{"report_id":"0bd72a83-567e-4743-8e24-342e576e4477","version":6,"status":"done","tags":[],"date":"2025-09-09T17:03:42Z","url":{"schema":"http","addr":"claims-cope.xyz/","fqdn":"claims-cope.xyz","domain":"claims-cope.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.29","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"claims-cope.xyz/","fqdn":"claims-cope.xyz","domain":"claims-cope.xyz","tld":"xyz"},"title":"Cope | Airdrop"},"submit":{"url":{"schema":"http","addr":"claims-cope.xyz/","fqdn":"claims-cope.xyz","domain":"claims-cope.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.29","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-14T17:03:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"coinmarketcop-api.com","ip":{"addr":"104.21.62.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-22","domain_rank":0,"first_seen":"2025-08-22T20:51:30.781912Z","last_seen":"2025-09-07T12:27:43.304105Z","alert_count":6,"request_count":6,"received_data":5151,"sent_data":4394,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"claims-cope.xyz","ip":{"addr":"104.21.62.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-31","domain_rank":0,"first_seen":"2025-09-09T17:03:42.742504Z","last_seen":"2025-09-09T17:03:42.742504Z","alert_count":0,"request_count":2,"received_data":1374125,"sent_data":958,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-03T15:14:36.780259Z","alert_count":0,"request_count":1,"received_data":9481,"sent_data":554,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"claims-cope.xyz/ymghVxuLT9F0.js","fqdn":"claims-cope.xyz","domain":"claims-cope.xyz","tld":"xyz"},"ip":{"addr":"104.21.62.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"43013710269bc5e67922a049089bb0c0","sha1":"4c94341b1e643eee2c46a82c031dd75a404ffe83","sha256":"2d85cbc218034df29e8bfb02412ac576802e5abadc4153fde24136209e68a53c","sha512":"7d351770770a7958f0eb36bff8e4d6cae842d519f7448b53cc093e5316bb8e775d5ae43afcd89a2319d13d01cc331ab3452038e337cbba9b9e243a47d4a5bd26","ssdeep":"1536:SH6QLgbPjllEFjllEbY/Gy+tmJpXI5/I2mLVyCS7mVEFRo5srUgKsgq:rQUbPjllEFjllEbY/G3+I5/RmLVyCS7F","tlshash":"95832e8d4d43815ef356d0d8472561bbcb424f770bdbba1ebac9928aee31421b1c72b4","size":86710,"data":"","first_seen":"2025-09-07T13:20:14.19053Z","last_seen":"2025-09-20T14:34:59.3957Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/cdn/bundles/front-worker.js?t=29290623","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"21467f3250cee640b473f8226f4c91cc","sha1":"85b5eb1494e6f96c4babc015efa4ea0567cb8728","sha256":"d49ed388abc8be992e5a8fc01411ba84426eb48edc5e9315b5c571125874b0e1","sha512":"5cf5630c891b0547c680189323fe2baea5bb8057ddca31c852aa40e1c601f79e38a82c556674facc71dcfe2ac1cc4f2e9d75bf1e703abb4a89fcc59fde50b565","ssdeep":"6144:Us6RCjrjOJMZUk6p1ZsJzO3fXeYwlEU5nyiC5z:R64fj0lWCvXeYw8i+z","tlshash":"1f748c917280617916634fda41bf094ab238f120a409492cf75cc8d72bb99dad9bff7c","size":339536,"data":"","first_seen":"2025-09-09T11:19:31.450692Z","last_seen":"2025-09-15T05:50:13.753477Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claims-cope.xyz/","fqdn":"claims-cope.xyz","domain":"claims-cope.xyz","tld":"xyz"},"ip":{"addr":"104.21.62.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"384ed89ce34cffc6c4e4f8f7e0e08076","sha1":"997a836d28fe34a904773114b84f86f0f0748658","sha256":"f7f766664d325e7e29c50d1fe64d03ef5a71aac2499b26e096ebe2e4fd5950c6","sha512":"d614b235ef4210d04f4d0db39fa095e4cc6858dcc6ce1769ef27f7cc8d627c27324fc774072b156d7d72fe03fed0fccaf1b008b47057d08cfa8828517dcf6065","ssdeep":"","tlshash":"6fd05e3871f650b1023fb27e430fb7893175108b2004e90a3eac8f895fe052e5ae1a8e","size":282,"data":"","first_seen":"2025-09-09T17:02:16.974627Z","last_seen":"2025-09-17T11:06:11.772507Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claims-cope.xyz/","fqdn":"claims-cope.xyz","domain":"claims-cope.xyz","tld":"xyz"},"ip":{"addr":"104.21.62.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0a1f887f8e87e44dd41209aaa0fb720e","sha1":"0e5448d4d8556a353d73f0b2f274a5a1e9b3b944","sha256":"17b7304336bd6ea3179907359c8f0a3f38ba1d68cacfa2bf9bec629682f971f0","sha512":"96ce96e63ce45fa1f488242b9de24472424573b3845cdfe8612ee9f0a6d392a9cc3d8b7c83a9364069ebdc95c8db775df488c55022c78d9b36bf2c9f2aea7c5e","ssdeep":"1536:csLY5PjllEZjllEb07okPK84XmHRWBR8AyrVyCS7mVEFRofsrUgKmgb:cs85PjllEZjllEb07okPx4XgWBRzyrVh","tlshash":"1083fa8c5d43816ef756e0d8572562bbcb424f7b0bdbba2d79c95246ee30021b2c72b4","size":82652,"data":"","first_seen":"2025-09-07T13:20:14.194401Z","last_seen":"2025-09-20T14:34:59.425443Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/services/connector?referrer=claims-cope.xyz","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"104.21.62.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claims-cope.xyz/","date":"2025-09-09T17:03:20.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcop-api.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 15:47:41 GMT","end":"Thu, 20 Nov 2025 16:45:54 GMT"},"fingerprint":{"sha1":"B0:CF:37:BB:3E:5D:19:87:C9:06:DA:2B:3A:C5:0B:77:11:4C:A2:47","sha256":"FC:6B:44:07:4E:C2:B7:3E:B8:95:B0:E9:D0:96:D9:1C:DC:FE:A5:D7:F6:6B:A4:D5:79:CF:BE:F3:E3:05:67:8E"}}},"request":{"raw":"GET /@v1/services/connector?referrer=claims-cope.xyz HTTP/1.1\r\nHost: coinmarketcop-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjdXN0b21lcklkIjoiR21sekJYSmRtayIsImdyb3VwX2lkIjo2MzIsImlhdCI6MTc1NjEyNzUzNH0.llT7A_FxmcOw38R2oNSqOGql5ua5JiqaXKSxoDf6doM\r\nX-Direction-Safe: 1757437399262\r\nX-Scale-Referrer: claims-cope.xyz\r\nX-Auth-Key: lNmdW34fleV0LuIiwovK5qV8hNSlOSDQ%2FYv2jUNP5zY%3D\r\nOrigin: https://claims-cope.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claims-cope.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Sep 2025 17:03:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eaW7GnyJjnGpJzjzexJFRpZUL9QdzdFyt%2FgJtNf4fucCct6BYhxn7TpC%2F3B8HhiW6dYMUi7cW1c5UOsPDVqgfPZt37yf2eMF%2Foc4AajOTtD6j3w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://claims-cope.xyz\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\netag: W/\"15a-8PiChUNAIRpW+5fzeTMN57qG5jE\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 97c842269f3a56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":346,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ebd63b6fc37efd37c5609fd983537a5f","sha1":"f0f882854340211a56fb97f379330de7ba86e631","sha256":"9355e6e25f0c5c8363fefac5a801ab85224e5b01dc44c0ce7bcc34213fba7bfe","sha512":"a9c8d3d45a95a8ca6c8579b76766903faca56d6a890e9d6dfd0113d646611926a755cc34392b30024f41b8908ca65bd5a00cefbd55aa30d898fb068f5f87a64b","ssdeep":"","tlshash":"1de028cf0af054526845b087e639822606b4d1171dc14e41ab7445b7dcd9c5140437c4","first_seen":"2025-09-09T17:03:45.625604Z","last_seen":"2025-09-09T17:03:45.625604Z","times_seen":1,"resource_available":false,"data":null}},"time_used":638,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":638,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claims-cope.xyz/ymghVxuLT9F0.js","fqdn":"claims-cope.xyz","domain":"claims-cope.xyz","tld":"xyz"},"ip":{"addr":"104.21.62.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claims-cope.xyz/","date":"2025-09-09T17:03:18.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claims-cope.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 02:27:59 GMT","end":"Sat, 29 Nov 2025 03:26:36 GMT"},"fingerprint":{"sha1":"56:E5:F6:CF:B3:C4:B8:38:59:D6:5C:02:34:72:42:28:E4:C3:86:B1","sha256":"6C:B2:37:F1:98:E8:B4:2F:9C:6F:23:07:8C:5F:2E:57:54:42:13:15:5C:4F:CF:C3:15:39:2D:D0:4C:BA:B6:1D"}}},"request":{"raw":"GET /ymghVxuLT9F0.js HTTP/1.1\r\nHost: claims-cope.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claims-cope.xyz/\r\nCookie: X_CACHE_KEY=42a3b1aa308e6bb50198834d2ae496d7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Sep 2025 17:03:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 30 Aug 2025 02:09:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RwKZ3Q0%2BIi4scW6ZaWDhh5yzi08lBaKiywqYcLc%2F2FzcqwbTjHUmkbuMKq886WzGfl8fd9QeuLj2myF4dPyzYbTWlYTOQukm9CDbrgk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"68b25d56-152b6\"\r\nexpires: Wed, 10 Sep 2025 05:03:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 97c8421b38bab505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86710,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (63984)","md5":"43013710269bc5e67922a049089bb0c0","sha1":"4c94341b1e643eee2c46a82c031dd75a404ffe83","sha256":"2d85cbc218034df29e8bfb02412ac576802e5abadc4153fde24136209e68a53c","sha512":"7d351770770a7958f0eb36bff8e4d6cae842d519f7448b53cc093e5316bb8e775d5ae43afcd89a2319d13d01cc331ab3452038e337cbba9b9e243a47d4a5bd26","ssdeep":"1536:SH6QLgbPjllEFjllEbY/Gy+tmJpXI5/I2mLVyCS7mVEFRo5srUgKsgq:rQUbPjllEFjllEbY/G3+I5/RmLVyCS7F","tlshash":"95832e8d4d43815ef356d0d8472561bbcb424f770bdbba1ebac9928aee31421b1c72b4","first_seen":"2025-09-07T13:20:14.19053Z","last_seen":"2025-09-20T14:34:59.3957Z","times_seen":6,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":129,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/log/join","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"104.21.62.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claims-cope.xyz/","date":"2025-09-09T17:03:19.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcop-api.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 15:47:41 GMT","end":"Thu, 20 Nov 2025 16:45:54 GMT"},"fingerprint":{"sha1":"B0:CF:37:BB:3E:5D:19:87:C9:06:DA:2B:3A:C5:0B:77:11:4C:A2:47","sha256":"FC:6B:44:07:4E:C2:B7:3E:B8:95:B0:E9:D0:96:D9:1C:DC:FE:A5:D7:F6:6B:A4:D5:79:CF:BE:F3:E3:05:67:8E"}}},"request":{"raw":"OPTIONS /@v1/log/join HTTP/1.1\r\nHost: coinmarketcop-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,x-device,x-scale-referrer\r\nReferer: https://claims-cope.xyz/\r\nOrigin: https://claims-cope.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Sep 2025 17:03:19 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://claims-cope.xyz\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS,PATCH\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KjQjoDHUS1QMl4Tm%2FYI7hOa2aUk7qUTLYGustgxgZNXoWQ43OFtLkMx5lBFCl%2FJqzu%2FO%2B0FbGfI%2FcwQliln7541h5D5N80c3GoEdqRBEUcwB2jw%3D\"}]}\r\ncf-ray: 97c842207ec556ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T00:37:19.234622Z","times_seen":17946405,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":17,"dns":1,"connect":0,"send":0,"wait":136,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claims-cope.xyz/","date":"2025-09-09T17:03:19.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"74:C1:9B:D3:5D:65:CE:2E:7C:CC:41:C0:7C:F9:2C:AB:41:A3:EC:AA","sha256":"BC:18:82:63:1D:AE:2A:9D:1A:A3:B1:77:B2:AF:6F:0D:AA:CF:1A:88:5A:51:22:46:A8:66:C8:4F:9C:92:20:32"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claims-cope.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 09 Sep 2025 17:03:19 GMT\r\ndate: Tue, 09 Sep 2025 17:03:19 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8795,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"bcd01865bb66c8fb8cdc3fc53aa3efc4","sha1":"b51cb0675812dda181acf06adcf1f3de1929f054","sha256":"b8f7ca9074f04c891c152f6bb3fb864afe47e7f6e868299bbf8f1c08123113a8","sha512":"2043d320a4fb406bec163d37ee71b5de9aeb77ca74fc413226b99809af27efa61dc0c80e8d5ad2ca200f945ad6ea9b4f0abe5b879e3ade16cd6cf0cc5d99c1e1","ssdeep":"192:vyEfyZy6yG3gyLyZVyV77xd6n3UQjH+yYwyNFyuy3uySRk73vO6u8:vtfcHjg8cicOhwCFnbL8B","tlshash":"8f02fe91052bd504ea471cc527cf7e369e8e62a67481d1b97ffe2cd9aceac22132471c","first_seen":"2025-09-05T11:33:38.389978Z","last_seen":"2025-09-10T15:30:46.442614Z","times_seen":58,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":73,"dns":1,"connect":7,"send":0,"wait":21,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/log/join","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"104.21.62.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claims-cope.xyz/","date":"2025-09-09T17:03:19.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcop-api.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 15:47:41 GMT","end":"Thu, 20 Nov 2025 16:45:54 GMT"},"fingerprint":{"sha1":"B0:CF:37:BB:3E:5D:19:87:C9:06:DA:2B:3A:C5:0B:77:11:4C:A2:47","sha256":"FC:6B:44:07:4E:C2:B7:3E:B8:95:B0:E9:D0:96:D9:1C:DC:FE:A5:D7:F6:6B:A4:D5:79:CF:BE:F3:E3:05:67:8E"}}},"request":{"raw":"POST /@v1/log/join HTTP/1.1\r\nHost: coinmarketcop-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nx-scale-referrer: claims-cope.xyz\r\nauthorization: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjdXN0b21lcklkIjoiR21sekJYSmRtayIsImdyb3VwX2lkIjo2MzIsImlhdCI6MTc1NjEyNzUzNH0.llT7A_FxmcOw38R2oNSqOGql5ua5JiqaXKSxoDf6doM\r\nx-device: 0:Windows:Firefox\r\nContent-Length: 2\r\nOrigin: https://claims-cope.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claims-cope.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Sep 2025 17:03:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xkVUpdebk2rc33HA3nYvO7ZbXhS5zisKMFGwPZUSH0hmdJKPLGR%2FlkTNownJfNG%2Fzz89U%2Fq%2F%2Bj5e8RkhJU4qeh5xZa27Y5KAUSeSrFe2X%2BEt3nU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://claims-cope.xyz\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\netag: W/\"20-llti1nxI8SZi+xVpiFYUSfGpvg8\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 97c842215ec856ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3b5b4d21f8c87c5e6534b5a1d9d4574a","sha1":"965b62d67c48f12662fb156988561449f1a9be0f","sha256":"24dcf0603597089c21d0ab963001064690004c39e72221981b7faf7a5edd5f25","sha512":"1218be959182a70f35f2eeaeadc640c721f546b6b46b48f21f9acb3dead02d478da0ac6855f6c55777fbf33486b967fad262e93a5da6327ac7517933f9663ba8","ssdeep":"","tlshash":"d18000000e00aca83bc20802b2832028aaf22a80808b20a2800c803a0b028e0c22ba0c","first_seen":"2025-07-26T22:59:19.534167Z","last_seen":"2025-10-13T01:44:36.478944Z","times_seen":529,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claims-cope.xyz/","fqdn":"claims-cope.xyz","domain":"claims-cope.xyz","tld":"xyz"},"ip":{"addr":"104.21.62.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-09T17:03:16.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claims-cope.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 02:27:59 GMT","end":"Sat, 29 Nov 2025 03:26:36 GMT"},"fingerprint":{"sha1":"56:E5:F6:CF:B3:C4:B8:38:59:D6:5C:02:34:72:42:28:E4:C3:86:B1","sha256":"6C:B2:37:F1:98:E8:B4:2F:9C:6F:23:07:8C:5F:2E:57:54:42:13:15:5C:4F:CF:C3:15:39:2D:D0:4C:BA:B6:1D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claims-cope.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:03:17 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sat, 30 Aug 2025 02:45:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lH1r368cNtxSQ6eAvhgpbYJAyUnhkAsOxr8x950ZC4gQWNxqrwjeeWF4YPtb2z8V3BP0t%2B2WHz8OgAY6%2B4ivxuEQIA7DxKgJiKtitO47Tw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: X_CACHE_KEY=42a3b1aa308e6bb50198834d2ae496d7; Path=/; Expires=Fri, 31 Dec 9999 23:59:59 GMT\r\ncf-ray: 97c84217cc2d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1285948,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (19389)","md5":"ae8a67c6227994256e0bd228f4ba3a16","sha1":"2300759774a3f683aaf9273c3b25cd6e5d2a3033","sha256":"a5231ff9f2ca782e80a37c36578ff519f70019aaf76bb426079e8c59825ed89d","sha512":"62fb13add7d87a3ba37d0b919a83ab4506ae8b7b846ed5372f81cc7f41674dfe35d8d0b15b0e47250f106f1b35e251f6afd44a9714a83999cea8396786336847","ssdeep":"12288:O2MRGuv8+RluvnIRwuvK2RXuvN0RyuvhDPUpMYvLESUoCn8ysg9jLLifHqfXsGd:OzlbVHvDPUpMmNUh8/ejvcqfcY","tlshash":"7b2502714d279a773e0766ae27eb5b4a2f14a103c841f85c78fc204acf8b57396a671c","first_seen":"2025-09-09T17:03:45.633287Z","last_seen":"2025-09-09T17:03:45.633287Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2211,"timings":{"blocked":1050,"dns":1033,"connect":1,"send":0,"wait":110,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/services/temp-link/create?referrer=claims-cope.xyz","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"104.21.62.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claims-cope.xyz/","date":"2025-09-09T17:03:19.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcop-api.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 15:47:41 GMT","end":"Thu, 20 Nov 2025 16:45:54 GMT"},"fingerprint":{"sha1":"B0:CF:37:BB:3E:5D:19:87:C9:06:DA:2B:3A:C5:0B:77:11:4C:A2:47","sha256":"FC:6B:44:07:4E:C2:B7:3E:B8:95:B0:E9:D0:96:D9:1C:DC:FE:A5:D7:F6:6B:A4:D5:79:CF:BE:F3:E3:05:67:8E"}}},"request":{"raw":"OPTIONS /@v1/services/temp-link/create?referrer=claims-cope.xyz HTTP/1.1\r\nHost: coinmarketcop-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,x-auth-key,x-auth-key-v2,x-direction-safe,x-scale-referrer\r\nReferer: https://claims-cope.xyz/\r\nOrigin: https://claims-cope.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Sep 2025 17:03:19 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://claims-cope.xyz\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS,PATCH\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UWnRDL1KpOIyj3OC6%2B2U2EZXXKsr7KAoN3C1y7zoQpCW%2BgwxT9NT5mmPi6ulv91mbJO0gC8s8Qmc69%2FHdallIpvrsYOJoq1rTfMEc3pmK4iYm9Y%3D\"}]}\r\ncf-ray: 97c842213ec756ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T00:37:19.234622Z","times_seen":17946405,"resource_available":true,"data":null}},"time_used":569,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":569,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/services/connector?referrer=claims-cope.xyz","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"104.21.62.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claims-cope.xyz/","date":"2025-09-09T17:03:19.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcop-api.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 15:47:41 GMT","end":"Thu, 20 Nov 2025 16:45:54 GMT"},"fingerprint":{"sha1":"B0:CF:37:BB:3E:5D:19:87:C9:06:DA:2B:3A:C5:0B:77:11:4C:A2:47","sha256":"FC:6B:44:07:4E:C2:B7:3E:B8:95:B0:E9:D0:96:D9:1C:DC:FE:A5:D7:F6:6B:A4:D5:79:CF:BE:F3:E3:05:67:8E"}}},"request":{"raw":"OPTIONS /@v1/services/connector?referrer=claims-cope.xyz HTTP/1.1\r\nHost: coinmarketcop-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,x-auth-key,x-direction-safe,x-scale-referrer\r\nReferer: https://claims-cope.xyz/\r\nOrigin: https://claims-cope.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Sep 2025 17:03:20 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://claims-cope.xyz\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS,PATCH\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F%2BKiXErNRgMBY2mirJ%2FRuo3yjX1%2BwXBNTKw5CxtBSwx1d2BesER1iIOKprWF4F1RYdtStHITwVFkN4STRKzqljiDkg385SO1aiPEJHGbOtLyVXg%3D\"}]}\r\ncf-ray: 97c842217ec956ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T00:37:19.234622Z","times_seen":17946405,"resource_available":true,"data":null}},"time_used":821,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":821,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/services/temp-link/create?referrer=claims-cope.xyz","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"104.21.62.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claims-cope.xyz/","date":"2025-09-09T17:03:19.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcop-api.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 15:47:41 GMT","end":"Thu, 20 Nov 2025 16:45:54 GMT"},"fingerprint":{"sha1":"B0:CF:37:BB:3E:5D:19:87:C9:06:DA:2B:3A:C5:0B:77:11:4C:A2:47","sha256":"FC:6B:44:07:4E:C2:B7:3E:B8:95:B0:E9:D0:96:D9:1C:DC:FE:A5:D7:F6:6B:A4:D5:79:CF:BE:F3:E3:05:67:8E"}}},"request":{"raw":"POST /@v1/services/temp-link/create?referrer=claims-cope.xyz HTTP/1.1\r\nHost: coinmarketcop-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjdXN0b21lcklkIjoiR21sekJYSmRtayIsImdyb3VwX2lkIjo2MzIsImlhdCI6MTc1NjEyNzUzNH0.llT7A_FxmcOw38R2oNSqOGql5ua5JiqaXKSxoDf6doM\r\nX-Direction-Safe: 1757437399226\r\nX-Scale-Referrer: claims-cope.xyz\r\nX-Auth-Key: 2fOgs5lxiUuqGGXiUWBrqG7hbnOVeTrXR37aaHi7Og0%3D\r\nX-Auth-Key-V2: QA2BFDQErdedfvIQEAjAzdog%2F5oMfnxa8NQqTQz6dBQ%3D\r\nContent-Length: 2029\r\nOrigin: https://claims-cope.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claims-cope.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Sep 2025 17:03:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BmOgVnrGLgsLt6ZmwZjqpi0uHLA489udn37Jl4eKQqgLu3vZIIxLKgKaWVwgA3kTu9reUp37BDPku7bOIGDmo%2B1WWP3zQ5lHyQcpzgZphn7I8iM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://claims-cope.xyz\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\netag: W/\"254-S/X0AV7MAAejejWx8qKqwfowkXs\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 97c84224cf0056ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":596,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"47b9d81e9991cbf33797b67bb84eae93","sha1":"4bf5f4015ecc0007a37a35b1f2a2aac1fa30917b","sha256":"6f0a89e0334c53a7b29b49c27c812628995f899bf5b456591e14cffae75d60b2","sha512":"82916b1f04d3630ca0e2547f54d928ddab1108b6237e2212eca1c411f666178bd66a5a20db3378baf91475c08af6a3249ecc952486df175fd67acdea0580c0fe","ssdeep":"","tlshash":"89f0e7565d028a71ee65b57bde88db9d28cd5f90f5d3350280c0c7fd9d9451b8350844","first_seen":"2025-09-09T17:03:45.635125Z","last_seen":"2025-09-09T17:03:45.635125Z","times_seen":1,"resource_available":false,"data":null}},"time_used":632,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":628,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}