{"report_id":"5c9c476f-d4c4-4721-9fa8-f4a96812b02d","version":6,"status":"done","tags":[],"date":"2026-02-13T23:27:15Z","url":{"schema":"https","addr":"claimsentient.xyz/","fqdn":"claimsentient.xyz","domain":"claimsentient.xyz","tld":"xyz"},"ip":{"addr":"172.67.223.233","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"claim.sentitent.xyz/","fqdn":"claim.sentitent.xyz","domain":"sentitent.xyz","tld":"xyz"},"title":"Sentient Airdrop","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"claimsentient.xyz/","fqdn":"claimsentient.xyz","domain":"claimsentient.xyz","tld":"xyz"},"ip":{"addr":"172.67.223.233","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-20T23:27:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"claim.sentitent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"claimsentient.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"claimsentient.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"claim.sentitent.xyz","ip":{"addr":"104.21.56.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-22","domain_rank":0,"first_seen":"2026-02-13T02:47:11.399414Z","last_seen":"2026-02-13T02:47:11.399414Z","alert_count":19,"request_count":19,"received_data":3766317,"sent_data":10384,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"claimsentient.xyz","ip":{"addr":"172.67.223.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-21","domain_rank":0,"first_seen":"2026-02-13T02:47:11.397963Z","last_seen":"2026-02-13T02:47:11.397963Z","alert_count":2,"request_count":1,"received_data":61638,"sent_data":486,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"claim.sentitent.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"claim.sentitent.xyz","domain":"sentitent.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d919e80f92bb6fdbe39e69f1609ecd7","sha1":"2e57cb3f66d0b7455a6aa3080fe9a03f177ba7d5","sha256":"9c94c7e242c8c4e7dc613754eddfef70781dec95eced424f392941aa3f813dc5","sha512":"96b5b67c895d75fa8fc863c3c0f4de489a39c51a899586b23c5e2dc38b8469530898743cc3c1ed089035a39959a7696b6269fd8b012afe65199c3d3a10ddf050","ssdeep":"384:X8FvNlS97AQxYC4czmUjNnO2qhc3HQH9vYkIoJkYUXCOD6J+f38UoSDUSjPpZbfG:MFvNQjxD6daHfUhS94","tlshash":"64a285ca7cdb75121373143800af224fe72a5bd474c4ae3a96b987e4b97074d48a7dac","size":22129,"data":"","first_seen":"2026-02-13T23:27:18.082448Z","last_seen":"2026-02-13T23:44:28.250619Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.sentitent.xyz/","fqdn":"claim.sentitent.xyz","domain":"sentitent.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0e1ee9f442371606d9a13b41a0dbeaff","sha1":"a05c25c8ad9127fe7d45319ce13e8b4a485d2e01","sha256":"713285cbc0cb910dfd2e7a86c604d191a27789ae50964ab1c674507ff4a20c45","sha512":"1dbac9fa1e0b338e780a3600f1a3da140a6c83a961a1d0c6c80fe3dc5a9041c346c471d264a07ccc87457cdccc2a28b768d02283512ba9cee0fc2e2b7124e42d","ssdeep":"","tlshash":"0221fedeb2826488526794d742cd8dceb8e617a919008c20452ef299225c3e8fb6ad54","size":1177,"data":"","first_seen":"2025-08-01T04:16:24.218288Z","last_seen":"2026-06-07T19:52:02.536142Z","times_seen":2988,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.sentitent.xyz/","fqdn":"claim.sentitent.xyz","domain":"sentitent.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"03486f98019e41d65d551d835817a9e3","sha1":"495741bb70e33bdfa69c1f91268a674e0ae92907","sha256":"d40d1b59045a55bf9142779b1ffcb0d3e36bacf60af0ada037bae6f747dfcde0","sha512":"15b50974ec069a224b9f85fd2f69b1efabc0642118db8941c285d82c037e1f3d197831f3711a1df0782233e75f37449204db17fcb31e42fea0103ab1116c069a","ssdeep":"","tlshash":"17e0c2286a5611b926732591c75f6240e86000639081d801fd1ce58a4f80a143465bc9","size":316,"data":"","first_seen":"2026-01-24T13:42:38.148025Z","last_seen":"2026-02-17T15:22:09.881828Z","times_seen":57,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.sentitent.xyz/","fqdn":"claim.sentitent.xyz","domain":"sentitent.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a877fc74b28c2f1709d0c684c14e77bf","sha1":"430e94b8e83669439d3cd0a194510dbe27bd2e0e","sha256":"d57ffd1fad30ea5a909d6d3dd98b088dc4d34f52ca522851d9e0d5a8b703648b","sha512":"9f315b9093c42e65e2c16463fc5c5169d806a891827a31d06e51c2ac56be6e498314cbcb6a168dbc8fcf6b84c2ec59e4df7b46767e63024dbd355c540160bebc","ssdeep":"","tlshash":"28112d37a94a193986ab036aba870b9105bdc13487abdca3f7c8ef9478cd9611005269","size":1000,"data":"","first_seen":"2026-02-13T22:29:52.247081Z","last_seen":"2026-02-13T23:27:18.09823Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.sentitent.xyz/","fqdn":"claim.sentitent.xyz","domain":"sentitent.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4cc906811390022dcb22382e4925243b","sha1":"72be2048f6dbc39a607532d47ee8700286d33c54","sha256":"49813f2ebabc4e8c4bf44bf040cabd94ab6ba4aecc76cf00c09a5fce0c35e812","sha512":"1370048804298822b275731726aeb76a0c292f116c8b5f361003323d86c82e717e90c0ae35d6b232a04b71c4dae61767930260d13beb2311b1e3862184dfd416","ssdeep":"","tlshash":"40d02ea82e9a133827332520835f928037e08043a0e1f8023a1ce1c70fe1a1000bf5db","size":289,"data":"","first_seen":"2026-01-24T13:42:38.150592Z","last_seen":"2026-02-17T15:22:09.882361Z","times_seen":57,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.sentitent.xyz/","fqdn":"claim.sentitent.xyz","domain":"sentitent.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f278e1582a6b32d6a9a05328bba73b0f","sha1":"02780b645a044990e49787663d3dba06626b1e3d","sha256":"07317dc90130ec69ed8e07a8362168074f9067473354101f361449cff37110aa","sha512":"08463b63ba1654bf203117d8f0c0a2ce4b5d92914ffba7c8ac3d942ff1a812c86cc61d9e840e5f3422c2b22d1b71b1a06b9a6d40d4e4259b32fd8cd40cc8357f","ssdeep":"","tlshash":"55319948a43216904242e8f1c676abeeabe774080574446d349cbec7eff8447e521678","size":1529,"data":"","first_seen":"2025-08-01T04:16:24.221852Z","last_seen":"2026-06-07T19:52:02.534591Z","times_seen":3070,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.sentitent.xyz/","fqdn":"claim.sentitent.xyz","domain":"sentitent.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1e21743cd2ee2004cd56bfc5c29e3609","sha1":"bf516634ffbcfd3186b71dafc0ecdcc47894c439","sha256":"0e428980439e794b176e0ee3cd84e4878510b1d52c1efc1c00f4af9729a17029","sha512":"4264e5ce5b4f3acb24046582388132a5915398c9266c18c6349d75fb94bd74bac990dc6ebd12e1e118a3a24752a3e4badae2faabd69b9827d1f223a0750da4c2","ssdeep":"48:atoyTqSsM+c69M+c69M+c69M+c60778KK7NaaM//M+A:atlDNDNDNDl778KKw//M+A","tlshash":"25913f32165427da63ce8fd45a85751d01d2c89a383e60bdff3279eded3a683c031612","size":4506,"data":"","first_seen":"2025-08-01T04:16:24.215618Z","last_seen":"2026-06-08T13:16:56.580916Z","times_seen":3039,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e29b46005fbd1f1da57bd7a153c534a0","sha1":"9a09e314dae2dfc713a38f6bc31a9d876e022de2","sha256":"55fde9539c26097b6a9f6dc8446c23c0f386f47d68ebcdcf36f39fc7d742d5c7","sha512":"9d18570a77e34eab8be3a4a188d4be9d52dbe87ce2438a0709abbbf3998944cbfc3746a759ae54be29a5bca53d283a015f90cc1b73e66ea5861a18fb8976e744","ssdeep":"","tlshash":"f9d0a7951a79843075a502476075d7a869a02194ba22a204c1c8cc3b7a21dd254b195c","size":217,"data":"","first_seen":"2026-02-13T23:27:18.100551Z","last_seen":"2026-02-13T23:27:18.100551Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.sentitent.xyz/","fqdn":"claim.sentitent.xyz","domain":"sentitent.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3433c9d3e9b7e8e5b34ed72e309db572","sha1":"d53d7df082088749c1df6b08330ee9b9e4076932","sha256":"1d96fa9904e3743570bccd5be90e83fd91975299f374093cc6f723673d582dd1","sha512":"ffd0e047331871f21738643968b7eb7fa045ee0e45346a9ea986c4b8a3e745dd310542c6b2734f6d244408bba6548ec66f5cd7662c69485b5e59e3b9432cdff2","ssdeep":"","tlshash":"06f04245bd825a24d35670ddc41f978cc53690dd91491c4cbb64ece1de94c2cdfc6534","size":585,"data":"","first_seen":"2025-08-01T04:16:24.219641Z","last_seen":"2026-06-08T13:16:56.579886Z","times_seen":3107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.sentitent.xyz/6e60f9e3-b7c7-4b4c-b995-166c1f0abf97","fqdn":"claim.sentitent.xyz","domain":"sentitent.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1f0360b88553e350d61431abe8a382d","sha1":"e1e318c8c38750c87e2b5d40858aeecdc2177f16","sha256":"ed4dd692685c8852901ca5e9f1b65eef914dd7afbcd342f69c15da3e3e778169","sha512":"9cc42add89e84c4bf99930f75db1756546518a5977ab78ceedfe42c9844d7420a9a937938e3a2ecbc09f2b3ab7cf8db048dd04f7b10fad9569bec617f3688cc1","ssdeep":"49152:y7OwPEZJsd/utuTwW2QUSvhjG+EyY4bfO3xrQanJfCpszVtQe:p","tlshash":"99f52390ed97a8b68f44526160bbad0754d90d1348dce0dff628f9c234feb9681e790e","size":3419131,"data":"","first_seen":"2026-02-13T22:29:26.395524Z","last_seen":"2026-02-13T23:27:18.102831Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1878d050e5ba20f6522c06013509a57b","sha1":"edc7189097f742e5546a4df4c4d67721711fa868","sha256":"499dd22310475b1171f809e47ab02bf5d899627bbb0d0b6093e9dbca3a860147","sha512":"ef307d1fdca2b3a8f6431c88e4e6e0c96b9392d047d2f79752610598458bf06c8552248a02da6dd3d48f138ce1634bb78d63d74c324c27d8f6911455a7b700a2","ssdeep":"","tlshash":"e7d023996879843075d5014751b6d7e866a03094fb51f200c1dccc2f7f11fd354b156c","size":217,"data":"","first_seen":"2026-02-13T23:27:18.103903Z","last_seen":"2026-02-13T23:27:18.103903Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.sentitent.xyz/","fqdn":"claim.sentitent.xyz","domain":"sentitent.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"290f2693531b75e4376c03efb2e445ba","sha1":"b7d99187eb7703bdc3e0d91432b1e6108b57bca5","sha256":"b2464a6e184f8e48f9dd9b02483cf8f9a049eb5ddf47bc900d570fe387613ae6","sha512":"13b68e7b1f8f4e9278ab87f46f2f9d12a9c7a48351d18265afce4d59c501c11bc510195ba10aeaf6c5c17cfd996a9ce4c639c162752cf6ea4b026e5fd6875e4d","ssdeep":"","tlshash":"5fe0863935761574097b986fc74b934b7da2141b5001e8167d4c914b0fa4f1034e6599","size":350,"data":"","first_seen":"2025-03-07T16:16:50.325983Z","last_seen":"2026-06-02T08:58:23.969339Z","times_seen":218,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.sentitent.xyz/","fqdn":"claim.sentitent.xyz","domain":"sentitent.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2380d391cf784bce2f77e0e16fa2268b","sha1":"2b88cb08e3d7f56772d46fe1a10d84774e8728d5","sha256":"e65fcff70fe965f3d1878fe515a7ebcd265dfe61b15461521450c882e8d081d7","sha512":"0f3264af3a045928be20d2ee1ef3af905571d07e3fc25eaeda22199baca89b8c9bff94d90d81124ff45b16c5e40df291c2f49d9464ba901d2d961f6fd1196f1f","ssdeep":"","tlshash":"e6411b1e00aa0aa31ba3054333ce846d0956c2cedcc73534d3b27f8134c67832a93bea","size":2254,"data":"","first_seen":"2025-08-01T04:17:54.882582Z","last_seen":"2026-06-08T13:16:56.583434Z","times_seen":2932,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.sentitent.xyz/","fqdn":"claim.sentitent.xyz","domain":"sentitent.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-06-03T14:16:15.147553Z","times_seen":3139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.sentitent.xyz/","fqdn":"claim.sentitent.xyz","domain":"sentitent.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6f2c3f7e981db10c988ed8bbea948222","sha1":"5707a209d3ddc0054fccf4aefc8815aafbb11060","sha256":"82d94dc2620149cb114297abc67d37f25f111749207aafefa2bd3e2867a850ca","sha512":"195e9ab5939b65cd14d831a58e0788ec6515bbbb8575ed6fb8108fa14ab7f8ca1e6648c83560c537969b2cf433f6fec935aafccd3a05d911fbfb5dcf1e9c6e3c","ssdeep":"","tlshash":"371100793a2a1534dac5408b317ee7a83e326061be02a044c36ccc296d18e8714efcbe","size":902,"data":"","first_seen":"2026-02-13T23:27:18.106589Z","last_seen":"2026-02-13T23:27:18.106589Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.sentitent.xyz/","fqdn":"claim.sentitent.xyz","domain":"sentitent.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"59a13eef9e5e0ec7844e58e8b47d54a0","sha1":"0fb2b2059a878b87f8524284d448dd46a4351953","sha256":"c890c150b008d069bfddb86ee2c2e3fe979515939053b4c53fd6853b68e4fe35","sha512":"7fcdb614d30b1141e9a1e134a98e2888007f786f866c24e6383106d3e003f094e72901aa295e7d3450fccf5a249b25b436401a5b9439205da6b0eec8d72cfc80","ssdeep":"","tlshash":"33f0beaf336126ca23ae6ad20796c01d1e72e4ab3002163c575a36ca0cb6f52521b07e","size":494,"data":"","first_seen":"2025-08-01T04:17:54.874483Z","last_seen":"2026-06-08T13:16:56.58729Z","times_seen":2901,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.sentitent.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"claim.sentitent.xyz","domain":"sentitent.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b0b144d06c3cdc6ea187de8a4875390","sha1":"ea450e84873d8cd92fe80ae8faddd2bcbdeb2a3b","sha256":"56f4dc5835ffe8a8d65f03220159650c02d73845129375c3cbbacbfc6f173c5d","sha512":"86acb8e4e1811fb64a6e722dd5fe5f57bb85e7d35d1dcf3057b4588ad84b0cfd9bb55386f2938b159875529d4c0e9b14de4ff2bd6cdfa0826f2771366a00ad86","ssdeep":"384:knlht9RAi0cOehZLm0KbkxfGU8qH/jb7owqeB4ZYhYdy9pHZDo7nQl8MK:knlD44OUHowhOAE788MK","tlshash":"f8a285eef5dbb52113331030006f260bb22f7fc4b44d6539a5b94ae8ba7171a8665f6c","size":22302,"data":"","first_seen":"2026-02-13T23:27:18.089823Z","last_seen":"2026-02-13T23:27:18.089823Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.sentitent.xyz/","fqdn":"claim.sentitent.xyz","domain":"sentitent.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8de04e3dc63af7585af0e827672eb149","sha1":"02ee5e4b4e73e430d629744c4b7a3e38c36ed06d","sha256":"123e2a4c9c65ad62ea2b0992b1f80073e18a341a810f9ba40d1c4cdc31f1e759","sha512":"a42fcbfd4fc45305b75c0093524abafcf73f7d10f3bbe8cf573f3ea87803f672ae7fd293a116e7c24aeb0ef9fb24b9ea32e48200a56243187d5b550407631184","ssdeep":"","tlshash":"a911cce0aa6c599781c2095034894b02b13cb020203d9fd0bf75f0ce7c7c7ec96d262a","size":1000,"data":"","first_seen":"2025-12-20T20:03:49.143914Z","last_seen":"2026-06-07T00:08:21.702938Z","times_seen":1701,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.sentitent.xyz/chunk.45.z2ngrbcx.js","fqdn":"claim.sentitent.xyz","domain":"sentitent.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cfbca216146eb341c5f6e82cf2e66542","sha1":"709b6b4c2377ccfc197156003a26dc3e50ce5feb","sha256":"3ee30d9f53119a5f9c0395db1b1892b3e91d3caef4f4b895ff70e850b6adb8eb","sha512":"2934fcd3cd6ee879144ad68018e12688828526dd36272543c4dacb612773e6b41342b1f8f9fee44c9b8b4e23b523b26a2693a79ae1069246904fabf6461d9f37","ssdeep":"768:VECYScstNRo0Rok40x6oxxGpeAu5OcR/EDMaPQb00TtcVrW9G3i5c66cORcODxXc:fP60UoxxGpVcMIrbre7ecQ","tlshash":"b453a4d5590bd0e88e5224ded473e919e4280a63cdadf1a3ba3cedc1741ef61848763b","size":63021,"data":"","first_seen":"2026-01-15T11:47:17.969422Z","last_seen":"2026-02-13T23:27:18.094836Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"claim.sentitent.xyz/cdn-cgi/challenge-platform/h/g/scripts/jsd/60138c04e6b2/main.js?","fqdn":"claim.sentitent.xyz","domain":"sentitent.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.sentitent.xyz/","date":"2026-02-13T23:26:52.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sentitent.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 12:49:00 GMT","end":"Wed, 22 Apr 2026 13:47:29 GMT"},"fingerprint":{"sha1":"E2:DF:E7:82:4A:9B:F5:F9:CA:97:7D:2E:6A:AA:AC:18:DA:28:39:52","sha256":"C2:82:39:C3:D3:EB:80:ED:38:91:02:FB:3B:CF:12:ED:D7:32:4E:DC:C7:4F:B8:11:A1:94:93:F6:02:55:3A:AC"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/60138c04e6b2/main.js? HTTP/1.1\r\nHost: claim.sentitent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ndate: Fri, 13 Feb 2026 23:26:52 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9cd817dae9dc35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22129,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (22129), with no line terminators","md5":"4d919e80f92bb6fdbe39e69f1609ecd7","sha1":"2e57cb3f66d0b7455a6aa3080fe9a03f177ba7d5","sha256":"9c94c7e242c8c4e7dc613754eddfef70781dec95eced424f392941aa3f813dc5","sha512":"96b5b67c895d75fa8fc863c3c0f4de489a39c51a899586b23c5e2dc38b8469530898743cc3c1ed089035a39959a7696b6269fd8b012afe65199c3d3a10ddf050","ssdeep":"384:X8FvNlS97AQxYC4czmUjNnO2qhc3HQH9vYkIoJkYUXCOD6J+f38UoSDUSjPpZbfG:MFvNQjxD6daHfUhS94","tlshash":"64a285ca7cdb75121373143800af224fe72a5bd474c4ae3a96b987e4b97074d48a7dac","first_seen":"2026-02-13T23:27:18.082448Z","last_seen":"2026-02-13T23:44:28.250619Z","times_seen":2,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"claim.sentitent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.sentitent.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"claim.sentitent.xyz","domain":"sentitent.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.sentitent.xyz/index_1.html","date":"2026-02-13T23:26:52.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sentitent.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 12:49:00 GMT","end":"Wed, 22 Apr 2026 13:47:29 GMT"},"fingerprint":{"sha1":"E2:DF:E7:82:4A:9B:F5:F9:CA:97:7D:2E:6A:AA:AC:18:DA:28:39:52","sha256":"C2:82:39:C3:D3:EB:80:ED:38:91:02:FB:3B:CF:12:ED:D7:32:4E:DC:C7:4F:B8:11:A1:94:93:F6:02:55:3A:AC"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: claim.sentitent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=xOH2dp5uCuoqvgyv4ma8AUJ8kwiXh1TdRbDTU5C_DqY-1771025212-1.2.1.1-aO3PJyRE0aQg2olRCOqsssQMzLAZ8vhbzqS38F4P78Jzk3rdFa9_Ga5JQEvmy.MtsLt.KMRBOBKFVrGsd3ASN44ISXTdUP9vrS2gHtv3ksBXjAjQkg1vCmoOiwmH561dtO_L1dHcP0XjgvVrO.J0ffb9heZCUdvCJyymxL9rVOrVjtOxR2NM.mhq4v.rnfOGzFNhXy52HBhgykIVW2Q.ok3UfiX1TXpbEBA4TRDyLAU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/60138c04e6b2/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\ndate: Fri, 13 Feb 2026 23:26:52 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9cd817dbea0d35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22302,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"claim.sentitent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.sentitent.xyz/55cbac5af71ba7d5.css","fqdn":"claim.sentitent.xyz","domain":"sentitent.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim.sentitent.xyz/","date":"2026-02-13T23:26:51.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sentitent.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 12:49:00 GMT","end":"Wed, 22 Apr 2026 13:47:29 GMT"},"fingerprint":{"sha1":"E2:DF:E7:82:4A:9B:F5:F9:CA:97:7D:2E:6A:AA:AC:18:DA:28:39:52","sha256":"C2:82:39:C3:D3:EB:80:ED:38:91:02:FB:3B:CF:12:ED:D7:32:4E:DC:C7:4F:B8:11:A1:94:93:F6:02:55:3A:AC"}}},"request":{"raw":"GET /55cbac5af71ba7d5.css HTTP/1.1\r\nHost: claim.sentitent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.sentitent.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 23:26:52 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 24 Jan 2026 22:12:06 GMT\r\netag: W/\"6d92-19bf21082c6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dfn%2FwYqGTR40cPnrsfNgmuqMHcGKRDn6USYbecvI5ULhczRcaIVCViCZCBmxzzOFop0LePYerRYaCaZ79BR7nFNDRfbhXFOBjzazadJj0CvywT8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd817d6df4f35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28050,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (28050), with no line terminators","md5":"c1983f2c81b35db14f613e382285bede","sha1":"3788c931c44c9ae4af3129bab1fb047867db9d75","sha256":"2cfacf1f631883f386c3a320d69c51095fb6d2a4ee75a31721b45474346080ea","sha512":"39d02c2b2b35cd28835c76eb358e0ab4e6307c38afed3ac6596ec2d2b9c71f50d4978e79f36905b87938e4c9826c65649b175c6cafef48ae4a6765515bb3b34d","ssdeep":"384:TpSed283ZcW23qWF7O36AgzyAIfPoJPFEIN4:TpSUJoAgzyAcoJPFEw4","tlshash":"dfc2c9097e2d3f38ba13a32440c0849c620b775feebd8797acd1265d9d9d78431aca79","first_seen":"2025-04-11T18:28:23.020641Z","last_seen":"2026-06-05T05:28:15.069269Z","times_seen":60,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"claim.sentitent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.sentitent.xyz/stepper-right.png","fqdn":"claim.sentitent.xyz","domain":"sentitent.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.sentitent.xyz/","date":"2026-02-13T23:26:52.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sentitent.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 12:49:00 GMT","end":"Wed, 22 Apr 2026 13:47:29 GMT"},"fingerprint":{"sha1":"E2:DF:E7:82:4A:9B:F5:F9:CA:97:7D:2E:6A:AA:AC:18:DA:28:39:52","sha256":"C2:82:39:C3:D3:EB:80:ED:38:91:02:FB:3B:CF:12:ED:D7:32:4E:DC:C7:4F:B8:11:A1:94:93:F6:02:55:3A:AC"}}},"request":{"raw":"GET /stepper-right.png HTTP/1.1\r\nHost: claim.sentitent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.sentitent.xyz/edacc8bacf57aba1.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 23:26:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 3518\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 24 Jan 2026 22:12:07 GMT\r\netag: W/\"dbe-19bf21082d9\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wAQZHpa%2Bwc5ZBwGi7CFOOKJDc78qF1%2FXztqMNC6aheCuZW0SYalYPwvLcBoSh1oUA%2B56zwCHMA5LpjnC6KW1gg7DJYz7pWyc6KU0K7L%2F4wBynHE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd817da99c235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3518,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 156, 8-bit/color RGBA, non-interlaced","md5":"28daa3ffb0aa0b97bb892d0c60683683","sha1":"a6e4e2f22ebf5cb68f0cc6d38c9d19b5b9a6f75f","sha256":"296928359fc2846b46aa54abf168a95c3261f9c96742ca064492912062a2699c","sha512":"97976775dc52f295e6ceb96ee6a2623a75cb702020ba0c7de39aabcfc78375ed2b83539f518c27d3a86c10dc3cc6ba304c98d264d52f8e52eae813253299d416","ssdeep":"","tlshash":"b5715cafa6b9d01aaa92a8b40f91fde6e006d88bd913950f562ea4070cc0d25b568681","first_seen":"2025-11-18T18:46:51.987835Z","last_seen":"2026-03-04T15:34:17.860148Z","times_seen":13,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"claim.sentitent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.sentitent.xyz/cdn-cgi/challenge-platform/h/g/jsd/oneshot/60138c04e6b2/0.26263245664656115:1771024251:ek5ktL8Hz6lT-WbRr-xASSwoZ4ncAM_C752eNHWf9iY/9cd817d37c852efa","fqdn":"claim.sentitent.xyz","domain":"sentitent.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claim.sentitent.xyz/","date":"2026-02-13T23:26:52.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sentitent.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 12:49:00 GMT","end":"Wed, 22 Apr 2026 13:47:29 GMT"},"fingerprint":{"sha1":"E2:DF:E7:82:4A:9B:F5:F9:CA:97:7D:2E:6A:AA:AC:18:DA:28:39:52","sha256":"C2:82:39:C3:D3:EB:80:ED:38:91:02:FB:3B:CF:12:ED:D7:32:4E:DC:C7:4F:B8:11:A1:94:93:F6:02:55:3A:AC"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/60138c04e6b2/0.26263245664656115:1771024251:ek5ktL8Hz6lT-WbRr-xASSwoZ4ncAM_C752eNHWf9iY/9cd817d37c852efa HTTP/1.1\r\nHost: claim.sentitent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12144\r\nOrigin: https://claim.sentitent.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.sentitent.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12144,"data":"iG42N1j9Qtc6o0rhQ$Q68T0c02c$r6rWAkr0hQtjwrz8kWi34c6jTkHd2jhk6yr8dT2cfrdmhjOUyikCfvreqCAvrQsS01Ar+5E4v2HthuM1+Ctb4h2HzYAy-BtPQrQSHMIuQc1HOQFPN2r+1s-u1AjraeEUAep4cCur0Qn4nSXRzkm4Wke4Wyrt1eEfBCCZrrJFehbYPTjDJzqAZ2rKv0rP2QRCv$r-y3tIRjKPZxkL$SF8U+uLT2r6J0rHVte9GKN55hrMQDNFMZ1urrAF+s201rrYOO0x1rJ42jYDf41mImN4T2rRJS2DkyeXdx-fDghA2ryT2SQ5I+rrt45eXmk+0LA0un02j-C0ruK142rSRHrwsk1442QJ7impffkzqWPAW01xNmStqo0SBfmV4SCdXSfYf+0Imjrkg-YdUv5rkedhdkGbVWr21WdxWGXFtFF6uVLUFQ8T$2c14vrr+smMKj$gE$RRSnrQhxXgkJdRo+IUFqIbf3da9bdbVGw7tCb6IVrt01uP-kR6eoiimrJjK$psRZmXYOVtix4SVfzZKZrc$tw16-PRnW$cBOOIAscpV-8P1ZB5szRjz+nmnrjmY1N8NPIKPj8zXuVSo3GWbG17M15rZXKZkyODAEVG4Oe+KcM4cgJ0iya$LAR7fmpaJ9hsCc$uOahFvTHKIY$62fXjXaAdTwcE0+2QKo-c9Ivm3RiI0PUEZRgakCSRziNRLHIe5a9iMZwZvCbfckK0rLzpbojgfbOZykSM49hexUjRk4g0rH9+ekekbHknXQkbcOCjagjPZrb2hk6zmDkEkIVrHZ0XiyRhBc6$mdxmpCmQdd0nOrAyZcGRXftYHr+QGVhJO5kmjk6femkye2u+G027XQah7VGfefk49G0Vy40hHbk0XQki4IhVN2hQGVS4RppkcerR$$z4dS4Y1VhhOrPvoXk90rS6FN61Sg-CedPyhkd$NXWu4GLedBXRjtiyy6JfTAQ1YduehR$X+GMySknITLAqVS7vJ7$rb+me9gqbsmJ+WjdJe4vR+yPjkdyrJSAAVJ$Z+Ys7o-tmLfx2e7Yf4A$6qwTAW$VRdStnXfjdUGxi7o$bjd+AwipGgJj9bv6XuUTx2yNnuyrSxyU-hkqg0$0S0S9H4dXmc$kAffuA+$BXX+VstR$h$X1db+Gas6J$niQg4fkZHks2DFhrb1Uu0gRUe-bu6GRXQcrRgY4CVm-Q5xJfQ5EXUTr9y1sk$RJU1hXmBXAPo+-BySt4eCj+FV0+fz-h3MhkhEUjusPOEtrkYSVjRVp8yIOQfzYcrasJbEtjQkftNeXdjkFr6HZ61f9-zQXAAdZxW-Ik6HH$7n1N2wrdaTyOKzYQkf0hQfeABvhfzAHEZ7bjt4FHvtBgoo4Sf0+AO-cjtUwIkXe$WsrBbL+4HjK94eXj+BDb9rFUSIkbUSHYw3YbI3Vpnu$t4eChUquk6a0DXW1oCjSssFuDPMFqv7zFGFB1gcFnXyWNC7jDDEbxvrAF8Wa2uTuzVQNGdkhBCSeLwCtsPdfUJuDwrHuWE9cS1daE0jFEZr2fd+rt68vUqo3oFwQbYGzchA8YGs76Q5k2cKoyUu7Q2kG4hsWkrmhLjNQoF$Z7Njg1iDRWk0Yv6rjJDrSjtStN5p0N0Jjqmhg052Njqkbc4nKsfszymbkkg3SbiFnwemMv0qX9EHjQ+mA0gRfjVGRte1ez4XjSj0auHy50-6Zcu7vTY7qg2Uj9cAyEn-OhMqMctSmZ942WHrV-bGvmuzx$7j4$oBm6vUkxPXQ$shCSCOC+9rwPr5e$SXehjkJeSeGwmNXQ0JJizFwea-N5f0Zj5beerNVTevr1VViqkh55o0bNxDZOQce9S9WFjkk6truIi$zN1eVPru5eZd+Jv0Pmt4R$s814kAetRhQ9HuWOH-GZ4WCQeasZA7FQc-+qR$9yCtbjQg52CRYbKH4G+fe$gy-MfyxS16zdJoSEjCcOo4msAZYjaQxdVvs5$f$KruRrjkT$VZdjSH5Zn42UXNZAbd2r514p0tz9F-2RXgSvmZr2WRtaPM-LVTWC3fs$rCN5D2SH4A4z7CM9WfkiA1VXzc-QbW-gMivPi$GbHv6ZebG-Zr42IoQ+Jh2TJVHxJaAviZ6XLtqkRfdeArj7n81y98AvtoeFXudczH2Q36$NwbaeToCam+FaFSef18aCfEzdtRfQn1btdASG0$bRwF38Z$yFqc002Bm6SY4GMdIFO5ivzD5cqbvN68cqHO1ECsLNAj3mvPkdzL56vLNFYQJpj3pqctjgqmGhn0WuNgT6LsFXy8rJ-v-YiBAhrYxkdAFk98h$NehAnQb42CrJQaF7WAfrgPV8Qt+5GCh43+Y7MV4zh2LF5ysSAtKdzY1qZssb-2z2f$6g+Mb6JbToVyXfJtVRZcjriyX9ckram-OYOrt4Hs8rdG9DOMd1M4XqPCQ$ssivoIszTfcnnR794ggLia01tCFXx47cNzx1Y3ju$hhxnC4kv-JOg7HJ-wKoTQBkmkatR2$-A5GkDZstr5siBYmkaYDrXw4dbQ6A0AAI8B+kHPM-31$jZ1MSe6+8XDcLjLAD0Sm+szS7KanRmuxZth3LNA0rSPjX6yM4rekhVG7HPCA4iFUoeKzpkU8u2aedeQ5prq07kQCRX55psEF$BxXGNbfHX2MrruFrAZiCye+GACebx-8nIH9eDPXgMJFCOEy0t4qqLWAJeHvBqmZb3hOBRm6JDwLjqSVdh$ZB+9rhTX$X6A0XnHgxyuGUGaMLbKXfbk4IszWc-4CFUp$VTf1WkCv+6bNBq+X$mU2Uq02FTmy+jhIs0zOt2cKsdg2jSWWvskizd2BJYeokyGuXFSEZG1YJpdUe8rKfsRGoBp0vhuW1HVQhLh-PjYCA5qXXbq36qCx$rPk9In4Bj67k4g27WZ$rWkHErhg7FbYgd+eb8uREXHkGR1jCWdkzN4Ldbb8VJC041GV4cbi2OQVUjWMu$1nhcLzdjke2YrTCW49v9vb7PJrDaEGJw85aTtetJMdTH+fvfJQLKck0E3zjIeI1sot4Z7tyTvDkdOK2MKs$DUSHyYjEFIATs$jOYHWTgigPbfdtePyRvKom3B8ALVcA+d-IvjMzGd3pk4PmHdVU5pISbys3JZbV4eZEbb4X5TVKFVZtihOWe1auWA6cXZVtFA7n5F-OrSNWBUrmdBSbBfFN5i0jIZwjakstrFv03tRnv9CZ8dpsZYFqEjciO34XC92r-L4SZ4V7OZTprg$SsHIjb+h7dmiHiHX+s8GiIM6WCtYLXzPJhHFZ$tjkNDyCgi23uo7FposXApL2WGCj1CNN1Fp3930j1n29jx6Tb+xZSaQPfCfY9f7WY9ceqodOjH4Xsfh-$+T40L3PJJytrB6r-jXZcy1+CqCR4rXTa9xDh1-ndDWk0P5T3XHb-URV56QoXnRjWjdyQ$2ODg2o0g-nStQ$VUS$HKWi7CzBHA3VmW3$5Cdc3AdDHk5bmJFXOVH4HjjkDEOWZ2xA3qHAhNbpgprh-h34fAzJ5Cjrhre6V+5qh+XeZeR1W+r+bNO9dqjzVA3H2r5qcpcoxJ2pF57rPraw3X+9+$csxc7Z-sSSrFRFd$0y+S7kdMh9bM57k4Hi21jEHjcchCFN53zXPVcGjsWEO$fHRV-hD0iG4FFrfB-yi4j2eVDVd+8H-5enj7dbQ-bJm5ipbaZZ-Rme1ScB5VSkVX-1ZEFi2O88jN0GFirOxXcqdGkRX6hoDe1oDSxH0wR5VAzX-FSUP5Rs2SrFxWVc8APHDK89ifxch0Nuztf4aWV4gViXgV3-ZOr1iOxcxJip3bfi0$ORHeVGHhQ+i7P1id3h3Bc94EeB7EerQ$7FcVPr3gRvrJtgh64EVDgpQy-12GPMZpQ73+ALV38K2M1GQUDB8cZUxx7sPb29zjdbrWmt-W5b5XQ$k1DeOR-c-1ZF+vRYfHzqQdgvhhaR3y+R3B5$2PzKx7eng-8jN0DISNbGd6goDdXO1zDE5X+K2+m657QtQ1ZuP2eHDRWImsAuz$0Xgnm65WP-+0+ueUD5cu4b-b89NE2Q2+5c-W-sbfk$HVQmFp5c53P$bJXeVft3zYSXkfi-RN-POC478-zPVVQrtGXr4F1C8AWCAgt4H4+aFpeC5XkAakrFcuS$Rq5kj$Z$PsVn8geJF-idHukgOE3t-g+ZVGk$cpQnzyZuSCSDQ5WhAwkNSkDr8P5GrD5$V+3gPjtCA10FrQcLmXHIhGzDk-Whgj-tHq1kQ$ZfcbDIfbmMbf0N5y+9hjkwXeFN3-S$dpkyQ5-pt+2Maea+3ce+euRZiFarxqkGgy+84YhCRkNCePPNV4DuHQOx3pkf5jcc-sWuFINr+8XdQoXBfPz6i+dWxeekOH492OhzdGkZhszq+0SXj78ce771HemoDkWBiORSNXa-ruQ-WQFoNj7G55Ad31N77JmmDB-ZeBhy8G0p7uk+-SzkjBigaLi0eXQ+fraX+nD5HSi4PuHhrL5OPAr0eyfh8LeR485raLAvg$rDQ$VnNLNohU5yoQbqABij4TONej3P1T4X8WiireW5+azgZx26r$FiHd3$RttJNi1YW+XParJT52JxtxSd-oOKdsmxiqjVvyjGrtg3A7ZvfWVjm+OvXjfkt32pXH3nXkXqAdTbHNXkfqOke3WNVWNmSrrFQykCb9oLh37$rUmVouxARbiyjWNSfA0a-M3SW+zaxTFWF6y0eqAZNdZXjZOG5fiAmqXZN+Z4A7zOe6hrhSk6bGc6288AOXxqkpQ7jtHNh93mRMPoDErVAwAX392tTYOu713BSs3WOa7nJ9Dt0EXLmEvxZ-Qy3h+O52zdKXgw5X4dStcxtEtXja1-VOztNRS6xEvZRKfcZ8QecEkGgymdQ0fZ0FV+DqTB0FQ7+ZVh-1WqA1P-ry+06jDWaI73OQgHOK7KVOtgxRDutimhk-6bDPdefoXuH-HQ0RWhHnNZd+5-gJQ$c$yRVnvmRQ2n81QGvjenkoxz41J7dVy7NLi-SBaLzRTsfGvnQ021rSi6oNVHDKORKvob2k+qmsvzbxdNdeSq4C67b7VQvUAfojjz1+eHgDhtQXKg0bg9m16-ZJ5FtQVqfAZFQAkz0$KrRcbAdeYk6s4E2nKh5S2pSwRQXjKEb-rEWkj12p5B0M54ka3S2ETMx7oQ4MT9t8i3v4ZuQ+7wmHaCafoNFg0mSzX$64KgZQT7iihO8xDVH5kPaey+eH8LDkmygkrbcbjpo-H4W76uKirt8ozigeNNFHO3irv6D-gRNyJJtSX$kbA7datxS6m+rr-r54rkeNfDxce+t6H+aK8KPTOprbyGPy2IFaNbvtDKdm0seQeqt+xqPBXEx-a-jZPLZazttS6F5mJbxmi2oR8Jh1Q1Kyk$-fQ38cagbh6iAUSk0HXGT1J6iS1RJcZB1F7L85QFPKYn7Ay$OmWEe4Pb2ziNDNxPOC3Z4c31JJcYFz85F+mIT1HMkIHsiXAjSSj2fyccdTVpW5Qo11Ad3w5RN5AMNLhCVi6uH-fMiNdSt4oCfn8XHKf75OZoyKDk8JmTmm7xYcNu7TJSV7kwFuJfJy$GOFcOY4yODjedc4PEVEyFjZO7Zu+-XTOaSujbPRbU3HbfNazJABVw-qtmeeFMyVetHSPkM3byHVtnTJxWiyQXvCdb8CPzbS4-XX8LfZ5XAjiHVqkqjuHVmzFN8TYmW0ZjFdcEBFxKDLtXceAXj653ZpoVgjdp1ndf4r-ek17OHd$avrQcoyWBxVUk+Z1sbuR6N1+fk2Dx89a69pjSHCdK6jN9zHXBepNqrHernmTzv4z-z8JvJcevomov6sob7N6ArtQtgV8tosxcAkn20yiAY+op5U3BzozZmBZB78NGyT4kojxZXHV+8XhSD5RA530jKodfe8totbm+9t+tc5Y3as5-V$jXNyK-RvgxTLfA2PVyjfO+j9aH6SXzFtt2Suzte8YVB8a-jG335PZBt-AsFN8BTaRdN$F5i6QN2Bey4yHy4jHZShRdjgFwWETRbE-9McNM4NTt3DkGVp965Erj8LNGisjaKE1GH5NCvudBJ17L-y646UJe0h531q5b+d$gHbfkyQhCO7tR3h$V$YsdQYB+sHaSJkcc66jEv2Tsom6gYqm2K9Ta0wJwve1S9+xqemZyTXxOHupJmtg2U4kPKOW3fKAi4$6JossTor-CByTKP4piKE6PPOWcVn9PSkzT5q2tk+8KRN6y-Hh3pfR3pgohxdoNKu36Tidqk+xz7bzbSkQ+9Ry$FR2PRTeJ$8hCVqhiZre3AsK8mQabXpcpQ$AkUAQGWKNzhifZJ17AsnkQTim9YwKcfA4N6VMNYsJifoenk45b-za$DoRnt+$BPO0x9TfxnkQvgF3xPTictVyrMmYT$GiTxYfM6IP--HXeXUT3PfXkQt96HMT2eevkcQHzm6DFfykBmEYz5X+BPe5qb$gz-GVyU$1pHnyhDuQiyDySgdn8BpcpScvvANvv9zKAp$Q9QwtTsY0+r1rEWX+jYwzErzYcsm7941$9vo85+Y$hnhsMXhno2kxsPn8O4Fh6r7k6guKNm$smS8oynDB3zq$dDsy7bqmgY2CNKNbH4MKg0CJkcOae-5FuZOZVSEbxA+3wTCJEKyrpRNUV4FgFmE1ma37Y0ooFsYULANtkeEYa8T78BWMVxBZtgN-Sd4jkdBWbrtsGivRiiKiuahxsRks775CcbLNOiBkhDnHQDiaXkf4ss6$$zD$o$hwPVAYA0b$utMVKyE$nURT56g7gSRsdsb74t2utstDOJKtF6m87zVxCvOsGo4vp84djQHDV+DyqB1cvZMRSb-rotY5b35TVxjnbn+oMHR9Jr6knqve4R3NYWDtUh0J+mH+Is2TmhexgnDoyu0vFtotCdxybRbRTR8n+nvkOfdQD-tCQyR2OhbBuzCpMxo9O0e1frCWjU4KZYuc10NTIoCZQy5DVTLNEoVLunu8w7wz-n0euj8O1+uP5bk6VMkYaSBetgGUi2SmEF7bi9QeDjJJF74auByoiTQHGnQ1E9t3kHI5onZs-f-QosoYXPKV37IBq8YR0KA96NCBdSp+apmuJdcNdaA0NY9DkkysSogPe9mQ$EGwBVeCtCeuYurPhhKBpHy7TKd+kySH6OdFgwNh8K+w1gYKdj5N93MAr66pDmHQNobLmxaeEDXPQs805eXgV88hGX2D7OgUCg7OEPXcwvO3$KB+0r9GJvmsfTRk+mwtFWF4dQzfsmF-oOFcEgd+vXEbDy$GNBdGuh5GQ2JKVz5wx0DdMEyc9aw0qFVUVn-Vd9jHDU1TpkqhHiaBGSPPa4BeqeB4MMN5BLaK5mXQAFn$1UPZQ9cn+7nMHFqPqdP0houwAVyAbmqte6BEwuKCrjSy+QzU9IU5ELnz4YHd1utNFc9iHuc7If0t7a-kq7CLvUWKv6eJZeG3FLj7bwAR6I7MdHJAkAAJ1PFK9VyAFNQrZuug8ZAiyC65owGmQ4IAEZRhNr-S1Hgr2o0ipWXhQXgs81f1drOgj2+XKIrD0pZbw+mGYi$RNv7kOZOtRqhZrYB4Nf38GSbrNJwQt+XkmQqSsfbR-n2$SP+SytN2OzgFo11MTFEmu2pH$QEH4rhV-yfh+ziSWARMhSESDH$AF+3Co0ZrfhP+Hfhs$9tqEfrH$Qt+LS2rN1F2tvi4fxQ1jPy+KS+fjXVk794$Zzn42ye1O1c62r-NRe+0drBVc672hpa4V6r14K43VPrk03gvAcK2v69GeQ00eH900JdBvk4gnOVzIrGitVkkNO0XcCr$0E+K1gqQScjp2Y+4d22Q2SQehd0hPA3QXXVXN$Gp+8QQH-gB6kXp0Vk1eHygGzp5Xg4ypdeqOtvREK0yOkIjnr3c00M0Cr7+O0kYhtjG+kkkZHDAicK2J2Ay+rQ+Hgcj6Z0mqcohWcgc35Gm+kVz1bgPFe242+nFaRccgQV+LGgjWS77k1jifynp5Yydxg3ccXHV$GRPVR+scVXZR+4SVAcQb0UAS0-VbRQ$XcGwkxhMGUB+ucacK2Ik40fcDemV2xVbdUAQIrQHBrE$+-9kByZE+1Q-054XT6Ig5e3z-pcVSkMebS+KcMQ$YZkBrzX+oSp2kD7IeiWmkh1dST5iHeEN12QKV7TV9A+Rj+c5e8YX05kcNc-+XS2A69+AQQgvH4vmVo4w$+5WK2Fyr2JieVS5co-5hmSdYPTjfjgHt$82XbpH1QekkEMqpO-0kS8Qr+BQbt7p+-+Zg71S6ehR4IAt7P7ZV1AE7rObr7zE-jc62CyV8bRrjkGEcXG2kibRgVk0hDSs2VkP+1ikKrZS0$cAH9tcHj1HSHRMBK91RkHFArRhsWg4ibkx0eQ$rSt$+a+kvON47fctSk-AgsOf$SMPtBamjc$vMhW5Q9ghHN+0Oe2i2C0o2HjrJrp4s0Cyz12KmwcxX80X4sP3hrg90mCOigV+gR22E6t0h2kp5dBHTyXSs2tFrpd3vQKAmWrn6Sf4XjpO75dsi1rxiPkZXe2IdZ9$xNerB2TQURBJHVfI2FGEmxhsfkuZXjcQMb4ZPrebe916SAXxqB-jr8-HGsn50yv0e0j$jDSv+MVH31QgLHLOfrGiBAbErE0ZXVG9Bt$RxV2bUczrQcU3VGcPgwOmVJkEYQQ+JOsd5GqmzFAbQjj2SSrYra2Q$rBg4EgfuVnZ6ketcvCV6QtdpjVV2ht002F2eHcC1$bHSG$cJZR+YRkc9R9r7VUhkeercwk6Jp1$vjeNzqMm7pXoQxH5WXjtkRbMgsFAJme$ROsrZasDQ$jpQpF9rpLU9FZj8G3rgx78n6oSARmRCu6radhtL1urJrvdztdxO1mErq$Ito5S8cscM+$k-jRj$kNXS40tZ$R32FAH15kcFjAee2rrgAIrx0Nruh+NhoSqyurgy-KA4FKv0kC+y2BX4K85vdmTVY9n0MVj6R74ojYG$WiCNxSnQNV94SrzytONa6smKdV4X18y4-C7kC2D$cY3T$G6M2v0nv2Q+VjnQ34qus0c1REgh2euvTrhM6HZh6jYvzk1xXfjQVM1jX9nNcV+rYJX9oYB0J2kpSM+xd-0ctt4kAiXjFhVm0$eJRumLgbjgvs40FkAe9-Y0XSOhZb6KcDCV2n$urcbkAAT+OeWvxJjWo0bpb7dq7B02kHQkfJz1s5nokkcCk3+FZHvu+4d7QrXci1ehMVUSajmP+0O+raVBvHON-gB1zrdGmqUsHOqV--0jtmkiZiZcSXz4Fe4wTtrQOyMDrs2ZykOOcmV1oj7j92kxA2qOh00Urent4HFgj2S26y1$+djM+xjJbgyn2a9+pcge2dw5Ln+ygZridX4C$EYcskpjIRx26eU7MghCX-zD6MgkxP3Nib$9R$grBbPejt21cFbfr+-ksgH2xSM4uVex$KQ7jOR2b4rixUfN9jtjyJZ6qbAH4zNX8bri2u0k$cEcaKcfiV4G+bWcWws8$-93Gnwi902vxVNkEfzdQoOe8h$A9wwfHiaTs-zrcrUxSWip1IyWsZ$yAj7tcF3-bCaiRYBxW12akfCn0nfjwiBWqjKfUvgYdxf51z-Y4-7dYPsiQ0YS67SDdetLWWbx0UVPaex7$ccWs-8rY67hkwi+8-j-jaF+-HofmRAQ7CpEYqkwe3JP8cYVxzpMWe3JZsU50sdxiUidjc-G2iViyeu0aFf-oCy2pkHTA$jL-ty3+tJeL43CwOUC+oj7QDfrzI-ygWCQuMWA$X4zUtiVf0+HQMF-ja-7QJfMWiOFWG7CwV+ijB1MFEQvC$Qv2rPhLFdAr$FQK$Ai+8VtA39REyWKKXAO6mI6E2gGtMbiFsESrEcexULehNed7Cvk8IkhKS4dAXgv6ULAhJP8xhXgCfn6dwAXV1rwynXRX0j84mhXvg-QyzcuRkz$cDCS115d8c5dK-K4L9$If2YzkJh4CKtNjP$66rL8Eg813x4Dg6PWj8V59emMGyZV5Nx$L1uj7GoEdrNuC0Rh8gDty7e5sVw11mQWWoWp0GFL1Xe$-f8VOjSsGy2$j$orPKr6FG63$dGjB2u8ymHksD+26wXFAIrREC2eMFkm-kugMRX9W6FiOc-kx3qQj2GYLws-Afp-QjOdKddgdb$T60uRvVqdVhZg-QwrJ87JPi-B4LtWr1qWJdx0UXZ89cr6vbPNA7Fd-FY$6oKXIARQQEvps$jAPs8Rrm0RhfCkEOs--Gj-zKgPjyzDNgdhAAuMW4jHGj9FufApj$8QjUA6JJKRX0QJQ1WA16iVR2ikjXVK-B4dAIjdgrB+8EGzs5DqS0A4zzjKfehb-etcIhVhe9BfzXBstyPryEzwUBg9qf8boNcYZ6ypcgFOGxS0tq5nFUU5cOemT4a0NAN8fxFq0fgWhTgBsPw-a0Ng444fU9vpV10o2WkkG9A6w1PNIkfHz-AQtF7Ucf4DkpkAL3Sccc+gOhx-+NiSvQTK2W6Dz0tgjPQ-czy9Im0Ka3zpAyF9ck37RjZ+gtfvfxUzBZNY$qvHSerytHGQhmLeRmw1uHTqYxrgNdn2nJ77NeFFqjr3iVQ2Qwf3PY8wz-EwxSf+OPdrLsq9Xi9E6bcT-ACxJ1fBH4ZzCJgRE9b2jGrNdMgpzHkMi9b6TPp0A3BAEz0wHOhgTQCjnVYp7KBdnTIs39JKMJ6Bbo3p3on0sM7TwPXAk3Unqe7fKw0XAj3n0PsMAKHbimC3kEVbgny6Q887kV4GCs-YF7kywCxJwisx6eODGvkbq32HQF9PnTOCvQqKpUtPzbJDFxJXu$HcqqaJBCA2euPYYFdq5C3sJGjSpYFPrNS33nGjSfYr50NUg$+8EOryrD0Aumt+mjPpy77yAk3+QJz7nYh7+vKzunqK00KkPRT1grEZXK7o4PKT1itO0IS3QVNzTbgQnCXdfY3z6NqYWQ89OhvDeIQ8zh1wMSmT-r1Nu35JESzK7y3RNRic+xSpD3y5ANc3P7pS6DfFzJAig2GqzMy61-TJ744bacMmyKkLJIfs1CfReTV5mymAgn-eU$yJdyBDgLqIcpGJ0z$BDgVQWcpGY237B2F9+C8$s1rxxBLgy+wzBkvtx7r5FQG3IZCcE5pyYS27bcUVJizgNz3bRJN7dcKPzTbFVE68$FTb7WJVKetiszKfFdsnb$xbEsU5vPdvBKzX-2sBeTi7FnR$y-XiszT-3KNc3u-ws9FWyDRT+KY73s$5yw+BN-rR-ITn5y$2inKFK7GC0byRxacbAF2zESJTVrE0mXFGbBsvOsH$ypgCfN8rhk4d22NrwRiBz8OGDBrihOhnV7RrB7+k4rJ$9ya9rAdSJUA3GTBetrhywjwyUraUFpDz+9Jjvf9HrXgcp31Q8zbwSqPg6OdLBeSw0n70tHXH1n$eDBMF$-KZQprsV02RrrrHyVMnV4zQ5+5gEvTy$rB$j0WncDr8sNwQ5tAcrOheF4q1pG+yXd1v2C5s2HBa9gv5q4u4J$RRJbyrrkRhr9+7cmQhew2fhB-f4jW4722YOX7JNS++gN1V0OhQ49vgAV74IhGYJ6ZNvhQyjK21riW0rrvr2brrreSEqeMWrgy13zZrxrbrJkUPZ$NrQkvXMH0dPdOKzDJqiMvYE2d4csxG2xMRriP0r+GxMvYxjcwJ7cuqxMJ6+ren+MjJqMMBfwIkOkyj4wVr1rerrWyZ36qekVhPRk6QSD0rhInYLPsud4jIhhVJ$naRh+4VqjHKU2PZgKzZjqrrrKgRkRH1w+rj2PCPY+T3trqIo0Nr+skB5LNZygy+iB0Hyjiqxr$kkkH20WrwRnjn2xdjnQSSPCPpS1dUnQrPxuSodJ$Sdi+jT55S54A9qy1Tg3ggcmq60kqnHiWAYeJy39ztrxJSxpr72p6eUU7oMCyEN0nfybeOvJB$w9ME2UHdoyYvwr8rgyRGrL6ux64N0ArZasncO5yr-hBfCrenk2c4r-hVrMrcngvb$sJyMVtVnb+jS5wXveG6VdovjeHVESSkq4cnkpQMSIrZrMrqDvhcqZYr4u+5a0nMdF0Rcfr+5Qt4zdB0Vs8r3trr+eeI+jeU0MvNhKyN0EfEy6OKSxtrDIf22keLTm34qB0Qtd0jG1YrrjUM05rr"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: 2+1TMClTwd8HFo1WcpjJiw==$tHxG7GSUxsi8AJqs7D6hUQ==\r\nset-cookie: cf_clearance=xOH2dp5uCuoqvgyv4ma8AUJ8kwiXh1TdRbDTU5C_DqY-1771025212-1.2.1.1-aO3PJyRE0aQg2olRCOqsssQMzLAZ8vhbzqS38F4P78Jzk3rdFa9_Ga5JQEvmy.MtsLt.KMRBOBKFVrGsd3ASN44ISXTdUP9vrS2gHtv3ksBXjAjQkg1vCmoOiwmH561dtO_L1dHcP0XjgvVrO.J0ffb9heZCUdvCJyymxL9rVOrVjtOxR2NM.mhq4v.rnfOGzFNhXy52HBhgykIVW2Q.ok3UfiX1TXpbEBA4TRDyLAU; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=sentitent.xyz; Expires=Sat, 13 Feb 2027 23:26:52 GMT\r\ntiming-allow-origin: https://claim.sentitent.xyz\r\ndate: Fri, 13 Feb 2026 23:26:52 GMT\r\ncontent-length: 0\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9cd817db89f435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"claim.sentitent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.sentitent.xyz/cdn-cgi/challenge-platform/h/g/jsd/oneshot/60138c04e6b2/0.26263245664656115:1771024251:ek5ktL8Hz6lT-WbRr-xASSwoZ4ncAM_C752eNHWf9iY/9cd817da69bd35a6","fqdn":"claim.sentitent.xyz","domain":"sentitent.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claim.sentitent.xyz/index_1.html","date":"2026-02-13T23:26:52.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sentitent.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 12:49:00 GMT","end":"Wed, 22 Apr 2026 13:47:29 GMT"},"fingerprint":{"sha1":"E2:DF:E7:82:4A:9B:F5:F9:CA:97:7D:2E:6A:AA:AC:18:DA:28:39:52","sha256":"C2:82:39:C3:D3:EB:80:ED:38:91:02:FB:3B:CF:12:ED:D7:32:4E:DC:C7:4F:B8:11:A1:94:93:F6:02:55:3A:AC"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/60138c04e6b2/0.26263245664656115:1771024251:ek5ktL8Hz6lT-WbRr-xASSwoZ4ncAM_C752eNHWf9iY/9cd817da69bd35a6 HTTP/1.1\r\nHost: claim.sentitent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12161\r\nOrigin: https://claim.sentitent.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.sentitent.xyz/index_1.html\r\nCookie: cf_clearance=xOH2dp5uCuoqvgyv4ma8AUJ8kwiXh1TdRbDTU5C_DqY-1771025212-1.2.1.1-aO3PJyRE0aQg2olRCOqsssQMzLAZ8vhbzqS38F4P78Jzk3rdFa9_Ga5JQEvmy.MtsLt.KMRBOBKFVrGsd3ASN44ISXTdUP9vrS2gHtv3ksBXjAjQkg1vCmoOiwmH561dtO_L1dHcP0XjgvVrO.J0ffb9heZCUdvCJyymxL9rVOrVjtOxR2NM.mhq4v.rnfOGzFNhXy52HBhgykIVW2Q.ok3UfiX1TXpbEBA4TRDyLAU\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12161,"data":"iG42N1j9Qtc6o0rhQ$Q68T4c02c$r6rWAkr0hQtjwrz8kWi34c6jTkHd2jhk6yr8dT2cfrdmhjOUyikCfvreqCAvrQsS01Ar+5E4v2HthuM1+Ctb4h2HzYAy-BtPQrQSHMIuQc1HOQFPN2r+1s-u1AjraeEUAep4cCur0Qn4nSXRzkm4Wke4Wyrt1eEfBCCZrrJFehbYPTjDJzqAZ2rKv0rP2QRCv$r-y3tIRjKPZxkL$SF8U+uLT2r6J0rHVte9GKN55hrMQDNFMZ1urrAF+s201rrYOO0x1rJ42jYDf41mImN4T2rRJS2DkyeXdx-fDghA2ryT2SQ5I+rrt45eXmk+0LA0un02j-C0ruK142rSRHrwsk1442QJ7impffkzqWPAW01xNmStqo0SBfmV4SCdXSfYf+0Imjrkg-YdUv5rkedhdkGbVWr21WdxWGXFtFF6uVLUFQ8T$2c14vrr+smMKj$gE$RRSnrQhxXgkJdRo+IUFqIbf3da9bdbVGw7tCb6IVrt01uP-kR6eoiimrJjK$psRZmXYOVtix4SVfzZKZrc$tw16-PRnW$cBOOIAscpV-8P1ZB5szRjz+nmnrjmY1N8NPIKPj8zXuVSo3GWbG17M15rZXKZkyODAEVG4Oe+KcM4cgJ0iya$LAR7fmpaJp2M52fWz4BH5sukKi$IoK8gOqcXaAAduxLkjyrTaIW-WfVMdOUdg5rV5XZmfddFZR3U-URMcDcPdu5qpsO2mNd2a3PvThSZvy5qjkPRHaEMWhdXQjdrjDe1SQSeXm+y0Xe1Gu0Zm0z5LmytjNg9Mmajasrj55kZnk6+hw+tzi6PY90Fgk+yhQJkhukyBONXhj2petAyIjt0SNc19SAQ$aXYk4gy0OEgvfc1ZXQHfkeAQktjCXk40XcRa9eQGtrpekRkWWX4-0kb+gRgknN$vtt4hgqBGSHkrkwNRw4VZ9XRzgqtjggQGsL1frAz+Gd2Zcn+NA2n-2$TFrR9kb4SYHnkSb6qhApvkMJnFbreS6RPjuvbRnSvhMA1RAdXJghSgAQA6RRTAbkeTbMTEOt0NMyQMTOXQYNYKq-vfNkFkZ+yZ2zHucO3Txe2zc1X8DYjn2DeJB4UV+IyAjx2nrkMJkQ6jfXd+kkdkPj-g490xcQTOoXXY+knSF+ZkbQ+y$FeXYcxPAb+O0XRcXkmm+$iC9QeVWLVj9WApv2Bfky02hkXP1Yst92MaJO2Ma4UqhHAkbSgkbWk64R7GSFwm6bqtZQQp0SsskeOz96cP9jtrW4UbzGLcreNdsrdvW6qa$hOFB2hcxnvocr0Xc21-$zrSe0Nc5w4OV6F0yS1FkcTEoSNcmxg7J15fhHcxqywzB2XcVtrOXRYq9cFRXL+3v2ZQesqZ+mPw-+ZVjRJE2hZkjLS4R7gx0gCom1jhPPQQ$0S7LCWreP5USeW5swpLBFoIBHYobcQAp9kjoXNc5iGCqTu0d77zUK3DzpJzFzpezGX0C7yneAIz2McEvOJ0Qv9CNqabLzBrJugjtfudSUmuZgzIcPCoOu$rLwUmhi+e0Lm2HPmt+rC0$r-8fWLYLpua6JnwXd42WfwXzBh4hRrjxuXrkGerP2Tjx90cHcEk6+uzXK$6k7tDZA9S1wbhr+T9jkQmkhoSCrKQyrBHricRr6k$R$QXq3dGz7O+$00azbsxPTJWix3cnkNh9k4Bkvr34GgZF4Gb$Fd1kgkcrLGjOSQJmt4g7bYCwy7jEghQJOmBAacDv5QmPgih1j99QBAH1P+gdCX$tX-IU+-WEPspkeXWcFHbaVshZK9c0FXjkWrdR$FkVZyVYksQnv3zPJVL4o0Cjtk-9VVruR9bVjA70DyNcZRIj$ywZft46FmH-pdk0RhhQHx3FdY4bS9QH0Fi07JFjLkhOeFWf420$FmNreh0+jtLASf1UV4VOF6yqd4a4PveX-1d-$k4URZFJwnx9O2$GF271vxqWsfAvz-JIHhHVjf1OFFvfGkEHsARzWS1C15NC4rkRK1Si0gkUSKy1juQKQJgRrcR4XCjmP-PAeAdzbbFtQ+M4hOMaAjSY$P9CF2OFoZpjk92yX3nzD-9G05qA-k5a4AnU4i5fVEDO1$Sbvt7nZetr1NxE4qTQjYJ00qGEnF3f-rQ8yS4CSVyrg$BiAF8QJ5-Qb7kgdi9p0N7h06p9EYY2drFn7uZk6qBtrzw8zdm4GsJJsm0vrSe1gNp7Dai11PyijQjo+mjGTXKZfPaRxOPU0UJqFY8taySfB8zbQ6yrDfF9Sm7rm-2QX7VAsCHPw6thkaTH1XTQ$k17u8cb7+OAQWADAk59Tr+wdS4Jd0NtXV6WrvyJ$1cVQykuinEyGQzsZt4yBZOWQORn3sx0SPQrj0-vFkyA5m7qavcFxBAj7QC1h9sYnATnKuR1tqG-m46tkkxJgyt0rLHAfqtrh2IWtcZF8SiKRv51ksUVgX3VfWLDFS65ivvvsh1d0QEIQ4Nb7kGX$QKanJwdkgWcNswV2ZWAJAzdpwNpDuYeJZk0EmArZATZ2BMMVhcSb3vwk0Xw9cHYXR$Ahvr$Jaa6$0ZMoNxe2gfi3tbyBY+EaErQWMSHV$zPgp58vBHH$6hO0Q1vrjgR+7-S52QVZQBXkMLVy1xZu-bKzG0roqkEF05NmCcTj$0HFnHZSCVAZX2qH2psGp+j54cbd2y6572VB2wV7nw4KT5MhDMugz3JPbrAXrh1ByjnJyVjFUJFiBPQcKB+AJLoErsfSZjSt9shHQXg-+4vQHynP7OwXLXI5jnxtq$0Z5z794yTbiICOR6qA9Bb5nAsK6$pgTgujrsQj7yb2$PciVXzt-rj3F07rggpsFV0KzRrpvGbEnO8qbdW8abAxvCSQWtj5IFH1OKCQWr+p4p0BcLQvp+LVWZq+bnBz8oWs2S9S-iJXJ+m$027rqUi2Q90Uhcjzs7nGz0kbwfgN-k9BXA4WWMRSR6TIAnwaRTFr1H102Y$xQtfS-+cDCOeTr4cz0k0bQGjoX9v-3-7$CpyH9hN-TUfhI65VqvKR9M$CVqyHu6tSQNzdrtoxsbEmXa$x1XW9S-fxcx8FTMOkp1GkA0tbKF2baGMpJdEzp$C0hWpFAYx2W3Y6yjdtVsNNfFgDPFZzG0XLgMSSGmD37nSbxTfp0yFU-q$1k-vRu7et4x1i9X4h+QJ4agi0xdFswRDAtckvM8EZgm6bB6udo03rW5oYkqSVhR7FQ58eYFwFUimGziq0Bhk9xod1kz-rNNEXFi1SnNfKG0zSkdU5+$PjgZV395pQsoahDiD-9dxwmgipTjpPi2hk0LpZFd3c0+8niqcWkTwuQ0Z5+TF6KAZwM8zrbeJjhrqqYkBCtVuenw6qChgBpChAWbIAtV91HVLce2+6XQrDpYJ2hSYhc4+gAf14HWBF42QrxdE3D-1mn7DVVRPxT3Xk7mUSV56joOnSjVXdyj$1O5F1oRgmnStj$bUS$kMVKzCzBkJDV8WD$xC7cDAdDkVxb8JWXOVH4Hjck5Q2P003A3qkJ-NbpgpQhmhD4iAPJ5Ccr-rN6b+xq-+Oe0vS1W+Q+FN2EdqczbADH1r5qcprU3J1pW5zrd2tH3X+9+$rC3czZmsSSQFSF7$0ygSzk7M-9FM57k4kK21jEHjrO-CWNx3PXPVcGcsVQ2GiHSVmh5haGAFWriBmyi4c2NV5d7+hWm5enc7dbj-FJ85apFa08mR8e1SrwxVZkbXm10QWi1O88cNRGFiQOxXr+dG+RO6-o5vXo5m3HRwS5bAPXmFZUdtSs2SQF3WbchJdW5MhEaf3c-04jPti4tPV4HViXHVD-ZOQ1aO3c3JapDbiiR$ORkvVGHhj+a7dRadDh3BrEAENBzEerj$7Frdd2DgRvQJfg-6AEVDgpjym11GdIZpj7D+eLb3hM1M1GjU5whO0L3xzsd719PjdbQW8tmWxb5XQ$+15v2-mcm1ZFgvSYiHzqQdHv-ht-3ygRDBx$1PPK37enH-hX4h5cZNFGd6Ho55OOXz5Q5XgK1+8657Qtj10jd0NH5-Vc8seuP$0XHn86xWP-+0guNUD5rjAbmbhE4Q1Q1+xcmWmsbfk$HVjmWpxcx3dGFJOebff3PYSX+fa-SNmP2gA7hAPPVVjrfGOrAFXChJVgegt4H4gaWpNC5X+AakrFrjZ$Sq5kc$0GdCbnhFNJW-idHu+g2QDt-ggZVGk$cpjnPy0jZCSDj5V4Aw+NZk52hD5GQDx$b+DgdXfCe10FrQrreXkc-GzD+-WhHj-tk+1kj$Zfr75cib8MFfRN5yg9hj+wOeWND-Z$dpkyj5mpf+1MtvtbDcN+NuSZaFt2xqkGgyg8AY-CSk4gNPdTb4Duk12f3p+f5jrOmsVjWINrg8XdjoOBiPP6a+7W3eNk2WA91O-zdG+Z-szqg0SXc7hON771kv8o5VVwaOSS4Sa-ruj-V1Wo4XzGx5edD14xzJ8m5wmZNB-yhkRp7u++mSzkcBagtro0eXj+iraXgnD5kma4PuHhQLxOPAQ0NyihhrTRA8xrtrJvg$rDj$bn4ryU-Uxy61FqeBajAT2TNjDPXTAXhPiiQeW5gaPg0f26Q$Fik5D$StfJ4KXYVbOPt2vTx2vxfxZdmo2M7s8xiqcVvyjGrtH3e70siWbj8+2sOjikf31pOHDnOkOqedTbkTOkiq2VN3VTbW4eSrrFQy+CF96rA37$QU8V6j3ASbiycW4miARamMDSVbPa3TWWW6J0NqeZ45ZXcZ2kxfaA8qOZ4b0ye7PON6-rhS+6bGr918hJ2SxqkpQ7jtkT-9DmSMdUDEQVeweXD91typ2jz1DBZsDW2oznv956REOL8ETxZ-jy3hgOx2PdKXHwxXAdStrffEtXcaX-bOPt4-Z63ETZSKicZ8QecEkGHymdj0iZRFb+5+yw0FQ7gZbhm1V+e1P-ryg0Yj5Ptcz3OQHH2MzKbOfg3R5jfimh+-Yb5D7eioXuH-k1RRWhkq487+5-gJQ$rGJRbnTmSQ1n81jGTjen+o3zA1v77VJ74ro-ZBtrDRyCiGvnj021QSa66TbH5M2-ov672kgq8sTzFx7N7eZqACY7F7bQTUefojczX+eHHDhtjXog0bH981Y-0nxFfQbqiAZFQA+zR$orScFA7eKkYsAE1nohxS1pZwSQOjoEb-QEWkc11pxBRM54+aDS1EyI3761AMyEf8a3T4Zuj+zw8HtgtY6TWgRmZzO$Y4og01yxai-OhfDVH5+PtvJ+NHhrtVmygkrbcbcpo-kyVxYuKiQthUziHe4TWH2iarT6D-HR4$vJfSX$+be77afxZ6m+Qrmr54QkNNiD3cN+t6kbtMhMdBOpQbJGd$1IWa47Tt5M7mRsNQNqf+3qdwOE3-a-cZdrhoPtfSYFxmvb3ma26-hnh1j1Ky+$-fj3hOtFFhYieUZkRHOGyRv6aSXRvc0wXFzL85jFdMKnzAJ$2eVQN4d71zaN5T3P2gDZAcD1JJrpWzhtW+8IT1HMkIkCaXejSSc2fyrO7TbpW5joX1edDwxR4teM4rACbi6ukAiMaN7Sf46gin8XkMi7xO0UJK5Vhn8T8mzxKc4jzTvSV7+wWuvfvynGOFrZK4JO5XedrydQbEyFcZ2xZug-OT2oSucbd-FUDHFf4oPJeBbwmqfmNeWMJVetkmdVU3bykdfnyn3WiyjXTC7bhgd3FSA-OXhrKZxXejaHVqkqjukd8zWNhBKmVh0XFdrQ$z3K5r6XrvAXc6x30uoVHj7pXn7fAr-e+17Ok5navrjc6$Vw3VUkgZXsFuS6N1+f+25fhEt99pjSkg7KYj4EPHOBNpNqQHNrsmy3T4P-P8vvvcNv6e6sYs67zN6ArtQtHVh66C3ceks2RyaAK+6uxUDBPoPZ8B0wz84kJTAk6X3ZOHb+hS-S5tSAx3Rjoo7fN8fofb8+9t+trtK3tCx-V$cX4$o-RvHxyrKA1PVycfO+c9tWYSOzWtf2ZuPtN8KV$Na-cGD3xP0wf-esWNhwyoSd4GW5i6jN1BNy4yk$4jk8ZhRdcgWwVQy-FEm9Uc4IANy63D+Gbpp65EQjhrykiscaoE1Gkt4gTu7Bv1zLmyY4YUveRhx3Xq5bgd$gk7ikJQ-C2xfRDhnVnYsdjY$bBHtmJkrO66cET2yC6eYgKq82o9yoRwvwTeXSp+3qNm0$ySxOkjMJmtH2U4+PoOViiKeiA$YJ6CBT62mC$$yMdyMioEYPdZVObnpPZkPTxq2t++hMSNYymH-3MfS3Mg643d6TouD6yKdq++3zzbPbSkj+pRJ$WR1PSTNJn8-Cbq-i02N3eso88Qt7Xpcpj$ekUAjGVM43-iiZv1zAsn+QyK89KwociAANYVUNKsviioen+4xbmztG5USnf+nBdZRxpTixnkQvHFDxdBacfVJrUmKTnGaT3YiMYIdAmHOeOUyidYXkjt96kIy0NevkcQk3865zfy+B8EKz5XgBdvxqb$HzmGby9G1pkqJhDujiJDySHds8BpruZcTveNTvpzoAp$Q9jwfTBY0+r1QEWXgjKwzEQzKcBmz9A1n9To85gYnhshBMOhso1k3sdqhZAFh6r7k6HuoN8$BmZ86$sD$iPqnd5CJ7Fq8gK2wNoNFHAMogRCJkrZtvm5Wu0Z0dZEFxe+DwygvEKyQpSN9d4FHF8EXmtizYRo6zBY9rvNfkNEKahBz8$PUV3BZtHNmSd4ck7BWbQtBGavSiaKaut43sSkB7z5wcFL4ZiB+hDnk15KaX+fAsB6n$PDnonhGDbAKARbnufMbKJEnn9-ytYgzgZRBdBbz4f2ItBt5ZvKfFYmhxPV3CTOBG6yTphydjjHDVgDJqB1rs0ISSb-QofYxbD5yd3jsbs+oMk-9Jr6+nCvN4S34pVafU-0v+mHgIB2ye-e3gsD6$I0TFfofC7xJbSbSTS8s+nv+OfdjDmtwQJR1O-b$jPCMM3opORe1fQCVX9yoZYurRRNyc6g01J55dyryQ6dEjsuhHzwP-s0euc8O1gudtFkYVUkKaZBetHG9K1S8EW7FipQeDcJvFz4tj$$6KTQkksQXEpt3kkcxosZB-f-joBoKXdMb3zI$+hpS0oAp64g$5SpgaMmIJ7c45tJRNK9Dk+yBS6Fdv9mj$uGGwbewtweIYIrd4-KBpk$zTKdgkySk925WgGT-8o+w1HYKdc54EDMerY6MDmHjN67Ee3aNE5Sd1B8R5eXHVhN-GO25x2FUCH72QPXrHTOD$KB+0Q9qJTmBfTR++8wfFVz4djzis8FmoOFcEgdgvOEFDJ$qN$5qu-5qQ1JoVP5GfRD7MEyrEtHRqWV9ds-bd9jka9RTp+q-Haa$kZPdoABNqNBAMUNxBEoo5mXjAWnn19D01pcs+znUHWqd+7PRh6jGJbyeb8qfeYBuwIKCrcSy+jz9ELUxEEqP4KH71ItNFrEaHIczIi0f7a-+qzCEs9PovYevZNGDFEXzbGJS6L7MdknekeAv1dzo9byeFNQQZuuH80Jayw68PEjt41r-yV56chtd$mm04N5rDyk92ye7RGWyWrem0GjGBU0i5kdGpm9pBOpkbqPXe5GNku6khabmQ-M9jks2Aqvh2XvSthY57Bv16FyHkzeV+cQGt3ZsnkyPnFUQU6HXxroj-r9eQJc6cFR5sAVD9tUQMmxcvSMpH5khc6Hm2N6b7Pcjoc2jxrOjU5$rAGv$rJR-cK2y2MqgT7S10$CjzWA+Q3z1eAQGyV2w4ktX5OSVgr7C4wcyfH1AeNr$1HRNsghrVimnA2w$fBHfc0VVQeDkkfFgqSQjxyFgU0ecZerXQk5$0u0jktXT$Xp250GP6NO1ky42yd019ckfg8K0$$s4nxeHO6h2XQXfwe40dNje1S+jjgUKtSSA+zQuyTA9oade4ho072M05kr5i0kSytjB6NrsjXjrVmc-80w$AyQJj2rSXv0GBQ5fpXwEehv08MetZX4F$sXiCR$Q4cby852hv0Fjyjc0$tzzX42BZY+VMAngKXc0GGzCgfgFCVXx034R5O1gsQ2hCVa-1dfveV2744ujmi6ku+fmo2Thw$4mQkQ0IA9s4cviFkAXo02Xxhrbg6VXHqkrXG26VNQAnqoSIQczRWVC+S+-sdSw0L0XNbmHhgGSw5PygiDoZZsQS94KkpIrm8UQky0TzgYCk1XV2S2OQRw6dijj-hQXGddQoHc122XqSJARsa-fxrMeH$snr4fOSskMrHEItQdZNWqhZ2mST+tGtsVSC21mjUHSW6Ebjg9h0jxhFOcWO62dm3y5BQ9Q1t-1FFiVF4Joc2ACXgFLth0w4enNtCV22Spa4Gp4ccsVXCjdtc5S$NjkeyZSN0t5d+Q-2ac2my$v5z5VxqD4dXSCR2k6gsh-cCXMVA0br+ZHjOeXn$q-cO18gStRXf$wbQPP8H8E00YAP9iIrWj9jAm54-$H$idNGjh0A2a1jdinkGyT9jh8yn5ARHzI9rSPtts$hmsjX5y$aHcQtAj+Mgbmbqkd7$rvSHFKn4Tn6shgTgZ140ayIKc+0GXiO3mkGR$43+DHi1-0+G+h2tFq2gcU$spr6M6gZ2oVG04hosbk3hcs1D4wknyBYFEX0tQXX+pKQAAdQdr7rc57S2CcI$2XLm2k82ecz-vorokkGzfrbhbgKvyeDh30k25csfrimjG-sfXtT22XnyYzcfe6PsRv220UGd0N2cGrbrbmAaeZysgVqXQZrbpzNkOHHXseytZkk4e$jSmu$7em5S+kqb52BVXrokWrcvHEr1R0rXmHA2$FASRRipD9MW6B-K2ceG0Njtv2mzsZJ6-7dyx0Q83MhbrP2DvPrrU5a45hEui0eMO63TAtRd6tY0Bkc3tQoGo2A2+zcZHivG6Urpbr8aI+9mx0aSxjQ2R27jcGd-kZkukT$NR2kKjrC0n1R$rrjRo0iV+ha6rRET5jJa2gnfTZ1ewntjjSJ4gGZN9cAit7CaWgVHsrwk31HhBYge-uRcVf2JCHQ+0kqcy-Twf9UzNQe$6+Q9YMXe$ixjwKqxpNH$AdgJ$rXvrf2OReobdjGVUj94AUYn-tHBjtENrPJZSAKyZ2hvP$y$0bXhCj2TJGPHwX5AyrWVDSIFtVk8cQr1O$0g9gtd+jnFo6Lms2sn7R+e011DtwVkd$E+CJT0cus4fba2QC211nmG-zqBJ1sqtePv3FjFX54jjhXOJ3$YMjTmjjuSKSCdCq$SXgg2240T$19rCktR493m54m2HCgq0k-QXfGF0cffpbfSkuCt6VkZtSQ58dh5$MRiRSfq8r2ybHMh+$kqryG4Eg4WhZ2P4rK1$fGEkkHhj7OQjgS0$k$aA4bjFrDSK27vXn+ycDjW2vRdgeItfXJjdhZzkRe7tTXxSH2r5KyaQdibm9Y$QFZwrmZiVcRNsxHtbj0gCVA084$23sO2c62bSmGMVUR4sjMWN0F2k5Ve1rrIbN1DrZr7A1wivOX-FRV9C2H$aVj+rLrTw$8WsQfrsv4CXxRxAWapHY8Dk$AZv+mtOFzrBGJ9-++Wiu-S88qY9F0rhkcFs8DyLngxRxeQXzO2Cc9FYP87TWIvkyZmNY7VgOXp8xCu2PZ2+ZBVKOM439W1AFWNVfZhVBVPg1MDQRoCgCIVaCc8mMFbr4CY96haTg6rY8m6E2R2PCZ62H89d-2KY0U4p2Y-In3EGwKiWPbC-In5xUIQ+Pi1D8zr4EY4HscncUVOCN6Wun4HXr+-brrQTANS2JOU-KpjGLuzT-zXK80grEbjMuRobC-74AgU8HscVrShPs92BEO2vObC8GCguiYsCcOS7GPsr2bpSrJ$jgEoCiQy+i0T7cOS9CZQOPQoeeqw$-yWt0wa4jpQWsZsfUk042mMbrAEQJziYpSfL06N5RzQVSpBkrN6AzEO6kSsZFTkY-$s42jqjy7yzr9At947Sn2vgSLVSgfr8uR$JKk6hcgB9WR4agaR$NzSn6AfUZjhdfNNrUEhXnGoMOimwgChRCNHj97uAVCMQ8b4k60dpNrF0QhpRkYthI8Jg-MfseGJ6SvCHCoVje$kJRPtO9C4h97sA4+j7N4gw0HesNa7gfrxGU6xtzmgMh$NYGgRo0Qof$cPsmtQXrS05JP4He8$yEviTp12sfNUuY9JO2912s3N3gSzgbfw+aFJsYFsttmn2KhN63nFT9Y-4NNheYv+FMVaGRE52mNACFJ-KvZtTBWNNH$r-62VoePb7r-FY952tdk6QpSo4Y91Yk9WB03hqgc-CzAQXobC-2SurUe$ZXWX7th2a-WAYT7yzrJ0yC-VTHskycSrGsB9Y-cQ6hdX0bmELjgSMauFdQRgz0PZb9N61ZrrEstAPj8W$PxZJgyArFsD3m7YO9Cw-Gw1weHXmsGuMV9ceKgv7aI2GJ97-c5j-OE8MvjVNXMEemPxzjE85AmRQjcbaADv$VNGimcf+1TYG3-hmHXD9O2OvzDhw1NmHXcoId0yhCX9Ea62R85n4Jw$iwa3dcjhzy6y3pHtEzNZcza1be028izV25mmZNJPKViP5-HbpJs570Acjur9trA96sG6SwuTK2SRI+6+vFVR-Csp2$iPsryjY8MzW6m3noiIVZX$33rrfsWAZ7oNe2bEJYBJJOWm-V3jnvdyWeyrpr13PSUFzmk87vTJ3oVAKS-6FzfmkESnGYd7TNbzTx37JhxBPeT7qTbCwIUKUxb+73Jj3VRvi0fK1dZTu5$RyM7VHx7-TmC89SMzaNe2xJNrEEIXiQifP9TszmAjuBJK8PMT1$Ou+SiYK$r4vDgYJ5up0KT7P8F3gJOCBJJUWjhjY8qYuRyjUVHTszpKjMSnKrzPTszyQEMB7KrzZT0idQLmSjYLehA2i6Q29PjY0daJFFqQviz2vFd7T9gmJPz$7KTzkNmg6J5Xda+Gn3TAgWn5OP4xazM0sQKn3XdbK$dOTMzHQmTKhYDeEAI-rh13n4KDz9nE2$1hMBA6Vdwznit1EOdmoV7MIqiR1GIZ3VdnK8sz+1TS9fiF7qNy6qqK1+e24xEnTSUq28X$KZF1ngi9nQRF7Y17fAJFn+8m$j6hxpAdgf+8mMrThxpN$iib5e0XK9D+$0iIbhepjK3PmA8iF2cedYaUzu0rKPJHV9gT2xgAZzeRIMMVv13FrHzKn3vMa46DengFCqFN7ZrxdwZsz77FbNv6b7cA33n7Dz99J+P-nNzC76bftJZPznQKHRGI$9Kx7vs+i6JCTUFo7PiAYmx-E2Q66qDKAb4Z7WsUzKfzeJVK8h31v$HUgnJCrUkQ$MpNbDn$fSYAaXsZXEhtj1g44Qhe52x5EGjixhc94EgvgV2b3mXQrAbHAcDr1Fdno-Tpex-Zr6AfhSqHhraGDKiSDAynPWcheS0aKk213MYxpVeBy3Uxqdp5gFVcjkSVbYQBx5CPtTdhW2fsk4k2rrjqgHSvjg0KjMjrJ7q+r+xjdex2IhQx7uhKcQ2Lh1QzReyWYrn434J$jM+$cx8DjqMp1rRAb+VTvJrrjk6rHjF2E0EQpGc6gEO1rC-gykN6GPJO5SSXAGvk4EQ1+JS-vz1a9eNvTg-q9rJrB$42rC5rrA04aprrQdrYJPshcneKzdhi2e2fXki3xQhrmAdPS5Hg5yw3MbYTPpB6ygQrfMY4cWd2r35rjYcWpBo2SuqF22pOWpTj2Q7XW0+YoPS8KL0ymArAfCr42Q0jeqVIHfJSetH5XNrdM5rQaST6iDUFQrrEQeAbgO56jRef2swPGH5hwzdhp2rrNSdXVXVYm2r$HuzwXnIZrjoB5Qhr7SbIU-EqjncO75jqrNpK2jj+xrkkehp5Y2SyiFr72ddiuMD1$WHxxSPmLVP3AbkzcS2qIMkZQ+WiJeJmISe0-pTkcfWX8C-w17JNPgZjiJdMW2gyrBjPDp9d0GjQ5jOveO$qqbYfLHU4keDOqTJphthjnkYjaqrewQQ5Q2+8x72kIArt6j8Y0Q7X4r-rt6erH0rxXqsx+7JrCrv+vX0dcf5n7p4vHOqhReCrVRSf1rxXH2DdU0khkhaKq9rXVw2+aXKQt+Pzsdt282jKjOQFz75g+nhiZrrj1nUz2PH3Hn-EBnQ54O6JAyw5MOrcLPy4jcUqQMAf12S5Omc0jrSER+5kOgkjp4T2rrPD5irr"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: IKB+HeDZ0L+raM8s9bEvZQ==$WwC1nGoblkp2quJIVELL8Q==\r\nset-cookie: cf_clearance=jO3G7JVWl3qvsFmiir99Ryj5nDCZAJHX5SUIxFuo9Do-1771025212-1.2.1.1-ORDEIKGVgRrMrTntx_eyiXoehlC5GMIYOzFhGyx6IosDGUpKK45l4z_IpytD28i_VfyPJ.g25E.ubRplfz_GNdBs7BnPaTUUEs3pvDtHOk4PZxe9tv_mpcY5k4tkQfu_oVZUb_ZodC7G1AOXb_uOmFK1OtNzxiErcj9M.oBTj4OSNgWDyR4oE6PSBnMBFZMS2JbosMxU3b_X24E8MBUM1hwh_pJ_ClaBdXYxxhOvMOo; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=sentitent.xyz; Expires=Sat, 13 Feb 2027 23:26:52 GMT\r\ntiming-allow-origin: https://claim.sentitent.xyz\r\ndate: Fri, 13 Feb 2026 23:26:52 GMT\r\ncontent-length: 0\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9cd817dcfa2435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"claim.sentitent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.sentitent.xyz/favicon.ico","fqdn":"claim.sentitent.xyz","domain":"sentitent.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.sentitent.xyz/","date":"2026-02-13T23:26:53.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sentitent.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 12:49:00 GMT","end":"Wed, 22 Apr 2026 13:47:29 GMT"},"fingerprint":{"sha1":"E2:DF:E7:82:4A:9B:F5:F9:CA:97:7D:2E:6A:AA:AC:18:DA:28:39:52","sha256":"C2:82:39:C3:D3:EB:80:ED:38:91:02:FB:3B:CF:12:ED:D7:32:4E:DC:C7:4F:B8:11:A1:94:93:F6:02:55:3A:AC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: claim.sentitent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.sentitent.xyz/\r\nCookie: cf_clearance=jO3G7JVWl3qvsFmiir99Ryj5nDCZAJHX5SUIxFuo9Do-1771025212-1.2.1.1-ORDEIKGVgRrMrTntx_eyiXoehlC5GMIYOzFhGyx6IosDGUpKK45l4z_IpytD28i_VfyPJ.g25E.ubRplfz_GNdBs7BnPaTUUEs3pvDtHOk4PZxe9tv_mpcY5k4tkQfu_oVZUb_ZodC7G1AOXb_uOmFK1OtNzxiErcj9M.oBTj4OSNgWDyR4oE6PSBnMBFZMS2JbosMxU3b_X24E8MBUM1hwh_pJ_ClaBdXYxxhOvMOo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 23:26:53 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 24 Jan 2026 22:12:06 GMT\r\netag: W/\"3c2e-19bf21082d1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gnMncS0iCOkGcKD7GnyWC8uIwfiMj0F2sESUoBMlw7pmLMyp8YgOPl48wPI4rJWxtfcXbWsH5cArlxw44b1thch5ucxFzDxUV%2BtZQhfv325o3rc%3D\"}]}\r\ncf-ray: 9cd817ddba5a35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"e1340e4c7522d8d1ff1d2a89c59ca47d","sha1":"cdbdb25f27a3a98c97ccd97ae59b4156d5e12be1","sha256":"bb125858e62b3aab20779b2dc07558e6cd66e45ca75b29ebc2893a37891e7373","sha512":"f4bbd4918eb8f6254e398bb66991ddeda79f1fb8ad09980cdf886c8df391e1dbf80cd099ac217cac8b2f07fbb03df8aea480fd419652d1e97945b2042f75d3a5","ssdeep":"96:pdw+q26cZ/ETre+AUZ91JH09Il6Vhb/3a/FpVSb4CKnt/AAnIUp5U:pdsWUZrLkIK0pVSknBAep5U","tlshash":"2e62fc513352c8e4e92a4fb54996caf90261bd293e78f60e6ce6be0b37773c30c11549","first_seen":"2025-11-18T18:46:51.980726Z","last_seen":"2026-03-31T16:02:39.549681Z","times_seen":19,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":362,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"claim.sentitent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.sentitent.xyz/","fqdn":"claim.sentitent.xyz","domain":"sentitent.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-13T23:26:51.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sentitent.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 12:49:00 GMT","end":"Wed, 22 Apr 2026 13:47:29 GMT"},"fingerprint":{"sha1":"E2:DF:E7:82:4A:9B:F5:F9:CA:97:7D:2E:6A:AA:AC:18:DA:28:39:52","sha256":"C2:82:39:C3:D3:EB:80:ED:38:91:02:FB:3B:CF:12:ED:D7:32:4E:DC:C7:4F:B8:11:A1:94:93:F6:02:55:3A:AC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claim.sentitent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:26:51 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0\r\nlast-modified: Sat, 24 Jan 2026 22:12:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZmHVlQ4ikWXNlf1bepi%2B7lJtVMTGXoH%2FgI%2Bwlcf6%2F1vEBRk0SIBr%2BKe89gX9DLM9xjSyJJEpkcQ%2BDeG%2BiI5N%2Fjw0nx1zuhTsKp02brbeKF0V8Bo%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cd817d37c852efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61141,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (40347)","md5":"449c592e5822e9c018295eb39899842f","sha1":"2137957003e01891ecff7d7d1b047ae17e2c9c0d","sha256":"cb5cb73ccd134bb5b48ed929110034152fbb8aac0ec646398b511cb0016dba1a","sha512":"713c4a485028fba9bbfde51695851f43afd28ed0d7d6d69c3f1da82008053a614e383a26d2e2126e508fbbc654a6516237887df38a01126e6bb77858a6c8863d","ssdeep":"768:WQX+uSNuSRk3l8ntQd3dWRD+Z675agSgIFmqdRnb6KcWVeBmaN/x29vzoCUx/0:ZuB9k3l8tQLoahgW8KPcmvzoCUx/0","tlshash":"d5535dd0a36013b8bc037bf9669cd52df01754e7a6868a4ebfce64489282fdc0fb5645","first_seen":"2026-02-13T23:27:18.087064Z","last_seen":"2026-02-13T23:27:18.087064Z","times_seen":1,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":74,"dns":56,"connect":1,"send":0,"wait":363,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"claim.sentitent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.sentitent.xyz/24b9d70a518bb58e.css","fqdn":"claim.sentitent.xyz","domain":"sentitent.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim.sentitent.xyz/","date":"2026-02-13T23:26:51.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sentitent.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 12:49:00 GMT","end":"Wed, 22 Apr 2026 13:47:29 GMT"},"fingerprint":{"sha1":"E2:DF:E7:82:4A:9B:F5:F9:CA:97:7D:2E:6A:AA:AC:18:DA:28:39:52","sha256":"C2:82:39:C3:D3:EB:80:ED:38:91:02:FB:3B:CF:12:ED:D7:32:4E:DC:C7:4F:B8:11:A1:94:93:F6:02:55:3A:AC"}}},"request":{"raw":"GET /24b9d70a518bb58e.css HTTP/1.1\r\nHost: claim.sentitent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.sentitent.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 23:26:52 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 24 Jan 2026 22:12:06 GMT\r\netag: W/\"216-19bf21082c3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jY3SE5VsXv%2BnAsq4zR9d%2Bkmi4N%2BQilbAqevOcuRQ%2Fd%2FzB5Erltvtjwb66tf5HmBsTtVak9hb9nhAwh1VA5jJ70ky%2BVGKnVo61k9HaO4StAUTikA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd817d6cf4c35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":534,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (534), with no line terminators","md5":"5187cd0a93fb6daf09cad236fc10c76f","sha1":"3639d3384c737156280a82ae508c92f608d55ffe","sha256":"1d3162144a434a45889360f66f962a2cc2c30116c9ac4db345078a6f87f500bd","sha512":"6fee11fb9fdb1933898c2bcbba1ede39f8877f60344376f87e5ff4a3c2f6608837dc4e8ffa026f8a51062c61cc3b1f802879d6bf7713c49b0758f7237a484c92","ssdeep":"","tlshash":"8ff062a4e8219aba3d12e878136cdf59d003a09089ea469579cf526861c3b930d72155","first_seen":"2025-06-25T09:12:16.631378Z","last_seen":"2026-06-02T05:05:16.747978Z","times_seen":96,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":372,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"claim.sentitent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.sentitent.xyz/connect-wallet-1.png","fqdn":"claim.sentitent.xyz","domain":"sentitent.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://claim.sentitent.xyz/","date":"2026-02-13T23:26:52.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sentitent.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 12:49:00 GMT","end":"Wed, 22 Apr 2026 13:47:29 GMT"},"fingerprint":{"sha1":"E2:DF:E7:82:4A:9B:F5:F9:CA:97:7D:2E:6A:AA:AC:18:DA:28:39:52","sha256":"C2:82:39:C3:D3:EB:80:ED:38:91:02:FB:3B:CF:12:ED:D7:32:4E:DC:C7:4F:B8:11:A1:94:93:F6:02:55:3A:AC"}}},"request":{"raw":"GET /connect-wallet-1.png HTTP/1.1\r\nHost: claim.sentitent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.sentitent.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 23:26:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1822\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 24 Jan 2026 22:12:06 GMT\r\netag: W/\"71e-19bf21082ca\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1EDKkSNg39yGcrQubGjO7YhwLs7y9QrbxnGZDb%2BMtX%2FrILpwieJfyL2KaNZtNZOE%2FQeuLo4OD81tGxsY331cXrnMXY%2Bk5d16VIsyY0uUujnMJyg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd817dad9c835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1822,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"e5ce7db0c78e5ae535fca23310861165","sha1":"489152139b06b4ae5b9d7811e2498cf482336977","sha256":"b88d7783189b7435457e1ed871afc3299b1ad4b556d377d841cea07120fcf61c","sha512":"21798c41604d8b246284f93f733f37f068ceed2a6a721b3668ade4018c0f27c601b97bb36f13d135e238d1081fa503a48c3200ab45d125ee8a38b936db3e40b7","ssdeep":"","tlshash":"67312de9f1a853f4c331c1751242e2a852733b54ec5d05ba6e5513b95b1e5733738e11","first_seen":"2026-01-24T13:42:38.135437Z","last_seen":"2026-03-04T15:34:17.860994Z","times_seen":9,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"claim.sentitent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.sentitent.xyz/cdn-cgi/challenge-platform/h/g/scripts/jsd/60138c04e6b2/main.js?","fqdn":"claim.sentitent.xyz","domain":"sentitent.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.sentitent.xyz/index_1.html","date":"2026-02-13T23:26:52.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sentitent.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 12:49:00 GMT","end":"Wed, 22 Apr 2026 13:47:29 GMT"},"fingerprint":{"sha1":"E2:DF:E7:82:4A:9B:F5:F9:CA:97:7D:2E:6A:AA:AC:18:DA:28:39:52","sha256":"C2:82:39:C3:D3:EB:80:ED:38:91:02:FB:3B:CF:12:ED:D7:32:4E:DC:C7:4F:B8:11:A1:94:93:F6:02:55:3A:AC"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/60138c04e6b2/main.js? HTTP/1.1\r\nHost: claim.sentitent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=xOH2dp5uCuoqvgyv4ma8AUJ8kwiXh1TdRbDTU5C_DqY-1771025212-1.2.1.1-aO3PJyRE0aQg2olRCOqsssQMzLAZ8vhbzqS38F4P78Jzk3rdFa9_Ga5JQEvmy.MtsLt.KMRBOBKFVrGsd3ASN44ISXTdUP9vrS2gHtv3ksBXjAjQkg1vCmoOiwmH561dtO_L1dHcP0XjgvVrO.J0ffb9heZCUdvCJyymxL9rVOrVjtOxR2NM.mhq4v.rnfOGzFNhXy52HBhgykIVW2Q.ok3UfiX1TXpbEBA4TRDyLAU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ndate: Fri, 13 Feb 2026 23:26:52 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9cd817dbfa1235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22302,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (22302), with no line terminators","md5":"8b0b144d06c3cdc6ea187de8a4875390","sha1":"ea450e84873d8cd92fe80ae8faddd2bcbdeb2a3b","sha256":"56f4dc5835ffe8a8d65f03220159650c02d73845129375c3cbbacbfc6f173c5d","sha512":"86acb8e4e1811fb64a6e722dd5fe5f57bb85e7d35d1dcf3057b4588ad84b0cfd9bb55386f2938b159875529d4c0e9b14de4ff2bd6cdfa0826f2771366a00ad86","ssdeep":"384:knlht9RAi0cOehZLm0KbkxfGU8qH/jb7owqeB4ZYhYdy9pHZDo7nQl8MK:knlD44OUHowhOAE788MK","tlshash":"f8a285eef5dbb52113331030006f260bb22f7fc4b44d6539a5b94ae8ba7171a8665f6c","first_seen":"2026-02-13T23:27:18.089823Z","last_seen":"2026-02-13T23:27:18.089823Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"claim.sentitent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.sentitent.xyz/edacc8bacf57aba1.css","fqdn":"claim.sentitent.xyz","domain":"sentitent.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim.sentitent.xyz/","date":"2026-02-13T23:26:51.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sentitent.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 12:49:00 GMT","end":"Wed, 22 Apr 2026 13:47:29 GMT"},"fingerprint":{"sha1":"E2:DF:E7:82:4A:9B:F5:F9:CA:97:7D:2E:6A:AA:AC:18:DA:28:39:52","sha256":"C2:82:39:C3:D3:EB:80:ED:38:91:02:FB:3B:CF:12:ED:D7:32:4E:DC:C7:4F:B8:11:A1:94:93:F6:02:55:3A:AC"}}},"request":{"raw":"GET /edacc8bacf57aba1.css HTTP/1.1\r\nHost: claim.sentitent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.sentitent.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 23:26:52 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 24 Jan 2026 22:12:06 GMT\r\netag: W/\"ec1c-19bf21082cf\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VvnMtYNdgkjaO3FpsD7IcfYzWvB8WjasRTuegw00Swx1wsMzM6b%2FUmJ3mDhoNlPh9l2DTMN4fcqfXaFP%2BmPsTDsE1ui6unnpdGhDnZ9tSKtPFuY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd817d6df4e35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60444,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (58607)","md5":"bcf356ffd58b7f3009b08a22732ed0bc","sha1":"788381891d995d4a0760bb4a23a5a8cbaaaf7970","sha256":"8b8ac006d2f840c3786eabd2eb8ec7537c144f2ba227c4c774572e7ab7a43f3b","sha512":"3da414814c7b0939f26706d9b185f3e2b4971bc88bb0385e5eaeffbe0d397795ffe3c04cc2ef5f94d4a5b10fd0614948c7c1435a7c86b0b8e765aac4e005dbbf","ssdeep":"768:SFkD0bDl331gciyHwuiGs/im+U763f7uqFXBsy/P:SCD0t331gcaliUW3f7uqFXF/P","tlshash":"2143c624e235e57e7c37a5bc62bcf40c32067590d9f90bedea2271129ec77f21926624","first_seen":"2026-01-24T13:42:38.131207Z","last_seen":"2026-03-04T15:34:17.85756Z","times_seen":9,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"claim.sentitent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.sentitent.xyz/index_1.html","fqdn":"claim.sentitent.xyz","domain":"sentitent.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://claim.sentitent.xyz/","date":"2026-02-13T23:26:52.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sentitent.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 12:49:00 GMT","end":"Wed, 22 Apr 2026 13:47:29 GMT"},"fingerprint":{"sha1":"E2:DF:E7:82:4A:9B:F5:F9:CA:97:7D:2E:6A:AA:AC:18:DA:28:39:52","sha256":"C2:82:39:C3:D3:EB:80:ED:38:91:02:FB:3B:CF:12:ED:D7:32:4E:DC:C7:4F:B8:11:A1:94:93:F6:02:55:3A:AC"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: claim.sentitent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.sentitent.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 23:26:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0\r\nlast-modified: Sat, 24 Jan 2026 22:12:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hlN%2FEmAQ1XiHQum17BgGHMC0GKeuzW5lKu6Hiy1Ob5gtuXPDDzd6htRc8mvK%2B6pHsTEmrQ6ADFdRRECtDaNE%2FWqS6rEAJ9OTNqygev4x1AixBW0%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd817da69bd35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1061,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1061), with no line terminators","md5":"f8c2425c30e73c2c937b15e8e3ff486e","sha1":"d15f85bb84a8073e314382ce0faeef30043798b3","sha256":"05b6769c71f58f8953869192e1380bd4e8a9f38cca105e4ae836daff9c56f2d6","sha512":"d5f3338bd9a1ed391d6c78dbccc33d7f3ce042e90eb7270da326d90c25577ed2dda1bf801a746a8a2a95c5e61b4830142b57abd6810d7975ffcd0d347779d3c8","ssdeep":"","tlshash":"1811f0757e194534a9d14187227ee7a83d326024be12a044d26cdc289d18e9214afcae","first_seen":"2026-02-13T23:27:18.091553Z","last_seen":"2026-02-13T23:27:18.091553Z","times_seen":1,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"claim.sentitent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.sentitent.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"claim.sentitent.xyz","domain":"sentitent.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.sentitent.xyz/","date":"2026-02-13T23:26:52.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sentitent.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 12:49:00 GMT","end":"Wed, 22 Apr 2026 13:47:29 GMT"},"fingerprint":{"sha1":"E2:DF:E7:82:4A:9B:F5:F9:CA:97:7D:2E:6A:AA:AC:18:DA:28:39:52","sha256":"C2:82:39:C3:D3:EB:80:ED:38:91:02:FB:3B:CF:12:ED:D7:32:4E:DC:C7:4F:B8:11:A1:94:93:F6:02:55:3A:AC"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: claim.sentitent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/60138c04e6b2/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\ndate: Fri, 13 Feb 2026 23:26:52 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9cd817dac9c635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22129,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"claim.sentitent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.sentitent.xyz/wallets.png","fqdn":"claim.sentitent.xyz","domain":"sentitent.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://claim.sentitent.xyz/","date":"2026-02-13T23:26:52.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sentitent.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 12:49:00 GMT","end":"Wed, 22 Apr 2026 13:47:29 GMT"},"fingerprint":{"sha1":"E2:DF:E7:82:4A:9B:F5:F9:CA:97:7D:2E:6A:AA:AC:18:DA:28:39:52","sha256":"C2:82:39:C3:D3:EB:80:ED:38:91:02:FB:3B:CF:12:ED:D7:32:4E:DC:C7:4F:B8:11:A1:94:93:F6:02:55:3A:AC"}}},"request":{"raw":"GET /wallets.png HTTP/1.1\r\nHost: claim.sentitent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.sentitent.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 23:26:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 2409\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 24 Jan 2026 22:12:07 GMT\r\netag: W/\"969-19bf21082dc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2si0cy0RzMArxAJX4HgT2nivQft55hVQVTOoQzkdTOe7vISjArI0mYRw5DcByoufU%2FvRshYw5%2FYFjYDW2yi9EEyIPWrN%2Bl6YAlhqTO4Y8fu%2BN2M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd817dad9c935a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2409,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 24, 8-bit colormap, non-interlaced","md5":"6c7ad266ffec9507e9c3cca7b129920d","sha1":"bd2f97165326f542cd558cf87632f47c42a3b724","sha256":"a26f27993e4e1e08fcd6e3f1f100c969f91f87ea10a77dcf123dffb4e2dd86a9","sha512":"9d6907b3394564bfcf70b77bfb8e9c5428a88a70540b60de3503e7596066d0287106a9788019e09d71d33a2ae3675eb336df1a31e0592c2300a126b8a5ad07a1","ssdeep":"","tlshash":"ef415b254151481ed3758abcc0a505605eb6fedc1e8de20a72e23e0e6a7bb6b1b13704","first_seen":"2026-01-24T13:42:38.115338Z","last_seen":"2026-03-04T15:34:17.861883Z","times_seen":9,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":352,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"claim.sentitent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.sentitent.xyz/secureproxy?e=jscdn/getFile","fqdn":"claim.sentitent.xyz","domain":"sentitent.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim.sentitent.xyz/","date":"2026-02-13T23:26:52.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sentitent.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 12:49:00 GMT","end":"Wed, 22 Apr 2026 13:47:29 GMT"},"fingerprint":{"sha1":"E2:DF:E7:82:4A:9B:F5:F9:CA:97:7D:2E:6A:AA:AC:18:DA:28:39:52","sha256":"C2:82:39:C3:D3:EB:80:ED:38:91:02:FB:3B:CF:12:ED:D7:32:4E:DC:C7:4F:B8:11:A1:94:93:F6:02:55:3A:AC"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: claim.sentitent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim.sentitent.xyz/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://claim.sentitent.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"tuq8cwbzq8khi4chccqt\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 23:26:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T2ZJmHVvO2appGEBsouKJb866doWsm2exfe4bGNAZlT%2BnQ2M6Bcurmyp7DcqYSpd6p4wsDM0aKln50Orpew2l7Ocj%2BL0RxBru4vtm%2FFbHZm4xg%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-ray: 9cd817daf9df35a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3419131,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c77ddd4ccfe2d711ebcecf3acbbd3569","sha1":"f0b17889fd051ef4168d6ab4eb00f20b2d682294","sha256":"3281ca2117bc8f472d0c6139636228500ed2ddab67b1defac3d0f92cb3398f0a","sha512":"de3ef7ff5000b764ce63004930e0ee9a67f0458a53a35d9af004d340dda4493506d68673fdf0ae042b30a48d51413c4573a9af41936c6e8d96d5253f74c0c8ab","ssdeep":"24576:yV8/8Yae0PgGswPpBroS7InwbjtsJshJuEbdM6:y7OwPEZJs5","tlshash":"782523119e63edaa0f4cba7574bb7e4765060f4284cc60dfed22d9c011e83b681daa5f","first_seen":"2026-02-13T22:29:07.338532Z","last_seen":"2026-02-13T23:27:18.094211Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1080,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":411,"receive":669,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"claim.sentitent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimsentient.xyz/","fqdn":"claimsentient.xyz","domain":"claimsentient.xyz","tld":"xyz"},"ip":{"addr":"172.67.223.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-13T23:26:51.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimsentient.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 11:36:07 GMT","end":"Wed, 22 Apr 2026 12:36:04 GMT"},"fingerprint":{"sha1":"4C:34:83:4A:15:06:0B:B6:E8:54:E9:FE:F5:94:6C:5A:8E:1A:B1:DA","sha256":"55:7C:DB:DE:A3:10:0F:60:77:AD:5B:73:8B:25:03:CC:61:F1:53:A5:E8:87:55:50:DD:72:D0:7B:6B:B4:38:0E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claimsentient.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Fri, 13 Feb 2026 23:26:51 GMT\r\ncontent-length: 0\r\nlocation: https://claim.sentitent.xyz/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j3TBBaA0pzxcHGWZFibeck59JQTd3DTzLN%2Bvj6DuE%2BVyy6WWr7mlo9dlq3tLughmq2tLo7uDgh9%2BnCRf3E3m%2BsaM6U6sAYB8WIG68hhDZnir\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9cd817d2eb6676ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61141,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":74,"dns":57,"connect":1,"send":0,"wait":9,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"claimsentient.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"claimsentient.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.sentitent.xyz/chunk.45.z2ngrbcx.js","fqdn":"claim.sentitent.xyz","domain":"sentitent.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.sentitent.xyz/","date":"2026-02-13T23:26:51.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sentitent.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 12:49:00 GMT","end":"Wed, 22 Apr 2026 13:47:29 GMT"},"fingerprint":{"sha1":"E2:DF:E7:82:4A:9B:F5:F9:CA:97:7D:2E:6A:AA:AC:18:DA:28:39:52","sha256":"C2:82:39:C3:D3:EB:80:ED:38:91:02:FB:3B:CF:12:ED:D7:32:4E:DC:C7:4F:B8:11:A1:94:93:F6:02:55:3A:AC"}}},"request":{"raw":"GET /chunk.45.z2ngrbcx.js HTTP/1.1\r\nHost: claim.sentitent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.sentitent.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 23:26:52 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 24 Jan 2026 22:12:06 GMT\r\netag: W/\"f62d-19bf21082c9\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vBrXN%2B6fvnkTYQi3x75DYaDnnR8dgYo4pqzT65ETLk9Y92xyu7aWkgTxDc5v2vHAESWs6qLrSeMm8BBAuZF6DlcY7s2wGqOuRgMr3DW41vMAuQ8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd817d6df5535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63021,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (63021), with no line terminators","md5":"cfbca216146eb341c5f6e82cf2e66542","sha1":"709b6b4c2377ccfc197156003a26dc3e50ce5feb","sha256":"3ee30d9f53119a5f9c0395db1b1892b3e91d3caef4f4b895ff70e850b6adb8eb","sha512":"2934fcd3cd6ee879144ad68018e12688828526dd36272543c4dacb612773e6b41342b1f8f9fee44c9b8b4e23b523b26a2693a79ae1069246904fabf6461d9f37","ssdeep":"768:VECYScstNRo0Rok40x6oxxGpeAu5OcR/EDMaPQb00TtcVrW9G3i5c66cORcODxXc:fP60UoxxGpVcMIrbre7ecQ","tlshash":"b453a4d5590bd0e88e5224ded473e919e4280a63cdadf1a3ba3cedc1741ef61848763b","first_seen":"2026-01-15T11:47:17.969422Z","last_seen":"2026-02-13T23:27:18.094836Z","times_seen":12,"resource_available":true,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"claim.sentitent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.sentitent.xyz/138f3cb2f3239054.css","fqdn":"claim.sentitent.xyz","domain":"sentitent.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim.sentitent.xyz/","date":"2026-02-13T23:26:51.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sentitent.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 12:49:00 GMT","end":"Wed, 22 Apr 2026 13:47:29 GMT"},"fingerprint":{"sha1":"E2:DF:E7:82:4A:9B:F5:F9:CA:97:7D:2E:6A:AA:AC:18:DA:28:39:52","sha256":"C2:82:39:C3:D3:EB:80:ED:38:91:02:FB:3B:CF:12:ED:D7:32:4E:DC:C7:4F:B8:11:A1:94:93:F6:02:55:3A:AC"}}},"request":{"raw":"GET /138f3cb2f3239054.css HTTP/1.1\r\nHost: claim.sentitent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.sentitent.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 23:26:52 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 24 Jan 2026 22:12:06 GMT\r\netag: W/\"2d5-19bf21082c0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kqhHeuv2tt%2FneLNU1HPoqrWgQikeucyR6CRKaZJz5gq90T2i4gVVC2MgEjxSzcu1kYPfGkc7VD27kq6l4V4fIadBqQVJX0vmGg%2F8p02F8I8p6gg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd817d6df5035a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":725,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (725), with no line terminators","md5":"44db3e1de099a93d79acfd53c5f5a1f2","sha1":"34665fd937b455fcbfd4e8e354c1ab00de993f56","sha256":"517c3d37440776fa987ca01292cac5a1d7381c317be1508a26422d851d4d979d","sha512":"67b4fa1db97721ae7dba04c1710e6f63d266cdb596e94c9b544bd2e2bc7e5e5a53189f56962ef37fe3334ed9583a32aba015fc70231729fe0b0173d32f44894f","ssdeep":"","tlshash":"e201e9a8c921f6ba7f17e1a892d81b3a3206e7b444ca4384421fd0317ccbbb60163896","first_seen":"2025-08-21T04:05:47.796863Z","last_seen":"2026-03-12T20:07:45.408557Z","times_seen":80,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"claim.sentitent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.sentitent.xyz/stepper-left.png","fqdn":"claim.sentitent.xyz","domain":"sentitent.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.sentitent.xyz/","date":"2026-02-13T23:26:52.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sentitent.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 12:49:00 GMT","end":"Wed, 22 Apr 2026 13:47:29 GMT"},"fingerprint":{"sha1":"E2:DF:E7:82:4A:9B:F5:F9:CA:97:7D:2E:6A:AA:AC:18:DA:28:39:52","sha256":"C2:82:39:C3:D3:EB:80:ED:38:91:02:FB:3B:CF:12:ED:D7:32:4E:DC:C7:4F:B8:11:A1:94:93:F6:02:55:3A:AC"}}},"request":{"raw":"GET /stepper-left.png HTTP/1.1\r\nHost: claim.sentitent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.sentitent.xyz/edacc8bacf57aba1.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 23:26:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 4403\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 24 Jan 2026 22:12:06 GMT\r\netag: W/\"1133-19bf21082d7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TAs5oCL3PC48ZPNIwnbZDHAi%2BsL%2FLfLyhktsWUy7%2B9zzC0BEX3imd2WemeBbNwfEjtn46mqWVqGsvuApVBiVwhbk3F8j5gxPKBzTwrUFnh0JPuc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd817da99c135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4403,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 223 x 192, 8-bit/color RGBA, non-interlaced","md5":"0c301e5d244545383868fe3602cd8f9f","sha1":"cddb7b9f959825caccf3ae7009f57681555badcf","sha256":"fc9d6e042a9c2d080579ab4cb9ba99b5fbaf9784ab0fb8834368f5c5aa89643e","sha512":"173ba7cada97c3235ea8526226e9a90f046ba4e117d09529733fb1ed65a5f237c43e64948b5237001acf01e7d2a9fd513250d708c15a7c37dd795580291e0c61","ssdeep":"96:OQsde4iJ60+rvoj+30qz+kZkleSbUGOxkJfF9mXV6m184:+fcinKlelG/JfF5084","tlshash":"6f917c51fd092c758e8aefb27d6c9e50db75413e6278820dd83f1138a2c70688e82f78","first_seen":"2025-11-18T18:46:51.979799Z","last_seen":"2026-03-04T15:34:17.858942Z","times_seen":13,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"claim.sentitent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}