{"report_id":"09950e8f-8cb2-4758-b4e6-18bff07e5013","version":0,"status":"done","tags":[],"date":"2026-07-17T08:35:59Z","url":{"schema":"http","addr":"cashcatclaim.live","fqdn":"cashcatclaim.live","domain":"cashcatclaim.live","tld":"live"},"ip":{"addr":"172.67.157.23","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"cashcatclaim.live/","fqdn":"cashcatclaim.live","domain":"cashcatclaim.live","tld":"live"},"title":"$CASHCAT — They Called It Cash Cat First","dom":{"size":31625,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16013)","md5":"3540d639c8dae12beb1953fb80940b74","sha1":"e63ce3f7f13fb5ee6c7f6ecd0d1e0c9748f92286","sha256":"b61e4ea988992ba2ef651fedf6955ebe9255db3103b8933d5fc64aaf3be38bc8","sha512":"b85385473438c55440741b5233519a570f786eef44232188c5beaea0754c24d0752106c817398036c02934c7ab6e4fb763e1fc72a1746a4ce27a10675b05ec01","ssdeep":"768:EshzQH2L0r82It4uSRhKut5NFgl+FU+xHyvfSDIJPJWf3b8fzwZPROHXL0hDgmw0:EOzqyrY6o","tlshash":"84e26164f1414ebf3a07a3fd52c4deaca240b505c813b65db2f880d6e786eb34db1668","dom_hash":"domhash6ea5ce6c52a37ed42b2aa98f59ce1e17","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cashcatclaim.live","fqdn":"cashcatclaim.live","domain":"cashcatclaim.live","tld":"live"},"ip":{"addr":"172.67.157.23","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-21T08:35:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"cashcatclaim.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"cashcatclaim.live","ip":{"addr":"172.67.157.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-16T10:57:44.831649Z","last_seen":"2026-07-16T10:57:44.831649Z","alert_count":8,"request_count":8,"received_data":1137184,"sent_data":3833,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-12T22:22:25.184057Z","alert_count":0,"request_count":1,"received_data":10792,"sent_data":533,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cashcatclaim.live/_nuxt/assets/index.js","fqdn":"cashcatclaim.live","domain":"cashcatclaim.live","tld":"live"},"ip":{"addr":"172.67.157.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"df04374663686eead38b85f1019e156b","sha1":"e762f75876c64911122e4a616335acd1629cef19","sha256":"d831fd6664829745fcebd2b22b441b2b5bd4bd081bc93d5b997a652ec6cc3be9","sha512":"9a1e6dc86ab4eb1d530eed7d795744d94a76a3efa6cd07b4c8dd9e3eaeceac3e2061f01d1e36dbeb1d7c4eb29c9a4db0e5c1eb93de45683cb0b206ccc03646bf","ssdeep":"6144:bORVStfnq1iGN0djJ05e8r02H3n5t7i9cI3+XKYPR6IhVXz8lhcAm73dCdoaxBaD:28q4GixyvumOPmeRQoqJhW/Ky5J+Ei","tlshash":"4e255f6312cc59af3e40afc728f11c351ce9749acc08087ba296d9c4dd66f69b76fa50","size":1010117,"data":"","first_seen":"2026-07-12T18:49:06.888305Z","last_seen":"2026-07-18T10:38:03.307205Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashcatclaim.live/","fqdn":"cashcatclaim.live","domain":"cashcatclaim.live","tld":"live"},"ip":{"addr":"172.67.157.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"af304c227e3b5b828e78a3a9c782bd33","sha1":"02db97fc140d1d2ca35df2815f5136cd46a12f8c","sha256":"fa25f86a98a44bee39aad0580dde6e8bccbc0c29bfaaa9c6f14e2a6384673b39","sha512":"31fe00d848e46a5041e141530b88599c86f20c8913f6c6e8cba931354d9d6e46bcd5aae6757f92353157e337f0fbf171484b62b1809c2a61130a0f2099100571","ssdeep":"6144:d+Frzet2WVKH7z4qF8ZyOBHU3eNDqwoYRZ9wBqGPw4KLWo36rtCCOx8PTjGKPHEo:d8e8WaX8fdU3bwoYCUx87iKPb","tlshash":"d125705112cc5a6f2f4083c738f5489a1e29749acccd087bb6d4d2c5de6af1db2af690","size":974515,"data":"","first_seen":"2026-07-12T18:49:06.899666Z","last_seen":"2026-07-18T10:38:03.309304Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"1.16.23","filename":"https://cashcatclaim.live/_nuxt/assets/index.js line 1 \u003e Function","line_number":3,"column_number":803503}]},"http":[{"url":{"schema":"https","addr":"cashcatclaim.live/favicon.png","fqdn":"cashcatclaim.live","domain":"cashcatclaim.live","tld":"live"},"ip":{"addr":"172.67.157.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cashcatclaim.live/","date":"2026-07-17T08:35:25.088Z","timestamp":1784277325088,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashcatclaim.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:51:23 GMT","end":"Tue, 13 Oct 2026 16:49:47 GMT"},"fingerprint":{"sha1":"77:AB:FD:42:A5:47:64:8E:90:24:B7:50:DA:A5:9A:F1:7D:56:4D:26","sha256":"FF:F8:60:A5:57:67:92:2A:2D:35:BF:2F:75:91:77:51:14:9B:09:0F:8D:0A:59:3E:F2:8C:E0:55:EC:01:C6:52"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: cashcatclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cashcatclaim.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 08:35:25 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=6,i=?0\r\nlast-modified: Mon, 13 Jul 2026 23:53:52 GMT\r\netag: \"6a557a90-2225\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 77890\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rm5vnE3Wc80RWYKSttXSSYGcu0TQa%2BsG8wUfJ4ecejNFm5nwwQAsuSpgf%2F4fRkRC0rmrccCk48d%2BzG5f%2FQrii5a1%2B0wmZYA%2FBebrNV4FzLCRH9lVu1NST0OqNpakIUmtmSABNw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c7e9c1dbec56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8741\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8741,"size_decoded":9496,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"6d7af2c2849739c596d78ee03b620b2f","sha1":"8576d83bc3215a3ebafa02d41946e1811e0020f4","sha256":"e6c665ca7dcc030c2e46a886732f8dc4584601f8bc734432b12fac23d7b27494","sha512":"4b787b878ed05dba91388a02032f13242792797357a7e7f1eba53219b677bf3b12236a7142465823b59c5be28e3c6231c4f600667f554fd6f62b28b0ab1faa5e","ssdeep":"192:1OTHiAV/d6ly5hNPJcUQiZXSevc0go3Yh0ZALFgBs2:1+C41H5TP1QQHvc093YVOs2","tlshash":"4f02bfc17e80ee38f19e825ba6f4cc81e07c51e53c5536d12f81baa67f306882ed0526","first_seen":"2026-07-13T00:00:34.743806Z","last_seen":"2026-07-17T08:36:01.545933Z","times_seen":6,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"cashcatclaim.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashcatclaim.live/api/config","fqdn":"cashcatclaim.live","domain":"cashcatclaim.live","tld":"live"},"ip":{"addr":"172.67.157.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashcatclaim.live/","date":"2026-07-17T08:35:25.217Z","timestamp":1784277325217,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashcatclaim.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:51:23 GMT","end":"Tue, 13 Oct 2026 16:49:47 GMT"},"fingerprint":{"sha1":"77:AB:FD:42:A5:47:64:8E:90:24:B7:50:DA:A5:9A:F1:7D:56:4D:26","sha256":"FF:F8:60:A5:57:67:92:2A:2D:35:BF:2F:75:91:77:51:14:9B:09:0F:8D:0A:59:3E:F2:8C:E0:55:EC:01:C6:52"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: cashcatclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cashcatclaim.live/\r\ncontent-language: en-US,q=0.8;en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 08:35:25 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BO4kqVm82I6lys%2FMpSIFumcgsdMPLo4yH8RO%2FBc336yMuzA%2FXBvDnNn3vFet0tnWHmWLtw9%2FAGBNZPCkRKOfEwMKJvrzlQzXsWA1gf07vivz8QoguzYmP8GlA%2BWVOkzqvD%2BGwg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1c7e9c29bef56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":214,"size_decoded":963,"mime_type":"text/plain; charset=utf-8","magic":"data","md5":"efbcc8c988153698bd497bed442ecb5b","sha1":"792ec384aba2c5416abbf129f75350fa9f07759e","sha256":"31e38c7a31a8d3a3728a0dbddd4c3195d0b08bc1d487f227d657f6f2bb47a9aa","sha512":"195246a6f1478fb2446b910e7c642c83ccf798c739e62ade864017232ba69f8739608a2ab2398b2648d109ad1a59a99260781e5c9a3bd0ef424b741fcb0c3f57","ssdeep":"","tlshash":"19e07d52475554a4a10d43ff4143da94a4012838d3f8d1a56e18094677cc6b1c7dca08","first_seen":"2026-07-17T08:36:01.546822Z","last_seen":"2026-07-17T08:36:01.546822Z","times_seen":1,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"cashcatclaim.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashcatclaim.live/","fqdn":"cashcatclaim.live","domain":"cashcatclaim.live","tld":"live"},"ip":{"addr":"172.67.157.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-17T08:35:23.067Z","timestamp":1784277323067,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashcatclaim.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:51:23 GMT","end":"Tue, 13 Oct 2026 16:49:47 GMT"},"fingerprint":{"sha1":"77:AB:FD:42:A5:47:64:8E:90:24:B7:50:DA:A5:9A:F1:7D:56:4D:26","sha256":"FF:F8:60:A5:57:67:92:2A:2D:35:BF:2F:75:91:77:51:14:9B:09:0F:8D:0A:59:3E:F2:8C:E0:55:EC:01:C6:52"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cashcatclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 08:35:23 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4kKDwkQ1Zv3FKIT%2By6mss8z5hXlFydbiIARqm9OGxOHxkLe6fykTawR7t%2BcVk4Qlt0NEp987LIXZMBJPizbq95M%2BE5qDnqYMoeiQ3Rr5azu4S09zGAZXO1ZOBDqebZgYcCR26w%3D%3D\"}]}\r\npriority: u=0,i\r\nlast-modified: Mon, 13 Jul 2026 23:53:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a1c7e9b6aba856aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":15707,"size_decoded":5019,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (445)","md5":"93a801f994c8aeca989cc1e373f3f125","sha1":"64a630c879f16959f121aac1e66b2676726b9d47","sha256":"44c2c81d77bd75add97696645ffb91a0ee633ed1ea6455dbf9879b8961ae19bb","sha512":"cf830dc3e09327f48cbfb2655c343a69ac9a68ef2951361ebcbab4d1a26b4600389602471acc8418378224c4d6bd1f061948db94a9b37d152ea5dab9cbe5ae6e","ssdeep":"192:KIpaIV9m08+FBIH0IftOa1+Y4DDDA4rDIK/cVobackIYp3ZXxMPgTTBKC89jCH0:tm08+FBE0IftO5j0oIS+EgTtk","tlshash":"c162947132032afb46cbc3b4b6a12bf49190df5cc5239115b6fc5b6e5b86da28c423d9","first_seen":"2026-07-16T10:57:48.760786Z","last_seen":"2026-07-17T08:36:01.548193Z","times_seen":2,"resource_available":true,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":224,"connect":13,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"cashcatclaim.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashcatclaim.live/styles-DU9Gfx44.css","fqdn":"cashcatclaim.live","domain":"cashcatclaim.live","tld":"live"},"ip":{"addr":"172.67.157.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cashcatclaim.live/","date":"2026-07-17T08:35:23.856Z","timestamp":1784277323856,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashcatclaim.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:51:23 GMT","end":"Tue, 13 Oct 2026 16:49:47 GMT"},"fingerprint":{"sha1":"77:AB:FD:42:A5:47:64:8E:90:24:B7:50:DA:A5:9A:F1:7D:56:4D:26","sha256":"FF:F8:60:A5:57:67:92:2A:2D:35:BF:2F:75:91:77:51:14:9B:09:0F:8D:0A:59:3E:F2:8C:E0:55:EC:01:C6:52"}}},"request":{"raw":"GET /styles-DU9Gfx44.css HTTP/1.1\r\nHost: cashcatclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cashcatclaim.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 08:35:23 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 13 Jul 2026 23:53:52 GMT\r\netag: W/\"6a557a90-6466\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\nage: 77890\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fomxCoGcpDtGsWan2H9QkKRsYA1tBpRPOxdzMn%2B9A0AV9PsPFiyUsA7fQY2hUdgnFQvR7GxOHZJL9OuUewju%2BUmLPkyRy1wGyTKdrBTdGarswT2Jamj4dzmj0Ox3oLII%2B%2B2W0Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c7e9ba1bb956aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25702,"size_decoded":6187,"mime_type":"text/css","magic":"ASCII text, with very long lines (25635)","md5":"9246b7b2c6ce7efd85585f318bdce932","sha1":"99969f27e99f987cf87f6b4b58c2ee27f6a85066","sha256":"3814129d62544ee2e5eae8b070e7886bf28ae61a3bdecbdeeba374c091c7433e","sha512":"e0d10a1ce0d083f3f7e0d38a6a01740fc9b25b6af63d0d2b50309a2f17e65b5f964c2b6908193c8e04fb371ae326e033173a467ede1fa3775c3de4954204f061","ssdeep":"384:hke1zOH5lS5DWyoeCTXEYCpzOHjSC/C9oO:z1iZlGDWyoeCTXFTHjH/Cx","tlshash":"03b28360f316ccbe9d6349b2fb9c382ca11964c9cf3165e9eb432613a9c63f10d16b24","first_seen":"2026-07-08T18:34:01.78934Z","last_seen":"2026-07-17T08:36:01.550237Z","times_seen":7,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"cashcatclaim.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashcatclaim.live/cashcat-BCoQxHb_.png","fqdn":"cashcatclaim.live","domain":"cashcatclaim.live","tld":"live"},"ip":{"addr":"172.67.157.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cashcatclaim.live/","date":"2026-07-17T08:35:23.868Z","timestamp":1784277323868,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashcatclaim.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:51:23 GMT","end":"Tue, 13 Oct 2026 16:49:47 GMT"},"fingerprint":{"sha1":"77:AB:FD:42:A5:47:64:8E:90:24:B7:50:DA:A5:9A:F1:7D:56:4D:26","sha256":"FF:F8:60:A5:57:67:92:2A:2D:35:BF:2F:75:91:77:51:14:9B:09:0F:8D:0A:59:3E:F2:8C:E0:55:EC:01:C6:52"}}},"request":{"raw":"GET /cashcat-BCoQxHb_.png HTTP/1.1\r\nHost: cashcatclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cashcatclaim.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 08:35:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 13 Jul 2026 23:53:52 GMT\r\netag: \"6a557a90-10f13\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 77890\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NdooLCfcyoYK%2BXFd82ZBH7FqQoTKAP3oK8uwGRuBQFssh7PqxF1GPzjnFgAxnL%2B2j1QgfjRjANXENwm5No4tlBLYOXyco4QAtzm%2FbVfFBNLM3zol82oWAWbSrxVT4RKsIuqWGQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c7e9ba3bbb56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 69395\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69395,"size_decoded":70143,"mime_type":"image/png","magic":"PNG image data, 343 x 343, 8-bit/color RGBA, non-interlaced","md5":"bc446cbc08b9a33d8013bcf73dd98df4","sha1":"118fc9725b0ee639a813591e5c42874907f26425","sha256":"44310528460f2807f4a0b668639c91688546bd17830852d45d4013529f1f6210","sha512":"af4b4bcfb7fd1a5ad18ddcc41d9c9293b1bf66eada9172016e1f289bf551ae9488682a1b85e232f2be34b170733cd963900ff125bb4ca0987fbf1f69ad525330","ssdeep":"1536:WhZK7XH8REcaYpP7L7b6L1S5EAGYWuBruN9x3B3BJ8qV:WzK7XH81a0jL7b6BS5OPuBruHx3B3r1","tlshash":"e36302ce4e37d62a45bf66498ac502b80aeee8242eac1637c67483f03154c5953ff91d","first_seen":"2026-07-08T18:34:01.787846Z","last_seen":"2026-07-17T08:36:01.551126Z","times_seen":7,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"cashcatclaim.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cashcatclaim.live/","date":"2026-07-17T08:35:25.177Z","timestamp":1784277325177,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cashcatclaim.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 17 Jul 2026 08:35:25 GMT\r\ndate: Fri, 17 Jul 2026 08:35:25 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":1447,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-07-18T15:09:00.391989Z","times_seen":34425,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":4,"connect":16,"send":0,"wait":31,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashcatclaim.live/api/is-banned","fqdn":"cashcatclaim.live","domain":"cashcatclaim.live","tld":"live"},"ip":{"addr":"172.67.157.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashcatclaim.live/","date":"2026-07-17T08:35:25.215Z","timestamp":1784277325215,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashcatclaim.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:51:23 GMT","end":"Tue, 13 Oct 2026 16:49:47 GMT"},"fingerprint":{"sha1":"77:AB:FD:42:A5:47:64:8E:90:24:B7:50:DA:A5:9A:F1:7D:56:4D:26","sha256":"FF:F8:60:A5:57:67:92:2A:2D:35:BF:2F:75:91:77:51:14:9B:09:0F:8D:0A:59:3E:F2:8C:E0:55:EC:01:C6:52"}}},"request":{"raw":"GET /api/is-banned HTTP/1.1\r\nHost: cashcatclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cashcatclaim.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 08:35:25 GMT\r\ncontent-type: text/plain;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncache-control: private, max-age=300\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dFM53ToK6nJTAAgrlcTA%2BJlpC8Q%2BYowZldQZerGHaut61Bk1tm0VkM0q7vDQ7mlpdlNR4hLPhwwcnPpqZtY65LdSAf6kADkJuhPlhhIrdxOkgUQtuSJtAz3PbO%2BaTNNTfXv33g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c7e9c29bee56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":766,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"cfcd208495d565ef66e7dff9f98764da","sha1":"b6589fc6ab0dc82cf12099d1c2d40ab994e8410c","sha256":"5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9","sha512":"31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-03-07T01:37:31Z","last_seen":"2026-07-18T14:55:11.858512Z","times_seen":117617,"resource_available":true,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"cashcatclaim.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashcatclaim.live/api/visit","fqdn":"cashcatclaim.live","domain":"cashcatclaim.live","tld":"live"},"ip":{"addr":"172.67.157.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashcatclaim.live/","date":"2026-07-17T08:35:25.337Z","timestamp":1784277325337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashcatclaim.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:51:23 GMT","end":"Tue, 13 Oct 2026 16:49:47 GMT"},"fingerprint":{"sha1":"77:AB:FD:42:A5:47:64:8E:90:24:B7:50:DA:A5:9A:F1:7D:56:4D:26","sha256":"FF:F8:60:A5:57:67:92:2A:2D:35:BF:2F:75:91:77:51:14:9B:09:0F:8D:0A:59:3E:F2:8C:E0:55:EC:01:C6:52"}}},"request":{"raw":"POST /api/visit HTTP/1.1\r\nHost: cashcatclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cashcatclaim.live/\r\nOrigin: https://cashcatclaim.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 08:35:25 GMT\r\ncontent-type: text/plain;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XC0xEfgbGoTY4da%2By4u3isn0O2bHKgaPY5EV5v2M2NM1Exsu5Ehrx9WAIBBaUtbKflF9OTpFC95uJgQF6bGxw7Zr7ALPKix7GtQ3%2BN4XhS%2BG17OWcO%2F1eGHR7PJe0rckMM1INw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c7e9c35bf256aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":732,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-07-18T15:17:15.12225Z","times_seen":439103,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"cashcatclaim.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashcatclaim.live/_nuxt/assets/index.js","fqdn":"cashcatclaim.live","domain":"cashcatclaim.live","tld":"live"},"ip":{"addr":"172.67.157.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashcatclaim.live/","date":"2026-07-17T08:35:23.858Z","timestamp":1784277323858,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashcatclaim.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:51:23 GMT","end":"Tue, 13 Oct 2026 16:49:47 GMT"},"fingerprint":{"sha1":"77:AB:FD:42:A5:47:64:8E:90:24:B7:50:DA:A5:9A:F1:7D:56:4D:26","sha256":"FF:F8:60:A5:57:67:92:2A:2D:35:BF:2F:75:91:77:51:14:9B:09:0F:8D:0A:59:3E:F2:8C:E0:55:EC:01:C6:52"}}},"request":{"raw":"GET /_nuxt/assets/index.js HTTP/1.1\r\nHost: cashcatclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cashcatclaim.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 08:35:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 12 Jul 2026 10:09:05 GMT\r\netag: W/\"6a5367c1-f6f29\"\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jh8kTFAoGDPwRuFlxt7n%2BQVlWcbx92KUn%2F6o1LQpo9246fbd12OLM71Q8KtDDyh6h7knpFJR%2FtTvjMamKfCxRNM8nmh4CQe7tEEtYdjXRwX36dHLL8mLxzB2vUeiC6N1o1s3GA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c7e9ba2bba56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1011497,"size_decoded":244337,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (63260), with no line terminators","md5":"df04374663686eead38b85f1019e156b","sha1":"e762f75876c64911122e4a616335acd1629cef19","sha256":"d831fd6664829745fcebd2b22b441b2b5bd4bd081bc93d5b997a652ec6cc3be9","sha512":"9a1e6dc86ab4eb1d530eed7d795744d94a76a3efa6cd07b4c8dd9e3eaeceac3e2061f01d1e36dbeb1d7c4eb29c9a4db0e5c1eb93de45683cb0b206ccc03646bf","ssdeep":"6144:bORVStfnq1iGN0djJ05e8r02H3n5t7i9cI3+XKYPR6IhVXz8lhcAm73dCdoaxBaD:28q4GixyvumOPmeRQoqJhW/Ky5J+Ei","tlshash":"4e255f6312cc59af3e40afc728f11c351ce9749acc08087ba296d9c4dd66f69b76fa50","first_seen":"2026-07-12T18:49:06.888305Z","last_seen":"2026-07-18T10:38:03.307205Z","times_seen":62,"resource_available":true,"data":null}},"time_used":625,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":294,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"cashcatclaim.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}