{"report_id":"488cb7db-2d89-45ec-b386-6f181657d28a","version":6,"status":"done","tags":[],"date":"2026-03-26T21:34:06Z","url":{"schema":"https","addr":"claim-pengu.app/","fqdn":"claim-pengu.app","domain":"claim-pengu.app","tld":"app"},"ip":{"addr":"104.21.70.18","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"claim-pengu.app/","fqdn":"claim-pengu.app","domain":"claim-pengu.app","tld":"app"},"title":"claim-pengu.app/","dom":{"size":5087,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2804)","md5":"25ca4e65922b14cd9621d2790186281a","sha1":"17103c49721a28601fe7cf75e99db5da266fa772","sha256":"c5fc9e6e43f24807f543bd8cf78d8dbff9a69b58811989ce9dd78a5662c21249","sha512":"6c856652ec6d39003e5a3bef4ba0b8d55273e99e994f889a0bd79ebfb9da350594c4a5f8c6944357771db71ed35447b1a382d4921d5fee7a851f6f6f121591c2","ssdeep":"96:TRpnY1N4TQveKuiJeSMzAdyNc7JHrGPPbkcxz2PTeiwDsK73Mr/x/BDXgtHnPJvl:RzB8YDuH2d+y","tlshash":"eca1f095fed470b57112623831ea8fcdb2696213e711b9b8f2c02544c18fe7d8e952dd","dom_hash":"domhashe7878feada357c83b98d617f7576c066","first_seen":"2026-03-26T21:34:08.50086Z","last_seen":"2026-03-26T21:34:08.50086Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"claim-pengu.app/","fqdn":"claim-pengu.app","domain":"claim-pengu.app","tld":"app"},"ip":{"addr":"104.21.70.18","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-30T21:34:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"claim-pengu.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"claim-pengu.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"claim-pengu.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"claim-pengu.app","ip":{"addr":"104.21.70.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-12-20","domain_rank":0,"first_seen":"2024-12-24T04:32:40.723775Z","last_seen":"2024-12-24T04:32:40.723775Z","alert_count":39,"request_count":13,"received_data":506309,"sent_data":5987,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"claim-pengu.app/52160bc5d6d7cd1b.css","fqdn":"claim-pengu.app","domain":"claim-pengu.app","tld":"app"},"ip":{"addr":"104.21.70.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-pengu.app/","date":"2026-03-26T21:33:57.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-pengu.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:54:20 GMT","end":"Sun, 14 Jun 2026 19:54:19 GMT"},"fingerprint":{"sha1":"2A:B8:3F:F2:3D:1F:B6:C2:F0:14:D0:A7:21:81:AE:D8:AC:3F:C8:EB","sha256":"D7:50:CD:68:71:3A:3C:B3:08:37:AB:A1:6D:79:ED:A3:CF:20:CA:00:39:57:26:C3:38:0B:87:5E:63:EA:38:1B"}}},"request":{"raw":"GET /52160bc5d6d7cd1b.css HTTP/1.1\r\nHost: claim-pengu.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-pengu.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:33:58 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 16 Mar 2026 20:49:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69b86cd5-f58b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MhddTKe9ZV8F4aYY%2F0DzLRj70pvH6%2Fmgc3YG0Adgx5RIj2xz7kA7A326isThSyTO6dSef1viFAEZTjHaW95vUM5crSPv%2FCmWaQ1qLZzjiSBZh%2BMBS2d9KNQiC4siyXb6vms%3D\"}]}\r\ncf-ray: 9e2946d129ca56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62859,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"9055b639a95b471291c230d8b40530cc","sha1":"8120873c9f818a32a9c89ee686b80557db9db862","sha256":"6e6be5fe021b9e2b092480c49aca666db11ee08f17df7dfff9339d600e04625e","sha512":"859b883ada76c9e6ea2950bf449b38969118b17050dabb3b5a8e5faf3218ab2d68e60886644d7b00fb77ab3979281781e027bacc0ba7e992234efe0904cbd6ef","ssdeep":"768:921XCiL9r+9yFPKz8zja+QnKowWo4uLjSdHVPhBW:YCw91q8z/owWkIHlq","tlshash":"ec53b72045055046aa33bbbcb7e3432cea8944235e2349a977ed725a4ff31bce291f5d","first_seen":"2025-07-04T00:42:00.465696Z","last_seen":"2026-07-09T07:06:00.697948Z","times_seen":99,"resource_available":false,"data":null}},"time_used":1230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1166,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"claim-pengu.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"claim-pengu.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"claim-pengu.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-pengu.app/9680bc3c22b2c494.css","fqdn":"claim-pengu.app","domain":"claim-pengu.app","tld":"app"},"ip":{"addr":"104.21.70.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-pengu.app/","date":"2026-03-26T21:33:57.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-pengu.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:54:20 GMT","end":"Sun, 14 Jun 2026 19:54:19 GMT"},"fingerprint":{"sha1":"2A:B8:3F:F2:3D:1F:B6:C2:F0:14:D0:A7:21:81:AE:D8:AC:3F:C8:EB","sha256":"D7:50:CD:68:71:3A:3C:B3:08:37:AB:A1:6D:79:ED:A3:CF:20:CA:00:39:57:26:C3:38:0B:87:5E:63:EA:38:1B"}}},"request":{"raw":"GET /9680bc3c22b2c494.css HTTP/1.1\r\nHost: claim-pengu.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-pengu.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:33:58 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 16 Mar 2026 20:49:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69b86cd5-7f42\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jIwHTB36BGPP2nDHWS4M3aCoU8Fjk%2FL6bO8%2FztNynATR%2FxYjyAwDC17YshA4jHp82Tv1aQrnMatjzVCd4GCyKYYGM%2FL1VQ3%2Fii7CFOMyFePGs7Ehc8xB5U%2FfVWbrJpTBJ6M%3D\"}]}\r\ncf-ray: 9e2946d129cc56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32578,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"4dcc4d42ed07a57b1fc70fb12cf6cc44","sha1":"be421b4e2faf981896bdb739063f9f160a8cbef9","sha256":"f25e6642c125c13efa8f748a4235b85470acde127b095a64213f63887048cd74","sha512":"b3f9181b3a183b779321a3ade29bd5bd7f9765ef87043bb8e35a7145cd6171fe3d3535a5b35de48f7215f6eadf65005910466d84a885b9f541e9f0158675a477","ssdeep":"384:M3KrgqunLPXS5SMS3iQOUMzxx2G/dej0PUx3a/Bl9X6XuXnXLXyXjMWEuaCwPZjd:7NlHMHyKABZGqZRX","tlshash":"66e273214a012055e633df78abe74b58fa5c48235e070675bbcd234a4ff6278a3a5f8d","first_seen":"2025-07-04T00:42:00.43065Z","last_seen":"2026-07-09T07:06:00.693399Z","times_seen":99,"resource_available":false,"data":null}},"time_used":1189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1157,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"claim-pengu.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"claim-pengu.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"claim-pengu.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-pengu.app/css2.css","fqdn":"claim-pengu.app","domain":"claim-pengu.app","tld":"app"},"ip":{"addr":"104.21.70.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-pengu.app/","date":"2026-03-26T21:33:58.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-pengu.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:54:20 GMT","end":"Sun, 14 Jun 2026 19:54:19 GMT"},"fingerprint":{"sha1":"2A:B8:3F:F2:3D:1F:B6:C2:F0:14:D0:A7:21:81:AE:D8:AC:3F:C8:EB","sha256":"D7:50:CD:68:71:3A:3C:B3:08:37:AB:A1:6D:79:ED:A3:CF:20:CA:00:39:57:26:C3:38:0B:87:5E:63:EA:38:1B"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: claim-pengu.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-pengu.app/9680bc3c22b2c494.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:33:59 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 16 Mar 2026 20:49:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69b86cd5-840\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0q1rW1EWA9tZ%2BTKwNgkVRK8KUsqRDgcmYbV6ngIDTzPb%2Bn9jDSxOWQYVzcWclxhCn2bfmUs4Jti08JhWBHvuftNhbpO9p86xZ%2Fl6a9S6xRGOOeuhFPQJvNfSj2%2FV75ysRMA%3D\"}]}\r\ncf-ray: 9e2946d89a1656c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2112,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"94008a89c8d6024db3d861cb7ba4a4f4","sha1":"51705aa43b6b5fe174beb82b06c56178246906ec","sha256":"0a0b13c690f1a1ed9e59cf520667bb9f3d3cee7e8ea89318a03f40ba9b9cf05b","sha512":"e54628d0a2daf050618534f61b4283e15f80ba17123dab3289050740e501a76d9dff62026199c6e2c7df929a7e2d7e3c56b0e22d47a4877dfcd71176264467e0","ssdeep":"","tlshash":"41418b80087ba504d7931cc122ce7e32ee2db19064459d346ffe1498fc5bd59a3b2b4d","first_seen":"2025-01-25T17:56:03.203401Z","last_seen":"2026-08-06T00:00:00.587793Z","times_seen":902,"resource_available":false,"data":null}},"time_used":1150,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"claim-pengu.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"claim-pengu.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"claim-pengu.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-pengu.app/","fqdn":"claim-pengu.app","domain":"claim-pengu.app","tld":"app"},"ip":{"addr":"104.21.70.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-26T21:33:43.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-pengu.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:54:20 GMT","end":"Sun, 14 Jun 2026 19:54:19 GMT"},"fingerprint":{"sha1":"2A:B8:3F:F2:3D:1F:B6:C2:F0:14:D0:A7:21:81:AE:D8:AC:3F:C8:EB","sha256":"D7:50:CD:68:71:3A:3C:B3:08:37:AB:A1:6D:79:ED:A3:CF:20:CA:00:39:57:26:C3:38:0B:87:5E:63:EA:38:1B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claim-pengu.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 21:33:57 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 16 Mar 2026 20:49:25 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ezJ%2FHYxy4OV%2BLkr2btybz%2BRCbkUoeymuU3%2BJ9xuZKuw1daWGOBXNf1wxCZBRjhjQilfYV9xGL5Swca5fvOczXVb%2B88NsT1Vj77cLRjqiOZ4usi5AaWvMCFNTwTBDzPgmzPE%3D\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9e294678cbca7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":215230,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (4990)","md5":"aa046c6a528e760126a399e564e03ea5","sha1":"76bb7a8d5c31452407c8bdc5a475ff29221289d2","sha256":"37b6fc6b269acb11d5dfb136ae97bf6e38a0d04328927e5968985388e8023fe4","sha512":"68d5b26d5723a639ba7d586b11d0ab50a5789fa45c244dafa0d1d789b945c6ac60f39fe8210b63a20202c7ea7fd87bcfc6779dc93b22fcf0b4e3445869f06508","ssdeep":"1536:D8vFwxluWyXcLo+TVYbr8jIY6VGV8GKWM70mRlgt8heS/7IYTY6Don16wWlsTKNa:od6BijE1qAP++","tlshash":"602440661e9c23ad76235bbdc713603e3e8224ffa60984df75de34e8cb1105c8665ca6","first_seen":"2026-03-26T21:34:08.507762Z","last_seen":"2026-03-26T21:34:08.507762Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14105,"timings":{"blocked":70,"dns":47,"connect":3,"send":0,"wait":13959,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"claim-pengu.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"claim-pengu.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"claim-pengu.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-pengu.app/3818f1bd4832a6dd-s.p.woff2","fqdn":"claim-pengu.app","domain":"claim-pengu.app","tld":"app"},"ip":{"addr":"104.21.70.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-pengu.app/","date":"2026-03-26T21:33:57.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-pengu.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:54:20 GMT","end":"Sun, 14 Jun 2026 19:54:19 GMT"},"fingerprint":{"sha1":"2A:B8:3F:F2:3D:1F:B6:C2:F0:14:D0:A7:21:81:AE:D8:AC:3F:C8:EB","sha256":"D7:50:CD:68:71:3A:3C:B3:08:37:AB:A1:6D:79:ED:A3:CF:20:CA:00:39:57:26:C3:38:0B:87:5E:63:EA:38:1B"}}},"request":{"raw":"GET /3818f1bd4832a6dd-s.p.woff2 HTTP/1.1\r\nHost: claim-pengu.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-pengu.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:33:58 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 20240\r\nlast-modified: Mon, 16 Mar 2026 20:49:25 GMT\r\netag: \"69b86cd5-4f10\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zAtW6U1thiCulZnuQpZ%2BbAONfwYifEtO94HmtyvfzIrPrmX%2BlkkmReB4wQiHNkXfrgFvn2rcUCPUfIFeZf%2Fj4h4HpYBDIyVVHjTnioovepoEDrOWj06GGieID9nC6nUD%2Fxk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9e2946d119c556c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20240,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20240, version 1.0","md5":"f2876713dafd87b89cb83196ce9491f9","sha1":"dc0576a80f9da5655f6779fb672e3e0f123c1051","sha256":"d2bd57b70a659047662f84c4629d8e5939d7267dac5a93dde52515397ed3c596","sha512":"b8f1bf78538191f56af381b66a08a07ccff7753a04a1d47fe8d2d667e59e90f559062ada2e2309e127b2ad5f5a9c07ef21c7c5a332f508c9b69585bcbbccffff","ssdeep":"384:tFiXRL13VSD6wOPV7BQOsZG0b2vJOg2DSGXUWTIRTpN1P4Zx0L9vqt/en:tFWZ13MIV7BYZRQwdxTSb2ZWJmmn","tlshash":"a092d0808f479b84cbda3b2f1741d4a1fba110be4ad351425f480b8a4d4bedc42af2e0","first_seen":"2023-11-25T16:51:58Z","last_seen":"2026-07-09T07:06:00.70225Z","times_seen":112,"resource_available":false,"data":null}},"time_used":1170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1139,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"claim-pengu.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"claim-pengu.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"claim-pengu.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-pengu.app/8393ee9793b05532-s.p.woff2","fqdn":"claim-pengu.app","domain":"claim-pengu.app","tld":"app"},"ip":{"addr":"104.21.70.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-pengu.app/","date":"2026-03-26T21:33:57.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-pengu.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:54:20 GMT","end":"Sun, 14 Jun 2026 19:54:19 GMT"},"fingerprint":{"sha1":"2A:B8:3F:F2:3D:1F:B6:C2:F0:14:D0:A7:21:81:AE:D8:AC:3F:C8:EB","sha256":"D7:50:CD:68:71:3A:3C:B3:08:37:AB:A1:6D:79:ED:A3:CF:20:CA:00:39:57:26:C3:38:0B:87:5E:63:EA:38:1B"}}},"request":{"raw":"GET /8393ee9793b05532-s.p.woff2 HTTP/1.1\r\nHost: claim-pengu.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-pengu.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:33:57 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 20676\r\nlast-modified: Mon, 16 Mar 2026 20:49:25 GMT\r\netag: \"69b86cd5-50c4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8zqn8qIu8%2BJP8pJQftTddhlJeIVSXx28KS8uE7veLfStJ6f0iQFYd7gQKEY%2B9OAtnOlCpeltar89aOzmJl5JN3Q%2FxuhP1gG%2BwgD2iuoT1jZQfKWUljFypK%2Fy9IvGjPKFsjk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9e2946d119c656c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20676,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20676, version 1.0","md5":"1f4afd89337fa7da3b15cb7b5e1c4109","sha1":"9dc5d1382c6609b410ba1a4264c566700a0a6150","sha256":"6617feddfedca9f981b2b79ae8fea2e51f8232ac59ed4f1be7f730520f9291cb","sha512":"a54f0b4c05f825ffadb550498e507525210d6ae89cfa9fddc419c60f6132677e44e30b99b66d7bf2b60d99b496f78baedf57e2d205ab50aa462de50653bd125f","ssdeep":"384:PqTtkTmzHRqq9fxoqyXLOLnzzMkgipH+86p2o7z7kgMnqp61pRV8UEdpH/O:PMtlkq9faUbzhgitT87BMbpRVvuHm","tlshash":"fc92d0b69d6785b0e7e181bc502c98618286d4ff258cf2b59c62bd4c40f4ae4391e6e2","first_seen":"2023-11-25T16:51:58Z","last_seen":"2026-08-03T12:49:17.279079Z","times_seen":156,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"claim-pengu.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"claim-pengu.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"claim-pengu.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-pengu.app/d2d8eb5aee14a174.css","fqdn":"claim-pengu.app","domain":"claim-pengu.app","tld":"app"},"ip":{"addr":"104.21.70.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-pengu.app/","date":"2026-03-26T21:33:57.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-pengu.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:54:20 GMT","end":"Sun, 14 Jun 2026 19:54:19 GMT"},"fingerprint":{"sha1":"2A:B8:3F:F2:3D:1F:B6:C2:F0:14:D0:A7:21:81:AE:D8:AC:3F:C8:EB","sha256":"D7:50:CD:68:71:3A:3C:B3:08:37:AB:A1:6D:79:ED:A3:CF:20:CA:00:39:57:26:C3:38:0B:87:5E:63:EA:38:1B"}}},"request":{"raw":"GET /d2d8eb5aee14a174.css HTTP/1.1\r\nHost: claim-pengu.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-pengu.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:33:58 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 16 Mar 2026 20:49:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69b86cd5-6bc1\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eiFXSnyYYYUuEO5LMdtNiBYAKFrkjLXvFYdXJp53EcIySABX%2BVMzWX7zK0MGktnv%2B0ZdN4e7yjF8z5T6OFNPPzy55HOZZdBYoWgPtYqXeLQZVz5YduxlfMSJ4nlKemrocWU%3D\"}]}\r\ncf-ray: 9e2946d129cd56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27585,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ea5cbae261190d4cf3dc245201d9676a","sha1":"99c7533988caff93c56b232d15275d08e7c6a912","sha256":"d36280fbd860768048dd96abf65756175a1d898f221dcad3d5dc82451a54df17","sha512":"dc704de583346758e947c90bbab9e1e30409dc7c6c054bcc9a2a0b2c28bfd181b6d7ce4007b22e802f9010c600ec5bcc5fd686bbd4c924cc7a584991b0f56eda","ssdeep":"384:euGJKZCMmdDctwVwWN8v6VCKGtFZYaF/8bMuLh0Hoblpz3ezYLH:euGJBxw7Z5Fmbn3Jz","tlshash":"31c273265af35c046c5a18adb7de6359b62c508b8e2fec64fbcd21068fc41b866d4f4c","first_seen":"2025-07-04T00:42:00.451815Z","last_seen":"2026-07-09T07:06:00.69654Z","times_seen":99,"resource_available":false,"data":null}},"time_used":1450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1355,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"claim-pengu.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"claim-pengu.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"claim-pengu.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-pengu.app/bbc59b565fd70203.css","fqdn":"claim-pengu.app","domain":"claim-pengu.app","tld":"app"},"ip":{"addr":"104.21.70.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-pengu.app/","date":"2026-03-26T21:33:57.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-pengu.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:54:20 GMT","end":"Sun, 14 Jun 2026 19:54:19 GMT"},"fingerprint":{"sha1":"2A:B8:3F:F2:3D:1F:B6:C2:F0:14:D0:A7:21:81:AE:D8:AC:3F:C8:EB","sha256":"D7:50:CD:68:71:3A:3C:B3:08:37:AB:A1:6D:79:ED:A3:CF:20:CA:00:39:57:26:C3:38:0B:87:5E:63:EA:38:1B"}}},"request":{"raw":"GET /bbc59b565fd70203.css HTTP/1.1\r\nHost: claim-pengu.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-pengu.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:33:58 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 16 Mar 2026 20:49:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69b86cd5-e99\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H7GxBT69gg0Ru4CMxvBsXy0YsyCnSTE8BaoRMQFShSXtbk6PoosVon8jmmexYlnMIBBRPDWquJPyL4jfozqHFwO4FhLQP3cNCiNb%2Bu0IOGnXSOH1J7aNc6CxaF988tieEP0%3D\"}]}\r\ncf-ray: 9e2946d129c956c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3737,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"6bdddbd8afe28aef149f06f6df873e5a","sha1":"48d17e78c18371e5fbb12d23a866e15f19aa590d","sha256":"fe870cd7b72b4b34da84d9b8e8317621f59c50ca400c210b0702e112a78d294e","sha512":"0c808f762ffffca4ce6d591e696c936f7133817841ac1cce721d058a6a7bd4cf215b4d168c818170bd9d70df96a60da43aed434c4b4c23000bda1719f24f8dd0","ssdeep":"","tlshash":"74711212d01258c1ad326f6827ee5a9afa1954131d8a0aa67bcc1a414ff33b8e7d1f4d","first_seen":"2025-07-04T00:42:00.438579Z","last_seen":"2026-07-09T07:06:00.708236Z","times_seen":99,"resource_available":false,"data":null}},"time_used":1104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"claim-pengu.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"claim-pengu.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"claim-pengu.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-pengu.app/f7d7f92d7c0c9d0b.css","fqdn":"claim-pengu.app","domain":"claim-pengu.app","tld":"app"},"ip":{"addr":"104.21.70.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-pengu.app/","date":"2026-03-26T21:33:57.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-pengu.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:54:20 GMT","end":"Sun, 14 Jun 2026 19:54:19 GMT"},"fingerprint":{"sha1":"2A:B8:3F:F2:3D:1F:B6:C2:F0:14:D0:A7:21:81:AE:D8:AC:3F:C8:EB","sha256":"D7:50:CD:68:71:3A:3C:B3:08:37:AB:A1:6D:79:ED:A3:CF:20:CA:00:39:57:26:C3:38:0B:87:5E:63:EA:38:1B"}}},"request":{"raw":"GET /f7d7f92d7c0c9d0b.css HTTP/1.1\r\nHost: claim-pengu.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-pengu.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:33:58 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 16 Mar 2026 20:49:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69b86cd5-1c7e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BpUZjCkSXC8urnOeG9Cu2pXHT945oKex7lQFKGjLsF2lhLQhuDBfT%2FZKpvFQ3ZoiUbgtr2rPhm72W23VKumdN%2BtKZ66qlvUMab1sMY7vuYyV4JxpXyB%2BMuh9w1zCmc5JBKg%3D\"}]}\r\ncf-ray: 9e2946d129ce56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7294,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"76a262c806d5804d5e0da247da59dd1e","sha1":"238e91861f335d0ba525243789ba3d19af498d08","sha256":"64268095718e0edcb4427ca74cd141d5f7150f5707268d3b26f75f58e9547a5d","sha512":"81a30c5c00e9497061a32e3e20d64b0cd62b204b1a67f138adf5b5dd7eeb8ca872941ea2f6350ddd5ccdbc30ea0e93597a9cfab4f14bbb2e3a2480b090f511f5","ssdeep":"192:qSfJsBB+xs8Gx8zEleeWK9KjSLJbvzUUOSmJ80JdU:6BBcsrx8zEleeWK9KawG","tlshash":"e4e1ff3555256050ee375f38b3579aadee0a84e3ac8645b076cd22098ff11f8a7c6f0c","first_seen":"2025-07-04T00:42:00.453383Z","last_seen":"2026-07-09T07:06:00.688506Z","times_seen":99,"resource_available":false,"data":null}},"time_used":1140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"claim-pengu.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"claim-pengu.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"claim-pengu.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-pengu.app/934ca5d86cb8ad40-s.p.woff2","fqdn":"claim-pengu.app","domain":"claim-pengu.app","tld":"app"},"ip":{"addr":"104.21.70.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-pengu.app/","date":"2026-03-26T21:33:57.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-pengu.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:54:20 GMT","end":"Sun, 14 Jun 2026 19:54:19 GMT"},"fingerprint":{"sha1":"2A:B8:3F:F2:3D:1F:B6:C2:F0:14:D0:A7:21:81:AE:D8:AC:3F:C8:EB","sha256":"D7:50:CD:68:71:3A:3C:B3:08:37:AB:A1:6D:79:ED:A3:CF:20:CA:00:39:57:26:C3:38:0B:87:5E:63:EA:38:1B"}}},"request":{"raw":"GET /934ca5d86cb8ad40-s.p.woff2 HTTP/1.1\r\nHost: claim-pengu.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-pengu.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:33:58 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 20888\r\nlast-modified: Mon, 16 Mar 2026 20:49:25 GMT\r\netag: \"69b86cd5-5198\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TyniClAOFRzRbL7yK0N5v539PHqpW5Co%2BFy248orAN84vqNn6ZTsV0KpkIcvpxFvZWRS0noi0S3gQuJBDjqVs6FNM2XeAxO040vZIj5nDfcwtVwaqz4oId3mJlbrGxYEAsU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9e2946d119c756c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20888,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20888, version 1.0","md5":"e52aa0b07244c4a3acdee247b1f6e829","sha1":"b7b827fcda2a948e66c45d119ad8d02d66c7a83d","sha256":"fd1d69c9fe04a9b4ed9e78286299b09cbbf23efab96c8ab7fffad59ebf3d6f9a","sha512":"7ecd78194903e44f47dd3b41dcd23c0c785928002fc799e510345a456ea974db609a6ebf8ce46e434946de1ea63313929c89d637cc7b2fbf3042b6440ebbff5b","ssdeep":"384:YgjIF9Spa3GQ4uMEYK6GOaIAGs0R135QgGVmVp3/4Pq3K:FEkaWNdEYI6U695G0BQq3K","tlshash":"4f92e1e4fac80e2680d7ae2d2d05a0909433d051cb5a88ff6d6716691b673b3cd9b638","first_seen":"2023-12-15T11:46:57Z","last_seen":"2026-08-03T12:49:17.27823Z","times_seen":168,"resource_available":false,"data":null}},"time_used":1386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1295,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"claim-pengu.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"claim-pengu.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"claim-pengu.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-pengu.app/b30489573339f853.css","fqdn":"claim-pengu.app","domain":"claim-pengu.app","tld":"app"},"ip":{"addr":"104.21.70.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-pengu.app/","date":"2026-03-26T21:33:57.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-pengu.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:54:20 GMT","end":"Sun, 14 Jun 2026 19:54:19 GMT"},"fingerprint":{"sha1":"2A:B8:3F:F2:3D:1F:B6:C2:F0:14:D0:A7:21:81:AE:D8:AC:3F:C8:EB","sha256":"D7:50:CD:68:71:3A:3C:B3:08:37:AB:A1:6D:79:ED:A3:CF:20:CA:00:39:57:26:C3:38:0B:87:5E:63:EA:38:1B"}}},"request":{"raw":"GET /b30489573339f853.css HTTP/1.1\r\nHost: claim-pengu.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-pengu.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:33:58 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 16 Mar 2026 20:49:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69b86cd5-8d56\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mwgMFSCQcXPBSn9q8POqqyLRpy0J6eyWHlTVhaGT7L5RcITfXb1YTBBlYhx0XKMFw%2FXdaBNDGu03s2DBtdANorz3Cvg%2BMTC3oLGWQ4j6zaThwwXhzExEi%2BDg0drDfjjfRTM%3D\"}]}\r\ncf-ray: 9e2946d129cb56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36182,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"4c59318ae1e020282da2e9eb1345a633","sha1":"620d44fb0b3c0a285a9b319027919a5159401c5f","sha256":"4e87279eb728c3c74c3d22ea90ef9711d66d4b3fcc66617f09cc5422660200d7","sha512":"18067ccb86c523089343acbc1aa56bfee94b5ab90e8b3806160f412417137ae9a1cce54116f6ea3a74165a39374087e94b29cbb343bd505ed193fe47a96b17bb","ssdeep":"384:TKUS1R3v9M4RfBfMbz9VVC6itvwaMHi0zpibRIngjNpwpcSXhp:+USzyzpibRIMNpwpcYhp","tlshash":"a3f2a9007d1e3e1832275b6842e547ccba233b6bdd6903657dd412ac4b687a83bcbd79","first_seen":"2025-07-04T00:42:00.471095Z","last_seen":"2026-07-09T07:06:00.707345Z","times_seen":99,"resource_available":false,"data":null}},"time_used":1171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1144,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"claim-pengu.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"claim-pengu.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"claim-pengu.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-pengu.app/c679fa54-bc68-4f2d-87ce-88bba54f2064.jpg","fqdn":"claim-pengu.app","domain":"claim-pengu.app","tld":"app"},"ip":{"addr":"104.21.70.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-pengu.app/","date":"2026-03-26T21:33:59.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-pengu.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:54:20 GMT","end":"Sun, 14 Jun 2026 19:54:19 GMT"},"fingerprint":{"sha1":"2A:B8:3F:F2:3D:1F:B6:C2:F0:14:D0:A7:21:81:AE:D8:AC:3F:C8:EB","sha256":"D7:50:CD:68:71:3A:3C:B3:08:37:AB:A1:6D:79:ED:A3:CF:20:CA:00:39:57:26:C3:38:0B:87:5E:63:EA:38:1B"}}},"request":{"raw":"GET /c679fa54-bc68-4f2d-87ce-88bba54f2064.jpg HTTP/1.1\r\nHost: claim-pengu.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-pengu.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:34:00 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25512\r\nlast-modified: Mon, 16 Mar 2026 20:49:25 GMT\r\netag: \"69b86cd5-63a8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q%2Fqpu86DWgc0lU%2BOiiofI3UrMMaXn%2F0OzCReFNpWzQk8bG4yaPaWEif0QOHXoDy0AzUQvq%2BYYCuMporh%2FSDlo7hyNdM0mLhmBA9cejT4On2Ryhn%2Fq2moHsF1fZvfhpED5MU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e2946e0da3b56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25512,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 721x720, components 3","md5":"bc235279dd7d782407efc87fb6bc9344","sha1":"7ffa82a2fda36e900b9d02032e52d208ae515482","sha256":"38aeafc4800bc73720ebad06734b6a1fbbabc772d4f703a027015d5a72548d1c","sha512":"32497be39544859061ae39fac8a5be7b81f3b6f97a9f0baa1319dfa8e8f992b4768916897140bb7bffef71d2cf90be9450d1d7fb06ae8b9daa7ef6f71b3da342","ssdeep":"384:N9Vf5kJQX61dSHP6IQenwAeKFsdqigIsQqh/xRMjRmAG3hZ05tEwtJ3HRxE84+s:9aJE68P6KnwAyqigNpDLbWq+bE7","tlshash":"11b2e0adfed84e92db00d0f213e9cf242179916b21bce34e273d87a5470a5e1e13b519","first_seen":"2024-12-28T15:43:31.935174Z","last_seen":"2026-07-09T07:06:00.700122Z","times_seen":110,"resource_available":false,"data":null}},"time_used":1182,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1154,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"claim-pengu.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"claim-pengu.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"claim-pengu.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-pengu.app/286c0c7c193bbacc-s.p.woff2","fqdn":"claim-pengu.app","domain":"claim-pengu.app","tld":"app"},"ip":{"addr":"104.21.70.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-pengu.app/","date":"2026-03-26T21:33:57.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-pengu.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 19:54:20 GMT","end":"Sun, 14 Jun 2026 19:54:19 GMT"},"fingerprint":{"sha1":"2A:B8:3F:F2:3D:1F:B6:C2:F0:14:D0:A7:21:81:AE:D8:AC:3F:C8:EB","sha256":"D7:50:CD:68:71:3A:3C:B3:08:37:AB:A1:6D:79:ED:A3:CF:20:CA:00:39:57:26:C3:38:0B:87:5E:63:EA:38:1B"}}},"request":{"raw":"GET /286c0c7c193bbacc-s.p.woff2 HTTP/1.1\r\nHost: claim-pengu.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-pengu.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:33:58 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 20056\r\nlast-modified: Mon, 16 Mar 2026 20:49:25 GMT\r\netag: \"69b86cd5-4e58\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nMCUhoflaKlEMBG6Cp8ZZloqFgpgp0oaTIj7bhDW556dxcgmo6hcPnbQYkMCfbuGY641OOlUH8pddas0wcXlto9S749KqgsP6agSDpPny7yZU2XGAl373UPVVvR92A4BUtg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9e2946d119c456c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20056,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20056, version 1.0","md5":"1c5adb0ce67bcc296c754a8799253362","sha1":"edc2f273e8013e423c3610f4fb024ad7eb9b9cf4","sha256":"3932afcb4b34e743459d09ddb48cc47ca1910b27d965f2a23ec56f467c2ef171","sha512":"9510e67114c4ffd3f5541e3276288bed7834950ea6d5123a0f396762643c06de5e35dfb6ecf7a3ef7d326d088aee5344cf4049fdb654170a390c51a142a51e83","ssdeep":"384:VDxiBTSDpotkzg1HSjILRPER3rpAFyFTbrbfAO60pvnpaDyYQ:UIotp1fRsR9NFTbnc0JpaDyYQ","tlshash":"6792cf6d746999c28c130739ccdcdba102ac0df7836cd82c50e2db5ed66e5b1bb9942e","first_seen":"2024-12-28T10:25:20.026473Z","last_seen":"2026-08-03T12:49:17.289153Z","times_seen":155,"resource_available":false,"data":null}},"time_used":1163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1131,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"claim-pengu.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"claim-pengu.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"claim-pengu.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}