{"report_id":"0092009b-9154-4ac6-b9e5-de98aef60867","version":6,"status":"done","tags":[],"date":"2026-01-30T01:49:37Z","url":{"schema":"http","addr":"claim.sentlent.com","fqdn":"claim.sentlent.com","domain":"sentlent.com","tld":"com"},"ip":{"addr":"94.141.122.67","port":0,"asn":215826,"as":"Partner Hosting LTD","country":"Finland","country_code":"FI"},"final":{"url":{"schema":"https","addr":"claim.sentlent.com/","fqdn":"claim.sentlent.com","domain":"sentlent.com","tld":"com"},"title":"Sentient Airdrop","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T09:49:07.809217Z","times_seen":17797099,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"claim.sentlent.com","fqdn":"claim.sentlent.com","domain":"sentlent.com","tld":"com"},"ip":{"addr":"94.141.122.67","port":0,"asn":215826,"as":"Partner Hosting LTD","country":"Finland","country_code":"FI"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-06T01:49:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"claim.sentlent.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"claim.sentlent.com","ip":{"addr":"94.141.122.67","port":443,"asn":215826,"as":"Partner Hosting LTD","country":"Finland","country_code":"FI"},"domain_registered":"2025-11-17","domain_rank":0,"first_seen":"2026-01-30T01:05:24.915928Z","last_seen":"2026-01-30T01:05:24.915928Z","alert_count":7,"request_count":7,"received_data":5248686,"sent_data":3426,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"claim.sentlent.com/shdsk8.php","fqdn":"claim.sentlent.com","domain":"sentlent.com","tld":"com"},"ip":{"addr":"94.141.122.67","port":443,"asn":215826,"as":"Partner Hosting LTD","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"59de055abaa78d00cc646c257f81acfc","sha1":"b4cdcd88604ca7ddf9b9312261c18e5261aeff7a","sha256":"3abb661872c605d2d97d1b77568cd1f7070e080031dc20ec0561e8fce30967ed","sha512":"e3b1550fb10799635d9afb2c61f2d20651185570289eeda9cdc700ad8907033b4ef8b1f53b20018e25170bdd9078bbce4456d64fde4cec85ab6e722daea7b1a1","ssdeep":"3072:VPbS0zrw3mJ+JgnvOAMKHEQCfINJbZNEqRkrVPyVrXiFQT:VXXrJ+JsOAMKHErINJbZNhRkrVPyVrX7","tlshash":"d50455c6181684c58e4912dfd0b3e805e4149e23ceacb1a7e92dddc2756df6284cb2bf","size":182098,"data":"","first_seen":"2026-01-30T01:49:39.770412Z","last_seen":"2026-01-30T01:49:39.770412Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"claim.sentlent.com/","fqdn":"claim.sentlent.com","domain":"sentlent.com","tld":"com"},"ip":{"addr":"94.141.122.67","port":443,"asn":215826,"as":"Partner Hosting LTD","country":"Finland","country_code":"FI"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-30T01:49:12.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.sentlent.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:57:55 GMT","end":"Wed, 22 Apr 2026 10:57:54 GMT"},"fingerprint":{"sha1":"F9:A2:28:CC:8C:7A:E1:DC:16:BD:C9:66:80:90:D6:49:6F:A3:CB:C6","sha256":"3E:53:CE:2B:9E:EF:DD:EF:40:36:A5:18:BD:3D:ED:06:BE:55:CD:E9:E3:3D:90:81:8F:A1:28:26:C7:94:6E:DE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claim.sentlent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Fri, 30 Jan 2026 01:49:14 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0\r\nPragma: no-cache\r\nExpires: 0\r\nSurrogate-Control: no-store\r\nSet-Cookie: sid=f010fcd5-e31e-4a8f-ab68-342969148f08; expires=Sun, 01 Mar 2026 01:49:14 GMT; Max-Age=2592000; path=/\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":252185,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20581)","md5":"18f1b842926cdd1e020b43095e260c47","sha1":"7ebc80962aacb2ad7f8c4cc458816cf904331a15","sha256":"d000f639d70b848d939e3571c5e27cffd901098ee413631ea5d50f58080ef862","sha512":"a7c0466a5ce0cdc7df57a20c7add3ebcc3c5dd9bb9123838b4b4b33080cf528b561993e579258adf55d552905f384d9fe696c8253d12b9f48059cab0c850564b","ssdeep":"1536:rJhHzErnFcLozDKqoCWRnLhk+l7Rrqav9VqwbyGocJhHzErnA2PV2q2Z4subOkBY:fTEJcLozWVlLqwbyQTEcgpRIIYjvO1c","tlshash":"6734d538a5b16a743c13227c26ee65097e33a1cbe92dee147ddc32a4cf883b49d55358","first_seen":"2026-01-30T01:05:32.347348Z","last_seen":"2026-01-30T01:49:39.767991Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3371,"timings":{"blocked":1524,"dns":1437,"connect":40,"send":0,"wait":280,"receive":42,"ssl":45},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"claim.sentlent.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.sentlent.com/shdsk8.php","fqdn":"claim.sentlent.com","domain":"sentlent.com","tld":"com"},"ip":{"addr":"94.141.122.67","port":443,"asn":215826,"as":"Partner Hosting LTD","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.sentlent.com/","date":"2026-01-30T01:49:14.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.sentlent.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:57:55 GMT","end":"Wed, 22 Apr 2026 10:57:54 GMT"},"fingerprint":{"sha1":"F9:A2:28:CC:8C:7A:E1:DC:16:BD:C9:66:80:90:D6:49:6F:A3:CB:C6","sha256":"3E:53:CE:2B:9E:EF:DD:EF:40:36:A5:18:BD:3D:ED:06:BE:55:CD:E9:E3:3D:90:81:8F:A1:28:26:C7:94:6E:DE"}}},"request":{"raw":"GET /shdsk8.php HTTP/1.1\r\nHost: claim.sentlent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.sentlent.com/\r\nCookie: sid=f010fcd5-e31e-4a8f-ab68-342969148f08\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Fri, 30 Jan 2026 01:49:15 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 43899\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: *\r\nAccess-Control-Allow-Headers: *\r\nAccess-Control-Max-Age: 3600\r\nCache-Control: public, max-age=3600\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":182098,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"59de055abaa78d00cc646c257f81acfc","sha1":"b4cdcd88604ca7ddf9b9312261c18e5261aeff7a","sha256":"3abb661872c605d2d97d1b77568cd1f7070e080031dc20ec0561e8fce30967ed","sha512":"e3b1550fb10799635d9afb2c61f2d20651185570289eeda9cdc700ad8907033b4ef8b1f53b20018e25170bdd9078bbce4456d64fde4cec85ab6e722daea7b1a1","ssdeep":"3072:VPbS0zrw3mJ+JgnvOAMKHEQCfINJbZNEqRkrVPyVrXiFQT:VXXrJ+JsOAMKHErINJbZNhRkrVPyVrX7","tlshash":"d50455c6181684c58e4912dfd0b3e805e4149e23ceacb1a7e92dddc2756df6284cb2bf","first_seen":"2026-01-30T01:49:39.770412Z","last_seen":"2026-01-30T01:49:39.770412Z","times_seen":1,"resource_available":true,"data":null}},"time_used":483,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":442,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"claim.sentlent.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.sentlent.com/","fqdn":"claim.sentlent.com","domain":"sentlent.com","tld":"com"},"ip":{"addr":"94.141.122.67","port":443,"asn":215826,"as":"Partner Hosting LTD","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.sentlent.com/","date":"2026-01-30T01:49:14.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.sentlent.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:57:55 GMT","end":"Wed, 22 Apr 2026 10:57:54 GMT"},"fingerprint":{"sha1":"F9:A2:28:CC:8C:7A:E1:DC:16:BD:C9:66:80:90:D6:49:6F:A3:CB:C6","sha256":"3E:53:CE:2B:9E:EF:DD:EF:40:36:A5:18:BD:3D:ED:06:BE:55:CD:E9:E3:3D:90:81:8F:A1:28:26:C7:94:6E:DE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claim.sentlent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.sentlent.com/\r\nCookie: sid=f010fcd5-e31e-4a8f-ab68-342969148f08\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Fri, 30 Jan 2026 01:49:15 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0\r\nPragma: no-cache\r\nExpires: 0\r\nSurrogate-Control: no-store\r\nSet-Cookie: sid=f010fcd5-e31e-4a8f-ab68-342969148f08; expires=Sun, 01 Mar 2026 01:49:15 GMT; Max-Age=2592000; path=/\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":252185,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20581)","md5":"18f1b842926cdd1e020b43095e260c47","sha1":"7ebc80962aacb2ad7f8c4cc458816cf904331a15","sha256":"d000f639d70b848d939e3571c5e27cffd901098ee413631ea5d50f58080ef862","sha512":"a7c0466a5ce0cdc7df57a20c7add3ebcc3c5dd9bb9123838b4b4b33080cf528b561993e579258adf55d552905f384d9fe696c8253d12b9f48059cab0c850564b","ssdeep":"1536:rJhHzErnFcLozDKqoCWRnLhk+l7Rrqav9VqwbyGocJhHzErnA2PV2q2Z4subOkBY:fTEJcLozWVlLqwbyQTEcgpRIIYjvO1c","tlshash":"6734d538a5b16a743c13227c26ee65097e33a1cbe92dee147ddc32a4cf883b49d55358","first_seen":"2026-01-30T01:05:32.347348Z","last_seen":"2026-01-30T01:49:39.767991Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1006,"timings":{"blocked":330,"dns":243,"connect":40,"send":0,"wait":305,"receive":41,"ssl":45},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"claim.sentlent.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.sentlent.com/","fqdn":"claim.sentlent.com","domain":"sentlent.com","tld":"com"},"ip":{"addr":"94.141.122.67","port":443,"asn":215826,"as":"Partner Hosting LTD","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim.sentlent.com/","date":"2026-01-30T01:49:14.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.sentlent.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:57:55 GMT","end":"Wed, 22 Apr 2026 10:57:54 GMT"},"fingerprint":{"sha1":"F9:A2:28:CC:8C:7A:E1:DC:16:BD:C9:66:80:90:D6:49:6F:A3:CB:C6","sha256":"3E:53:CE:2B:9E:EF:DD:EF:40:36:A5:18:BD:3D:ED:06:BE:55:CD:E9:E3:3D:90:81:8F:A1:28:26:C7:94:6E:DE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claim.sentlent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim.sentlent.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sid=f010fcd5-e31e-4a8f-ab68-342969148f08\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Fri, 30 Jan 2026 01:49:15 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0\r\nPragma: no-cache\r\nExpires: 0\r\nSurrogate-Control: no-store\r\nSet-Cookie: sid=f010fcd5-e31e-4a8f-ab68-342969148f08; expires=Sun, 01 Mar 2026 01:49:15 GMT; Max-Age=2592000; path=/\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":252185,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20581)","md5":"18f1b842926cdd1e020b43095e260c47","sha1":"7ebc80962aacb2ad7f8c4cc458816cf904331a15","sha256":"d000f639d70b848d939e3571c5e27cffd901098ee413631ea5d50f58080ef862","sha512":"a7c0466a5ce0cdc7df57a20c7add3ebcc3c5dd9bb9123838b4b4b33080cf528b561993e579258adf55d552905f384d9fe696c8253d12b9f48059cab0c850564b","ssdeep":"1536:rJhHzErnFcLozDKqoCWRnLhk+l7Rrqav9VqwbyGocJhHzErnA2PV2q2Z4subOkBY:fTEJcLozWVlLqwbyQTEcgpRIIYjvO1c","tlshash":"6734d538a5b16a743c13227c26ee65097e33a1cbe92dee147ddc32a4cf883b49d55358","first_seen":"2026-01-30T01:05:32.347348Z","last_seen":"2026-01-30T01:49:39.767991Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1030,"timings":{"blocked":346,"dns":257,"connect":40,"send":0,"wait":296,"receive":41,"ssl":45},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"claim.sentlent.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.sentlent.com/images/stepper-left.png","fqdn":"claim.sentlent.com","domain":"sentlent.com","tld":"com"},"ip":{"addr":"94.141.122.67","port":443,"asn":215826,"as":"Partner Hosting LTD","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.sentlent.com/","date":"2026-01-30T01:49:15.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.sentlent.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:57:55 GMT","end":"Wed, 22 Apr 2026 10:57:54 GMT"},"fingerprint":{"sha1":"F9:A2:28:CC:8C:7A:E1:DC:16:BD:C9:66:80:90:D6:49:6F:A3:CB:C6","sha256":"3E:53:CE:2B:9E:EF:DD:EF:40:36:A5:18:BD:3D:ED:06:BE:55:CD:E9:E3:3D:90:81:8F:A1:28:26:C7:94:6E:DE"}}},"request":{"raw":"GET /images/stepper-left.png HTTP/1.1\r\nHost: claim.sentlent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.sentlent.com/\r\nCookie: sid=f010fcd5-e31e-4a8f-ab68-342969148f08\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.1\r\nDate: Fri, 30 Jan 2026 01:49:15 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0\r\nPragma: no-cache\r\nExpires: 0\r\nSurrogate-Control: no-store\r\nSet-Cookie: sid=f010fcd5-e31e-4a8f-ab68-342969148f08; expires=Sun, 01 Mar 2026 01:49:15 GMT; Max-Age=2592000; path=/\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":74777,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20581)","md5":"a228fa2a5b45bedf672cddd247759273","sha1":"988b7cbfe009d04d55f7303146e9251880c6837c","sha256":"fa4d6209b1bc0762b6fbace03e6f046648e26392e2e928fee198aead981f3a24","sha512":"89038f0f8228fb43c5d5e227c1d7a5db0728aa2e7fec7fb85804a6c5478db6fcb3c29a2903672d78fe98783050322bad72ea04c66cb8d6ea20b5c67aafbe7251","ssdeep":"768:rJSViHFXdErnQvWFuXLFSvb/Zh5XgyjGqvn/vggyjg:rJhHzErnFcLozDKqoI","tlshash":"ba738538d4625a702c2736781bee6a15be35a0c785eafe287dcd3354df843b61ea4314","first_seen":"2026-01-30T01:05:32.340288Z","last_seen":"2026-01-30T01:49:39.773085Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"claim.sentlent.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.sentlent.com/images/stepper-right.png","fqdn":"claim.sentlent.com","domain":"sentlent.com","tld":"com"},"ip":{"addr":"94.141.122.67","port":443,"asn":215826,"as":"Partner Hosting LTD","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.sentlent.com/","date":"2026-01-30T01:49:15.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.sentlent.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:57:55 GMT","end":"Wed, 22 Apr 2026 10:57:54 GMT"},"fingerprint":{"sha1":"F9:A2:28:CC:8C:7A:E1:DC:16:BD:C9:66:80:90:D6:49:6F:A3:CB:C6","sha256":"3E:53:CE:2B:9E:EF:DD:EF:40:36:A5:18:BD:3D:ED:06:BE:55:CD:E9:E3:3D:90:81:8F:A1:28:26:C7:94:6E:DE"}}},"request":{"raw":"GET /images/stepper-right.png HTTP/1.1\r\nHost: claim.sentlent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.sentlent.com/\r\nCookie: sid=f010fcd5-e31e-4a8f-ab68-342969148f08\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.1\r\nDate: Fri, 30 Jan 2026 01:49:15 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0\r\nPragma: no-cache\r\nExpires: 0\r\nSurrogate-Control: no-store\r\nSet-Cookie: sid=f010fcd5-e31e-4a8f-ab68-342969148f08; expires=Sun, 01 Mar 2026 01:49:15 GMT; Max-Age=2592000; path=/\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":211722,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20581)","md5":"7a961e7e010a6f7d24c73dd3fcef4b14","sha1":"c4c73ffe366e64fcb3c52532be1b11642e505d2c","sha256":"4a237f1399ebcc51e3789cad6749492821cf187db69a4fa2827ed0229b71fb51","sha512":"17df3f0c6f97cec78c1fa4154da0731e7f392d9fdd4289b840c95814d11bf74c8d744fa7bb8caa24342e986e9a73776aecce2fb2b744fff4f613942d2e676214","ssdeep":"1536:rJhHzErnFcLozDKqoCWRnLhk+l7Rrqav9VqwbyGocJhHzErnA2PV2q2Z4st:fTEJcLozWVlLqwbyQTEcgpG","tlshash":"3124b438a47269743c13227c26ef6509be33a1cbd86dae547ddc32a4cf883b46d54368","first_seen":"2026-01-30T01:05:32.343096Z","last_seen":"2026-01-30T01:49:39.775783Z","times_seen":2,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":67,"dns":0,"connect":0,"send":0,"wait":162,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"claim.sentlent.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.sentlent.com/shdsk8.php?m=2949562","fqdn":"claim.sentlent.com","domain":"sentlent.com","tld":"com"},"ip":{"addr":"94.141.122.67","port":443,"asn":215826,"as":"Partner Hosting LTD","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim.sentlent.com/","date":"2026-01-30T01:49:15.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.sentlent.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:57:55 GMT","end":"Wed, 22 Apr 2026 10:57:54 GMT"},"fingerprint":{"sha1":"F9:A2:28:CC:8C:7A:E1:DC:16:BD:C9:66:80:90:D6:49:6F:A3:CB:C6","sha256":"3E:53:CE:2B:9E:EF:DD:EF:40:36:A5:18:BD:3D:ED:06:BE:55:CD:E9:E3:3D:90:81:8F:A1:28:26:C7:94:6E:DE"}}},"request":{"raw":"GET /shdsk8.php?m=2949562 HTTP/1.1\r\nHost: claim.sentlent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim.sentlent.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sid=f010fcd5-e31e-4a8f-ab68-342969148f08\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Fri, 30 Jan 2026 01:49:15 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: *\r\nAccess-Control-Allow-Headers: *\r\nAccess-Control-Max-Age: 3600\r\nCache-Control: public, max-age=300\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4020362,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"fdfc502af925efa09167060a292c8b51","sha1":"1621b4dc5f64a528520be65956ee1ef46e12922f","sha256":"a8aca5ad330b741b385e47d96f1247f7f97399d00b309f62587d7da96e5dc42c","sha512":"1abb4a337abd2fdac4cc67dfaa2583e93392541b9fedc8175bcabebab0daf345dad618bacb9b0f0f8453f5478df057490d945b4e53d8fdf3d097eacabeb75d3a","ssdeep":"24576:LUJmdpc2/WoQ9MUAsoLeoU1KCRan2a4807EwpqWTGOZN3APwSbZ:AJmdpc2vHyhoUNRan2alqNCODwPwSN","tlshash":"de2512d7e043a0d33b11c46257d6faaef9da10ef68985b7275089b4076ea05583ecbc3","first_seen":"2026-01-30T01:05:32.345214Z","last_seen":"2026-01-30T01:49:39.777458Z","times_seen":2,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":52,"receive":317,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"claim.sentlent.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}