F:8D:64:83:59:B5:BE:F1:99:40:B7:0D:6F:07","sha256":"BC:DD:6C:C9:9F:1C:65:F0:09:B2:6A:D9:30:53:D7:0E:F0:B9:FA:E3:B0:7F:89:64:69:C4:79:58:0B:8B:28:F3"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: claim-pharos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-pharos.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:34:23 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T7LkG56MtUi9NmdX5XuSKZ%2FXIqJ3Hnjdanx0ULuhSppEvbx9CMlXOsfoJOoBLofnSum8OHhInmhZqOCeZ%2Bwv2Zb%2Bo0qy87pYmC4vzAiMPgOPb1FDjm4AsgsrgHkLHmgdQT8q\"}]}\r\nlast-modified: Thu, 10 Sep 2026 04:16:18 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa22f12-f2f\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a3d94f960be956cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3887,"size_decoded":2315,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a094c3661ee9bd42f332b3fd265d1b9b","sha1":"51fcbf620ad05836f7262bd57b56ebcca325b500","sha256":"c6eeae12cebd94744524bcd349f44a7f2881585f40b3c65e86cb7f3f87dee0de","sha512":"698bd47f4035338db34f5a7a64c6572b2683633038e3e4d8e2c4150f6ad2bc52186a70eb775e758ddb03ceb1686ba21a0d23a43488de196586c5291552f570ec","ssdeep":"","tlshash":"a38162e577e8fbd5e802e3e0e8a6c03aa56738f3a78583d4c1a56f4659450df0c19ec4","first_seen":"2026-04-28T18:12:19.528186Z","last_seen":"2026-09-19T14:39:19.616474Z","times_seen":7,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"claim-pharos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=1\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-pharos.com/","date":"2026-09-19T14:34:27.269Z","timestamp":1789828467269,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=1\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claim-pharos.com/\r\nOrigin: https://claim-pharos.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 14:34:27 GMT\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\npriority: u=4,i=?0\r\ncf-ray: a3d94fb08c76c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":226174,"size_decoded":31974,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4b44db54394d8d81474da19a7caaf107","sha1":"c3b9dd87e0dfa13d2bc7f76cbdb29d2551084d62","sha256":"d3780b6f3960e4a86b8b0cb943cc5a6f1fae2a1f3f47b08e54e6130f425f5b25","sha512":"0d90ed4edbbd7c20e260548cdd001aebac942aaa61f3079e87fe79199596487bb1d2771a9f81bfac6c32978a53d218132559e6ab246fd8efc66c706adc89fd2c","ssdeep":"1536:tY/KFTcstXp1WLFaLYSG+DZHixh1BsNJxZvTM6RD:tYyFTcsNpwLFatixh1B+JxZvTn","tlshash":"5724446e4b409e566fb18388d25cf9eda16fe007c9cd5ca6e2f18e3444bc9f3215129e","first_seen":"2026-09-19T06:50:08.94275Z","last_seen":"2026-09-19T15:06:14.295535Z","times_seen":18,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":4,"connect":8,"send":0,"wait":63,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zennnnnnn.xyz/api/fp","fqdn":"zennnnnnn.xyz","domain":"zennnnnnn.xyz","tld":"xyz"},"ip":{"addr":"172.67.188.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-pharos.com/","date":"2026-09-19T14:34:27.460Z","timestamp":1789828467460,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zennnnnnn.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 00:31:38 GMT","end":"Mon, 07 Dec 2026 01:29:13 GMT"},"fingerprint":{"sha1":"43:45:93:AD:DC:B7:26:4C:9B:A7:04:85:39:49:43:D5:D5:08:BE:27","sha256":"A2:D3:84:55:78:F0:19:7D:75:6F:39:8C:86:DB:E1:22:A5:1E:22:A6:6E:B4:AB:35:5E:D7:0F:B4:4A:34:3D:85"}}},"request":{"raw":"OPTIONS /api/fp HTTP/1.1\r\nHost: zennnnnnn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-worker-hint\r\nReferer: https://claim-pharos.com/\r\nOrigin: https://claim-pharos.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:34:27 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4B4XDhywOoKajuGUhn3uFKUwHBEnF0FBysfbfJ%2F%2Bkfq62lXMGyDWNAeJKMstno%2FKppfTZfRq5PWIuxSBC05StlrGfg28Bv6j8kPUQiPagJShnb8tCk0c%2F9l41%2FXpYiPo\"}]}\r\ncf-ray: a3d94fb1a83cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":670,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-19T20:41:53.858333Z","times_seen":18555462,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zennnnnnn.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/events.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arweave.net/raw/FfCWnyHcPa1rzmqvIqwlean__rHkA75vLKSpXQIAKbE/?host=https%3A%2F%2Fclaim-pharos.com\u0026href=https%3A%2F%2Fclaim-pharos.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-19T14:34:31.136Z","timestamp":1789828471136,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /node/events.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://arweave.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"PROD\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Sat, 19 Sep 2026 14:34:31 GMT\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 48770\r\ncf-ray: a3d94fc8999756b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12122,"size_decoded":5173,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9385)","md5":"acd05dc333042e32473eb39c7700cc9b","sha1":"a9ff738706c3e6ab2be579d296faecd67e438f47","sha256":"4c6150b88c1444aa1fe9331013e3f37eda9836206f629f7f3ae8f3743dd90fa8","sha512":"658a1eebb2727249df13bfd7f76d1bd38921ebc2dff63b8c1bf779973bd10483b7138649e7168a1ea7305c88542876be92a52b1da915331806436b0455f9a6a5","ssdeep":"96:yIJAOQoXa9RQ9bKVXQ6Z9cBBEMPg19H+MyLfLYCGZjiSl1YYS/07jfofxSXR261G:yyiZInEGaGLYCKt70WRRD7EE00WZ","tlshash":"404286ccb386b87113def3af707b4146f23459e0685c0408ba75fcf6292a98995a6f71","first_seen":"2025-10-29T19:17:04.387887Z","last_seen":"2026-09-19T20:47:36.389572Z","times_seen":898,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/tty.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arweave.net/raw/FfCWnyHcPa1rzmqvIqwlean__rHkA75vLKSpXQIAKbE/?host=https%3A%2F%2Fclaim-pharos.com\u0026href=https%3A%2F%2Fclaim-pharos.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-19T14:34:31.171Z","timestamp":1789828471171,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /node/tty.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://arweave.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/node/process.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"PROD\"\r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:34:31 GMT\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 48770\r\ncf-ray: a3d94fc8d99b56b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":685,"size_decoded":710,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (684)","md5":"dc159c105e1b73c18cfd63a84cc154ec","sha1":"347664300100736360aeda59495f5017a852a81f","sha256":"c66ff4b406bad449bfb2ced355f15badf16f4d9e035d2d300e33b5aeee64e3be","sha512":"96f99c368bef6857a0e9006efdc8ac0585af1bca468adb103b0c626ff5cada09eefeb07b317d6be3e71915f8c1a1412d4927fb743e4ed59e54c6e82af1b9d50a","ssdeep":"","tlshash":"cf01fef930f7b57246bb047444728a07f388e8f0b49ec4a0ba6599b43c655ced131676","first_seen":"2025-10-29T19:17:04.320253Z","last_seen":"2026-09-19T20:47:36.428381Z","times_seen":888,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-pharos.com/topnod4.webp","fqdn":"claim-pharos.com","domain":"claim-pharos.com","tld":"com"},"ip":{"addr":"104.21.17.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-pharos.com/","date":"2026-09-19T14:34:23.142Z","timestamp":1789828463142,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-pharos.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 03:58:23 GMT","end":"Wed, 09 Dec 2026 04:56:58 GMT"},"fingerprint":{"sha1":"EB:F3:DA:B3:F3:52:4F:8D:64:83:59:B5:BE:F1:99:40:B7:0D:6F:07","sha256":"BC:DD:6C:C9:9F:1C:65:F0:09:B2:6A:D9:30:53:D7:0E:F0:B9:FA:E3:B0:7F:89:64:69:C4:79:58:0B:8B:28:F3"}}},"request":{"raw":"GET /topnod4.webp HTTP/1.1\r\nHost: claim-pharos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-pharos.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:34:23 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 10 Sep 2026 04:16:18 GMT\r\npriority: u=4,i\r\netag: \"6aa22f12-3c74\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oUiBpyqwXCkQJcE7xy0AEHH3b5LJlTdUr%2FB8SLmI8MDXeO%2B5obSX56gspse5pG8tZQAxeESw99R%2F7K3I0bpVfe5q0GM223JCBP1RnbwYpcclI4d7Mpjwb%2B8N%2BkcsBFd5iPdh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d94f96abfd56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15476\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15476,"size_decoded":16168,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 720x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"73851c80004a6e7b33f5d763201f6fcb","sha1":"012bb7ad1cef2581c30a8d5a186192ff36627236","sha256":"e6b6af4e7ae224794daf0a5aa02b3c198b045f9be0d0486aaeb1740238cbb341","sha512":"4c6c9eee13754ac752681eda03987695a3b82b9d6f4f419ec27e90164d4a43a87029db3d8a3092461c5c56f205b084fe262f8327edec9d0ac2f9fb68f21f5c1b","ssdeep":"384:T9+udS3Km/P44DhoOs6HpbUPJmtmYXVoUjsKkjKd4C:JP3OswlUPJmjlUjKd4C","tlshash":"6a62c093fd5dc0189251796abc26653e5e8197ddc8f30f578583022683871e9cf60dcc","first_seen":"2026-09-19T14:35:07.978187Z","last_seen":"2026-09-19T14:39:19.594745Z","times_seen":2,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"claim-pharos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc-rpc.publicnode.com/","fqdn":"bsc-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-pharos.com/","date":"2026-09-19T14:34:23.474Z","timestamp":1789828463474,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 02:01:04 GMT","end":"Thu, 05 Nov 2026 03:00:51 GMT"},"fingerprint":{"sha1":"94:5F:9F:32:64:19:A5:50:59:22:7E:16:22:E5:6B:9B:1C:65:F3:ED","sha256":"7D:67:31:E8:80:74:FB:3E:3C:A4:1B:9F:F0:BE:71:56:CE:95:31:97:BD:28:75:B6:47:AA:02:45:08:74:76:65"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claim-pharos.com/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://claim-pharos.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x1AC7d768E37B147c993dE943D704c4e92d7861A1\",\"data\":\"0xb68d1809\"},\"latest\"]}"}},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\ndate: Sat, 19 Sep 2026 14:34:23 GMT\r\npriority: u=4,i=?0\r\nx-envoy-upstream-service-time: 3\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: a3d94f992f18c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231,"size_decoded":614,"mime_type":"application/json","magic":"JSON text data","md5":"b29c40e1a8d83f4c52ef0e0b2e0d513e","sha1":"9f963d8d33d45b20e33699fe1025f98cbed20c90","sha256":"e31886653eec3e868e9b1e61dfda82880dbfc95e9412bfcd839a21d2b0a74b11","sha512":"e65dba347f81f9b92fcf9c8246826030c4bbb5ea13f425fd2f0c4f6e14297d7bd1e3eab4670d3c472e842282ee8e91238ccdde9f7c8a6b4cd06c894774353197","ssdeep":"","tlshash":"b3d012d0060f0ab1e09ccc405004730123227d894ac41d42084c0fd111443920317220","first_seen":"2026-09-08T18:18:04.407092Z","last_seen":"2026-09-19T14:47:24.929129Z","times_seen":26,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zennnnnnn.xyz/x7k/gc","fqdn":"zennnnnnn.xyz","domain":"zennnnnnn.xyz","tld":"xyz"},"ip":{"addr":"172.67.188.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-pharos.com/","date":"2026-09-19T14:34:23.615Z","timestamp":1789828463615,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zennnnnnn.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 00:31:38 GMT","end":"Mon, 07 Dec 2026 01:29:13 GMT"},"fingerprint":{"sha1":"43:45:93:AD:DC:B7:26:4C:9B:A7:04:85:39:49:43:D5:D5:08:BE:27","sha256":"A2:D3:84:55:78:F0:19:7D:75:6F:39:8C:86:DB:E1:22:A5:1E:22:A6:6E:B4:AB:35:5E:D7:0F:B4:4A:34:3D:85"}}},"request":{"raw":"POST /x7k/gc HTTP/1.1\r\nHost: zennnnnnn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claim-pharos.com/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://claim-pharos.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"ICXG9fco9w_zGYzvo3_A\"}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 14:34:23 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CFHBYvxHFluyzTVqvclvBOeE8CKpaglp1RnOntZbIV75lZWDpgWJuWAZTktere%2BZ1qzgm%2FL9S%2FINt0FQhpU3xEOKkuMNAkPC5SSoCq5LIQWcjyNr79vn8JaZdu9m9KX%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3d94f9a480456c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8123,"size_decoded":3703,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f538ff8d6e18143be44a21497595f2ff","sha1":"6023d01a3eefb77549ef818b906ae7cdc2ff7ac7","sha256":"1892c685a33757170317760a9407d99429cb221fb81c6dfac6766d91495ab9c6","sha512":"a52428e180d4b6d4da1c4cca3026298c40db0689a1b8979f5b094d55194f142ca498b2422d793df23ab00d94ec09195c7820b8b92d1f2a5d010452108a56ee9d","ssdeep":"192:PUIcQ0HEhS+O4VXe0VU6nEaN716Qth7Ao3aUgUtWQXehN:PrcQttVAo3aY3ehN","tlshash":"eef17813b5d2b00a06c5477e381963d5d0aade46da8ac40af344eee8b5deca37e4c1f0","first_seen":"2026-09-19T14:35:07.97982Z","last_seen":"2026-09-19T14:35:07.97982Z","times_seen":1,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zennnnnnn.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/process.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arweave.net/raw/FfCWnyHcPa1rzmqvIqwlean__rHkA75vLKSpXQIAKbE/?host=https%3A%2F%2Fclaim-pharos.com\u0026href=https%3A%2F%2Fclaim-pharos.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-19T14:34:31.138Z","timestamp":1789828471138,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /node/process.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://arweave.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"PROD\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Sat, 19 Sep 2026 14:34:31 GMT\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 48770\r\ncf-ray: a3d94fc8999856b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7861,"size_decoded":3890,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7860)","md5":"f8382a3858672b98c93fd61c13d21c2c","sha1":"07e4611887908eb9326935084618e4964fb84550","sha256":"79e7646e87709989f575ea4ce02e0877bc9303081567b1c0d412527917ae9e91","sha512":"a1609e8e33a2b7369169fe7dc1f9fd187c4b431e9c7428e4c3929587bff4701d937b8df219b3dfa2bdc3f6b38f63afecc0d9025a6ec8901d91a5e123179ca5cf","ssdeep":"192:kFmwaFSK/rVyQhxkSULErvtAAQic6NR03ao8Yk33q:5wzEr8irU8Yk3a","tlshash":"a2f1d7dce29a743302c1eadaf0bb0123eaf407c855245650ea0bdcc736219e5a5b1f75","first_seen":"2025-10-29T19:17:04.329787Z","last_seen":"2026-09-19T20:47:36.569054Z","times_seen":895,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-pharos.com/d697aabeae20ea83.css","fqdn":"claim-pharos.com","domain":"claim-pharos.com","tld":"com"},"ip":{"addr":"104.21.17.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-pharos.com/","date":"2026-09-19T14:34:23.028Z","timestamp":1789828463028,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-pharos.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 03:58:23 GMT","end":"Wed, 09 Dec 2026 04:56:58 GMT"},"fingerprint":{"sha1":"EB:F3:DA:B3:F3:52:4F:8D:64:83:59:B5:BE:F1:99:40:B7:0D:6F:07","sha256":"BC:DD:6C:C9:9F:1C:65:F0:09:B2:6A:D9:30:53:D7:0E:F0:B9:FA:E3:B0:7F:89:64:69:C4:79:58:0B:8B:28:F3"}}},"request":{"raw":"GET /d697aabeae20ea83.css HTTP/1.1\r\nHost: claim-pharos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-pharos.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:34:23 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ms%2BsV%2FwcPEPeuQMW3ty3U38GrpYzVV8pQtScjY9dOdhmfOPniPYIaaUbWBBfCZHEel6cPe5GB%2BQndBO1zsIktrKc%2F%2BZ7jPKxoM9tGznfv66upl0BslIPmjBldQnGzzB5Ja5X\"}]}\r\nlast-modified: Thu, 10 Sep 2026 04:16:18 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa22f12-76d\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a3d94f95ebe556cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1901,"size_decoded":1299,"mime_type":"text/css","magic":"ASCII text, with very long lines (1901), with no line terminators","md5":"8d91d25d78de269cf485a2591548d014","sha1":"10576b0cebd8aaaa37f5f6727a3fac2f11b9e97a","sha256":"fa276ae3aefddc6d7ae6385f3a8b98d34c9372fdb141ad6ff038114a2cd906d3","sha512":"d85cd8b45a010da904103661647f86745b5f73ad522dcf761d68ad3ec5feaefbc0203c0f987ad914521f54255725c9d0e802553ab5c50833c57a800650843d58","ssdeep":"","tlshash":"97418e31500e901ee821ecc332cf7f63382e746855b94d22d62918598ee78eb63e0f78","first_seen":"2026-04-28T18:12:19.525934Z","last_seen":"2026-09-19T14:39:19.642097Z","times_seen":6,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"claim-pharos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-pharos.com/twitter.svg","fqdn":"claim-pharos.com","domain":"claim-pharos.com","tld":"com"},"ip":{"addr":"104.21.17.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-pharos.com/","date":"2026-09-19T14:34:23.060Z","timestamp":1789828463060,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-pharos.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 03:58:23 GMT","end":"Wed, 09 Dec 2026 04:56:58 GMT"},"fingerprint":{"sha1":"EB:F3:DA:B3:F3:52:4F:8D:64:83:59:B5:BE:F1:99:40:B7:0D:6F:07","sha256":"BC:DD:6C:C9:9F:1C:65:F0:09:B2:6A:D9:30:53:D7:0E:F0:B9:FA:E3:B0:7F:89:64:69:C4:79:58:0B:8B:28:F3"}}},"request":{"raw":"GET /twitter.svg HTTP/1.1\r\nHost: claim-pharos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-pharos.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:34:23 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Y6Nd8KTH12tvbvJUmPj7Ezg0JPV9%2BVd8aEb2KJXIy049CzwGrZH6vIqXKuBR9fuPXZaZ0y81cFeXQf%2Fa7eTqrKEBIWneoBfQNRuuaJVhwdp9THMbSK13te4S3TanoXVFahX\"}]}\r\nlast-modified: Thu, 10 Sep 2026 04:16:18 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa22f12-7e6\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a3d94f962bf156cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2022,"size_decoded":1696,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c54caabfb9228702060de6aa15c69990","sha1":"d93481283423c11c90922ba99c7c9fd32db17440","sha256":"bbf95f1c0eef80dc959d759b7cfbefce5b628b57a8958199c8d979f92e8cf161","sha512":"8d1221340ac83b4d9148fa8b67668430a4154f06526598637fb8ecb82bec670470986d3a3a55601a24b130395cd77fde375ea96236db6ad96cc8f354e2e5f963","ssdeep":"","tlshash":"6341fcf543f830d16a87bbaac5a74c79a15b38f66b28cb5a04e0f6f1fc418908548c90","first_seen":"2026-04-28T18:12:19.530154Z","last_seen":"2026-09-19T14:39:19.630397Z","times_seen":7,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"claim-pharos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-pharos.com/discord.svg","fqdn":"claim-pharos.com","domain":"claim-pharos.com","tld":"com"},"ip":{"addr":"104.21.17.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-pharos.com/","date":"2026-09-19T14:34:23.061Z","timestamp":1789828463061,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-pharos.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 03:58:23 GMT","end":"Wed, 09 Dec 2026 04:56:58 GMT"},"fingerprint":{"sha1":"EB:F3:DA:B3:F3:52:4F:8D:64:83:59:B5:BE:F1:99:40:B7:0D:6F:07","sha256":"BC:DD:6C:C9:9F:1C:65:F0:09:B2:6A:D9:30:53:D7:0E:F0:B9:FA:E3:B0:7F:89:64:69:C4:79:58:0B:8B:28:F3"}}},"request":{"raw":"GET /discord.svg HTTP/1.1\r\nHost: claim-pharos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-pharos.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:34:23 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VLlI0aZ1C8kqLEDgoS1M7HIdFkTqEiaPwovdcH05MljX3a6w7KdZ%2BSWrF9L40Nt%2FXXqnjqYsumRKCtdKy%2BELCBCDolb9LbUhrFys2or%2FSKfqan8RwCltlK87WHYnDzFA5P2X\"}]}\r\nlast-modified: Thu, 10 Sep 2026 04:16:19 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa22f13-5f7\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a3d94f962bf256cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1527,"size_decoded":1464,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"921a2f2baa7a4ebe2d3a40de817c62bd","sha1":"21c8cc59b6e63e9fc249ad35a276a8e3747404fd","sha256":"0c473c453defa08b357787f8c2fd5709cce412077ad188ed815eee8ebc89bebc","sha512":"03d8015ce17c3bd1d6c87c4673c6920b02a7698c753a3ea3e9f7273796bd2cc21b9536592f6f2da1689d7c08d9ace1a6d844f9c2fa49714af1539816844cf54b","ssdeep":"","tlshash":"de3165d25180408cb82eaadacf2d25ed310f34d7b6f891cd82c66d05d55a1e0560ddd8","first_seen":"2026-04-28T18:12:19.532829Z","last_seen":"2026-09-19T14:39:19.592931Z","times_seen":7,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"claim-pharos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zennnnnnn.xyz/x7k/gc","fqdn":"zennnnnnn.xyz","domain":"zennnnnnn.xyz","tld":"xyz"},"ip":{"addr":"172.67.188.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-pharos.com/","date":"2026-09-19T14:34:23.616Z","timestamp":1789828463616,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zennnnnnn.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 00:31:38 GMT","end":"Mon, 07 Dec 2026 01:29:13 GMT"},"fingerprint":{"sha1":"43:45:93:AD:DC:B7:26:4C:9B:A7:04:85:39:49:43:D5:D5:08:BE:27","sha256":"A2:D3:84:55:78:F0:19:7D:75:6F:39:8C:86:DB:E1:22:A5:1E:22:A6:6E:B4:AB:35:5E:D7:0F:B4:4A:34:3D:85"}}},"request":{"raw":"OPTIONS /x7k/gc HTTP/1.1\r\nHost: zennnnnnn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://claim-pharos.com/\r\nOrigin: https://claim-pharos.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Sat, 19 Sep 2026 14:34:23 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WbTlvs0AH8NSsFApJHE4mPfCF2e9PixlOVzYzWSs4IiOVIHu0BAtaqr7DVzt5gQE9zqFY72wD40%2FQDK9JH1wDm7gH4JWvq81NgxHPJbghTktOBJLLgb%2F%2BGwNRL6Go8Hg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d94f99cf7056c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":641,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-19T20:41:53.858333Z","times_seen":18555462,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":5,"connect":1,"send":0,"wait":76,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zennnnnnn.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arweave.net/raw/FfCWnyHcPa1rzmqvIqwlean__rHkA75vLKSpXQIAKbE/?host=https%3A%2F%2Fclaim-pharos.com\u0026href=https%3A%2F%2Fclaim-pharos.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-19T14:34:31.040Z","timestamp":1789828471040,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022 HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://arweave.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arweave.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-ESM-Path, X-TypeScript-Types\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nx-esm-path: /@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs\r\nx-typescript-types: https://esm.sh/@walletconnect/ethereum-provider@2.21.8/dist/types/index.d.ts\r\ndate: Sat, 19 Sep 2026 14:34:31 GMT\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 135193\r\nlast-modified: Fri, 18 Sep 2026 12:55:51 GMT\r\ncf-ray: a3d94fc8198256b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":335,"size_decoded":769,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"7ca4c1770e526303c8b96ec681271e67","sha1":"040ceca3f1799eb067ee3e0c5c3f97e8d48e8492","sha256":"9b69c924617de012e3a6252d715e48202d0bd07eccae08190bc9d0565405d1dd","sha512":"0180a2c052ce5feedb836fc6a1e5d82f2edaa25574f0951b679029a28ca6c0e4098c0fde61858a88c4dc4fb2ee2ac196f3f681864fab71b3d205a0baf010c4f3","ssdeep":"","tlshash":"13e0867181174b8423b80da5ad81af3bebab1758a945215c334ec633f517654c9441f7","first_seen":"2026-08-03T07:57:51.315431Z","last_seen":"2026-09-19T15:06:14.283156Z","times_seen":234,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":8,"connect":10,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/buffer.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arweave.net/raw/FfCWnyHcPa1rzmqvIqwlean__rHkA75vLKSpXQIAKbE/?host=https%3A%2F%2Fclaim-pharos.com\u0026href=https%3A%2F%2Fclaim-pharos.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-19T14:34:31.134Z","timestamp":1789828471134,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /node/buffer.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://arweave.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"PROD\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Sat, 19 Sep 2026 14:34:31 GMT\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 48770\r\ncf-ray: a3d94fc8999656b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28845,"size_decoded":10672,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (28468)","md5":"39e6418dc1a8a38a7baf7cbf64e6bc9b","sha1":"036b9f42abe9026454886016987cdd479ce3f33c","sha256":"64fb61aa5f48644d685f9ceabedba60ea6b5d6ce03dac1943e863d00d9e574f3","sha512":"de01074341e2a0ad5d0b74108a593811ef91c72bd775fc2ab20f98c941fc4635f541fd7983f08cd93700d7f6f582c55b95fdfaed785258eef4f0b55322df151c","ssdeep":"384:f2ROO9YwKOX7MW/I55zmhYuC2rUV5w+c7LW+M444MMazyXDNcyO9+C9YDNqWRMzI:fKewKOX7MWwGzCrfTc7LW+bcp9a60","tlshash":"d3d2b694f795b032439e65a50057980ef2b8f928640d198cf6a0f5f728b59ce88eff74","first_seen":"2025-10-30T08:47:32.392454Z","last_seen":"2026-09-19T15:06:14.296847Z","times_seen":756,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://relay.walletconnect.org/?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWtzdlFCaTZTZlY3MmVRd3BZcFJ1d25XMjN6V2dBNTd5YzQ3aFh3MmJwVnNLaiIsInN1YiI6IjM3NDBkNWI2OTU2OWI5MzUzZDAxZjM0NzE4NTMwM2MwMDdkNDI4ZTMxMWY0NDRkNTFhYWVlMDU3MDY4NjIzODkiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0Lm9yZyIsImlhdCI6MTc4OTgyODQ3MSwiZXhwIjoxNzg5OTE0ODcxfQ.TTnDP2kgM716a2JyeBespZG5gyqdN4ZgGZ5hU4EwWYoNwFFQA9Fx1tItkhEdVjqKGG2SfUdRSyryCnfU6D9UCw\u0026projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026ua=wc-2%2Fjs-2.21.8%2Fwindows10-firefox-134.0.0%2Fnode\u0026useOnCloseEvent=true","fqdn":"relay.walletconnect.org","domain":"walletconnect.org","tld":"org"},"ip":{"addr":"18.193.31.136","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://arweave.net/raw/FfCWnyHcPa1rzmqvIqwlean__rHkA75vLKSpXQIAKbE/?host=https%3A%2F%2Fclaim-pharos.com\u0026href=https%3A%2F%2Fclaim-pharos.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-19T14:34:31.505Z","timestamp":1789828471505,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"relay.reown.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 25 Jan 2026 00:00:00 GMT","end":"Tue, 23 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"90:24:50:19:3B:DA:52:35:62:2B:85:B8:D3:E7:0A:03:24:F8:84:7E","sha256":"A4:45:7F:C8:5C:09:EA:D9:34:3C:56:81:67:1A:5F:6A:3A:C0:13:7B:5E:4F:C5:F9:06:CE:FD:53:A3:9B:88:77"}}},"request":{"raw":"GET /?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWtzdlFCaTZTZlY3MmVRd3BZcFJ1d25XMjN6V2dBNTd5YzQ3aFh3MmJwVnNLaiIsInN1YiI6IjM3NDBkNWI2OTU2OWI5MzUzZDAxZjM0NzE4NTMwM2MwMDdkNDI4ZTMxMWY0NDRkNTFhYWVlMDU3MDY4NjIzODkiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0Lm9yZyIsImlhdCI6MTc4OTgyODQ3MSwiZXhwIjoxNzg5OTE0ODcxfQ.TTnDP2kgM716a2JyeBespZG5gyqdN4ZgGZ5hU4EwWYoNwFFQA9Fx1tItkhEdVjqKGG2SfUdRSyryCnfU6D9UCw\u0026projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026ua=wc-2%2Fjs-2.21.8%2Fwindows10-firefox-134.0.0%2Fnode\u0026useOnCloseEvent=true HTTP/1.1\r\nHost: relay.walletconnect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://arweave.net\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: G40cFAQ1fHOQGhKMK915kA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sat, 19 Sep 2026 14:34:31 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: 6fn6KjiXnyl54/gXBTm6hAifPII=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":166,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-19T20:41:53.858333Z","times_seen":18555462,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":0,"dns":95,"connect":118,"send":0,"wait":30,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-pharos.com/rocket.svg","fqdn":"claim-pharos.com","domain":"claim-pharos.com","tld":"com"},"ip":{"addr":"104.21.17.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-pharos.com/","date":"2026-09-19T14:34:23.056Z","timestamp":1789828463056,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-pharos.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 03:58:23 GMT","end":"Wed, 09 Dec 2026 04:56:58 GMT"},"fingerprint":{"sha1":"EB:F3:DA:B3:F3:52:4F:8D:64:83:59:B5:BE:F1:99:40:B7:0D:6F:07","sha256":"BC:DD:6C:C9:9F:1C:65:F0:09:B2:6A:D9:30:53:D7:0E:F0:B9:FA:E3:B0:7F:89:64:69:C4:79:58:0B:8B:28:F3"}}},"request":{"raw":"GET /rocket.svg HTTP/1.1\r\nHost: claim-pharos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-pharos.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:34:23 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xZ1ZKWGeG%2BBl2HyKZ8C0cATrdnq8zfzGo0OGjaJh4gZ475rpms12Uku360BmLXY6VyaTLWTQVu2V4qb8dIE8CanEW3WBJI%2B5MpFFMQj5MSp%2BRQOToH8w%2FvB5t8bRSX1RzknV\"}]}\r\nlast-modified: Thu, 10 Sep 2026 04:16:18 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa22f12-563\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a3d94f961bee56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1379,"size_decoded":1320,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"71dbaaea577718a8f27dafb203fe48c3","sha1":"e6319195ee8dff48d690c7d9a4dfcc9ba455cac9","sha256":"4979210a2b6e800c843d0406102caaaeb0a8cb74825af3de0e2c06a3a13c3f79","sha512":"c4bacbb7401cd45b31d89ddcd659444de11ec37ec76f65726ed19e13d088fce5fa0aaaa5739366531c709189ae675675d303bdc54b2fc7ab8d92581ad66915ad","ssdeep":"","tlshash":"dd21cef273d85e3cb10747a0f615b6306c5e04fe6b94efa946726cb0d92144e94b35d0","first_seen":"2026-04-28T18:12:19.550423Z","last_seen":"2026-09-19T14:39:19.629577Z","times_seen":7,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"claim-pharos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-pharos.com/calendar-border.svg","fqdn":"claim-pharos.com","domain":"claim-pharos.com","tld":"com"},"ip":{"addr":"104.21.17.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-pharos.com/","date":"2026-09-19T14:34:23.138Z","timestamp":1789828463138,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-pharos.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 03:58:23 GMT","end":"Wed, 09 Dec 2026 04:56:58 GMT"},"fingerprint":{"sha1":"EB:F3:DA:B3:F3:52:4F:8D:64:83:59:B5:BE:F1:99:40:B7:0D:6F:07","sha256":"BC:DD:6C:C9:9F:1C:65:F0:09:B2:6A:D9:30:53:D7:0E:F0:B9:FA:E3:B0:7F:89:64:69:C4:79:58:0B:8B:28:F3"}}},"request":{"raw":"GET /calendar-border.svg HTTP/1.1\r\nHost: claim-pharos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-pharos.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:34:23 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wQEHPmwFoH5%2B4U9m18Ys6Mo1rP9Oja1as%2FZuHedQ49OiDAOoWn%2BzFafgqmrDOBn%2BT9zKLMutbcamv%2BkdNx1kUikOI0foLCDeR9BsNSKCPnYqWk3JUAqgljcmlC3u4z4duFFe\"}]}\r\nlast-modified: Thu, 10 Sep 2026 04:16:19 GMT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa22f13-157\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a3d94f969bfb56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":343,"size_decoded":902,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"14bb7a5df2b63a164975eea95e24c23c","sha1":"4435177d6380d5eb7f2e11def3b31e6ccc845bad","sha256":"c4bab1b12bdff7f5d9ca9fe926dd92e1969dee8492c460102eb9573c1badfc52","sha512":"97cfac3e9e07da6252f2f7e5995d363a91ce9a5dda47bd71244ee223309a4bd196617c6fc6bdbbd25b782370edffe577021c01064a08b3dd6424c5371cda5c54","ssdeep":"","tlshash":"c8e020f55184ca84f80987bcfb24387b315560dfd6ddf5409504581bb8c12c209b4de4","first_seen":"2026-05-06T23:01:23.082576Z","last_seen":"2026-09-19T14:39:19.643489Z","times_seen":4,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"claim-pharos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-pharos.com/favicon.ico","fqdn":"claim-pharos.com","domain":"claim-pharos.com","tld":"com"},"ip":{"addr":"104.21.17.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-pharos.com/","date":"2026-09-19T14:34:23.579Z","timestamp":1789828463579,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-pharos.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 03:58:23 GMT","end":"Wed, 09 Dec 2026 04:56:58 GMT"},"fingerprint":{"sha1":"EB:F3:DA:B3:F3:52:4F:8D:64:83:59:B5:BE:F1:99:40:B7:0D:6F:07","sha256":"BC:DD:6C:C9:9F:1C:65:F0:09:B2:6A:D9:30:53:D7:0E:F0:B9:FA:E3:B0:7F:89:64:69:C4:79:58:0B:8B:28:F3"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: claim-pharos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-pharos.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:34:23 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xFimvntFhoX7C2lU7oNbg%2Bel5MP07HK5xf5zCzkADzF3eILcsRSer3p6gI3v54X7KLo5czH36lSCnnTNpzdy%2FTDX%2BzFDFaHcToV76qlcve3AV3v%2BbYB1fN5PN99Zby4%2Bgcu4\"}]}\r\nlast-modified: Thu, 10 Sep 2026 04:16:19 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa22f13-10be\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a3d94f995c2656cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":1753,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"6a41da144f638a114c2999d20ee41b91","sha1":"c789b67b676187ce8caeba1dce2ece1db6ec828d","sha256":"84c646e52d4dc9059721725ccc70ba90fe374c3df793d87730b4c46b0e416d53","sha512":"071fe65ef45e2db87d3ef56c5eef18665412d31c1e1d657c99b0e0e2d59e75236adde71a33891f3d1fd403b9c87f5bc64d2937ae4021996ee656938ed1e718a2","ssdeep":"24:suTjsN18+RjUm5mn3KsZxTLWxBP5iZKKAgunuuna6PxXY4K8nxvQD0Z6+KaEb:dsyn3XZxTLIwctnXPix8G+BEb","tlshash":"c49172e2a110d774efe888788515ff7994e22ebe76e06e4e1cac38520d3731b0a07462","first_seen":"2026-04-28T18:12:19.547267Z","last_seen":"2026-09-19T14:39:19.588055Z","times_seen":12,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"claim-pharos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zennnnnnn.xyz/x7k/gf","fqdn":"zennnnnnn.xyz","domain":"zennnnnnn.xyz","tld":"xyz"},"ip":{"addr":"172.67.188.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-pharos.com/","date":"2026-09-19T14:34:23.965Z","timestamp":1789828463965,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zennnnnnn.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 00:31:38 GMT","end":"Mon, 07 Dec 2026 01:29:13 GMT"},"fingerprint":{"sha1":"43:45:93:AD:DC:B7:26:4C:9B:A7:04:85:39:49:43:D5:D5:08:BE:27","sha256":"A2:D3:84:55:78:F0:19:7D:75:6F:39:8C:86:DB:E1:22:A5:1E:22:A6:6E:B4:AB:35:5E:D7:0F:B4:4A:34:3D:85"}}},"request":{"raw":"OPTIONS /x7k/gf HTTP/1.1\r\nHost: zennnnnnn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://claim-pharos.com/\r\nOrigin: https://claim-pharos.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:34:24 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PabJBU%2BWtjw%2F4B78hw2nDYT6Ju4FZt8p0lHeHnSeimLkHE1lCa8kXW6Dhvf1eFIFUyBi2Lr2c0MzoNI%2Bce3Mh%2Bi3vghDQad5V2wjEKa%2BuwKa3HSfj7uEMpw%2BQpf0Uy88\"}]}\r\ncf-ray: a3d94f9bcbf3b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":672,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-19T20:41:53.858333Z","times_seen":18555462,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zennnnnnn.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=6\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-pharos.com/","date":"2026-09-19T14:34:27.695Z","timestamp":1789828467695,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=6\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claim-pharos.com/\r\nOrigin: https://claim-pharos.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 14:34:27 GMT\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\npriority: u=4,i=?0\r\ncf-ray: a3d94fb31ce5c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":190142,"size_decoded":31439,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"66d4e3f1e5dbca00d8d4a5f503e0d859","sha1":"922bce68c4dc5515f1863289d89787babfdf72af","sha256":"4198994ed42a920167cf31168ad61ca03c0d4d523f4da63a70cc90d8d1cf846c","sha512":"6da4268452ba2439de681384fc7cdea946bd936b320833bccc6da879733fb17ce60e609ff4a13ff551aa2276b70c554ceef4672ebb3d4f3f899c4a8c43ff99bd","ssdeep":"1536:KHtpRWzoq53T7wYGzvx4ZMfLO/kU15yGtprkMTuomc8y0l:KvRWzd3T7waCU15Br9LmW0l","tlshash":"8b04536e8b04de662fb15388d15cf9eda15ee117c9cd5ca2e2f1cf3440bc9b3215229a","first_seen":"2026-09-19T06:50:08.918666Z","last_seen":"2026-09-19T15:06:14.27558Z","times_seen":18,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/async_hooks.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arweave.net/raw/FfCWnyHcPa1rzmqvIqwlean__rHkA75vLKSpXQIAKbE/?host=https%3A%2F%2Fclaim-pharos.com\u0026href=https%3A%2F%2Fclaim-pharos.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-19T14:34:31.183Z","timestamp":1789828471183,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /node/async_hooks.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://arweave.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/node/events.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"PROD\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Sat, 19 Sep 2026 14:34:31 GMT\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nage: 48770\r\ncf-cache-status: HIT\r\ncf-ray: a3d94fc8e99c56b4-OSL\r\ncontent-length: 1531\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2938,"size_decoded":1940,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2937)","md5":"f78e3393d375d2bd75ee22e5bf0f3635","sha1":"2b6d82e3a17d6f4596fb2f6df083fcf498edaa99","sha256":"b7862dbfba8bbbca956f19e4e08280b529e4b27468779775a9093aef8c92dc1d","sha512":"280686efdbef542165cff092b795274efb660689426f8f15523b3478d967cc6bea03a0d7a66400552278a777655231d7e9ad2cba1bb4eb0a45f249e76102258d","ssdeep":"","tlshash":"3b515489a78bf9685b9eb176413a0103e10a0ec89d1c722cf049e9ee695e10c8774fb5","first_seen":"2025-10-29T19:17:04.32262Z","last_seen":"2026-09-19T20:47:36.528386Z","times_seen":895,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-pharos.com/arrow.svg","fqdn":"claim-pharos.com","domain":"claim-pharos.com","tld":"com"},"ip":{"addr":"104.21.17.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-pharos.com/","date":"2026-09-19T14:34:23.057Z","timestamp":1789828463057,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-pharos.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 03:58:23 GMT","end":"Wed, 09 Dec 2026 04:56:58 GMT"},"fingerprint":{"sha1":"EB:F3:DA:B3:F3:52:4F:8D:64:83:59:B5:BE:F1:99:40:B7:0D:6F:07","sha256":"BC:DD:6C:C9:9F:1C:65:F0:09:B2:6A:D9:30:53:D7:0E:F0:B9:FA:E3:B0:7F:89:64:69:C4:79:58:0B:8B:28:F3"}}},"request":{"raw":"GET /arrow.svg HTTP/1.1\r\nHost: claim-pharos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-pharos.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:34:23 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FJsVoVZdyoF5N5lQfX6KuIIclc3qFSCWnFgU2Lb5zXXbEoqBsyH4Bp1rZnDRI%2FXrZizBgFHsVEsG4qEUglV2pdZiV3BR2OJVmUZA4nNPjiptUTFKafdsxw8zCLANJKi%2Fe81n\"}]}\r\nlast-modified: Thu, 10 Sep 2026 04:16:18 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa22f12-376\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a3d94f961bef56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":886,"size_decoded":1150,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7d595d76c860792501e28909f73853e8","sha1":"f8a6b74da9b667800113052069e5ca9e2bae9749","sha256":"2577d10c94d91054aae94344ef400aca0d16c1e924b8bfd8254904ecb4dd6d6e","sha512":"74a6cfc3d2b6ad149076e704f2863b3d7c9c4c0b8f5afbe02da4189dbe39fb141c4d31427b0d86eb6e16efd9760dcb6e61c925cbbe1edf0434bd9d06ad33ae46","ssdeep":"","tlshash":"d011e3ff508861d0ff0ccb78dc1c6033286f223f2b88999972254a4dd149dc95f90952","first_seen":"2026-04-28T18:12:19.551557Z","last_seen":"2026-09-19T14:39:19.584424Z","times_seen":6,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"claim-pharos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-pharos.com/bg.png","fqdn":"claim-pharos.com","domain":"claim-pharos.com","tld":"com"},"ip":{"addr":"104.21.17.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-pharos.com/","date":"2026-09-19T14:34:23.132Z","timestamp":1789828463132,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-pharos.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 03:58:23 GMT","end":"Wed, 09 Dec 2026 04:56:58 GMT"},"fingerprint":{"sha1":"EB:F3:DA:B3:F3:52:4F:8D:64:83:59:B5:BE:F1:99:40:B7:0D:6F:07","sha256":"BC:DD:6C:C9:9F:1C:65:F0:09:B2:6A:D9:30:53:D7:0E:F0:B9:FA:E3:B0:7F:89:64:69:C4:79:58:0B:8B:28:F3"}}},"request":{"raw":"GET /bg.png HTTP/1.1\r\nHost: claim-pharos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-pharos.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:34:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 10 Sep 2026 04:16:19 GMT\r\npriority: u=4,i\r\netag: \"6aa22f13-4c4a8\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sCLlwf1ZL7%2F0n%2Fy6tgZcWHcfHRYrzUPPG7l%2FHkHeV749RUIuB2gqfaanJ%2FIfys8INTs8OMbHGKWBwA7%2Fy1d1MgvgjvlpEPJuRvR1nPQg3y08IXOJEvIXyQ76dstVb90NaG0y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d94f969bfa56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 312488\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":312488,"size_decoded":313181,"mime_type":"image/png","magic":"PNG image data, 1920 x 1147, 8-bit/color RGBA, non-interlaced","md5":"4f7fc29677d0c827a8c57eb37d8c9404","sha1":"c11ff4869b0109a4e9f8c7f4527445f3db2f68e6","sha256":"e0e9a94e0f760ff3a396d8eac60cb6d9aa935e090f0aac8c6dac3190631457fc","sha512":"060b3aa173cb10607d2cc3d388d0f5733c781ce627b96dac017ac8ef3b8c04681ed2dd8ce1793d4b1312aeb4ae886a2f3d6651a8e75427d17bf58441a65291e7","ssdeep":"6144:HxJ8oBStWeWLKXPj0dm+5IOxqP6uxgv/j9ou6TmgeVoQGVP:HxSowZ66LC55qrgHBoOkp","tlshash":"54642348d21b78a9d16e907b06c6557c9b0f6d3060c092c94865f6bd2fab37f8f8b065","first_seen":"2026-04-28T18:12:19.540457Z","last_seen":"2026-09-19T14:39:19.636771Z","times_seen":6,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"claim-pharos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-pharos.com/wallet.svg","fqdn":"claim-pharos.com","domain":"claim-pharos.com","tld":"com"},"ip":{"addr":"104.21.17.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-pharos.com/","date":"2026-09-19T14:34:23.052Z","timestamp":1789828463052,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-pharos.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 03:58:23 GMT","end":"Wed, 09 Dec 2026 04:56:58 GMT"},"fingerprint":{"sha1":"EB:F3:DA:B3:F3:52:4F:8D:64:83:59:B5:BE:F1:99:40:B7:0D:6F:07","sha256":"BC:DD:6C:C9:9F:1C:65:F0:09:B2:6A:D9:30:53:D7:0E:F0:B9:FA:E3:B0:7F:89:64:69:C4:79:58:0B:8B:28:F3"}}},"request":{"raw":"GET /wallet.svg HTTP/1.1\r\nHost: claim-pharos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-pharos.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:34:23 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IQHmdYqMz3CVYvJsM%2BfgykaZNXlbQ6GPml4lvr3YQyqc7gEaB7iJzV%2B9XiYOL22Ow7BF%2BNc5KwhfzOmEHComCDzFo5M1ay7tHA5MeZ7SG8NrUWSKlsnedeingMT%2BvXuMLrLC\"}]}\r\nlast-modified: Thu, 10 Sep 2026 04:16:18 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa22f12-3d8\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a3d94f961bea56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":984,"size_decoded":1185,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"644b777ee2f595da71d36a840f840cac","sha1":"bc75633d2679061f767e951d6c22557eb5b7114d","sha256":"87055e4548092a42a51179cb7cff9ff3fb857126cef47d68807fec517ecf40ea","sha512":"7bfc7975c917083742624c7e8fb61417a4de84c0796b9f77b83134588a5b350a0c4a9ee3049207bd5e8ab39b8a55a0f7c6741d6c366211b4d67436826795410a","ssdeep":"","tlshash":"1b1190eaf3d950a0a943a724d8258332b7b750fc9f46c3819140d774f710c6cc84dab8","first_seen":"2026-04-28T18:12:19.549285Z","last_seen":"2026-09-19T14:39:19.636075Z","times_seen":7,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"claim-pharos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-pharos.com/banner.png","fqdn":"claim-pharos.com","domain":"claim-pharos.com","tld":"com"},"ip":{"addr":"104.21.17.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-pharos.com/","date":"2026-09-19T14:34:23.054Z","timestamp":1789828463054,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-pharos.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 03:58:23 GMT","end":"Wed, 09 Dec 2026 04:56:58 GMT"},"fingerprint":{"sha1":"EB:F3:DA:B3:F3:52:4F:8D:64:83:59:B5:BE:F1:99:40:B7:0D:6F:07","sha256":"BC:DD:6C:C9:9F:1C:65:F0:09:B2:6A:D9:30:53:D7:0E:F0:B9:FA:E3:B0:7F:89:64:69:C4:79:58:0B:8B:28:F3"}}},"request":{"raw":"GET /banner.png HTTP/1.1\r\nHost: claim-pharos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-pharos.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:34:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 10 Sep 2026 04:16:18 GMT\r\npriority: u=5,i\r\netag: \"6aa22f12-e67d\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nTS8eSCA%2BSCHV6Z%2BiB%2B4Jug09sxq7ovFF%2BiF%2FDgbYIqBOFkPqTNCZI7bZXzMHuG3UlIucXRV%2BUF24zoZApbQqoMysyiQRiNIcdVgKeYO6DpI5G3ao4oPhTDG14cVz3pavvK4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d94f961bec56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 59005\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59005,"size_decoded":59698,"mime_type":"image/png","magic":"PNG image data, 3200 x 240, 8-bit/color RGB, non-interlaced","md5":"b4e14b28d16403e222f67940ee0a9503","sha1":"27024c0fa0a8e30c6e0185b38f66fb75bb0138a8","sha256":"3bea1803dd31ebe6a7e8db5ef72f76a1a1e407cb70096e5eebf0b34b4a03af30","sha512":"41d8f9254c4a614d1a74d7191e540de2021a1fe2de69d9c75448162b6b57b3d07d1d75a6daec07222d68e8b5254e0b60acbfcb1063e3e2231d392d7bbb15fe05","ssdeep":"1536:SyXHLXqe/J+r+zY58ddFm/fF2+17mzr3UCrTdokEpCnsxQ/C16:JHmIW+zY6lIfE+1KkC6FYs9w","tlshash":"a643d03bc9fa4c30caca913704b711976738847f67f174ac1a2939e48e2257c1b895af","first_seen":"2026-05-06T23:01:23.053563Z","last_seen":"2026-09-19T14:39:19.57563Z","times_seen":4,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"claim-pharos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-pharos.com/bg-footer.png","fqdn":"claim-pharos.com","domain":"claim-pharos.com","tld":"com"},"ip":{"addr":"104.21.17.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-pharos.com/","date":"2026-09-19T14:34:23.144Z","timestamp":1789828463144,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-pharos.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 03:58:23 GMT","end":"Wed, 09 Dec 2026 04:56:58 GMT"},"fingerprint":{"sha1":"EB:F3:DA:B3:F3:52:4F:8D:64:83:59:B5:BE:F1:99:40:B7:0D:6F:07","sha256":"BC:DD:6C:C9:9F:1C:65:F0:09:B2:6A:D9:30:53:D7:0E:F0:B9:FA:E3:B0:7F:89:64:69:C4:79:58:0B:8B:28:F3"}}},"request":{"raw":"GET /bg-footer.png HTTP/1.1\r\nHost: claim-pharos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-pharos.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:34:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 10 Sep 2026 04:16:18 GMT\r\npriority: u=4,i\r\netag: \"6aa22f12-9853\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V12YL5dr5JX18RG%2BqlPhGAigBEoeQwALbS1qtptD0BvCaXC%2BrytfLR5plSulop5EFeEyH%2F85jEq8VciAmxl0w5necTvC0eoxr4MmHYl7k826FtpOU6RYl97tWm1ZfOMgYFEw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d94f96abfe56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 38995\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38995,"size_decoded":39682,"mime_type":"image/png","magic":"PNG image data, 1394 x 960, 8-bit/color RGBA, non-interlaced","md5":"9b7c50998460848571db317dbbc702ba","sha1":"b35c97f9f94dd8d0fab68b9c8e5f818bc1ac65c3","sha256":"0dc112805ac4df4f65ceb8313b204c13fc5b7594c783b46619e15bc1f391af42","sha512":"4b45aa5ede414d8a19479b4479c0f3be3978c4b9723adf9b235d36ce35187a6d8defbe14e0ce562bf1b7405a3c8988db132f06f352a710f33f00cdced08d5339","ssdeep":"768:rzwfwSLu9anPWmO1KNXeLUMZq2yj10+0iQzVkyRg9pzjInLwbocoxKHt39HwuH:Hwf71+mYKNXeqm7bRUpzELw7oxKHt39N","tlshash":"ed03e14c2bcd90559bdf61822eeda62d14aecdbc1af8d9a34f035f1f10a267101e35e8","first_seen":"2026-04-28T18:12:19.541858Z","last_seen":"2026-09-19T14:39:19.599373Z","times_seen":6,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"claim-pharos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-pharos.com/68e9636680bd6bc3-s.p.woff","fqdn":"claim-pharos.com","domain":"claim-pharos.com","tld":"com"},"ip":{"addr":"104.21.17.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-pharos.com/","date":"2026-09-19T14:34:23.176Z","timestamp":1789828463176,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-pharos.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 03:58:23 GMT","end":"Wed, 09 Dec 2026 04:56:58 GMT"},"fingerprint":{"sha1":"EB:F3:DA:B3:F3:52:4F:8D:64:83:59:B5:BE:F1:99:40:B7:0D:6F:07","sha256":"BC:DD:6C:C9:9F:1C:65:F0:09:B2:6A:D9:30:53:D7:0E:F0:B9:FA:E3:B0:7F:89:64:69:C4:79:58:0B:8B:28:F3"}}},"request":{"raw":"GET /68e9636680bd6bc3-s.p.woff HTTP/1.1\r\nHost: claim-pharos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-pharos.com/d697aabeae20ea83.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:34:23 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 10 Sep 2026 04:16:19 GMT\r\npriority: u=3,i=?0\r\netag: \"6aa22f13-ffb8\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=swNLveAP5xUnJipQW5N22xA03kGtZS50wW0DCRk0xf63qEAe8jpB4OG%2B64qQwx3SAO2LI8QV49yyq%2FJ9eGTI3NV9tmPxnoTvknTLQtJ%2FTIIAzan5bwbMN1mZlxSirgw%2FfZnz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d94f96dc0156cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 65464\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65464,"size_decoded":66156,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 65464, version 0.0","md5":"90f8314654dbec690042c30210c2def3","sha1":"9a3b041543e5747bff892a07730ebcdbaa355fe9","sha256":"7418889035499896f60ccd124fcfc8d46239f51b735a2769c2e11b16e48426f8","sha512":"1c046e673c27d19cf88beef6ca212cff21d6300efbef252c417412843f340b6967a48cf966e5fc72173d04dcc95c7174d151df978dee3898e556270550d64f97","ssdeep":"1536:t4K21QXJvQQN5Qq+lASk95FO2T4gBZ7b5vN9wQNVvE:S71QZvQQNWq+CSkRO2T4G/bNVc","tlshash":"175302fb72d1092316936b39c2ea77d41f74bcc9ad9da5bc0a5006d399ad82933d780c","first_seen":"2024-08-19T17:59:20.230424Z","last_seen":"2026-09-19T14:39:19.61143Z","times_seen":44,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"claim-pharos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
