{"report_id":"39eaad0e-d1e6-4ec3-8044-2d27d3e9c9ec","version":6,"status":"done","tags":[],"date":"2026-01-26T11:14:31Z","url":{"schema":"https","addr":"www.bulkpi.freeclaim-net.com/","fqdn":"www.bulkpi.freeclaim-net.com","domain":"freeclaim-net.com","tld":"com"},"ip":{"addr":"161.97.121.66","port":0,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"www.bulkpi.freeclaim-net.com/","fqdn":"www.bulkpi.freeclaim-net.com","domain":"freeclaim-net.com","tld":"com"},"title":"Claim Your Pi Coins - Pi Network","dom":{"size":17345,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (531)","md5":"aa1808ee43285967ec879655e632037e","sha1":"e2fefb2d4b3d98bacdb7b928881c9e9eebb8dec9","sha256":"8b186973c4578a823cbb1dc347722a422657dd90e16b67caaa6c86a6755a055b","sha512":"026543c09fcc0f4e46a943a48465da8211d253c31124b07cd970ffae13793dc71088fce64603ba564e653a1c7f711b2ab3502f825b3fc6f1d8b153c7ca885869","ssdeep":"192:xoyz8oIbfqfEFjEzr9L8/MpbYXfjjzfkfgCqK6njnPCNKt3PK4ZKKWJK3KWtnCJA:KXvvlMuORg","tlshash":"a4726267e1f3118679239aa02f652b985a258003c209c5bc7fdcb788cfca5965df379c","dom_hash":"domhash613bc5aa0e8f78eace53bcf3a78b9d10","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.bulkpi.freeclaim-net.com/","fqdn":"www.bulkpi.freeclaim-net.com","domain":"freeclaim-net.com","tld":"com"},"ip":{"addr":"161.97.121.66","port":0,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-02T11:14:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"www.bulkpi.freeclaim-net.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"www.bulkpi.freeclaim-net.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.bulkpi.freeclaim-net.com","ip":{"addr":"161.97.121.66","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2025-03-21","domain_rank":0,"first_seen":"2026-01-26T10:39:33.020054Z","last_seen":"2026-01-26T10:39:33.020054Z","alert_count":12,"request_count":6,"received_data":1352718,"sent_data":2950,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.bulkpi.freeclaim-net.com/","fqdn":"www.bulkpi.freeclaim-net.com","domain":"freeclaim-net.com","tld":"com"},"ip":{"addr":"161.97.121.66","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"7e2d217befb9281482d910855f02f345","sha1":"f3585dd47dc7f0da8e05800ed9b42eb721a88bad","sha256":"b43e33ed477fcca7d22e6e87433101d781f4fa413c7b05401c8273fc880c577d","sha512":"708af15645ec2f744261f8a3a1398e2e5d4b6bf7346fb1389d4069af28d3206529888d683b32fef1362217766ce438a80829cad70778f4883a4e334badeeb89f","ssdeep":"","tlshash":"16c0920401634478813b30a6afa252c97d61904b72078aa93b1f8244afa1b66b6e12d1","size":140,"data":"","first_seen":"2025-07-12T20:32:08.796382Z","last_seen":"2026-01-26T11:14:32.866887Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.bulkpi.freeclaim-net.com/static/piclaimapp/images/apple-touch-icon.png","fqdn":"www.bulkpi.freeclaim-net.com","domain":"freeclaim-net.com","tld":"com"},"ip":{"addr":"161.97.121.66","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bulkpi.freeclaim-net.com/","date":"2026-01-26T11:14:09.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.freeclaim-net.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 17 Jan 2026 21:57:00 GMT","end":"Fri, 17 Apr 2026 21:56:59 GMT"},"fingerprint":{"sha1":"0D:B6:9A:F7:58:97:ED:FF:A8:B1:F4:B1:35:93:CD:54:E2:C9:65:4E","sha256":"20:6A:D2:47:34:D2:18:66:8C:68:04:C8:8C:3E:F2:07:CE:64:0C:EF:6F:34:BE:66:64:E0:1D:C9:40:1D:DF:17"}}},"request":{"raw":"GET /static/piclaimapp/images/apple-touch-icon.png HTTP/1.1\r\nHost: www.bulkpi.freeclaim-net.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bulkpi.freeclaim-net.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 02 Feb 2026 11:14:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Oct 2018 01:46:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 19988\r\ndate: Mon, 26 Jan 2026 11:14:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19988,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"4d67c4b3d397a65af5d16a2a9f4574d3","sha1":"5d85a9d08abc6d9b63879bf8d92e2ed15c27fb06","sha256":"eaa546e9226a9d3f84ec536f7e256b9df18eef9ad9110c41911d0729b03ced00","sha512":"9ded9880a8f953ee5199194f1b461693d7309fa96c1ceb0beba97d7afa887db9ab1b93f014757f817a71dbadbe5a452ad67c3bfe915a00bac8dd4e41d294db01","ssdeep":"384:J1XbLqUnXORw6zv0pzw8mfPu92L64AAixQv2sTHeKpsi7npzjlokOM1:1nijzc9wg22AixZ8Vpn9jL","tlshash":"ca92c0f01adf6b6f18f3850e1cfd5a36e4c4916d46893b0c58a9c3997d6c52de00651f","first_seen":"2025-07-12T20:32:08.786264Z","last_seen":"2026-01-26T11:14:32.862998Z","times_seen":3,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"www.bulkpi.freeclaim-net.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"www.bulkpi.freeclaim-net.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bulkpi.freeclaim-net.com/","fqdn":"www.bulkpi.freeclaim-net.com","domain":"freeclaim-net.com","tld":"com"},"ip":{"addr":"161.97.121.66","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-26T11:14:09.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.freeclaim-net.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 17 Jan 2026 21:57:00 GMT","end":"Fri, 17 Apr 2026 21:56:59 GMT"},"fingerprint":{"sha1":"0D:B6:9A:F7:58:97:ED:FF:A8:B1:F4:B1:35:93:CD:54:E2:C9:65:4E","sha256":"20:6A:D2:47:34:D2:18:66:8C:68:04:C8:8C:3E:F2:07:CE:64:0C:EF:6F:34:BE:66:64:E0:1D:C9:40:1D:DF:17"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.bulkpi.freeclaim-net.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Fri, 21 Mar 2025 17:29:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3301\r\ndate: Mon, 26 Jan 2026 11:14:09 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17325,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (525)","md5":"02d1696678fffdb4eed95b885e193e72","sha1":"6c98fd6de76d039a6465a6125ec4b9ecef0e6d2c","sha256":"8a0cdf1bd6e5bb43be757afc25a9309e48d5a606894c0d970194ea2d40530a1c","sha512":"32c740367a33292def000808e447362c7d931bcebd348ad8acd52b719a6963f52b7489421de4569d60962dcc9fdf23b118758e1011831b38f63ab53860d8d6b4","ssdeep":"192:cz8oIbfqfEFjEzr9L8/MpbYXfjjzfkfgCqK6njnPCNKt3PK4ZKKWJK3KWtnCJNVY:xXvvlMuORk","tlshash":"ff725267d1f3118579239aa02f656b989a258003c20ac5bc7fdcb388cfca5965df379c","first_seen":"2026-01-26T10:39:34.751488Z","last_seen":"2026-01-26T11:14:32.863656Z","times_seen":2,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":48,"dns":3,"connect":21,"send":0,"wait":27,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"www.bulkpi.freeclaim-net.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"www.bulkpi.freeclaim-net.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bulkpi.freeclaim-net.com/static/piclaimapp/images/crypto.webp","fqdn":"www.bulkpi.freeclaim-net.com","domain":"freeclaim-net.com","tld":"com"},"ip":{"addr":"161.97.121.66","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bulkpi.freeclaim-net.com/","date":"2026-01-26T11:14:09.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.freeclaim-net.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 17 Jan 2026 21:57:00 GMT","end":"Fri, 17 Apr 2026 21:56:59 GMT"},"fingerprint":{"sha1":"0D:B6:9A:F7:58:97:ED:FF:A8:B1:F4:B1:35:93:CD:54:E2:C9:65:4E","sha256":"20:6A:D2:47:34:D2:18:66:8C:68:04:C8:8C:3E:F2:07:CE:64:0C:EF:6F:34:BE:66:64:E0:1D:C9:40:1D:DF:17"}}},"request":{"raw":"GET /static/piclaimapp/images/crypto.webp HTTP/1.1\r\nHost: www.bulkpi.freeclaim-net.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bulkpi.freeclaim-net.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 02 Feb 2026 11:14:09 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sat, 20 Oct 2018 01:46:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 61540\r\ndate: Mon, 26 Jan 2026 11:14:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":61540,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"13517a2baf862d2e257163744d4507ad","sha1":"dcd6ef8288836a01f0a4eb266f754ca3fb7ad648","sha256":"c8c625773c67fc7ef358bfb9ec1e331e41754893f9903d710a9ddeb8eed09624","sha512":"c402c5539dbd0f36c87e185c354b29ae7557a0336102037bddd7f631753532cc3873d90e8973b55c0690590df5ef9d4d5e222cc559f54a1d1161ecf2dbadf8e1","ssdeep":"1536:iTKPwjJRM4fkEnVF1nY+s/83AOLYIUsdgI7a4FKFEHr:DYjUvwF1YjoAo5UWgCaRFEL","tlshash":"8553020d9c66e1f78c15b229a6f2b1983401be09516ebdbdc3d38a78524114ec2a34fb","first_seen":"2025-07-12T14:02:42.208906Z","last_seen":"2026-01-26T11:14:32.864268Z","times_seen":7,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"www.bulkpi.freeclaim-net.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"www.bulkpi.freeclaim-net.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bulkpi.freeclaim-net.com/static/piclaimapp/images/pinet.png","fqdn":"www.bulkpi.freeclaim-net.com","domain":"freeclaim-net.com","tld":"com"},"ip":{"addr":"161.97.121.66","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bulkpi.freeclaim-net.com/","date":"2026-01-26T11:14:09.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.freeclaim-net.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 17 Jan 2026 21:57:00 GMT","end":"Fri, 17 Apr 2026 21:56:59 GMT"},"fingerprint":{"sha1":"0D:B6:9A:F7:58:97:ED:FF:A8:B1:F4:B1:35:93:CD:54:E2:C9:65:4E","sha256":"20:6A:D2:47:34:D2:18:66:8C:68:04:C8:8C:3E:F2:07:CE:64:0C:EF:6F:34:BE:66:64:E0:1D:C9:40:1D:DF:17"}}},"request":{"raw":"GET /static/piclaimapp/images/pinet.png HTTP/1.1\r\nHost: www.bulkpi.freeclaim-net.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bulkpi.freeclaim-net.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 02 Feb 2026 11:14:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Oct 2018 01:46:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 40434\r\ndate: Mon, 26 Jan 2026 11:14:09 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40434,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1536 x 442, 8-bit/color RGBA, non-interlaced","md5":"d029e12d02aabb9c6b351f12bc5772f0","sha1":"4751b04a1b35aaec6c6805273fb62a9a2d290249","sha256":"3d448ff982ff6510e3c69520dba0c2d90bbd27bb8440d149487ea24f69eb379a","sha512":"34dc563ce0251f55409f57c8b82450c238c081e748ca51fd99f75e463d14d0eef4394336fbeb77bf93fc16d5eaec3b3952f94c3c3f7f491e7b8e4695f87d82ca","ssdeep":"768:0ukWePp5OejVkbyJm8AAup8mzbOVUEvajrxdRKbJ:XkWefOvepAAKP8UfBd4bJ","tlshash":"0203f1f09f26fabad660563c28765ac532abe97cd1a0beccd4380b544e57e134cc84d8","first_seen":"2024-05-04T01:37:09Z","last_seen":"2026-01-26T11:14:32.864984Z","times_seen":12,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"www.bulkpi.freeclaim-net.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"www.bulkpi.freeclaim-net.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bulkpi.freeclaim-net.com/static/piclaimapp/images/picoins.png","fqdn":"www.bulkpi.freeclaim-net.com","domain":"freeclaim-net.com","tld":"com"},"ip":{"addr":"161.97.121.66","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bulkpi.freeclaim-net.com/","date":"2026-01-26T11:14:09.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.freeclaim-net.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 17 Jan 2026 21:57:00 GMT","end":"Fri, 17 Apr 2026 21:56:59 GMT"},"fingerprint":{"sha1":"0D:B6:9A:F7:58:97:ED:FF:A8:B1:F4:B1:35:93:CD:54:E2:C9:65:4E","sha256":"20:6A:D2:47:34:D2:18:66:8C:68:04:C8:8C:3E:F2:07:CE:64:0C:EF:6F:34:BE:66:64:E0:1D:C9:40:1D:DF:17"}}},"request":{"raw":"GET /static/piclaimapp/images/picoins.png HTTP/1.1\r\nHost: www.bulkpi.freeclaim-net.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bulkpi.freeclaim-net.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 02 Feb 2026 11:14:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Oct 2018 01:46:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1210731\r\ndate: Mon, 26 Jan 2026 11:14:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1210731,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1518 x 2000, 8-bit/color RGBA, non-interlaced","md5":"6ceb4e14c11f03e9bfcb73fe4994ef16","sha1":"fe9f322d6d16f2b8c419d44409a490d725b46d3a","sha256":"0d98a638ba536b306776e75348b02b0780e3ed7e3b056f11299ba6242823e954","sha512":"04660914142fa767d011760642771ad2dd9bf92ad0168eecce6494915d0330a34217a49d306587318edf4fd0ec2f6ddf7d1ff6c22e99450fc4df8249778889a2","ssdeep":"24576:XkchKKYM/h+XXojWbxQR4Cu4jrWs+Md1ugb0:HgXX7lQRhu4XWaX0","tlshash":"552523ee62eb64b0dd0aba91315106c4230afac25c8d31789d3df75c83a78fe949195f","first_seen":"2025-09-10T02:08:02.552583Z","last_seen":"2026-01-26T11:14:32.865749Z","times_seen":5,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"www.bulkpi.freeclaim-net.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"www.bulkpi.freeclaim-net.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bulkpi.freeclaim-net.com/static/piclaimapp/images/favicon-16x16.png","fqdn":"www.bulkpi.freeclaim-net.com","domain":"freeclaim-net.com","tld":"com"},"ip":{"addr":"161.97.121.66","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bulkpi.freeclaim-net.com/","date":"2026-01-26T11:14:09.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.freeclaim-net.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 17 Jan 2026 21:57:00 GMT","end":"Fri, 17 Apr 2026 21:56:59 GMT"},"fingerprint":{"sha1":"0D:B6:9A:F7:58:97:ED:FF:A8:B1:F4:B1:35:93:CD:54:E2:C9:65:4E","sha256":"20:6A:D2:47:34:D2:18:66:8C:68:04:C8:8C:3E:F2:07:CE:64:0C:EF:6F:34:BE:66:64:E0:1D:C9:40:1D:DF:17"}}},"request":{"raw":"GET /static/piclaimapp/images/favicon-16x16.png HTTP/1.1\r\nHost: www.bulkpi.freeclaim-net.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bulkpi.freeclaim-net.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 02 Feb 2026 11:14:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Oct 2018 01:46:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 750\r\ndate: Mon, 26 Jan 2026 11:14:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":750,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"bfadfe86dff57d1b61b15ed2722c9efb","sha1":"17f491d8a370e5112dce16f4970779ec8be465e5","sha256":"d84a5b8028680a68c1ddefc6d455801ab3f5c488a63e783655ca5180a30d8aa8","sha512":"7915f0dd4788821900c41fbc8ccedfab327850f6e0317c81b1fdd1c3d45d0ee42d81f71254cf36f38c061ca08da60422d68b1f63f5676249a1fab4a47a793e90","ssdeep":"","tlshash":"d201656eca674d464ab85f3ac66a420b657a313c122aef1d6ad55be7a11cb010084c51","first_seen":"2025-07-12T20:32:08.783704Z","last_seen":"2026-01-26T11:14:32.866283Z","times_seen":3,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"www.bulkpi.freeclaim-net.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"www.bulkpi.freeclaim-net.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}