{"report_id":"335a7016-b55f-452f-9cd2-1493b1657a41","version":6,"status":"done","tags":[],"date":"2025-10-14T18:02:21Z","url":{"schema":"http","addr":"monclaim.pages.dev/","fqdn":"monclaim.pages.dev","domain":"monclaim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.233","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"monclaim.pages.dev/","fqdn":"monclaim.pages.dev","domain":"monclaim.pages.dev","tld":"pages.dev"},"title":"Monad Airdrop"},"submit":{"url":{"schema":"http","addr":"monclaim.pages.dev/","fqdn":"monclaim.pages.dev","domain":"monclaim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.233","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-18T18:02:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-14T18:01:58Z","timestamp":1760464918,"ip_dst":{"addr":"172.66.47.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.10","port":52122,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2025-10-14T18:01:58.111966+0000\",\"flow_id\":1369031832935375,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.10\",\"src_port\":52122,\"dest_ip\":\"172.66.47.23\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"monclaim.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3464,\"start\":\"2025-10-14T18:01:58.105423+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"monclaim.pages.dev","ip":{"addr":"172.66.47.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2025-10-14T18:02:21.607546Z","last_seen":"2025-10-14T18:02:21.607546Z","alert_count":0,"request_count":5,"received_data":3926546,"sent_data":2276,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"gtmpx.com","ip":{"addr":"91.84.108.73","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"domain_registered":"2025-03-06","domain_rank":197005,"first_seen":"2025-09-10T17:09:37.596516Z","last_seen":"2025-10-09T15:36:32.751777Z","alert_count":0,"request_count":1,"received_data":263,"sent_data":424,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-14T18:01:58Z","timestamp":1760464918,"ip_dst":{"addr":"172.66.47.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.10","port":52122,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2025-10-14T18:01:58.111966+0000\",\"flow_id\":1369031832935375,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.10\",\"src_port\":52122,\"dest_ip\":\"172.66.47.23\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"monclaim.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3464,\"start\":\"2025-10-14T18:01:58.105423+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"monclaim.pages.dev/","fqdn":"monclaim.pages.dev","domain":"monclaim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"76244d8526da359429886b03a7ada498","sha1":"90415cd87cc2f928fc8e16b7740dfb09f7e5bc10","sha256":"3f699786f5f750c5ee9696bce7941003b51f5e5628b55aa6ca59917195d8b490","sha512":"3ba24210155df81c4378587bf70fa4a66f8eb44e60d01deca3b32a8ccdd092d350a1fd870334d90469b750c2fc86822743811cba384e7baa95635291061c3adb","ssdeep":"","tlshash":"dcc0125970206966048e787d4ccf088ebe268412a20849c999dcd8547fb1e6c42e484c","size":184,"data":"","first_seen":"2023-09-20T06:28:52Z","last_seen":"2026-08-07T00:51:32.33266Z","times_seen":1955,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"monclaim.pages.dev/jquery.validation-1.19.5.min.js","fqdn":"monclaim.pages.dev","domain":"monclaim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://monclaim.pages.dev/","date":"2025-10-14T18:01:58.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"monclaim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Oct 2025 07:08:50 GMT","end":"Mon, 12 Jan 2026 08:07:39 GMT"},"fingerprint":{"sha1":"E4:0A:03:99:C2:BE:D8:21:CD:C0:55:59:A2:6F:75:E5:1E:D7:D2:8C","sha256":"7B:7B:9C:27:A6:93:3E:DD:0B:E0:59:65:D8:E0:9C:30:0C:29:70:7B:B2:FD:B1:82:9E:0E:1A:25:CB:A7:10:CD"}}},"request":{"raw":"GET /jquery.validation-1.19.5.min.js HTTP/1.1\r\nHost: monclaim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://monclaim.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 18:01:58 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=arN6CiqHFKTfeeEPwGj40CiBqn8QR6gDjRNrMQVMY9E9lsu%2BNf3dz7PedRbAdIxiEMxLaHfK4Bgq%2FAxxj9eFHJt0vfo%2B8idbPrQ6voNKaGf8Ew%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"4b2fcf85f5c6e002eb38db813d33a3f2\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98e8fc2bdb4776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3881638,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"74391eb427656a963cea14663d4c4e21","sha1":"d03cc3e7623d73da1c34ad6aea134240ab125981","sha256":"d9694b0645744cb820188baeb99ed4e48f0f5a081450f852878cc61e6f28c35f","sha512":"6d03df533d305918a20c5b222da7600e80095b8acb4cef59f81d9c209ca66b471a2429568057aa289dc258e6affe7f39367f85c690adde00b6850f81f2039998","ssdeep":"24576:Yeez/qic3lXuQ9HGEZkizt3oYE+NuN4+1uByjhW:Yee2ic1eQd/km3VJqWyNW","tlshash":"de2523ba0b29d7093c1e59e971162cd0798844d9b1d8d1c86bddf8624ceef7a874c8e3","first_seen":"2025-10-09T15:36:36.594059Z","last_seen":"2025-10-14T18:02:24.114508Z","times_seen":2,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"monclaim.pages.dev/android-chrome-512x512.png","fqdn":"monclaim.pages.dev","domain":"monclaim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://monclaim.pages.dev/","date":"2025-10-14T18:01:59.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"monclaim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Oct 2025 07:08:50 GMT","end":"Mon, 12 Jan 2026 08:07:39 GMT"},"fingerprint":{"sha1":"E4:0A:03:99:C2:BE:D8:21:CD:C0:55:59:A2:6F:75:E5:1E:D7:D2:8C","sha256":"7B:7B:9C:27:A6:93:3E:DD:0B:E0:59:65:D8:E0:9C:30:0C:29:70:7B:B2:FD:B1:82:9E:0E:1A:25:CB:A7:10:CD"}}},"request":{"raw":"GET /android-chrome-512x512.png HTTP/1.1\r\nHost: monclaim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://monclaim.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 18:01:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 11311\r\npriority: u=6,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"12375df464cc49a5e26cc4fd7363db38\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gn6Wy0xZrRra2s3diMsGy4E92%2FRZqkcajCa3xoopZ6isA5LLiD2ziyK6JkbbKItu4A9MgCMDlYPErVjmiPeTaP9XsLBbX%2BCXRArmouGPJ7XFLw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 98e8fc348d0476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11311,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"95770168f1db14da0272ad85a9898d6a","sha1":"6bc060337286f2da624f1e427145839b28ebdc9d","sha256":"de2362376f6c71f1d99b7a5f93757ee7dd0d7a8419c27b7eefe1b9bf087a81fe","sha512":"6d170d784d637ee396f9b6f1d47292e55b3365749193622b0c6b01c7dc640773ee04365f692cd203c95e20fc73121ec84eebc0fca5e904638c58a77fda1469af","ssdeep":"192:lqbqbqbqbqR5ef1E9RV2lL0JpqQCLKDAEI+5ckwOjoEClwlofbQ0Z4UEKtWkUIzs:lAAAAR1E720xgxEdp0Gl0NZ4USkzAAAN","tlshash":"7a326c88c01b5539f0091639b1e4d17f81b1c8a6382bff3944eb994fe4a2f699fb0c16","first_seen":"2025-05-07T12:43:29.217316Z","last_seen":"2026-02-14T10:48:27.907746Z","times_seen":14,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"monclaim.pages.dev/icon.svg","fqdn":"monclaim.pages.dev","domain":"monclaim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://monclaim.pages.dev/","date":"2025-10-14T18:01:59.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"monclaim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Oct 2025 07:08:50 GMT","end":"Mon, 12 Jan 2026 08:07:39 GMT"},"fingerprint":{"sha1":"E4:0A:03:99:C2:BE:D8:21:CD:C0:55:59:A2:6F:75:E5:1E:D7:D2:8C","sha256":"7B:7B:9C:27:A6:93:3E:DD:0B:E0:59:65:D8:E0:9C:30:0C:29:70:7B:B2:FD:B1:82:9E:0E:1A:25:CB:A7:10:CD"}}},"request":{"raw":"GET /icon.svg HTTP/1.1\r\nHost: monclaim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://monclaim.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 18:01:59 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=6,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3gZ5EQhulNMxoys54j4A2PjqA7EzcPlQKWUwBZtq3rjGJFzmSOyB4I1y0cr1PsK4UYgJJ4y6YYKkWKToRhAQdOn5PYa4Q3Yv3wT2z%2B%2FWakqc%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"027741997537cbb2de4e97ad515a1b9b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98e8fc348d0676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1722,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"368bf42e111bc875f9f21276d861bfdf","sha1":"9cec99cf73a0f5f5ec92e36d87742e1972d092ee","sha256":"952c7ef2445ba6bbc3cd1568e0323fe0c43c673e763bad59626e21cbc0ef7c15","sha512":"bb255e83c8b8931f36fb4b001f8bc3746ff4f21d23a365f2e6ca34f90b0093f53774b5fc134ed82b093cc33a79d3eb7a3fb5633581e139ebfc0d673c848d9ca8","ssdeep":"","tlshash":"e73132f46659830db57a0365f7748861433e70b6f155402cee8d2a26e256cc3ea2f79c","first_seen":"2025-05-07T12:43:29.203437Z","last_seen":"2026-02-14T10:48:27.911722Z","times_seen":15,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"monclaim.pages.dev/","fqdn":"monclaim.pages.dev","domain":"monclaim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-14T18:01:58.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"monclaim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Oct 2025 07:08:50 GMT","end":"Mon, 12 Jan 2026 08:07:39 GMT"},"fingerprint":{"sha1":"E4:0A:03:99:C2:BE:D8:21:CD:C0:55:59:A2:6F:75:E5:1E:D7:D2:8C","sha256":"7B:7B:9C:27:A6:93:3E:DD:0B:E0:59:65:D8:E0:9C:30:0C:29:70:7B:B2:FD:B1:82:9E:0E:1A:25:CB:A7:10:CD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: monclaim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 18:01:58 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e3BTKCCjipQuDKk0U%2F5BeYSbFIit3WCzxmrfOP8zxbhqVjcCOZnNmmtp21bUPNtxYB0nkRxMwpR0NEsUmhqIZjhDil0X5f%2BDRUU0EkMI9FuOnw%3D%3D\"}]}\r\netag: W/\"00e7a91c1a1e74d5673cbdb95ca3decd\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98e8fc2a4ccd0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22882,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1635)","md5":"df09e7ab6de732adbe5abeded4aa8ed6","sha1":"6f39fb8e1020022a6f8fb5da84095f688ed510ec","sha256":"dad820df52f3d4a4036f56eba8168b804fa45d97e250c0eb344a88f589e3d696","sha512":"81faa9923cb95d0e141a1a702072329de79549e581247afeeb40766e985cc775e7f23951af8cada10a2219b0db1d9b0723e4c0586488a839fc8732a9f7c61c61","ssdeep":"384:EYoy/L6FuHccfYMpsYmuLuC3wC2mN8hRXZwWT:EYoy/L6s8YYMuYmAuC3wuN2RXZwWT","tlshash":"e0a29357f6e0309945134698a953b7bdbf7d9002d3020e39b2ae37bd6b81ceb8553548","first_seen":"2025-10-14T18:02:24.126966Z","last_seen":"2025-10-14T18:02:24.126966Z","times_seen":1,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":19,"dns":1,"connect":1,"send":0,"wait":85,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"monclaim.pages.dev/faucet-icon-1.png","fqdn":"monclaim.pages.dev","domain":"monclaim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://monclaim.pages.dev/","date":"2025-10-14T18:01:58.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"monclaim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Oct 2025 07:08:50 GMT","end":"Mon, 12 Jan 2026 08:07:39 GMT"},"fingerprint":{"sha1":"E4:0A:03:99:C2:BE:D8:21:CD:C0:55:59:A2:6F:75:E5:1E:D7:D2:8C","sha256":"7B:7B:9C:27:A6:93:3E:DD:0B:E0:59:65:D8:E0:9C:30:0C:29:70:7B:B2:FD:B1:82:9E:0E:1A:25:CB:A7:10:CD"}}},"request":{"raw":"GET /faucet-icon-1.png HTTP/1.1\r\nHost: monclaim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://monclaim.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 18:01:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 5167\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"397c686e34466912e6feffce2df179a5\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZwdOA2lOQ4a%2FAw5xacXMLSYvSoebuTLptO8p%2FTbS0YRxfmD5sHCvr6SqzrCsaM0vcsQwHzsbwFN7zCWz4ZnGdLnx6tMlrQ3m4FKOJzCJhPKvYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 98e8fc2bfb8b76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5167,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 304 x 159, 8-bit colormap, non-interlaced","md5":"ebc304171226bd063e89e6ee5b24609b","sha1":"f8e8677af901da4cc9135cd63764163e2a538c49","sha256":"e963ba6fc5fa414ae9a793a61931a82ae90b0a993b63131a0bc636830c1d3e37","sha512":"e8fff8e7a703b7f91829c5a3850e279419b6e4dbb964d915348d78393547d3e48cee64ce1137e060477f4c97b57e9562001d54ac1ffc32cea4b2b252805d3942","ssdeep":"96:tRShYvgDTZdhCBiI2AHcnH7mJ3umjup+ykvoihECHXQrRczkF61myrQ:tRSUgv4BiiK7ED6+ykv4C3Qr/FKc","tlshash":"d5b17ee92084b4ed06572a1f901341319f7316f72242788f117f472d77c2a575a195c6","first_seen":"2025-10-09T15:36:36.596598Z","last_seen":"2025-10-14T18:02:24.131388Z","times_seen":3,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtmpx.com/code?h=\u0026t=1759987935066","fqdn":"gtmpx.com","domain":"gtmpx.com","tld":"com"},"ip":{"addr":"91.84.108.73","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://monclaim.pages.dev/","date":"2025-10-14T18:01:58.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtmpx.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Sep 2025 17:20:44 GMT","end":"Tue, 02 Dec 2025 17:20:43 GMT"},"fingerprint":{"sha1":"89:A5:D2:35:41:98:88:E3:E6:7E:C8:63:A2:E8:88:2E:08:1E:AC:58","sha256":"07:4B:9A:84:42:06:02:45:F7:3A:2D:92:64:6F:C0:8E:3B:96:3F:C2:F3:A3:96:C3:AA:B7:0E:0D:F7:66:B6:81"}}},"request":{"raw":"GET /code?h=\u0026t=1759987935066 HTTP/1.1\r\nHost: gtmpx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://monclaim.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 14 Oct 2025 18:01:59 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nPragma: no-cache\r\nCache-Control: no-store, no-cache, private\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T13:07:03.550089Z","times_seen":17761838,"resource_available":true,"data":null}},"time_used":1474,"timings":{"blocked":724,"dns":13,"connect":347,"send":0,"wait":22,"receive":0,"ssl":364},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}