{"report_id":"293d3370-0e1b-4057-ac3c-9b61393bb838","version":6,"status":"done","tags":[],"date":"2025-09-09T17:02:13Z","url":{"schema":"http","addr":"claim-arc.xyz/","fqdn":"claim-arc.xyz","domain":"claim-arc.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.60","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"claim-arc.xyz/","fqdn":"claim-arc.xyz","domain":"claim-arc.xyz","tld":"xyz"},"title":"ARC Token Upgrade - Upgrade ARC v1 to ARC v2"},"submit":{"url":{"schema":"http","addr":"claim-arc.xyz/","fqdn":"claim-arc.xyz","domain":"claim-arc.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.60","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-14T17:02:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"claim-arc.xyz","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-30","domain_rank":0,"first_seen":"2025-09-09T17:02:13.759504Z","last_seen":"2025-09-09T17:02:13.759504Z","alert_count":0,"request_count":3,"received_data":822521,"sent_data":1313,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"coinmarketcop-api.com","ip":{"addr":"172.67.141.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-22","domain_rank":0,"first_seen":"2025-08-22T20:51:30.781912Z","last_seen":"2025-09-07T12:27:43.304105Z","alert_count":6,"request_count":6,"received_data":5173,"sent_data":4362,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-03T15:14:36.780259Z","alert_count":0,"request_count":1,"received_data":9481,"sent_data":552,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"claim-arc.xyz/","fqdn":"claim-arc.xyz","domain":"claim-arc.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0a1f887f8e87e44dd41209aaa0fb720e","sha1":"0e5448d4d8556a353d73f0b2f274a5a1e9b3b944","sha256":"17b7304336bd6ea3179907359c8f0a3f38ba1d68cacfa2bf9bec629682f971f0","sha512":"96ce96e63ce45fa1f488242b9de24472424573b3845cdfe8612ee9f0a6d392a9cc3d8b7c83a9364069ebdc95c8db775df488c55022c78d9b36bf2c9f2aea7c5e","ssdeep":"1536:csLY5PjllEZjllEb07okPK84XmHRWBR8AyrVyCS7mVEFRofsrUgKmgb:cs85PjllEZjllEb07okPx4XgWBRzyrVh","tlshash":"1083fa8c5d43816ef756e0d8572562bbcb424f7b0bdbba2d79c95246ee30021b2c72b4","size":82652,"data":"","first_seen":"2025-09-07T13:20:14.194401Z","last_seen":"2025-09-20T14:34:59.425443Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-arc.xyz/ymghVxuLT9F0.js","fqdn":"claim-arc.xyz","domain":"claim-arc.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"43013710269bc5e67922a049089bb0c0","sha1":"4c94341b1e643eee2c46a82c031dd75a404ffe83","sha256":"2d85cbc218034df29e8bfb02412ac576802e5abadc4153fde24136209e68a53c","sha512":"7d351770770a7958f0eb36bff8e4d6cae842d519f7448b53cc093e5316bb8e775d5ae43afcd89a2319d13d01cc331ab3452038e337cbba9b9e243a47d4a5bd26","ssdeep":"1536:SH6QLgbPjllEFjllEbY/Gy+tmJpXI5/I2mLVyCS7mVEFRo5srUgKsgq:rQUbPjllEFjllEbY/G3+I5/RmLVyCS7F","tlshash":"95832e8d4d43815ef356d0d8472561bbcb424f770bdbba1ebac9928aee31421b1c72b4","size":86710,"data":"","first_seen":"2025-09-07T13:20:14.19053Z","last_seen":"2025-09-20T14:34:59.3957Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/cdn/bundles/front-worker.js?t=29290621","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"21467f3250cee640b473f8226f4c91cc","sha1":"85b5eb1494e6f96c4babc015efa4ea0567cb8728","sha256":"d49ed388abc8be992e5a8fc01411ba84426eb48edc5e9315b5c571125874b0e1","sha512":"5cf5630c891b0547c680189323fe2baea5bb8057ddca31c852aa40e1c601f79e38a82c556674facc71dcfe2ac1cc4f2e9d75bf1e703abb4a89fcc59fde50b565","ssdeep":"6144:Us6RCjrjOJMZUk6p1ZsJzO3fXeYwlEU5nyiC5z:R64fj0lWCvXeYw8i+z","tlshash":"1f748c917280617916634fda41bf094ab238f120a409492cf75cc8d72bb99dad9bff7c","size":339536,"data":"","first_seen":"2025-09-09T11:19:31.450692Z","last_seen":"2025-09-15T05:50:13.753477Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-arc.xyz/","fqdn":"claim-arc.xyz","domain":"claim-arc.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"53182466ddba072e5f6b8d0d9d655417","sha1":"e341cf575484a89d90092c574a1ce14b88ab0eab","sha256":"e0ade97da03808f7401f60d4b951ab082c52e18905d62bfca303e97a5da08b5b","sha512":"51b45218d568160f0cf2a51b920fd78266f8bbadb3332d84b242cbb9c1f7a31a6149e7f44ff96ad906f22020c559bf063b39164f036c8bdbc03b9506c5dea266","ssdeep":"","tlshash":"ef113826122632653c8eb0ee59b6dc4d7a7f100be90960a0b59ed08d7930b5544f76dc","size":957,"data":"","first_seen":"2023-03-07T13:09:46Z","last_seen":"2026-06-04T12:50:03.022623Z","times_seen":336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-arc.xyz/","fqdn":"claim-arc.xyz","domain":"claim-arc.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"384ed89ce34cffc6c4e4f8f7e0e08076","sha1":"997a836d28fe34a904773114b84f86f0f0748658","sha256":"f7f766664d325e7e29c50d1fe64d03ef5a71aac2499b26e096ebe2e4fd5950c6","sha512":"d614b235ef4210d04f4d0db39fa095e4cc6858dcc6ce1769ef27f7cc8d627c27324fc774072b156d7d72fe03fed0fccaf1b008b47057d08cfa8828517dcf6065","ssdeep":"","tlshash":"6fd05e3871f650b1023fb27e430fb7893175108b2004e90a3eac8f895fe052e5ae1a8e","size":282,"data":"","first_seen":"2025-09-09T17:02:16.974627Z","last_seen":"2025-09-17T11:06:11.772507Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"claim-arc.xyz/","fqdn":"claim-arc.xyz","domain":"claim-arc.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-09T17:01:51.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-arc.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 22:40:38 GMT","end":"Fri, 28 Nov 2025 23:39:16 GMT"},"fingerprint":{"sha1":"7D:6D:71:4F:74:E1:EE:EF:F7:A9:24:64:FB:50:EE:AE:14:DB:BB:DA","sha256":"F4:89:B7:3E:15:C9:14:27:22:62:8B:B9:9F:2C:7E:7A:9D:26:06:8A:8A:5D:88:5A:BE:C6:BF:43:FF:25:CB:60"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claim-arc.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:51 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sat, 30 Aug 2025 02:19:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pvxJwlsv17KnL11C3zgsOwCXVhfRkQUjflcsf6W3kHajAyz3PGKC7iBMm4%2F%2BKNXqKPJTSYKogeqMNPZe753PgW2dMZEcMUUyYsSU\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 97c83ffd3e705687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":366950,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (65415)","md5":"eff40a7409a58e4e68cc9d5d5c5cea62","sha1":"d9370f0afd7da8ed8279548ef012d7fedb427e97","sha256":"399edaf6bc1d3dd75850832648158894dcfa5b65b671ae14d7ce2f6ddf113f1b","sha512":"eec211619400741fa1cfc429380ea445dea8877d9970cabdac8b8c45001af215a5b81bd348c753d0c4b1bd077f798472af390bad5967e478665065018cf96d9e","ssdeep":"6144:dr3vFEE/vrjeWLFMjr3vFEE/vrjeWLFMmr3vFEE/vrjeWLFMMr3vFEE/vrjeWLF7:p9Eqrje+FC9Eqrje+FR9Eqrje+F99EqR","tlshash":"a174cf2e95b211392c53a1b8b7cfb248b672e44bc83edc8db9cd5061cfc97b49c96641","first_seen":"2025-09-09T17:02:16.955929Z","last_seen":"2025-09-09T17:02:16.955929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":80,"dns":59,"connect":1,"send":0,"wait":109,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-arc.xyz/","fqdn":"claim-arc.xyz","domain":"claim-arc.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-arc.xyz/","date":"2025-09-09T17:01:52.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-arc.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 22:40:38 GMT","end":"Fri, 28 Nov 2025 23:39:16 GMT"},"fingerprint":{"sha1":"7D:6D:71:4F:74:E1:EE:EF:F7:A9:24:64:FB:50:EE:AE:14:DB:BB:DA","sha256":"F4:89:B7:3E:15:C9:14:27:22:62:8B:B9:9F:2C:7E:7A:9D:26:06:8A:8A:5D:88:5A:BE:C6:BF:43:FF:25:CB:60"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claim-arc.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-arc.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:52 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sat, 30 Aug 2025 02:19:21 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1lB%2BqLX%2FKZ7e3vSJSu92AAFF2tpYkxYMn%2BLWDY6KHHbEvigPGIU4Fu6f1ztAOe0s7JegvCt4rrnozahCB9ZyPbPKdV4GFuPHueNi\"}]}\r\ncontent-encoding: br\r\ncf-ray: 97c840003db85697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":366950,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (65415)","md5":"eff40a7409a58e4e68cc9d5d5c5cea62","sha1":"d9370f0afd7da8ed8279548ef012d7fedb427e97","sha256":"399edaf6bc1d3dd75850832648158894dcfa5b65b671ae14d7ce2f6ddf113f1b","sha512":"eec211619400741fa1cfc429380ea445dea8877d9970cabdac8b8c45001af215a5b81bd348c753d0c4b1bd077f798472af390bad5967e478665065018cf96d9e","ssdeep":"6144:dr3vFEE/vrjeWLFMjr3vFEE/vrjeWLFMmr3vFEE/vrjeWLFMMr3vFEE/vrjeWLF7:p9Eqrje+FC9Eqrje+FR9Eqrje+F99EqR","tlshash":"a174cf2e95b211392c53a1b8b7cfb248b672e44bc83edc8db9cd5061cfc97b49c96641","first_seen":"2025-09-09T17:02:16.955929Z","last_seen":"2025-09-09T17:02:16.955929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-arc.xyz/ymghVxuLT9F0.js","fqdn":"claim-arc.xyz","domain":"claim-arc.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-arc.xyz/","date":"2025-09-09T17:01:52.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-arc.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 22:40:38 GMT","end":"Fri, 28 Nov 2025 23:39:16 GMT"},"fingerprint":{"sha1":"7D:6D:71:4F:74:E1:EE:EF:F7:A9:24:64:FB:50:EE:AE:14:DB:BB:DA","sha256":"F4:89:B7:3E:15:C9:14:27:22:62:8B:B9:9F:2C:7E:7A:9D:26:06:8A:8A:5D:88:5A:BE:C6:BF:43:FF:25:CB:60"}}},"request":{"raw":"GET /ymghVxuLT9F0.js HTTP/1.1\r\nHost: claim-arc.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-arc.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:52 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 30 Aug 2025 02:19:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b25fb1-152b6\"\r\nexpires: Wed, 10 Sep 2025 05:01:52 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9XMhVw3mWmzgfWWkLNd%2BS%2FLCfQTZKCIk%2FN1dFAx5GUqVBy6XSBJlJBm9YB8KkLNJHCrlVT5ZUU4nLf5s4dcFy8ekG4whBSzyfkbd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97c840001d995697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86710,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (63984)","md5":"43013710269bc5e67922a049089bb0c0","sha1":"4c94341b1e643eee2c46a82c031dd75a404ffe83","sha256":"2d85cbc218034df29e8bfb02412ac576802e5abadc4153fde24136209e68a53c","sha512":"7d351770770a7958f0eb36bff8e4d6cae842d519f7448b53cc093e5316bb8e775d5ae43afcd89a2319d13d01cc331ab3452038e337cbba9b9e243a47d4a5bd26","ssdeep":"1536:SH6QLgbPjllEFjllEbY/Gy+tmJpXI5/I2mLVyCS7mVEFRo5srUgKsgq:rQUbPjllEFjllEbY/G3+I5/RmLVyCS7F","tlshash":"95832e8d4d43815ef356d0d8472561bbcb424f770bdbba1ebac9928aee31421b1c72b4","first_seen":"2025-09-07T13:20:14.19053Z","last_seen":"2025-09-20T14:34:59.3957Z","times_seen":6,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/log/join","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"172.67.141.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claim-arc.xyz/","date":"2025-09-09T17:01:52.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcop-api.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 15:47:41 GMT","end":"Thu, 20 Nov 2025 16:45:54 GMT"},"fingerprint":{"sha1":"B0:CF:37:BB:3E:5D:19:87:C9:06:DA:2B:3A:C5:0B:77:11:4C:A2:47","sha256":"FC:6B:44:07:4E:C2:B7:3E:B8:95:B0:E9:D0:96:D9:1C:DC:FE:A5:D7:F6:6B:A4:D5:79:CF:BE:F3:E3:05:67:8E"}}},"request":{"raw":"OPTIONS /@v1/log/join HTTP/1.1\r\nHost: coinmarketcop-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,x-device,x-scale-referrer\r\nReferer: https://claim-arc.xyz/\r\nOrigin: https://claim-arc.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Sep 2025 17:01:52 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://claim-arc.xyz\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS,PATCH\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q95KnEgiMx3aouB5GS%2FWJp0EjACP%2B9Pc1BBq%2BkwcjyHGE9rXBSi79YdiqqE8W9c5HCBuVXkUhUk2bjzmh8E5Q6vH%2Fkoc6SReEN6q3ldhi9RN99lHNQ%3D%3D\"}]}\r\ncf-ray: 97c840043b2d32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T10:46:18.4937Z","times_seen":17901663,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":13,"dns":1,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-arc.xyz/","date":"2025-09-09T17:01:52.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"74:C1:9B:D3:5D:65:CE:2E:7C:CC:41:C0:7C:F9:2C:AB:41:A3:EC:AA","sha256":"BC:18:82:63:1D:AE:2A:9D:1A:A3:B1:77:B2:AF:6F:0D:AA:CF:1A:88:5A:51:22:46:A8:66:C8:4F:9C:92:20:32"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-arc.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 09 Sep 2025 17:01:52 GMT\r\ndate: Tue, 09 Sep 2025 17:01:52 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8795,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"bcd01865bb66c8fb8cdc3fc53aa3efc4","sha1":"b51cb0675812dda181acf06adcf1f3de1929f054","sha256":"b8f7ca9074f04c891c152f6bb3fb864afe47e7f6e868299bbf8f1c08123113a8","sha512":"2043d320a4fb406bec163d37ee71b5de9aeb77ca74fc413226b99809af27efa61dc0c80e8d5ad2ca200f945ad6ea9b4f0abe5b879e3ade16cd6cf0cc5d99c1e1","ssdeep":"192:vyEfyZy6yG3gyLyZVyV77xd6n3UQjH+yYwyNFyuy3uySRk73vO6u8:vtfcHjg8cicOhwCFnbL8B","tlshash":"8f02fe91052bd504ea471cc527cf7e369e8e62a67481d1b97ffe2cd9aceac22132471c","first_seen":"2025-09-05T11:33:38.389978Z","last_seen":"2025-09-10T15:30:46.442614Z","times_seen":58,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":131,"dns":0,"connect":20,"send":0,"wait":43,"receive":0,"ssl":109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/log/join","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"172.67.141.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claim-arc.xyz/","date":"2025-09-09T17:01:52.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcop-api.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 15:47:41 GMT","end":"Thu, 20 Nov 2025 16:45:54 GMT"},"fingerprint":{"sha1":"B0:CF:37:BB:3E:5D:19:87:C9:06:DA:2B:3A:C5:0B:77:11:4C:A2:47","sha256":"FC:6B:44:07:4E:C2:B7:3E:B8:95:B0:E9:D0:96:D9:1C:DC:FE:A5:D7:F6:6B:A4:D5:79:CF:BE:F3:E3:05:67:8E"}}},"request":{"raw":"POST /@v1/log/join HTTP/1.1\r\nHost: coinmarketcop-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nx-scale-referrer: claim-arc.xyz\r\nauthorization: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjdXN0b21lcklkIjoiR21sekJYSmRtayIsImdyb3VwX2lkIjo2MzIsImlhdCI6MTc1NjEyNzUzNH0.llT7A_FxmcOw38R2oNSqOGql5ua5JiqaXKSxoDf6doM\r\nx-device: 0:Windows:Firefox\r\nContent-Length: 2\r\nOrigin: https://claim-arc.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-arc.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Sep 2025 17:01:53 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K7UPP06PKoYrf1mZxydW3jLOZ6iVcPWe1LU7u6CjmN7e2YGd00XbaCqD7w%2FeGAj4Li4ml%2BfyxinRDLp6c1nJ%2F8GqOGd9x%2BcVJu%2B3IeKpnEopvG5ZkA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://claim-arc.xyz\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\netag: W/\"20-llti1nxI8SZi+xVpiFYUSfGpvg8\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 97c84004fb4a32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3b5b4d21f8c87c5e6534b5a1d9d4574a","sha1":"965b62d67c48f12662fb156988561449f1a9be0f","sha256":"24dcf0603597089c21d0ab963001064690004c39e72221981b7faf7a5edd5f25","sha512":"1218be959182a70f35f2eeaeadc640c721f546b6b46b48f21f9acb3dead02d478da0ac6855f6c55777fbf33486b967fad262e93a5da6327ac7517933f9663ba8","ssdeep":"","tlshash":"d18000000e00aca83bc20802b2832028aaf22a80808b20a2800c803a0b028e0c22ba0c","first_seen":"2025-07-26T22:59:19.534167Z","last_seen":"2025-10-13T01:44:36.478944Z","times_seen":529,"resource_available":false,"data":null}},"time_used":899,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":898,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/services/connector?referrer=claim-arc.xyz","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"172.67.141.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claim-arc.xyz/","date":"2025-09-09T17:01:52.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcop-api.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 15:47:41 GMT","end":"Thu, 20 Nov 2025 16:45:54 GMT"},"fingerprint":{"sha1":"B0:CF:37:BB:3E:5D:19:87:C9:06:DA:2B:3A:C5:0B:77:11:4C:A2:47","sha256":"FC:6B:44:07:4E:C2:B7:3E:B8:95:B0:E9:D0:96:D9:1C:DC:FE:A5:D7:F6:6B:A4:D5:79:CF:BE:F3:E3:05:67:8E"}}},"request":{"raw":"OPTIONS /@v1/services/connector?referrer=claim-arc.xyz HTTP/1.1\r\nHost: coinmarketcop-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,x-auth-key,x-direction-safe,x-scale-referrer\r\nReferer: https://claim-arc.xyz/\r\nOrigin: https://claim-arc.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Sep 2025 17:01:53 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://claim-arc.xyz\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS,PATCH\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EZUyXwxkxfzkcmJe8tY%2Bp4abo0RTNGcFOHE6sugfAdqAU5lfJnCdCvZYyWQyGBGbksDGMVRlCtHjr2ki53FkdwmB9db0FCfmPzz67CjhFBl2I0w9mA%3D%3D\"}]}\r\ncf-ray: 97c840051b4d32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T10:46:18.4937Z","times_seen":17901663,"resource_available":true,"data":null}},"time_used":570,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":570,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/services/connector?referrer=claim-arc.xyz","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"172.67.141.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claim-arc.xyz/","date":"2025-09-09T17:01:53.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcop-api.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 15:47:41 GMT","end":"Thu, 20 Nov 2025 16:45:54 GMT"},"fingerprint":{"sha1":"B0:CF:37:BB:3E:5D:19:87:C9:06:DA:2B:3A:C5:0B:77:11:4C:A2:47","sha256":"FC:6B:44:07:4E:C2:B7:3E:B8:95:B0:E9:D0:96:D9:1C:DC:FE:A5:D7:F6:6B:A4:D5:79:CF:BE:F3:E3:05:67:8E"}}},"request":{"raw":"GET /@v1/services/connector?referrer=claim-arc.xyz HTTP/1.1\r\nHost: coinmarketcop-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjdXN0b21lcklkIjoiR21sekJYSmRtayIsImdyb3VwX2lkIjo2MzIsImlhdCI6MTc1NjEyNzUzNH0.llT7A_FxmcOw38R2oNSqOGql5ua5JiqaXKSxoDf6doM\r\nX-Direction-Safe: 1757437312809\r\nX-Scale-Referrer: claim-arc.xyz\r\nX-Auth-Key: %2FeXf2lTDmgFroyUwD2CMhb7uJrQW%2BKnKgSZ4%2BUSULW8%3D\r\nOrigin: https://claim-arc.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-arc.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Sep 2025 17:01:54 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rRmsDI1mXNGKiTT20c1EussxmjohatbsH%2BEHxKpUccFXA0dxio5H9ig7kryM%2FZCHYgCqpMuaz77kqgfSu12MxWo2WJZ2ySzG5GRXSnIMDMxO9Hiu4A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://claim-arc.xyz\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\netag: W/\"15c-QR6HwXjQldc4kZOsj4kuH/YXonc\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 97c84008aba832fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":348,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"00d3c61653b192925489fe3d67f7de4f","sha1":"411e87c178d095d7389193ac8f892e1ff617a277","sha256":"d332c8bd1a8d65417dc2b0140e66df288275f2aab0ba8113ccf2b44e212fad6d","sha512":"ef617de7089f0b89467f04d949e4a3d4ae2b98d6c28f05088d5fb73aea1efb3a39632a1f697709e066fd397028d94edf765d0632c0580bab8f1fd2aaac060b4f","ssdeep":"","tlshash":"6de0c007ec103c846157133be26fb73c674364a26284e0a19b55f905f208850d301e09","first_seen":"2025-09-09T17:02:16.964251Z","last_seen":"2025-09-09T17:02:16.964251Z","times_seen":1,"resource_available":false,"data":null}},"time_used":892,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":892,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/services/temp-link/create?referrer=claim-arc.xyz","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"172.67.141.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claim-arc.xyz/","date":"2025-09-09T17:01:52.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcop-api.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 15:47:41 GMT","end":"Thu, 20 Nov 2025 16:45:54 GMT"},"fingerprint":{"sha1":"B0:CF:37:BB:3E:5D:19:87:C9:06:DA:2B:3A:C5:0B:77:11:4C:A2:47","sha256":"FC:6B:44:07:4E:C2:B7:3E:B8:95:B0:E9:D0:96:D9:1C:DC:FE:A5:D7:F6:6B:A4:D5:79:CF:BE:F3:E3:05:67:8E"}}},"request":{"raw":"OPTIONS /@v1/services/temp-link/create?referrer=claim-arc.xyz HTTP/1.1\r\nHost: coinmarketcop-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,x-auth-key,x-auth-key-v2,x-direction-safe,x-scale-referrer\r\nReferer: https://claim-arc.xyz/\r\nOrigin: https://claim-arc.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Sep 2025 17:01:53 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://claim-arc.xyz\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS,PATCH\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z77ggIvthScgN2ydGNrPt8wPFWL0yBl81PJ%2BT84aELs0XNRwF0Hsm54l9uD9spHOmbeWi%2FCVCZm2qAbg4mvOsrf2vYgbdipDTDH7wMsaDCx1BWX1nw%3D%3D\"}]}\r\ncf-ray: 97c84004eb4732fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T10:46:18.4937Z","times_seen":17901663,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/services/temp-link/create?referrer=claim-arc.xyz","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"172.67.141.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claim-arc.xyz/","date":"2025-09-09T17:01:53.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcop-api.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 15:47:41 GMT","end":"Thu, 20 Nov 2025 16:45:54 GMT"},"fingerprint":{"sha1":"B0:CF:37:BB:3E:5D:19:87:C9:06:DA:2B:3A:C5:0B:77:11:4C:A2:47","sha256":"FC:6B:44:07:4E:C2:B7:3E:B8:95:B0:E9:D0:96:D9:1C:DC:FE:A5:D7:F6:6B:A4:D5:79:CF:BE:F3:E3:05:67:8E"}}},"request":{"raw":"POST /@v1/services/temp-link/create?referrer=claim-arc.xyz HTTP/1.1\r\nHost: coinmarketcop-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjdXN0b21lcklkIjoiR21sekJYSmRtayIsImdyb3VwX2lkIjo2MzIsImlhdCI6MTc1NjEyNzUzNH0.llT7A_FxmcOw38R2oNSqOGql5ua5JiqaXKSxoDf6doM\r\nX-Direction-Safe: 1757437312773\r\nX-Scale-Referrer: claim-arc.xyz\r\nX-Auth-Key: 6oyS3jZ1%2BuOQuzt4eLeXgaxmmcoM2kOHjqHTNME1TEo%3D\r\nX-Auth-Key-V2: KJsCWhGizfYM4jyRpkIYrF9hVZwHIyB9u%2BTLjCgf0Ro%3D\r\nContent-Length: 2029\r\nOrigin: https://claim-arc.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-arc.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Sep 2025 17:01:53 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bCtf%2BVwZBd2riifuKhxZzKYAseOUpB6%2FLD4K3hcAMm%2BRPGgUVLY6wDd3WGnAWfz9YD1IHyE4zfswWq5FHp7RS%2BSdDCIBCDxathBIs%2BxGYNycSZN1zQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://claim-arc.xyz\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\netag: W/\"256-28bhxOqLV5dGgpdTKIBxxOjgw14\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 97c84006ab6632fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":598,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"53b76755796e63e8c7f55442e7749965","sha1":"dbc6e1c4ea8b579746829753288071c4e8e0c35e","sha256":"fa7136667c201ee6d42bb3d4d8bce10bf2e500a5bd22f8eba85ad47fe7d33ee2","sha512":"19f0b13bee1c0eeac3314470c1709729915e7c40c5ce326b033e86b055f963c2c58b64cc0f0093340adb6769e8467f1590e0862f5bb5741e66d6f16e4f16ea54","ssdeep":"","tlshash":"7df04122c1201fd15503b9455b1ecf48bedc35aea8db1634b62cf749b932b6429e5e60","first_seen":"2025-09-09T17:02:16.96661Z","last_seen":"2025-09-09T17:02:16.96661Z","times_seen":1,"resource_available":false,"data":null}},"time_used":913,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":913,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}