{"report_id":"5a8e5906-cc7f-4e78-81d5-c3dc9b90d838","version":0,"status":"done","tags":[],"date":"2026-07-23T00:43:33Z","url":{"schema":"http","addr":"claims.useeisen.com","fqdn":"claims.useeisen.com","domain":"useeisen.com","tld":"com"},"ip":{"addr":"52.23.58.206","port":0,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"claims.useeisen.com/","fqdn":"claims.useeisen.com","domain":"useeisen.com","tld":"com"},"title":"Claims Portal","dom":{"size":23965,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (21906)","md5":"41ca095ffe616dc3a9dd097374c839f0","sha1":"bd3dde553d1f8974494b3707d55f069a9c264172","sha256":"60d8da95535c430e217ecf5cf5fdc5ee9fc1d8bab639346946f890e5c99f1057","sha512":"706e50f3e3ef6249096ce44c7908f47dfc0447d6b5cb19d129e55a5826c684bd81c8a1a83ed94e15906e2aa5b6d9787774e92ab832c782f971da68bb57e63be8","ssdeep":"96:EuMFZXsJc+u0MFZtgJc+udIFZVAJc+uPOFZb8Jc+ui8FZVAJc+u1nFZD6Jc+ukvV:6YuUh0XIY0aynAi+PHmTXI4IRdQj","tlshash":"e4b21c52102f9548a6934dd331ccbb333d8a906694e64166dafc0d9e9cebcb713b972c","dom_hash":"domhash3c7d9c3ad1e42195e126d675c11a266b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"claims.useeisen.com","fqdn":"claims.useeisen.com","domain":"useeisen.com","tld":"com"},"ip":{"addr":"52.23.58.206","port":0,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-27T00:43:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"claims.useeisen.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"claims.useeisen.com","ip":{"addr":"52.23.58.206","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2024-11-04","domain_rank":0,"first_seen":"2026-07-23T00:43:34.209408Z","last_seen":"2026-07-23T00:43:34.209408Z","alert_count":6,"request_count":6,"received_data":435223,"sent_data":2838,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.147.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-19T22:19:42.520021Z","alert_count":0,"request_count":1,"received_data":49068,"sent_data":569,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"claims.useeisen.com/runtime.1c420ac75ec8f922.js","fqdn":"claims.useeisen.com","domain":"useeisen.com","tld":"com"},"ip":{"addr":"52.23.58.206","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"22bd78fe81714a875faee43cea451f93","sha1":"96d11036dec86150dc2f9f60ff484872b00a1656","sha256":"66d9dd91f515465867cacfba8cef2aa19a7bf66f1ac419ac16cb7a8cffa2aeba","sha512":"a9e3cb948d315192045bebd1dd60f9d1ec73a4a3a3fea0bd84ceb48870931b3f9a796c0781c3e6a92fd3c80d6e28f1135974ce67e5992ab794d0d58e2146d4e2","ssdeep":"","tlshash":"9351aaf12750edbb26b519c2183dd682b9147033141bddf1eb1bdf2aa554ec04951ef1","size":2787,"data":"","first_seen":"2026-07-23T00:43:37.54564Z","last_seen":"2026-07-23T00:43:37.54564Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claims.useeisen.com/polyfills.4128ca32518eaaf2.js","fqdn":"claims.useeisen.com","domain":"useeisen.com","tld":"com"},"ip":{"addr":"52.23.58.206","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"67c73e1261d24da36de9212f897caae0","sha1":"ba82038a81b2373d66b56da7d4f99cae8cd964ec","sha256":"1489c4fd3b17913b7e086b594268ac52423e0689af354173b5efea0b1345429c","sha512":"7e60f544c31a2ab791542b31e871f94615b46c5f1ceb9733868bfd7ad0ea4b074461e9e2d72dfef205ef41f0bacfab70ee147d141363e536e677dc5701b393de","ssdeep":"768:o+M2fahVJSCHj9PHgqM68K4C8r3ppTNw7Na3YNCHgOYPOHppKQhkTNr5yU9sm9Rm:n+t2QtaT3","tlshash":"6cf2d6da33a1b0b6c7f658f1907b8407f63625a4784c88d8b11d99ea3d3604ae167f3d","size":34779,"data":"","first_seen":"2026-07-14T16:39:24.532189Z","last_seen":"2026-07-23T00:43:37.546722Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claims.useeisen.com/main.c47e6ced38449bcd.js","fqdn":"claims.useeisen.com","domain":"useeisen.com","tld":"com"},"ip":{"addr":"52.23.58.206","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7a5bec9fe18d67b932ad913590baad4","sha1":"5e9899b8a8bd9dfb3a2c1996700d95548a34fdd6","sha256":"e850152639f57d73f3d597c16e082b62939b92ffb03f71f46b8d2a5948cd4393","sha512":"e4e35b33effec87d196ba89f9d64fa3f8a175fa72c553e28b8e9edb5611a477fca813f93ccd1d3ceee41d7c0070f354f447ec655933c0fc6c787d8d3fdd19336","ssdeep":"6144:ot3lMrtE4FaVg/B3dBDafqiUAdilAJ8gVo:5r3FaVKjFafqiUAQuHo","tlshash":"4044c8983692f06247e705f6407b0447f239188a784d8468f26cecee7d6594da2b7f7c","size":270417,"data":"","first_seen":"2026-07-23T00:43:37.540271Z","last_seen":"2026-07-23T00:43:37.540271Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"claims.useeisen.com/main.c47e6ced38449bcd.js","fqdn":"claims.useeisen.com","domain":"useeisen.com","tld":"com"},"ip":{"addr":"52.23.58.206","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claims.useeisen.com/","date":"2026-07-23T00:43:05.074Z","timestamp":1784767385074,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.useeisen.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 19 Jul 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"29:4B:CC:EB:D6:73:22:6A:37:04:65:31:86:C4:BC:BA:D6:87:E0:33","sha256":"CE:B7:F4:82:A3:2C:D6:98:3B:78:AF:7D:E3:86:52:3D:C2:DC:2B:2C:CC:FB:B5:28:46:BA:15:C6:46:7C:A8:11"}}},"request":{"raw":"GET /main.c47e6ced38449bcd.js HTTP/1.1\r\nHost: claims.useeisen.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claims.useeisen.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 23 Jul 2026 00:43:05 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 270417\r\nserver: nginx\r\nlast-modified: Tue, 21 Jul 2026 21:08:03 GMT\r\netag: \"6a5fdfb3-42051\"\r\nexpires: Fri, 23 Jul 2027 00:43:05 GMT\r\ncache-control: max-age=31536000, max-age=31449600\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":270417,"size_decoded":270749,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d7a5bec9fe18d67b932ad913590baad4","sha1":"5e9899b8a8bd9dfb3a2c1996700d95548a34fdd6","sha256":"e850152639f57d73f3d597c16e082b62939b92ffb03f71f46b8d2a5948cd4393","sha512":"e4e35b33effec87d196ba89f9d64fa3f8a175fa72c553e28b8e9edb5611a477fca813f93ccd1d3ceee41d7c0070f354f447ec655933c0fc6c787d8d3fdd19336","ssdeep":"6144:ot3lMrtE4FaVg/B3dBDafqiUAdilAJ8gVo:5r3FaVKjFafqiUAQuHo","tlshash":"4044c8983692f06247e705f6407b0447f239188a784d8468f26cecee7d6594da2b7f7c","first_seen":"2026-07-23T00:43:37.540271Z","last_seen":"2026-07-23T00:43:37.540271Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2017,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":640,"receive":1377,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"claims.useeisen.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.147.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claims.useeisen.com/","date":"2026-07-23T00:43:06.396Z","timestamp":1784767386396,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:19 GMT","end":"Mon, 21 Sep 2026 08:39:18 GMT"},"fingerprint":{"sha1":"56:2E:0F:D1:D0:27:1F:92:D4:39:8A:28:B9:FE:ED:D0:51:56:59:00","sha256":"50:B0:8B:72:1E:CD:1B:CF:FF:05:C2:98:8B:5F:C4:33:B3:2E:A1:FB:F1:12:28:6E:32:E5:DC:72:3C:39:7F:94"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://claims.useeisen.com/\r\nOrigin: https://claims.useeisen.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48256\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Jul 2026 13:19:10 GMT\r\nexpires: Thu, 22 Jul 2027 13:19:10 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:53 GMT\r\ncontent-type: font/woff2\r\nage: 41036\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48256,"size_decoded":49068,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-07-23T05:46:15.701468Z","times_seen":23862,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":24,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claims.useeisen.com/assets/img/Favicon-White.png","fqdn":"claims.useeisen.com","domain":"useeisen.com","tld":"com"},"ip":{"addr":"52.23.58.206","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claims.useeisen.com/","date":"2026-07-23T00:43:07.157Z","timestamp":1784767387157,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.useeisen.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 19 Jul 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"29:4B:CC:EB:D6:73:22:6A:37:04:65:31:86:C4:BC:BA:D6:87:E0:33","sha256":"CE:B7:F4:82:A3:2C:D6:98:3B:78:AF:7D:E3:86:52:3D:C2:DC:2B:2C:CC:FB:B5:28:46:BA:15:C6:46:7C:A8:11"}}},"request":{"raw":"GET /assets/img/Favicon-White.png HTTP/1.1\r\nHost: claims.useeisen.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claims.useeisen.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 23 Jul 2026 00:43:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 2290\r\nserver: nginx\r\nlast-modified: Tue, 21 Jul 2026 21:08:03 GMT\r\netag: \"6a5fdfb3-8f2\"\r\nexpires: Fri, 23 Jul 2027 00:43:07 GMT\r\ncache-control: max-age=31536000, max-age=31449600\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2290,"size_decoded":2605,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"0f23babe1362a8c2dca941d045ddf4a0","sha1":"65c259c9f81bf26c0ecf8791f2eca5ad0df32670","sha256":"3ccdda87fd165143d82461e69093159efe46b42d03e8f880d8e02b7dc190e93a","sha512":"ba23aa1fb4bf1566db91641940d625d81924d4ecf3f04604110b8ecbccc3a97224128c80ef8aec380b21b43e079a03aadf30cf1aa81362f156ff14bcfa996197","ssdeep":"","tlshash":"2741b6b122f9bd394981c271dba821e8af445589d2427e9ef57c133cfe83fb1aa54409","first_seen":"2026-07-14T16:39:24.535278Z","last_seen":"2026-07-23T00:43:37.542851Z","times_seen":5,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"claims.useeisen.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claims.useeisen.com/","fqdn":"claims.useeisen.com","domain":"useeisen.com","tld":"com"},"ip":{"addr":"52.23.58.206","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-23T00:43:03.639Z","timestamp":1784767383639,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.useeisen.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 19 Jul 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"29:4B:CC:EB:D6:73:22:6A:37:04:65:31:86:C4:BC:BA:D6:87:E0:33","sha256":"CE:B7:F4:82:A3:2C:D6:98:3B:78:AF:7D:E3:86:52:3D:C2:DC:2B:2C:CC:FB:B5:28:46:BA:15:C6:46:7C:A8:11"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claims.useeisen.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 23 Jul 2026 00:43:04 GMT\r\ncontent-type: text/html\r\ncontent-length: 23781\r\nserver: nginx\r\nlast-modified: Tue, 21 Jul 2026 21:08:03 GMT\r\netag: \"6a5fdfb3-5ce5\"\r\nexpires: Thu, 23 Jul 2026 00:43:03 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; script-src 'self'; script-src-attr 'none'; style-src 'self' https://fonts.googleapis.com 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data:; connect-src 'self'; base-uri 'self'; form-action 'self'; manifest-src 'self'; frame-ancestors 'none'; upgrade-insecure-requests\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin\r\npermissions-policy: geolocation=()\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23781,"size_decoded":24719,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (21906)","md5":"af093b2034d5070184c7ad54e185fb5f","sha1":"b4a39d1f5458cc3e82d787b9865b02b59ac4ba00","sha256":"9345317d8bbc59958cd87b76e746e994f8a926d90ad35ef2e92ddbbf74bbb625","sha512":"4453e9fb1a3a3a986c1cdc9c1a1a892b06fe4bdcefd8ddafda68377ce4199b9de3cfeb8b5cfdc1d76afc114f5c40729a4289618350bf126c29c8cf5c05f93ced","ssdeep":"96:ouzFZXsJc+u0MFZtgJc+udIFZVAJc+uPOFZb8Jc+ui8FZVAJc+u1nFZD6Jc+ukvw:3YuUh0XIY0aynAi+PHmTXI4IIa","tlshash":"80b20c52102f9548a6934dd331ccbb333d8a906694e54162dafd0d9e9cebcb713ba72c","first_seen":"2026-07-23T00:43:37.543708Z","last_seen":"2026-07-23T00:43:37.543708Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1248,"timings":{"blocked":-1,"dns":67,"connect":93,"send":0,"wait":369,"receive":43,"ssl":676},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"claims.useeisen.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claims.useeisen.com/styles.da7588d7a23afc25.css","fqdn":"claims.useeisen.com","domain":"useeisen.com","tld":"com"},"ip":{"addr":"52.23.58.206","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claims.useeisen.com/","date":"2026-07-23T00:43:05.070Z","timestamp":1784767385070,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.useeisen.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 19 Jul 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"29:4B:CC:EB:D6:73:22:6A:37:04:65:31:86:C4:BC:BA:D6:87:E0:33","sha256":"CE:B7:F4:82:A3:2C:D6:98:3B:78:AF:7D:E3:86:52:3D:C2:DC:2B:2C:CC:FB:B5:28:46:BA:15:C6:46:7C:A8:11"}}},"request":{"raw":"GET /styles.da7588d7a23afc25.css HTTP/1.1\r\nHost: claims.useeisen.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claims.useeisen.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 23 Jul 2026 00:43:05 GMT\r\ncontent-type: text/css\r\ncontent-length: 98609\r\nserver: nginx\r\nlast-modified: Tue, 21 Jul 2026 21:08:03 GMT\r\netag: \"6a5fdfb3-18131\"\r\nexpires: Fri, 23 Jul 2027 00:43:05 GMT\r\ncache-control: max-age=31536000, max-age=31449600\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":98609,"size_decoded":98926,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2d556da9e627a4e870898258e14512ac","sha1":"75964459a597fbf989483f5e491cec48e1094378","sha256":"fbe9d4a06c7ddf13f1411d6c70a0abdfbbe701e38234f75ad517c3c31e476b40","sha512":"1ae9c3398c1c0d25dd34028a90d94e5b2a472eeaec4df4ceab714c9a872961ad7d3c898e094948b77aa45df4db5b0e9a5dfa5742a81e65a9ef1c25605c67c8e1","ssdeep":"768:rNpTqCTQZbcZQPWPSPNAY4adxl6wAuu+MvFLru7YeRD2106NamD:rNpmoQZbcZQPWPSPNAY4aHl6x+MNPB","tlshash":"75a31000e601242ff95386bfc4c4ed529ed5ccd1ca515babf5816e4ca29d8aaf38e713","first_seen":"2026-07-14T16:39:24.538761Z","last_seen":"2026-07-23T00:43:37.544884Z","times_seen":5,"resource_available":false,"data":null}},"time_used":737,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":642,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"claims.useeisen.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claims.useeisen.com/runtime.1c420ac75ec8f922.js","fqdn":"claims.useeisen.com","domain":"useeisen.com","tld":"com"},"ip":{"addr":"52.23.58.206","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claims.useeisen.com/","date":"2026-07-23T00:43:05.071Z","timestamp":1784767385071,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.useeisen.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 19 Jul 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"29:4B:CC:EB:D6:73:22:6A:37:04:65:31:86:C4:BC:BA:D6:87:E0:33","sha256":"CE:B7:F4:82:A3:2C:D6:98:3B:78:AF:7D:E3:86:52:3D:C2:DC:2B:2C:CC:FB:B5:28:46:BA:15:C6:46:7C:A8:11"}}},"request":{"raw":"GET /runtime.1c420ac75ec8f922.js HTTP/1.1\r\nHost: claims.useeisen.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claims.useeisen.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 23 Jul 2026 00:43:05 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2787\r\nserver: nginx\r\nlast-modified: Tue, 21 Jul 2026 21:08:03 GMT\r\netag: \"6a5fdfb3-ae3\"\r\nexpires: Fri, 23 Jul 2027 00:43:05 GMT\r\ncache-control: max-age=31536000, max-age=31449600\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2787,"size_decoded":3115,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2787), with no line terminators","md5":"22bd78fe81714a875faee43cea451f93","sha1":"96d11036dec86150dc2f9f60ff484872b00a1656","sha256":"66d9dd91f515465867cacfba8cef2aa19a7bf66f1ac419ac16cb7a8cffa2aeba","sha512":"a9e3cb948d315192045bebd1dd60f9d1ec73a4a3a3fea0bd84ceb48870931b3f9a796c0781c3e6a92fd3c80d6e28f1135974ce67e5992ab794d0d58e2146d4e2","ssdeep":"","tlshash":"9351aaf12750edbb26b519c2183dd682b9147033141bddf1eb1bdf2aa554ec04951ef1","first_seen":"2026-07-23T00:43:37.54564Z","last_seen":"2026-07-23T00:43:37.54564Z","times_seen":1,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"claims.useeisen.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claims.useeisen.com/polyfills.4128ca32518eaaf2.js","fqdn":"claims.useeisen.com","domain":"useeisen.com","tld":"com"},"ip":{"addr":"52.23.58.206","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claims.useeisen.com/","date":"2026-07-23T00:43:05.072Z","timestamp":1784767385072,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.useeisen.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 19 Jul 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"29:4B:CC:EB:D6:73:22:6A:37:04:65:31:86:C4:BC:BA:D6:87:E0:33","sha256":"CE:B7:F4:82:A3:2C:D6:98:3B:78:AF:7D:E3:86:52:3D:C2:DC:2B:2C:CC:FB:B5:28:46:BA:15:C6:46:7C:A8:11"}}},"request":{"raw":"GET /polyfills.4128ca32518eaaf2.js HTTP/1.1\r\nHost: claims.useeisen.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claims.useeisen.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 23 Jul 2026 00:43:05 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 34779\r\nserver: nginx\r\nlast-modified: Tue, 21 Jul 2026 21:08:03 GMT\r\netag: \"6a5fdfb3-87db\"\r\nexpires: Fri, 23 Jul 2027 00:43:05 GMT\r\ncache-control: max-age=31536000, max-age=31449600\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34779,"size_decoded":35109,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34779), with no line terminators","md5":"67c73e1261d24da36de9212f897caae0","sha1":"ba82038a81b2373d66b56da7d4f99cae8cd964ec","sha256":"1489c4fd3b17913b7e086b594268ac52423e0689af354173b5efea0b1345429c","sha512":"7e60f544c31a2ab791542b31e871f94615b46c5f1ceb9733868bfd7ad0ea4b074461e9e2d72dfef205ef41f0bacfab70ee147d141363e536e677dc5701b393de","ssdeep":"768:o+M2fahVJSCHj9PHgqM68K4C8r3ppTNw7Na3YNCHgOYPOHppKQhkTNr5yU9sm9Rm:n+t2QtaT3","tlshash":"6cf2d6da33a1b0b6c7f658f1907b8407f63625a4784c88d8b11d99ea3d3604ae167f3d","first_seen":"2026-07-14T16:39:24.532189Z","last_seen":"2026-07-23T00:43:37.546722Z","times_seen":5,"resource_available":true,"data":null}},"time_used":1101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":642,"receive":459,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"claims.useeisen.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}