{"report_id":"5df7fa9e-abfd-4244-997f-b7204e9bb739","version":6,"status":"done","tags":[],"date":"2025-07-20T16:13:35Z","url":{"schema":"https","addr":"shib-mainnet.xyz/claim/","fqdn":"shib-mainnet.xyz","domain":"shib-mainnet.xyz","tld":"xyz"},"ip":{"addr":"172.67.222.141","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"shib-mainnet.xyz/claim/","fqdn":"shib-mainnet.xyz","domain":"shib-mainnet.xyz","tld":"xyz"},"title":"Shiba Inu Airdrop"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-08-24T16:13:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"shib-mainnet.xyz","ip":{"addr":"172.67.222.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-28","domain_rank":0,"first_seen":"2025-07-07T07:39:34.134794Z","last_seen":"2025-07-07T07:39:34.134794Z","alert_count":19,"request_count":19,"received_data":5837625,"sent_data":8783,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":1294,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-07-16T15:48:21.943427Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":510,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.ipify.org","ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":3267,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2025-07-16T23:06:36.133796Z","alert_count":0,"request_count":2,"received_data":939,"sent_data":866,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bsc.drpc.org","ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-01-09","domain_rank":0,"first_seen":"2023-11-21T22:39:48Z","last_seen":"2025-07-20T10:35:07.54852Z","alert_count":0,"request_count":2,"received_data":6238,"sent_data":1005,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bsc-dataseed3.bnbchain.org","ip":{"addr":"34.250.210.43","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2020-01-13","domain_rank":0,"first_seen":"2023-12-07T18:13:02Z","last_seen":"2025-07-13T21:23:18.607191Z","alert_count":0,"request_count":2,"received_data":7443,"sent_data":1033,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":439,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-07-16T15:24:25.336348Z","alert_count":0,"request_count":2,"received_data":251101,"sent_data":868,"comment":"","tags":null,"fingerprints":null},{"fqdn":"binance.llamarpc.com","ip":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-02-07","domain_rank":0,"first_seen":"2023-09-18T00:31:06Z","last_seen":"2025-07-18T09:36:27.389834Z","alert_count":0,"request_count":2,"received_data":8151,"sent_data":1021,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-07-16T15:09:49.565957Z","alert_count":0,"request_count":1,"received_data":38663,"sent_data":551,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8877,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-07-16T15:13:54.244508Z","alert_count":0,"request_count":1,"received_data":36314,"sent_data":569,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":235,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-07-16T15:19:45.607582Z","alert_count":0,"request_count":2,"received_data":798864,"sent_data":902,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2025-07-20T16:13:17Z","timestamp":1753027997,"ip_dst":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.12","port":42142,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-07-20T16:13:17.396054+0000\",\"flow_id\":208785165381771,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":42142,\"dest_ip\":\"172.67.74.152\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":3513,\"start\":\"2025-07-20T16:13:17.389259+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-07-20T16:13:17Z","timestamp":1753027997,"ip_dst":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.12","port":42158,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-07-20T16:13:17.399889+0000\",\"flow_id\":339899779510603,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":42158,\"dest_ip\":\"172.67.74.152\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":3514,\"start\":\"2025-07-20T16:13:17.389451+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-07-20T16:13:17Z","timestamp":1753027997,"ip_dst":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.12","port":58540,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .drpc .org)","source":"{\"timestamp\":\"2025-07-20T16:13:17.417933+0000\",\"flow_id\":743600935473781,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":58540,\"dest_ip\":\"104.18.11.59\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058812,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .drpc .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc.drpc.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":914,\"bytes_toclient\":3511,\"start\":\"2025-07-20T16:13:17.397941+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-07-20T16:13:17Z","timestamp":1753027997,"ip_dst":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.12","port":48102,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)","source":"{\"timestamp\":\"2025-07-20T16:13:17.430144+0000\",\"flow_id\":388879586507943,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":48102,\"dest_ip\":\"104.26.14.157\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058790,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.llamarpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":922,\"bytes_toclient\":3521,\"start\":\"2025-07-20T16:13:17.408743+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-07-20T16:13:17Z","timestamp":1753027997,"ip_dst":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.12","port":48118,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)","source":"{\"timestamp\":\"2025-07-20T16:13:17.438736+0000\",\"flow_id\":2018927049533089,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":48118,\"dest_ip\":\"104.26.14.157\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058790,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.llamarpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":922,\"bytes_toclient\":3519,\"start\":\"2025-07-20T16:13:17.419489+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-07-20T16:13:17Z","timestamp":1753027997,"ip_dst":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.12","port":58552,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .drpc .org)","source":"{\"timestamp\":\"2025-07-20T16:13:17.450337+0000\",\"flow_id\":1326157414624280,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":58552,\"dest_ip\":\"104.18.11.59\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058812,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .drpc .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc.drpc.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":914,\"bytes_toclient\":3510,\"start\":\"2025-07-20T16:13:17.420888+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-07-20T16:13:17Z","timestamp":1753027997,"ip_dst":{"addr":"34.250.210.43","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.12","port":58884,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed3 .bnbchain .org)","source":"{\"timestamp\":\"2025-07-20T16:13:17.822638+0000\",\"flow_id\":1932939656788309,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":58884,\"dest_ip\":\"34.250.210.43\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058797,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed3 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed3.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3168,\"start\":\"2025-07-20T16:13:17.751957+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-07-20T16:13:17Z","timestamp":1753027997,"ip_dst":{"addr":"34.250.210.43","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.12","port":58872,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed3 .bnbchain .org)","source":"{\"timestamp\":\"2025-07-20T16:13:17.837755+0000\",\"flow_id\":183543642552516,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":58872,\"dest_ip\":\"34.250.210.43\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058797,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed3 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed3.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":928,\"bytes_toclient\":3168,\"start\":\"2025-07-20T16:13:17.751812+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-20","alert":"Sinkholed","trigger":"shib-mainnet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-08-15T19:58:44.031747Z","times_seen":337649,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shib-mainnet.xyz/claim/","fqdn":"shib-mainnet.xyz","domain":"shib-mainnet.xyz","tld":"xyz"},"ip":{"addr":"172.67.222.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-16T07:23:59.817471Z","times_seen":237834,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shib-mainnet.xyz/b9ed5aad-dfed-45e1-97c1-58fac70352c6","fqdn":"shib-mainnet.xyz","domain":"shib-mainnet.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec26a722169cb2cef03353fcf8dd144a","sha1":"6eec6673abcde3d29547796a38361256d9efde1c","sha256":"01861fcd47bc63bb7be76c480bad4c6cc987c8996ab0e023a4e692b68c94b05c","sha512":"c885e5d94bd96fa4a573524356e0ca7398b1489f5a39fc1120cf7f4e469950630ad3e9f48dd0392acd36da390c27a4be1e81da943d1d9ecd48890d1691e416cf","ssdeep":"6144:Ufg7z90bnvLZqnWTI9esVTMuyEvtzXNglxQP92L:VzBe6kEdOxQoL","tlshash":"bf740980b261b07247da24e10477540af339e96c744a40acf6a8d8fb7dbd589957ff38","size":357754,"data":"","first_seen":"2025-07-12T22:38:09.13306Z","last_seen":"2026-08-09T15:35:30.742044Z","times_seen":5092,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shib-mainnet.xyz/claim/","fqdn":"shib-mainnet.xyz","domain":"shib-mainnet.xyz","tld":"xyz"},"ip":{"addr":"172.67.222.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-16T07:30:34.657942Z","times_seen":744291,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","size":60819,"data":"","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-08-16T04:35:11.637631Z","times_seen":31906,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shib-mainnet.xyz/6e2dab84-6bf0-4370-a9a8-2bb97a77beb0","fqdn":"shib-mainnet.xyz","domain":"shib-mainnet.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ef5cd9e538f691532bd5919e4129186","sha1":"f765858a2874b3fd3ec5fa7d38e58820ef3db9c7","sha256":"703eddc72987c82b8b1d383541a07d04e34aafc5e8b68844490f36e8a5e439f7","sha512":"d0f62fbb7391af2fb6d19238bed2bb28ca0d646834fe05c25eb25db296a998fbe7d055559c39815b316595f57d19a3696a788ee2f12dbc4addc25c1493cde4a5","ssdeep":"6144:2jBh6iZqgkRCaXSa37+sTg2QUZiay0+JVj7d/DHeDNzL+9wxqs6/iWvA:qZqgkRNgsEged/qD5LqiWvA","tlshash":"b7e44bd17396b09a4ba53194447b1406f2b9bdab508d441cf264e8fb39f98c8c5baf3c","size":675369,"data":"","first_seen":"2025-07-16T14:09:39.4508Z","last_seen":"2026-06-13T15:26:27.769402Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shib-mainnet.xyz/0b37ad9c-315c-4e32-92c0-597f23fef4e8","fqdn":"shib-mainnet.xyz","domain":"shib-mainnet.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7066f0e750388265236c8227655c19d","sha1":"f482262ac2d55b97ded13f9fbc5488be2a2519a9","sha256":"c4843639fa83fe7d71dd7060a65ce84026130580cad4753551ddaec4539c96e3","sha512":"d305181c4617d9b871670350fa1018e86181147fedbaf7ab251022859c09dc26529acf39713179f16fe7c9f01253979163e256683b13f9e96710a791f58248ed","ssdeep":"24576:qH6NmbYr1WC7KGDjWpykjWZS4HJYbpyyNvCCBN3Yx+pp+Pu9ch:qH6HMXNjnhbiI6PuI","tlshash":"c026931dd4227fa3d6ba43aa0373498bc4843656840b97c9b43faca573cb653d4dac39","size":4817276,"data":"","first_seen":"2025-07-20T16:13:40.004285Z","last_seen":"2025-07-20T16:13:40.004285Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.6.9/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"268d19762594655239a29d058a7e8b44","sha1":"f06da2f7a68114b8dda38a0d782d65ddacc9c0e8","sha256":"95c66625ee20f53d542e23dded002b021b24e9d28c3d193a076d45cba4dc8618","sha512":"55e6b3e48536891a5ad0106b26525e4607c9ece0075ad5496535ef81d1fbb377dfb0b50286594c0aa0b405bf9e791c4696b674ea260813f4772ac7220ab82fdc","ssdeep":"12288:TfLmYQI/yjP+H8Xb29/nNUgE6te1R5WJW:TfCPalnNfE6taD","tlshash":"29f42b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","size":735973,"data":"","first_seen":"2023-03-07T12:58:29Z","last_seen":"2026-08-16T02:34:15.441922Z","times_seen":8492,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shib-mainnet.xyz/a8258edc-279c-4e82-b628-d827e723d3bc","fqdn":"shib-mainnet.xyz","domain":"shib-mainnet.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"05997da4a9c3d58ef33a7cf3d716af57","sha1":"3a7a7913c31aa2787a11dc6ba6fb5b5f2c525ac1","sha256":"e268ded9f58238c3885b4e0e83ddf10ea9552c488dd25538c8569ec2beff7eb9","sha512":"83413571115e6b39abe7e3b6573a81b3198125b35ae13e31d14c7cb3c81790b24a11cd81531a58922386bbf6e2d41ab6e449fc3206c8b7f20932820cdf58aefe","ssdeep":"49152:D+2KKNjyR5WP4CQjNn9GU6lCLsSPOnLUfJ8KZTcbQQqG7r8aQO/iSJNHoRO2sxSQ:RD8ew45JV","tlshash":"20f591496bf660358213f0795e6f8801b234a40b2949ed5c7e9c92f09f4953c8bf6fe9","size":3517001,"data":"","first_seen":"2025-07-12T22:38:09.134446Z","last_seen":"2026-08-09T15:35:30.742787Z","times_seen":4177,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"binance.llamarpc.com/","fqdn":"binance.llamarpc.com","domain":"llamarpc.com","tld":"com"},"ip":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://shib-mainnet.xyz/claim/","date":"2025-07-20T16:13:18.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"llamarpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Jun 2025 07:26:29 GMT","end":"Tue, 09 Sep 2025 08:26:26 GMT"},"fingerprint":{"sha1":"8E:B7:5D:9A:A8:64:5E:C2:9A:28:80:55:95:52:D1:88:E8:FC:DA:61","sha256":"A1:1D:06:95:42:1F:25:37:FA:B5:63:4D:9E:03:4C:B3:A6:D2:44:34:10:99:2D:40:07:35:CA:D4:06:42:DA:C8"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: binance.llamarpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shib-mainnet.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://shib-mainnet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 20 Jul 2025 16:13:18 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\nx-cache: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=C%2BoK8Ljy2MNi2pZmTFDsEx7%2F8U5CSk7C2Wgw%2FegxJzJAuyhcbyqWciRxyhWQMV94dMhYAOHavcpQoSDRkRc0RQUpi2WuPq3gcNsy1zokB8yVuwW1UZnGz%2B9c0SDR4iaoKJ0iiz%2Bu\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9623bebad8115694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=5366\u0026min_rtt=454\u0026rtt_var=9716\u0026sent=9\u0026recv=15\u0026lost=0\u0026retrans=0\u0026sent_bytes=3986\u0026recv_bytes=1541\u0026delivery_rate=6581818\u0026cwnd=255\u0026unsent_bytes=0\u0026cid=2436a85bd83ad852\u0026ts=583\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6374,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fa3dbe9e7a67f351ee2d52c99850bf9c","sha1":"294cd26f4c0198841057707ed0b44b3cf616e5a8","sha256":"efe3b5e2a041edfb73e010d9c7b8321b7c075c78f0b5d972fe7783da8844f87b","sha512":"d46f4edc8d511404ba6bb32a1a375a1a1c66b24a11f072dbe332243df7b1489af0816a8506fb648a97dd28b0c5ceac714915bc46221ef78d12e9a8a5f1d51d45","ssdeep":"24:YUtXa257vaoWH3eGZsthXvUzZ5+hdex1qx1xxNU6xvQaNBtXX60jv:YKam3QytxvU15+doY1jNNTt9jv","tlshash":"52d108f098c98e50f19baa81b798bc9400213caf7fdf8f40415cf8b6a0f54a176a448f","first_seen":"2025-04-07T11:53:19.749574Z","last_seen":"2026-08-09T15:35:30.721565Z","times_seen":5261,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shib-mainnet.xyz/claim/","fqdn":"shib-mainnet.xyz","domain":"shib-mainnet.xyz","tld":"xyz"},"ip":{"addr":"172.67.222.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-07-20T16:13:10.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shib-mainnet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Jun 2025 23:30:11 GMT","end":"Fri, 26 Sep 2025 00:28:44 GMT"},"fingerprint":{"sha1":"DC:C6:47:9D:9E:32:63:93:7B:A7:3F:BF:05:50:C9:19:68:A3:4B:06","sha256":"F4:79:4C:77:58:8E:34:DF:EE:B9:50:89:46:7A:BB:5C:A0:82:5E:57:41:CF:B8:04:EA:79:33:FA:5B:96:E2:EF"}}},"request":{"raw":"GET /claim/ HTTP/1.1\r\nHost: shib-mainnet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 20 Jul 2025 16:13:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 28 Jun 2025 01:10:34 GMT\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=20,cfOrigin;dur=249\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iQwpsImWzBvBsQiS7MWE2KMaLfL967wJBZXgJd4u54IwmDVCb90%2BjEIM2U6FPIiUPgPYMWQ3TcutfpYAMci%2BEJNyLqEMweNF0ZDvSRP3\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9623be8dba2b56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7545,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (505)","md5":"365e85859301b4204fbc865ceee47205","sha1":"d4ba695be360662ebb885830e42749d2666a728c","sha256":"90616e404276659f379b6442d95f521e7657c3699708799ce63af192bb11c0e6","sha512":"8fa8e6508fe0be8d9f4fb01a111ad07709e449cb46b5cfad00d38be07996a9beb0aba7f06bab541542a1db4b6bcd999df68a841b5b55805005ee95c3160d88fd","ssdeep":"192:mHDwXZvAYVYuKuOuGNuhpbkn+fpax+Y7ifukH00zBC:IDwNAYVbfOuuuhpbkn+fpax+Y7ifukHm","tlshash":"b9f1c06234f000ba019785d16a313b1baf93ea5bca4a5a94f1eccbd9cfd6dd2cd13509","first_seen":"2025-07-20T16:13:39.965776Z","last_seen":"2025-07-20T16:13:39.965776Z","times_seen":1,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":62,"dns":8,"connect":1,"send":0,"wait":277,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-20","alert":"Sinkholed","trigger":"shib-mainnet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shib-mainnet.xyz/claim/1.css","fqdn":"shib-mainnet.xyz","domain":"shib-mainnet.xyz","tld":"xyz"},"ip":{"addr":"172.67.222.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://shib-mainnet.xyz/claim/","date":"2025-07-20T16:13:11.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shib-mainnet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Jun 2025 23:30:11 GMT","end":"Fri, 26 Sep 2025 00:28:44 GMT"},"fingerprint":{"sha1":"DC:C6:47:9D:9E:32:63:93:7B:A7:3F:BF:05:50:C9:19:68:A3:4B:06","sha256":"F4:79:4C:77:58:8E:34:DF:EE:B9:50:89:46:7A:BB:5C:A0:82:5E:57:41:CF:B8:04:EA:79:33:FA:5B:96:E2:EF"}}},"request":{"raw":"GET /claim/1.css HTTP/1.1\r\nHost: shib-mainnet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shib-mainnet.xyz/claim/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 20 Jul 2025 16:13:11 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 28 Jun 2025 01:08:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"685f40a5-2d0d\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2BDrh2FTQMZcdm0TSIfDfmCpKpgjdfEiFR1Tjb3xGH6ne11z3w1tjhrXkNAxtbI4GE6J7bmR47bNstyndk73t8dY5zlGGoEIBTlU6mqH\"}]}\r\ncf-ray: 9623be9139bc56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11533,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e7bb88f09af659c3202340f662027e27","sha1":"e9972ac899a8272209d02dac1e884668af627840","sha256":"8a6bedaba5ecd33d4e57769877f2ec08a11a6e6fcd507adb4c9245c639bf7015","sha512":"a87fa8f880a62437092e26711733df1a3c659d1212fa1b8346790d22da1f9acb8383014f438a6f5d39b97127c771d31b0094cc7fe0c6d63b18615f231fa474c8","ssdeep":"192:JIJCy5Y3qQKyLKZECbQtsM/uGuCKApWp8iGgjpLZuVkqagc5s+YE7Qincn1:iM9HWEdXrC8O2a4","tlshash":"613235d637a4301839a798696ae65f0ca2aa8483d94fdfa57fc5104ccfcd3d42532b8c","first_seen":"2025-07-07T07:39:39.386615Z","last_seen":"2025-07-20T16:13:39.968929Z","times_seen":2,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-20","alert":"Sinkholed","trigger":"shib-mainnet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://shib-mainnet.xyz/claim/","date":"2025-07-20T16:13:11.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Jun 2025 22:10:34 GMT","end":"Tue, 23 Sep 2025 23:10:19 GMT"},"fingerprint":{"sha1":"9D:9F:FB:08:8A:BA:46:3F:69:F6:F3:D7:AE:78:13:8D:FD:5A:C8:D5","sha256":"D9:F5:02:19:B1:14:B6:BB:CD:0A:77:3F:9C:27:15:A8:11:CF:B7:9A:8D:F2:F4:E8:83:46:88:37:44:03:A7:E7"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://shib-mainnet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shib-mainnet.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 20 Jul 2025 16:13:11 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9623be9259fb569d-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-08-15T19:58:44.031747Z","times_seen":337649,"resource_available":true,"data":null}},"time_used":352,"timings":{"blocked":148,"dns":8,"connect":1,"send":0,"wait":34,"receive":0,"ssl":156},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shib-mainnet.xyz/claim/webclip.png","fqdn":"shib-mainnet.xyz","domain":"shib-mainnet.xyz","tld":"xyz"},"ip":{"addr":"172.67.222.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://shib-mainnet.xyz/claim/","date":"2025-07-20T16:13:12.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shib-mainnet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Jun 2025 23:30:11 GMT","end":"Fri, 26 Sep 2025 00:28:44 GMT"},"fingerprint":{"sha1":"DC:C6:47:9D:9E:32:63:93:7B:A7:3F:BF:05:50:C9:19:68:A3:4B:06","sha256":"F4:79:4C:77:58:8E:34:DF:EE:B9:50:89:46:7A:BB:5C:A0:82:5E:57:41:CF:B8:04:EA:79:33:FA:5B:96:E2:EF"}}},"request":{"raw":"GET /claim/webclip.png HTTP/1.1\r\nHost: shib-mainnet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shib-mainnet.xyz/claim/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 20 Jul 2025 16:13:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 18963\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QzTa2ksen7WJOYv0ZBhHLWJt2E2FSRNvfjQipTDCREiSQX94OI2doqKNtDsDIriNTfvQLEszjwCnKxjeTvHDYVKzgl6Tx6vfx62CK9aKBeXiBGUMK3YptIvgxQPxf%2FJqsA45\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Sat, 28 Jun 2025 01:08:53 GMT\r\netag: \"685f40a5-4a13\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 9623be97ef4a56a5-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=7610\u0026min_rtt=699\u0026rtt_var=8996\u0026sent=81\u0026recv=106\u0026lost=0\u0026retrans=0\u0026sent_bytes=11493\u0026recv_bytes=6553\u0026delivery_rate=1328451\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=20862\u0026unsent_bytes=0\u0026cid=a8ae8bfdcc4e0636\u0026ts=1660\u0026inflight_dur=44\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18963,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"3037ae703349e2f14a4aed47f5325bee","sha1":"c9c2812adb8d59a5103cd1298318987119300f2d","sha256":"e566d0df60235c669cd11dff9ed4f655006a2ea3e57e4dd8356151c903675371","sha512":"badca0e4fa3c05ff2581561f35f2a3d85ecfccf1c90fd7b06e6e72636fb17bdece121173395272e80f9e6f765684a61a113cc841e90f832666ac60deaa6e20f5","ssdeep":"384:UU9LGKNZTwF/mvzTArn4pnKLAUaKybdWH8p/Dwkp9Uj7huMxQXo5TB/Q7o:1B20zTArgKOVV/sknUj78IBP","tlshash":"a882d0c7e9b95832c4b69c20b0961779838456b7d6ebe1c377eb8560838ac7fa404f07","first_seen":"2025-06-11T12:30:05.294889Z","last_seen":"2025-11-07T19:25:00.838576Z","times_seen":8,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":323,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-20","alert":"Sinkholed","trigger":"shib-mainnet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://shib-mainnet.xyz/claim/","date":"2025-07-20T16:13:17.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 23:06:13 GMT","end":"Mon, 06 Oct 2025 00:05:56 GMT"},"fingerprint":{"sha1":"8A:D4:06:E3:DF:41:70:FA:F8:24:61:06:C6:AD:47:97:37:2F:30:94","sha256":"B1:0C:6E:35:A4:D2:D3:A9:97:48:58:62:89:5F:87:76:31:39:A9:9E:3E:0D:7B:F7:56:58:A6:CB:D8:05:1C:19"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shib-mainnet.xyz/\r\nOrigin: https://shib-mainnet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 20 Jul 2025 16:13:17 GMT\r\ncontent-type: text/plain\r\ncontent-length: 12\r\ncf-ray: 9623beb83c21b517-OSL\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1533\u0026min_rtt=487\u0026rtt_var=1705\u0026sent=10\u0026recv=13\u0026lost=0\u0026retrans=0\u0026sent_bytes=3635\u0026recv_bytes=1277\u0026delivery_rate=6928229\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=aeb8965a2410b0c1\u0026ts=188\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"35b0bce9d250429df012c0426f88d0bd","sha1":"f81d80af9cbeb0011316fbba3da8002b32251f7a","sha256":"da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d","sha512":"32c9df1064e730e1a2358dae62aff741118007187d89510bfbdf93efaaa7356b71a570ea8c5d96bdc0b47155bbaa77df86b6847cc4d95d2d1b7fa2a1484a7144","ssdeep":"","tlshash":"dd600003000000000c00c00cc303030303c00003c30f0000ccc00f000c003300300000","first_seen":"2023-03-07T01:19:04Z","last_seen":"2026-06-07T08:12:19.538389Z","times_seen":27001,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":63,"dns":3,"connect":5,"send":0,"wait":123,"receive":1,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc.drpc.org/","fqdn":"bsc.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://shib-mainnet.xyz/claim/","date":"2025-07-20T16:13:17.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Jun 2025 11:05:37 GMT","end":"Tue, 23 Sep 2025 12:05:32 GMT"},"fingerprint":{"sha1":"EE:63:A4:E6:4E:19:32:30:4F:F9:7E:23:97:D0:25:98:D1:C9:BF:7A","sha256":"EA:5F:7C:2E:45:73:D4:0F:43:6B:96:01:B6:18:83:C6:42:53:23:E1:8E:B8:28:20:99:88:EB:2C:5F:2F:9D:3D"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://shib-mainnet.xyz/\r\nOrigin: https://shib-mainnet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 20 Jul 2025 16:13:17 GMT\r\ncontent-length: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9623beb85d89569d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T07:31:00.386395Z","times_seen":17914964,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":61,"dns":7,"connect":11,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shib-mainnet.xyz/claim/favicon.png","fqdn":"shib-mainnet.xyz","domain":"shib-mainnet.xyz","tld":"xyz"},"ip":{"addr":"172.67.222.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://shib-mainnet.xyz/claim/","date":"2025-07-20T16:13:12.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shib-mainnet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Jun 2025 23:30:11 GMT","end":"Fri, 26 Sep 2025 00:28:44 GMT"},"fingerprint":{"sha1":"DC:C6:47:9D:9E:32:63:93:7B:A7:3F:BF:05:50:C9:19:68:A3:4B:06","sha256":"F4:79:4C:77:58:8E:34:DF:EE:B9:50:89:46:7A:BB:5C:A0:82:5E:57:41:CF:B8:04:EA:79:33:FA:5B:96:E2:EF"}}},"request":{"raw":"GET /claim/favicon.png HTTP/1.1\r\nHost: shib-mainnet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shib-mainnet.xyz/claim/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 20 Jul 2025 16:13:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 2038\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=uUNuMTKF%2F62lbi5Qcd6aIWUJg55VHo1RcljEejq9eRJL1P5IhScnOb4Hc5P6PGOjpm02hKKbqWrxODoWQSmZ%2Bx9mUOZR%2B1uJivePa3OV82%2FqwJnLGniVdoifPWfoGXFOGipP\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Sat, 28 Jun 2025 01:08:53 GMT\r\netag: \"685f40a5-7f6\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 9623be97ef4e56a5-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=8479\u0026min_rtt=699\u0026rtt_var=9676\u0026sent=79\u0026recv=105\u0026lost=0\u0026retrans=0\u0026sent_bytes=8720\u0026recv_bytes=6508\u0026delivery_rate=383389\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=18089\u0026unsent_bytes=0\u0026cid=a8ae8bfdcc4e0636\u0026ts=1592\u0026inflight_dur=42\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2038,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"29c04162147ebd718e7fb22303d8220a","sha1":"19c34bcfd12d741b7d5902f9d243a8f68294d60e","sha256":"6570e1b1d7e3b353618c30fe5aea33aae71e31b2e4849c7f76684f3ddb22efbe","sha512":"d3c233c3250bd49b4e066d8ee833d06364cc4b7e80b42e3f67a98d8ab945f7267bf650e797baa5e2e197878f825e12fc5c7b0dff1f1e6637604aac18f736ed05","ssdeep":"","tlshash":"9a412ca183365c6586e4433e9d53b795d93ad94001b1f0c8407fc2020ce7b9ede9e6ad","first_seen":"2025-06-11T12:30:05.297022Z","last_seen":"2025-11-07T19:25:00.851665Z","times_seen":8,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-20","alert":"Sinkholed","trigger":"shib-mainnet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shib-mainnet.xyz/AtypDisplayTRIAL-Medium-BF65727125b8683.otf","fqdn":"shib-mainnet.xyz","domain":"shib-mainnet.xyz","tld":"xyz"},"ip":{"addr":"172.67.222.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://shib-mainnet.xyz/claim/","date":"2025-07-20T16:13:14.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shib-mainnet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Jun 2025 23:30:11 GMT","end":"Fri, 26 Sep 2025 00:28:44 GMT"},"fingerprint":{"sha1":"DC:C6:47:9D:9E:32:63:93:7B:A7:3F:BF:05:50:C9:19:68:A3:4B:06","sha256":"F4:79:4C:77:58:8E:34:DF:EE:B9:50:89:46:7A:BB:5C:A0:82:5E:57:41:CF:B8:04:EA:79:33:FA:5B:96:E2:EF"}}},"request":{"raw":"GET /AtypDisplayTRIAL-Medium-BF65727125b8683.otf HTTP/1.1\r\nHost: shib-mainnet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shib-mainnet.xyz/claim/1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sun, 20 Jul 2025 16:13:14 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1tBuf3xl%2FsH4zC%2FQwUZjsHWNJ0Qq%2BoU%2FH835IWVoEbPK8vAHQa12WDAFIcs%2BZsqUpmnsttSPj0Ev9bca%2Fkz%2Berof1%2B%2BXy6ybAePvvpZrACzPg8l96%2F%2F048YZuHM%2FCcG2Ktux\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9623bea68aa556a5-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=5979\u0026min_rtt=67\u0026rtt_var=7850\u0026sent=103\u0026recv=115\u0026lost=0\u0026retrans=0\u0026sent_bytes=31697\u0026recv_bytes=9033\u0026delivery_rate=3683803\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=40884\u0026unsent_bytes=0\u0026cid=a8ae8bfdcc4e0636\u0026ts=3904\u0026inflight_dur=50\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":279,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"61d00de0eefb877cdb44489435a1b39a","sha1":"152d4c283f3896acbcff6c9158cf79c7786a273d","sha256":"22dbcffedd080650c286a6a45dbc639720c4442d93728acd246a728234a2f3d7","sha512":"5ddf25df18c80cc872a7e9653ec81c554040d56ea2fc42cdf4a7b9f4d2cd9381524dd5749a78e42102711375406e1df95a8b979bd52321426daea8d7d32c16e4","ssdeep":"","tlshash":"c8d02bde90436396481214a03dc125c2268d12f6a47a92e82d86d48752a853ecd9aa9c","first_seen":"2025-07-07T07:39:39.356944Z","last_seen":"2025-07-20T16:13:39.977005Z","times_seen":2,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-20","alert":"Sinkholed","trigger":"shib-mainnet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shib-mainnet.xyz/claim/Frame-17-p-500.png","fqdn":"shib-mainnet.xyz","domain":"shib-mainnet.xyz","tld":"xyz"},"ip":{"addr":"172.67.222.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://shib-mainnet.xyz/claim/","date":"2025-07-20T16:13:14.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shib-mainnet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Jun 2025 23:30:11 GMT","end":"Fri, 26 Sep 2025 00:28:44 GMT"},"fingerprint":{"sha1":"DC:C6:47:9D:9E:32:63:93:7B:A7:3F:BF:05:50:C9:19:68:A3:4B:06","sha256":"F4:79:4C:77:58:8E:34:DF:EE:B9:50:89:46:7A:BB:5C:A0:82:5E:57:41:CF:B8:04:EA:79:33:FA:5B:96:E2:EF"}}},"request":{"raw":"GET /claim/Frame-17-p-500.png HTTP/1.1\r\nHost: shib-mainnet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shib-mainnet.xyz/claim/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 20 Jul 2025 16:13:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 66634\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vajQ3AWwC6Xks6cc8LF6cxyvt4TWm5WJ4%2BdCxnCnxq3tX%2BdUGQs0bA6cnu6o0W5Vm4Pbhqo8K8Du%2F9vERD7eAt9R6LPCPncg8x8aoAibjVQA6xk0XWoXaRluguGt7OqHPIWk\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Sat, 28 Jun 2025 01:08:53 GMT\r\netag: \"685f40a5-1044a\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 9623bea79ad356a5-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4463\u0026min_rtt=67\u0026rtt_var=3953\u0026sent=123\u0026recv=120\u0026lost=0\u0026retrans=0\u0026sent_bytes=52430\u0026recv_bytes=9261\u0026delivery_rate=3683803\u0026ss_exit_cwnd=40884\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=a8ae8bfdcc4e0636\u0026ts=4138\u0026inflight_dur=105\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":66634,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 889, 8-bit colormap, non-interlaced","md5":"51106cbda9d8cb23b0418089ba360c7b","sha1":"0a21ebbb529330fa659065736b60873b2c288c0a","sha256":"4714983698021925cd3f3b464a964ce7814332e5132d54f1615b026daf9afbb1","sha512":"c347936b6bca2a96c50b31d54bf63b3ed2b69092cd6ea5a9acbdb92732505741b30a659870a6641d420d94546aa29c1ffe4cdd503ee6c3fcc669339e0bb1f13d","ssdeep":"1536:QNtLfK81LEipdh1Lt7uUkL6zP9hQ50YLXb0caMXlEz:ULfK8hpdhhBuU2cfQPX/aMXKz","tlshash":"005302f4245cbc3e67a081809027af639fd412619b5903c9cb1676ee7cae53bd346ec5","first_seen":"2025-06-11T12:30:05.245905Z","last_seen":"2025-11-07T19:25:00.845627Z","times_seen":8,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-20","alert":"Sinkholed","trigger":"shib-mainnet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shib-mainnet.xyz//claim/secureproxy.php?e=ping_proxy","fqdn":"shib-mainnet.xyz","domain":"shib-mainnet.xyz","tld":"xyz"},"ip":{"addr":"172.67.222.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://shib-mainnet.xyz/claim/","date":"2025-07-20T16:13:17.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shib-mainnet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Jun 2025 23:30:11 GMT","end":"Fri, 26 Sep 2025 00:28:44 GMT"},"fingerprint":{"sha1":"DC:C6:47:9D:9E:32:63:93:7B:A7:3F:BF:05:50:C9:19:68:A3:4B:06","sha256":"F4:79:4C:77:58:8E:34:DF:EE:B9:50:89:46:7A:BB:5C:A0:82:5E:57:41:CF:B8:04:EA:79:33:FA:5B:96:E2:EF"}}},"request":{"raw":"GET //claim/secureproxy.php?e=ping_proxy HTTP/1.1\r\nHost: shib-mainnet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shib-mainnet.xyz/claim/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: gacfxdn1x7=4CogvUHaIknmHfR\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 20 Jul 2025 16:13:17 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 4\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=gVTd9OW1aTvGhSoNXe9kp8j%2FsRFfYtQYObsh83MLa5unpUk88HXIi5KLz1mQvz47zb4KhNB8rjWOGDzNI%2BC7L83LJyOMiqWTxVfdyRsQKoUxRL4e0W0GpcXdA%2BqnzmCxZB7U\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9623beba0e5c56a5-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2654\u0026min_rtt=5\u0026rtt_var=2729\u0026sent=198\u0026recv=143\u0026lost=0\u0026retrans=1\u0026sent_bytes=147234\u0026recv_bytes=12084\u0026delivery_rate=7689152\u0026ss_exit_cwnd=40884\u0026ss_exit_reason=2\u0026cwnd=29855\u0026unsent_bytes=0\u0026cid=a8ae8bfdcc4e0636\u0026ts=6911\u0026inflight_dur=195\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-08-15T07:58:15.438078Z","times_seen":9042,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-20","alert":"Sinkholed","trigger":"shib-mainnet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shib-mainnet.xyz/claim/webflow.css","fqdn":"shib-mainnet.xyz","domain":"shib-mainnet.xyz","tld":"xyz"},"ip":{"addr":"172.67.222.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://shib-mainnet.xyz/claim/","date":"2025-07-20T16:13:11.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shib-mainnet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Jun 2025 23:30:11 GMT","end":"Fri, 26 Sep 2025 00:28:44 GMT"},"fingerprint":{"sha1":"DC:C6:47:9D:9E:32:63:93:7B:A7:3F:BF:05:50:C9:19:68:A3:4B:06","sha256":"F4:79:4C:77:58:8E:34:DF:EE:B9:50:89:46:7A:BB:5C:A0:82:5E:57:41:CF:B8:04:EA:79:33:FA:5B:96:E2:EF"}}},"request":{"raw":"GET /claim/webflow.css HTTP/1.1\r\nHost: shib-mainnet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shib-mainnet.xyz/claim/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 20 Jul 2025 16:13:11 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 28 Jun 2025 01:08:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"685f40a5-9946\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5f9XEhRtrohlHQlgjPHqlVr2j00olcc%2FHPRflLNoX5KQXurkGOoj0AyJ%2FB2lKFWblqhbSYQWyOjKDj1UyZIPY%2Fsuzfx65ETGTzgWL%2F3B\"}]}\r\ncf-ray: 9623be9139b956ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39238,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (2587)","md5":"1dd4f94ee5198d145e409aa7daa901f0","sha1":"cde0a38e216586d7b89225f9980899ff1c00b56e","sha256":"8f110d5822de4c0b1051703a8d4b43d45776af7654cb95e252e1581cf2b566b8","sha512":"f7aed75cac97a6d8b08abbe0bea64fc5549d1a42929c659d03d9edbab2d2d5ac559fc7124934dc365e8b37e888af209e4ac753dde708930b94d3c12bb62f6b6c","ssdeep":"768:ef7A1YREqHrFIfoF7bpFMDw82aWoS+lyKA+vdxUF3F5FiwFt24qOqClUZ6CE7WkT:t1YlHr57CPUljdeOqCqE2kQ2","tlshash":"910395b58bf00630b816c1a56990b3253f2d4043a74ede68bad1741fdfce2c79963b69","first_seen":"2024-02-12T11:33:35Z","last_seen":"2026-08-06T11:50:49.215192Z","times_seen":120,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-20","alert":"Sinkholed","trigger":"shib-mainnet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v30/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://shib-mainnet.xyz/claim/","date":"2025-07-20T16:13:14.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:41:27 GMT","end":"Mon, 15 Sep 2025 08:41:26 GMT"},"fingerprint":{"sha1":"9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA","sha256":"C3:51:20:DB:42:A3:71:7A:7B:DE:45:2B:1D:8A:57:E1:26:22:CD:26:F6:CF:18:86:7F:48:52:DD:B1:F3:03:8C"}}},"request":{"raw":"GET /s/montserrat/v30/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://shib-mainnet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37828\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Jul 2025 17:19:36 GMT\r\nexpires: Fri, 17 Jul 2026 17:19:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 255218\r\nlast-modified: Wed, 28 May 2025 18:51:10 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37828,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37828, version 1.0","md5":"e0b05ccbd5b6004a449ac84b466c29ac","sha1":"bcc0e513caae5f6f4164b58eaaa46eaa49622322","sha256":"1f1ae80aa76018cc05e840a37f41cf860211bbe368971f54957bf8ebb3c863d6","sha512":"abc51775b8a82afdd427b2c78aff0c23c95d19bfc7045503724e9ab4f3ce5a6b821d9b10cab9e0c6fdaca2f61c81049d583254952556f42dc147ed53a27b42e3","ssdeep":"768:PqSDNU3XMET3F2NSOiow7Lt/omB7y+/gHII7knqVHQTp4pT:PqSDNUHdT3gNS7/omFnECTp4B","tlshash":"5f03e14522f601c8f245da77fa395d849f731e00379e4ea05846c64db9b7c22aa92d2f","first_seen":"2024-11-22T05:36:25.159388Z","last_seen":"2026-08-13T21:19:03.798033Z","times_seen":38030,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":143,"dns":9,"connect":29,"send":0,"wait":33,"receive":50,"ssl":117},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://shib-mainnet.xyz/claim/","date":"2025-07-20T16:13:17.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 23:06:13 GMT","end":"Mon, 06 Oct 2025 00:05:56 GMT"},"fingerprint":{"sha1":"8A:D4:06:E3:DF:41:70:FA:F8:24:61:06:C6:AD:47:97:37:2F:30:94","sha256":"B1:0C:6E:35:A4:D2:D3:A9:97:48:58:62:89:5F:87:76:31:39:A9:9E:3E:0D:7B:F7:56:58:A6:CB:D8:05:1C:19"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shib-mainnet.xyz/\r\nOrigin: https://shib-mainnet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 20 Jul 2025 16:13:17 GMT\r\ncontent-type: text/plain\r\ncontent-length: 12\r\ncf-ray: 9623beb82bfeb517-OSL\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1595\u0026min_rtt=487\u0026rtt_var=2106\u0026sent=7\u0026recv=12\u0026lost=0\u0026retrans=0\u0026sent_bytes=3268\u0026recv_bytes=1277\u0026delivery_rate=6928229\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=aeb8965a2410b0c1\u0026ts=175\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"35b0bce9d250429df012c0426f88d0bd","sha1":"f81d80af9cbeb0011316fbba3da8002b32251f7a","sha256":"da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d","sha512":"32c9df1064e730e1a2358dae62aff741118007187d89510bfbdf93efaaa7356b71a570ea8c5d96bdc0b47155bbaa77df86b6847cc4d95d2d1b7fa2a1484a7144","ssdeep":"","tlshash":"dd600003000000000c00c00cc303030303c00003c30f0000ccc00f000c003300300000","first_seen":"2023-03-07T01:19:04Z","last_seen":"2026-06-07T08:12:19.538389Z","times_seen":27001,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":58,"dns":6,"connect":1,"send":0,"wait":118,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance.llamarpc.com/","fqdn":"binance.llamarpc.com","domain":"llamarpc.com","tld":"com"},"ip":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://shib-mainnet.xyz/claim/","date":"2025-07-20T16:13:17.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"llamarpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Jun 2025 07:26:29 GMT","end":"Tue, 09 Sep 2025 08:26:26 GMT"},"fingerprint":{"sha1":"8E:B7:5D:9A:A8:64:5E:C2:9A:28:80:55:95:52:D1:88:E8:FC:DA:61","sha256":"A1:1D:06:95:42:1F:25:37:FA:B5:63:4D:9E:03:4C:B3:A6:D2:44:34:10:99:2D:40:07:35:CA:D4:06:42:DA:C8"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: binance.llamarpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://shib-mainnet.xyz/\r\nOrigin: https://shib-mainnet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 20 Jul 2025 16:13:17 GMT\r\ncf-ray: 9623beb85c3f5694-OSL\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,POST,HEAD,PUT,DELETE,PATCH\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers, Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=fYWy2dvrgyIq%2FWFP5wbpsDUjomblIOhQK%2B23FUh8nc%2Fd6NwTojnL9B%2BSyVsh1eVSgzUhda%2BpYwfty4wWlS5b3B2SJX2MCMqIoij6KxtEeAWba3GgCuZ2z0kFH1BEjEEPvj3ZHFNk\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=6038\u0026min_rtt=454\u0026rtt_var=11164\u0026sent=7\u0026recv=12\u0026lost=0\u0026retrans=0\u0026sent_bytes=3276\u0026recv_bytes=1288\u0026delivery_rate=6581818\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=2436a85bd83ad852\u0026ts=425\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T07:31:00.386395Z","times_seen":17914964,"resource_available":true,"data":null}},"time_used":514,"timings":{"blocked":60,"dns":10,"connect":6,"send":0,"wait":373,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed3.bnbchain.org/","fqdn":"bsc-dataseed3.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"34.250.210.43","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"","requested_by":"https://shib-mainnet.xyz/claim/","date":"2025-07-20T16:13:18.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:A4:BE:0F:33:E9:DC:36:3B:B7:3C:5A:E4:42:EE:DE:F1:46:52:E4","sha256":"15:55:B7:24:9E:06:40:29:6B:D0:0D:FD:D2:2B:02:D8:1B:63:50:F2:26:B3:56:69:5D:9D:DF:3E:40:64:99:5E"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc-dataseed3.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shib-mainnet.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://shib-mainnet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 20 Jul 2025 16:13:18 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-nr-trace-id: b802a91c2bd6c322c9871658d9fefc62\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6374,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fa3dbe9e7a67f351ee2d52c99850bf9c","sha1":"294cd26f4c0198841057707ed0b44b3cf616e5a8","sha256":"efe3b5e2a041edfb73e010d9c7b8321b7c075c78f0b5d972fe7783da8844f87b","sha512":"d46f4edc8d511404ba6bb32a1a375a1a1c66b24a11f072dbe332243df7b1489af0816a8506fb648a97dd28b0c5ceac714915bc46221ef78d12e9a8a5f1d51d45","ssdeep":"24:YUtXa257vaoWH3eGZsthXvUzZ5+hdex1qx1xxNU6xvQaNBtXX60jv:YKam3QytxvU15+doY1jNNTt9jv","tlshash":"52d108f098c98e50f19baa81b798bc9400213caf7fdf8f40415cf8b6a0f54a176a448f","first_seen":"2025-04-07T11:53:19.749574Z","last_seen":"2026-08-09T15:35:30.721565Z","times_seen":5261,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shib-mainnet.xyz/AtypDisplayTRIAL-Bold-BF65727125c8d1d.otf","fqdn":"shib-mainnet.xyz","domain":"shib-mainnet.xyz","tld":"xyz"},"ip":{"addr":"172.67.222.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://shib-mainnet.xyz/claim/","date":"2025-07-20T16:13:14.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shib-mainnet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Jun 2025 23:30:11 GMT","end":"Fri, 26 Sep 2025 00:28:44 GMT"},"fingerprint":{"sha1":"DC:C6:47:9D:9E:32:63:93:7B:A7:3F:BF:05:50:C9:19:68:A3:4B:06","sha256":"F4:79:4C:77:58:8E:34:DF:EE:B9:50:89:46:7A:BB:5C:A0:82:5E:57:41:CF:B8:04:EA:79:33:FA:5B:96:E2:EF"}}},"request":{"raw":"GET /AtypDisplayTRIAL-Bold-BF65727125c8d1d.otf HTTP/1.1\r\nHost: shib-mainnet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shib-mainnet.xyz/claim/1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sun, 20 Jul 2025 16:13:14 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=J34m7nugbasESY5zhKcv5%2BloV3Of9%2Fj2ZV8cJ%2Fg1ZK4NL4OKzkBbVRBryUbW8GvQ1L3yXufSalpa4fPkOWoPPXrmF4bU85vP3TqvOpDoDFEcGT3dCGb3XFji4avizUWWn78Q\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9623bea6baad56a5-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=5681\u0026min_rtt=67\u0026rtt_var=6484\u0026sent=108\u0026recv=116\u0026lost=0\u0026retrans=0\u0026sent_bytes=35775\u0026recv_bytes=9078\u0026delivery_rate=3683803\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=40884\u0026unsent_bytes=0\u0026cid=a8ae8bfdcc4e0636\u0026ts=3946\u0026inflight_dur=68\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":279,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"61d00de0eefb877cdb44489435a1b39a","sha1":"152d4c283f3896acbcff6c9158cf79c7786a273d","sha256":"22dbcffedd080650c286a6a45dbc639720c4442d93728acd246a728234a2f3d7","sha512":"5ddf25df18c80cc872a7e9653ec81c554040d56ea2fc42cdf4a7b9f4d2cd9381524dd5749a78e42102711375406e1df95a8b979bd52321426daea8d7d32c16e4","ssdeep":"","tlshash":"c8d02bde90436396481214a03dc125c2268d12f6a47a92e82d86d48752a853ecd9aa9c","first_seen":"2025-07-07T07:39:39.356944Z","last_seen":"2025-07-20T16:13:39.977005Z","times_seen":2,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-20","alert":"Sinkholed","trigger":"shib-mainnet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shib-mainnet.xyz/claim/shib.png","fqdn":"shib-mainnet.xyz","domain":"shib-mainnet.xyz","tld":"xyz"},"ip":{"addr":"172.67.222.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://shib-mainnet.xyz/claim/","date":"2025-07-20T16:13:14.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shib-mainnet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Jun 2025 23:30:11 GMT","end":"Fri, 26 Sep 2025 00:28:44 GMT"},"fingerprint":{"sha1":"DC:C6:47:9D:9E:32:63:93:7B:A7:3F:BF:05:50:C9:19:68:A3:4B:06","sha256":"F4:79:4C:77:58:8E:34:DF:EE:B9:50:89:46:7A:BB:5C:A0:82:5E:57:41:CF:B8:04:EA:79:33:FA:5B:96:E2:EF"}}},"request":{"raw":"GET /claim/shib.png HTTP/1.1\r\nHost: shib-mainnet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shib-mainnet.xyz/claim/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 20 Jul 2025 16:13:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 9644\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=rQ%2FUSu7iv5NealoZVsHbe2HbiqzBuzCYslRm1q0DltWiqpUG0azndAKISyy3xdK54x2S3zCwuiCy3TFjMlqFsIRAoR%2B9r2JttDTVBNiSpax%2FdO6HnpnDDg5temUl5w7Z%2BSt8\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Sat, 28 Jun 2025 01:08:53 GMT\r\netag: \"685f40a5-25ac\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 9623bea76ac756a5-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=5268\u0026min_rtt=67\u0026rtt_var=4541\u0026sent=110\u0026recv=118\u0026lost=0\u0026retrans=0\u0026sent_bytes=36663\u0026recv_bytes=9168\u0026delivery_rate=3683803\u0026ss_exit_cwnd=40884\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=a8ae8bfdcc4e0636\u0026ts=4058\u0026inflight_dur=92\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9644,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 125, 8-bit/color RGBA, non-interlaced","md5":"35c402b0ee228baab32028198be2e7cb","sha1":"c6017a23437491874f82440400751c36e081683a","sha256":"e8eeeab006779960fa9796a0fbabde1db9036bdff3d7007b924efbf5289ac0cb","sha512":"6f2d55ea929d033490b8c2bc5b37b6b6c897d5118cd923fe4db2c2d63a11856b520238469157a6fc1bc49d1471bc96e1d667084651832bbfdb59b9dbffdf4ec4","ssdeep":"192:2Shcr54dtFxMzrZZASSBPreBs/at2pNbrs9MXOTn+MFwTR1wqFsBe1AE:ZhS4LFxarZZASqPreBga07brCMsn+au/","tlshash":"fd12b0aa3bd6ca4ece287719ccfa884dc016647f41fed6e0457610729c2de1669b1bf0","first_seen":"2025-06-11T12:30:05.276984Z","last_seen":"2025-11-07T19:25:00.827346Z","times_seen":8,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-20","alert":"Sinkholed","trigger":"shib-mainnet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shib-mainnet.xyz/claim/Frame-10.png","fqdn":"shib-mainnet.xyz","domain":"shib-mainnet.xyz","tld":"xyz"},"ip":{"addr":"172.67.222.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://shib-mainnet.xyz/claim/","date":"2025-07-20T16:13:14.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shib-mainnet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Jun 2025 23:30:11 GMT","end":"Fri, 26 Sep 2025 00:28:44 GMT"},"fingerprint":{"sha1":"DC:C6:47:9D:9E:32:63:93:7B:A7:3F:BF:05:50:C9:19:68:A3:4B:06","sha256":"F4:79:4C:77:58:8E:34:DF:EE:B9:50:89:46:7A:BB:5C:A0:82:5E:57:41:CF:B8:04:EA:79:33:FA:5B:96:E2:EF"}}},"request":{"raw":"GET /claim/Frame-10.png HTTP/1.1\r\nHost: shib-mainnet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shib-mainnet.xyz/claim/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 20 Jul 2025 16:13:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 2763\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=iL%2FuSnFs7LuVu9FxLGS7K9Ifg9kk%2By6IS%2BL%2BrfFv9w0pkI3XZ0LOtSqXIFoDBsyEl%2FueBYoSybCV4dbd7o8yNu%2F02C9DJfbyHcccDmdEuNWHJL1%2FHeONNKJqTbE4rZguYB6F\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Sat, 28 Jun 2025 01:08:53 GMT\r\netag: \"685f40a5-acb\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 9623bea77aca56a5-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4845\u0026min_rtt=67\u0026rtt_var=4253\u0026sent=120\u0026recv=119\u0026lost=0\u0026retrans=0\u0026sent_bytes=48932\u0026recv_bytes=9215\u0026delivery_rate=3683803\u0026ss_exit_cwnd=40884\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=a8ae8bfdcc4e0636\u0026ts=4103\u0026inflight_dur=102\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2763,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 175 x 175, 8-bit/color RGBA, non-interlaced","md5":"cdefcde2b32186b41110f50e9562a5a8","sha1":"abebeea49515121c59f8abec112666dc8f7d19b1","sha256":"c858e315e9d8d523f9fe853c2f15a84ffa424d9191ef69b72dfa11d339880275","sha512":"bdd2a8cca5316e02d83845dbdd2c8c6bd28d18a2f501132e7ec5e64c43334b149cd2fece9d4d4d2716c057c897a313aa64c80eb24519662cea2ebee582591382","ssdeep":"","tlshash":"3d511846a2a3e0245e35fa76023d104735df02a3ba66e687da49e45dc7e6890503f9a8","first_seen":"2025-06-11T12:30:05.258465Z","last_seen":"2025-11-07T19:25:00.84469Z","times_seen":8,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-20","alert":"Sinkholed","trigger":"shib-mainnet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;700\u0026family=Montserrat:wght@400;500;700\u0026family=Raleway:wght@400;500;700\u0026family=Roboto:wght@400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://shib-mainnet.xyz/claim/","date":"2025-07-20T16:13:11.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:41:28 GMT","end":"Mon, 15 Sep 2025 08:41:27 GMT"},"fingerprint":{"sha1":"DC:40:BF:B1:59:C9:CC:B5:4A:38:2D:D0:16:8D:06:A5:1D:B4:08:8B","sha256":"6A:4A:14:17:EA:BE:21:42:B0:C2:EF:35:F4:04:40:86:BD:19:EC:62:AA:D1:E7:38:C3:DB:96:05:A7:25:F5:AB"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;700\u0026family=Montserrat:wght@400;500;700\u0026family=Raleway:wght@400;500;700\u0026family=Roboto:wght@400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shib-mainnet.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 20 Jul 2025 16:13:11 GMT\r\ndate: Sun, 20 Jul 2025 16:13:11 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35628,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"4cbbe7a1fc08fc6227fe15cf73b28b39","sha1":"46ffe967e06d75d2c67153a21a1d280fe09f6807","sha256":"637e9768d587c579a826b94a0dee6104f54a8b998781236a17bb155e59c5746e","sha512":"c5e127e066fb41e2877d37818648f32eb121037e8bbd4e47b3b2b9e5a6f514c349d951188a4788baff319331b2723e3ff4d3e79e2e4baffdc3f9e921d40aeb31","ssdeep":"768:5oBy+Oh/EBpmv65lOa/76icZwPLOQ/Vw42:hH3r","tlshash":"12f22d91041b9400eb871cd223cf7f36fe4e51557086c0b9abfd5aaaacdbc66436872d","first_seen":"2025-06-06T06:43:00.69604Z","last_seen":"2025-08-31T19:07:03.650904Z","times_seen":1092,"resource_available":false,"data":null}},"time_used":673,"timings":{"blocked":307,"dns":1,"connect":21,"send":0,"wait":33,"receive":0,"ssl":306},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shib-mainnet.xyz/claim/Frame-11.png","fqdn":"shib-mainnet.xyz","domain":"shib-mainnet.xyz","tld":"xyz"},"ip":{"addr":"172.67.222.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://shib-mainnet.xyz/claim/","date":"2025-07-20T16:13:14.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shib-mainnet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Jun 2025 23:30:11 GMT","end":"Fri, 26 Sep 2025 00:28:44 GMT"},"fingerprint":{"sha1":"DC:C6:47:9D:9E:32:63:93:7B:A7:3F:BF:05:50:C9:19:68:A3:4B:06","sha256":"F4:79:4C:77:58:8E:34:DF:EE:B9:50:89:46:7A:BB:5C:A0:82:5E:57:41:CF:B8:04:EA:79:33:FA:5B:96:E2:EF"}}},"request":{"raw":"GET /claim/Frame-11.png HTTP/1.1\r\nHost: shib-mainnet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shib-mainnet.xyz/claim/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 20 Jul 2025 16:13:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 2449\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Sh2UzGzit52%2FKLUTqa40AYJf3tk6GxU%2FrBQHaJAz2eDOX2pQNz%2Ffobg%2FlTpFhJOwQNdo6lSzLAYQQA7civhbvmXw29ocL5m0H23UJvRjV9kZr87%2Bdpl8Xe1aQOpH1nDb%2F8Sh\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Sat, 28 Jun 2025 01:08:53 GMT\r\netag: \"685f40a5-991\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 9623bea78ace56a5-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=5681\u0026min_rtt=67\u0026rtt_var=6484\u0026sent=105\u0026recv=116\u0026lost=0\u0026retrans=0\u0026sent_bytes=32596\u0026recv_bytes=9078\u0026delivery_rate=3683803\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=40884\u0026unsent_bytes=0\u0026cid=a8ae8bfdcc4e0636\u0026ts=3925\u0026inflight_dur=68\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2449,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 175 x 175, 8-bit/color RGBA, non-interlaced","md5":"0dca6169721b20fa649c92f25a86c5bd","sha1":"d3d54d85745cc2e53316f1def038331816d38e93","sha256":"010853aa8a8b643acf9876f30052a811919112e75b11e4e63ad5dd0047e490a0","sha512":"5145342d4c114eac064ff0072a72269e1903090f5f0fdce5c9e18d9ccd969671ec5a8b86a0e0ef2547f6f0293a9456218881db053ba04333c99039bd1d589308","ssdeep":"","tlshash":"97515bb1f6b8c817cc475da1029db37434530f950178b839d827b80ce26dc9c59bb51b","first_seen":"2025-06-11T12:30:05.243262Z","last_seen":"2025-11-07T19:25:00.870992Z","times_seen":8,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-20","alert":"Sinkholed","trigger":"shib-mainnet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shib-mainnet.xyz/claim/Frame-9.png","fqdn":"shib-mainnet.xyz","domain":"shib-mainnet.xyz","tld":"xyz"},"ip":{"addr":"172.67.222.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://shib-mainnet.xyz/claim/","date":"2025-07-20T16:13:14.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shib-mainnet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Jun 2025 23:30:11 GMT","end":"Fri, 26 Sep 2025 00:28:44 GMT"},"fingerprint":{"sha1":"DC:C6:47:9D:9E:32:63:93:7B:A7:3F:BF:05:50:C9:19:68:A3:4B:06","sha256":"F4:79:4C:77:58:8E:34:DF:EE:B9:50:89:46:7A:BB:5C:A0:82:5E:57:41:CF:B8:04:EA:79:33:FA:5B:96:E2:EF"}}},"request":{"raw":"GET /claim/Frame-9.png HTTP/1.1\r\nHost: shib-mainnet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shib-mainnet.xyz/claim/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 20 Jul 2025 16:13:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 1055\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=lJd8GeySmVyEfjOGiR0hz3mbniv4OhYgKYMEyxUrvzhJw1pHwcVT1jzJtetFGR%2BZFs1kgD6PjnKpx8Vuhq7EWkmlshO%2BVXJav4z9Pu3KXKcZqLPQtvp8NH2NzHQiE9abwciQ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Sat, 28 Jun 2025 01:08:53 GMT\r\netag: \"685f40a5-41f\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 9623bea76ac856a5-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=5268\u0026min_rtt=67\u0026rtt_var=4541\u0026sent=110\u0026recv=118\u0026lost=0\u0026retrans=0\u0026sent_bytes=36663\u0026recv_bytes=9168\u0026delivery_rate=3683803\u0026ss_exit_cwnd=40884\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=a8ae8bfdcc4e0636\u0026ts=4059\u0026inflight_dur=92\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1055,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 175 x 175, 8-bit/color RGBA, non-interlaced","md5":"529efcb4e11205aabdc883c7f1659e5f","sha1":"c51c88f195dd7a33a42dd4d9c26727b480118f28","sha256":"6e63e19a303b56b3645d213a8ae56f025ed322c49f22c0e15fc5b7d2e77301c5","sha512":"530c7dd3241ec3a0224c710af31097922ce11179bec24fb2991ee0169c7b14154c226db004c1e844f48e8ed2b9d2978f42215c19a3e347a7fa4dcb74fd94345c","ssdeep":"","tlshash":"1011a5e19d9ab5a1fb8be8b42d93ea924db291f42e740a5b3697c03a005d4bd1241349","first_seen":"2025-06-11T12:30:05.286909Z","last_seen":"2025-11-07T19:25:00.857754Z","times_seen":8,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-20","alert":"Sinkholed","trigger":"shib-mainnet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/disable-devtool","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://shib-mainnet.xyz/claim/","date":"2025-07-20T16:13:17.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/disable-devtool HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shib-mainnet.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 0.3.8\r\nx-jsd-version-type: version\r\netag: W/\"4372-cTTqYs22VcKkI7FmI2XJm6ZFwr0\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 20 Jul 2025 16:13:17 GMT\r\nage: 37912\r\nx-served-by: cache-fra-eddf8230178-FRA, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 6459\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17266,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17245)","md5":"226c2fa3f39c0bb35bb5f1d9d120f9ec","sha1":"7134ea62cdb655c2a423b1662365c99ba645c2bd","sha256":"8a23f92a25922d13437d67f25ba2269b64080b5ec030f5cba982e0261abbfe04","sha512":"ff0d54f8a21ee16685e8e7c4cc3331c287d06105c792f8c659bb2d5852c82c04b0b1844b93cd837835740b42289e55df5099fb0f08161f666842827d506ea9ba","ssdeep":"192:m65oNqiwnCpJWhMpbh78nPVOC0H2ixrsqMEGtxiAIxMwoME8sOUiJE2KswywNC:mJ3+CH7pJ8nPVQH2WrsqOtcA8Jlsa/iC","tlshash":"2d72c6ccb5c3b0705bb7aab9507f050ab2356d56448c8150b23e95f82c7c5aec267f6c","first_seen":"2024-09-27T20:13:48Z","last_seen":"2026-07-22T11:05:53.226108Z","times_seen":1630,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":81,"dns":1,"connect":28,"send":0,"wait":34,"receive":6,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shib-mainnet.xyz/claim/jquery.js","fqdn":"shib-mainnet.xyz","domain":"shib-mainnet.xyz","tld":"xyz"},"ip":{"addr":"172.67.222.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://shib-mainnet.xyz/claim/","date":"2025-07-20T16:13:11.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shib-mainnet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Jun 2025 23:30:11 GMT","end":"Fri, 26 Sep 2025 00:28:44 GMT"},"fingerprint":{"sha1":"DC:C6:47:9D:9E:32:63:93:7B:A7:3F:BF:05:50:C9:19:68:A3:4B:06","sha256":"F4:79:4C:77:58:8E:34:DF:EE:B9:50:89:46:7A:BB:5C:A0:82:5E:57:41:CF:B8:04:EA:79:33:FA:5B:96:E2:EF"}}},"request":{"raw":"GET /claim/jquery.js HTTP/1.1\r\nHost: shib-mainnet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shib-mainnet.xyz/claim/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 20 Jul 2025 16:13:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Sat, 12 Jul 2025 14:57:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"687277f2-55839d\"\r\ncontent-encoding: gzip\r\nage: 1650\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KkyZq%2FnPJk%2B5MLs67ppuv5GREy3A6%2FA01%2BOMF%2FnGJ9qsazxjUmgPIS5LWOitb7Fijt1ttmpbYmDsdeXdPDQd6Wxv%2FxOLt3hbEdIboXWl\"}]}\r\ncf-ray: 9623be9149dc56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5604253,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"19937aa445b4b55e737657a981da88a2","sha1":"6c313d12415fc438216546c0ee2d25ea165cacc5","sha256":"76110503530cc0ac68206e5e33c9837add4b7700c550ffd82c59e0ae349abb0c","sha512":"93df135a634d74e717849e0c4846b7368f4606de66bdf5f45fc826589ccc0cb788702617a1f7d9d10a119b42317846f508dcafb216c0248548ddab3a7b952974","ssdeep":"49152:bUfRtOPJAPfiHFmA/AjjUcxpRVFYKTa70VZNFUtAkISiqUmgKlGkwdNZngkPsWeA:AOJWiHQA/u7xpRxVZNFeKqy","tlshash":"e54623c67f45d0b08f58ba9ed5e7594844801a2789cf547ed649ecc033eafa182cac7b","first_seen":"2025-07-20T16:13:39.988412Z","last_seen":"2025-07-20T16:13:39.988412Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-20","alert":"Sinkholed","trigger":"shib-mainnet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shib-mainnet.xyz/claim/image-10-p-500.png","fqdn":"shib-mainnet.xyz","domain":"shib-mainnet.xyz","tld":"xyz"},"ip":{"addr":"172.67.222.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://shib-mainnet.xyz/claim/","date":"2025-07-20T16:13:14.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shib-mainnet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Jun 2025 23:30:11 GMT","end":"Fri, 26 Sep 2025 00:28:44 GMT"},"fingerprint":{"sha1":"DC:C6:47:9D:9E:32:63:93:7B:A7:3F:BF:05:50:C9:19:68:A3:4B:06","sha256":"F4:79:4C:77:58:8E:34:DF:EE:B9:50:89:46:7A:BB:5C:A0:82:5E:57:41:CF:B8:04:EA:79:33:FA:5B:96:E2:EF"}}},"request":{"raw":"GET /claim/image-10-p-500.png HTTP/1.1\r\nHost: shib-mainnet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shib-mainnet.xyz/claim/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 20 Jul 2025 16:13:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 23611\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=VFiuTBUZDfsJjnPSbOKz5MdLHFXSBVBh97PlhWjfjZWnPYW0Ai%2F2QKVllqIR2Ha61TnvtCETMxUla4FS9Q4bSATMe%2FzIAABRDZxZmyhnRYubqhjC6sFxMKtFI1H%2Fg4lzifna\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Sat, 28 Jun 2025 01:08:53 GMT\r\netag: \"685f40a5-5c3b\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 9623bea79ad256a5-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1800\u0026min_rtt=67\u0026rtt_var=2408\u0026sent=148\u0026recv=128\u0026lost=0\u0026retrans=0\u0026sent_bytes=86316\u0026recv_bytes=9630\u0026delivery_rate=5613067\u0026ss_exit_cwnd=40884\u0026ss_exit_reason=2\u0026cwnd=22618\u0026unsent_bytes=0\u0026cid=a8ae8bfdcc4e0636\u0026ts=4181\u0026inflight_dur=112\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23611,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit colormap, non-interlaced","md5":"06c73423882d78bd567af57e2aa80f32","sha1":"892127100d3b43a17a353b1de65d3bb04587cf2b","sha256":"27a7575157cc347a26caa3da8ed3150809ba81345181b7702b821b6f7558f29a","sha512":"15f8730fb59e04ee8cd63e7dafba0dbe7764934755b62428aa0bf379030944d0ac62df90bebf2e619a8c80e6f98ceebd4d15e73c76d35b89bd6f1c79110f470c","ssdeep":"384:74SXMzkeIGpoQbD7r3q0u5jRCN1+o6UB4iLFBzZlLS6BqujcXd/hv3i5LHPuSjTZ:EuMo1qfr3qbuHB4YFBz7jzjzLHPuqURO","tlshash":"32b2e116c01ce31adf9b3873015ae6de04ff66548abc486256927aad473c542f9bc738","first_seen":"2025-06-11T12:30:05.248796Z","last_seen":"2025-11-07T19:25:00.87157Z","times_seen":8,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-20","alert":"Sinkholed","trigger":"shib-mainnet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.6.9/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://shib-mainnet.xyz/claim/","date":"2025-07-20T16:13:17.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 May 2025 14:38:44 GMT","end":"Wed, 20 Aug 2025 15:38:38 GMT"},"fingerprint":{"sha1":"4B:06:E9:E2:47:47:F5:3C:33:58:F8:2A:95:70:22:5E:23:19:03:77","sha256":"92:B0:F4:51:5C:E9:3A:03:19:F4:50:36:49:FA:A1:01:1D:F0:A1:91:F7:A3:53:E6:19:AA:C4:FA:3D:C4:31:6E"}}},"request":{"raw":"GET /ajax/libs/ethers/5.6.9/ethers.umd.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shib-mainnet.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 20 Jul 2025 16:13:17 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 125841\r\ncf-ray: 9623beb5fc5256a8-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"62ad87d5-1eb91\"\r\nlast-modified: Sat, 18 Jun 2022 08:07:49 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1253694\r\nexpires: Fri, 10 Jul 2026 16:13:17 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2B9bMlZ0e5%2Fj22u6BdYahZsHHbkso7rw9tidPTSKAU2vdFlvPt1m2FAv5o89xy14GKoMjSVa6c01ujCkFJCp9RhSWxs8YJGqaJJrj%2F1Nb25%2FAeCGvRPOlyO0srq6%2FMfpW4VMWJ1Kf\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":735973,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"268d19762594655239a29d058a7e8b44","sha1":"f06da2f7a68114b8dda38a0d782d65ddacc9c0e8","sha256":"95c66625ee20f53d542e23dded002b021b24e9d28c3d193a076d45cba4dc8618","sha512":"55e6b3e48536891a5ad0106b26525e4607c9ece0075ad5496535ef81d1fbb377dfb0b50286594c0aa0b405bf9e791c4696b674ea260813f4772ac7220ab82fdc","ssdeep":"12288:TfLmYQI/yjP+H8Xb29/nNUgE6te1R5WJW:TfCPalnNfE6taD","tlshash":"29f42b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-07T12:58:29Z","last_seen":"2026-08-16T02:34:15.441922Z","times_seen":8492,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shib-mainnet.xyz/cdn-cgi/rum?","fqdn":"shib-mainnet.xyz","domain":"shib-mainnet.xyz","tld":"xyz"},"ip":{"addr":"172.67.222.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://shib-mainnet.xyz/claim/","date":"2025-07-20T16:13:17.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shib-mainnet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Jun 2025 23:30:11 GMT","end":"Fri, 26 Sep 2025 00:28:44 GMT"},"fingerprint":{"sha1":"DC:C6:47:9D:9E:32:63:93:7B:A7:3F:BF:05:50:C9:19:68:A3:4B:06","sha256":"F4:79:4C:77:58:8E:34:DF:EE:B9:50:89:46:7A:BB:5C:A0:82:5E:57:41:CF:B8:04:EA:79:33:FA:5B:96:E2:EF"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: shib-mainnet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1032\r\nOrigin: https://shib-mainnet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shib-mainnet.xyz/claim/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Sun, 20 Jul 2025 16:13:17 GMT\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://shib-mainnet.xyz\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nserver: cloudflare\r\ncf-ray: 9623beb7dde556a5-OSL\r\nx-frame-options: DENY\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T07:31:00.386395Z","times_seen":17914964,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-20","alert":"Sinkholed","trigger":"shib-mainnet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shib-mainnet.xyz/secureproxy.php?e=ping_proxy","fqdn":"shib-mainnet.xyz","domain":"shib-mainnet.xyz","tld":"xyz"},"ip":{"addr":"172.67.222.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://shib-mainnet.xyz/claim/","date":"2025-07-20T16:13:17.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shib-mainnet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Jun 2025 23:30:11 GMT","end":"Fri, 26 Sep 2025 00:28:44 GMT"},"fingerprint":{"sha1":"DC:C6:47:9D:9E:32:63:93:7B:A7:3F:BF:05:50:C9:19:68:A3:4B:06","sha256":"F4:79:4C:77:58:8E:34:DF:EE:B9:50:89:46:7A:BB:5C:A0:82:5E:57:41:CF:B8:04:EA:79:33:FA:5B:96:E2:EF"}}},"request":{"raw":"GET /secureproxy.php?e=ping_proxy HTTP/1.1\r\nHost: shib-mainnet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shib-mainnet.xyz/claim/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sun, 20 Jul 2025 16:13:17 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4R4omP%2BlaLHChslU2XhdriqdK%2Fq0pmGsGxP2H6YljLeyMheuZs%2BSNBl4%2Bz%2FXGA8xZqETz3Oo97humLjE352aKTcIABaRLDSBEAJqzA03v22ZxNIWLGdqUoMy0yV13ak3N0pP\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9623beb7cde256a5-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2783\u0026min_rtt=5\u0026rtt_var=3295\u0026sent=195\u0026recv=141\u0026lost=0\u0026retrans=1\u0026sent_bytes=146326\u0026recv_bytes=11736\u0026delivery_rate=7689152\u0026ss_exit_cwnd=40884\u0026ss_exit_reason=2\u0026cwnd=29855\u0026unsent_bytes=0\u0026cid=a8ae8bfdcc4e0636\u0026ts=6700\u0026inflight_dur=193\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":279,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"61d00de0eefb877cdb44489435a1b39a","sha1":"152d4c283f3896acbcff6c9158cf79c7786a273d","sha256":"22dbcffedd080650c286a6a45dbc639720c4442d93728acd246a728234a2f3d7","sha512":"5ddf25df18c80cc872a7e9653ec81c554040d56ea2fc42cdf4a7b9f4d2cd9381524dd5749a78e42102711375406e1df95a8b979bd52321426daea8d7d32c16e4","ssdeep":"","tlshash":"c8d02bde90436396481214a03dc125c2268d12f6a47a92e82d86d48752a853ecd9aa9c","first_seen":"2025-07-07T07:39:39.356944Z","last_seen":"2025-07-20T16:13:39.977005Z","times_seen":2,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-20","alert":"Sinkholed","trigger":"shib-mainnet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc.drpc.org/","fqdn":"bsc.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://shib-mainnet.xyz/claim/","date":"2025-07-20T16:13:17.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Jun 2025 11:05:37 GMT","end":"Tue, 23 Sep 2025 12:05:32 GMT"},"fingerprint":{"sha1":"EE:63:A4:E6:4E:19:32:30:4F:F9:7E:23:97:D0:25:98:D1:C9:BF:7A","sha256":"EA:5F:7C:2E:45:73:D4:0F:43:6B:96:01:B6:18:83:C6:42:53:23:E1:8E:B8:28:20:99:88:EB:2C:5F:2F:9D:3D"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shib-mainnet.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://shib-mainnet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 20 Jul 2025 16:13:17 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-drpc-owner-id: cb501251-31a8-4028-8b0a-54679f15c385\r\nx-drpc-owner-tier: free\r\nx-drpc-provider-id: drpc-public-multiregion\r\nx-drpc-trace-id: 9bd56196dbfd8c656d6fc8bbd7213793\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9623beb8ae35569d-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4902,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c6bfa8fda4c0e071f9d03e47e2109c3c","sha1":"c9cd91f85569f1927c3deb5f4c3469255b6479ca","sha256":"30bd4eeaa66748ea6d936f73a797160ea5ad2aa29caad7e413598ff962780988","sha512":"91972a80a9592ab068cf65c75de6ec5ab6c1e42945c6fe8d5e7356ff5e0dd6e076c1b637908a86991e085becd11a1f743d901412bb9ac6170dfd4da20762cdc4","ssdeep":"96:+igW53TB2SzrZYpTbDaOTkSO6mdSInccYGS9FzelVLY:V5TB2SzAT/7kSRRrze3k","tlshash":"2ca179f0ee02c891f1be4768f2ddbe0461383326eedc5a4604745a991ee5a51bd0dccd","first_seen":"2025-04-16T10:17:39.724523Z","last_seen":"2026-04-30T18:00:51.584548Z","times_seen":621,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shib-mainnet.xyz/claim/sweetalert2.min.css","fqdn":"shib-mainnet.xyz","domain":"shib-mainnet.xyz","tld":"xyz"},"ip":{"addr":"172.67.222.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://shib-mainnet.xyz/claim/","date":"2025-07-20T16:13:11.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shib-mainnet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Jun 2025 23:30:11 GMT","end":"Fri, 26 Sep 2025 00:28:44 GMT"},"fingerprint":{"sha1":"DC:C6:47:9D:9E:32:63:93:7B:A7:3F:BF:05:50:C9:19:68:A3:4B:06","sha256":"F4:79:4C:77:58:8E:34:DF:EE:B9:50:89:46:7A:BB:5C:A0:82:5E:57:41:CF:B8:04:EA:79:33:FA:5B:96:E2:EF"}}},"request":{"raw":"GET /claim/sweetalert2.min.css HTTP/1.1\r\nHost: shib-mainnet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shib-mainnet.xyz/claim/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 20 Jul 2025 16:13:11 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 28 Jun 2025 01:08:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"685f40a5-5d2b\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lA2p1xhoKkgJcxQ%2BOZXGd%2FfUx%2BugnEVEs%2FyfuVu9zTZ8CduGDCvXeNrZ0TFaSirtJGyK1tsm5oXIvwzmh724joju0oeA15hbEowAIX%2BN\"}]}\r\ncf-ray: 9623be9139be56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23851,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (23850)","md5":"d849077e8b4cc93dd5c925165f2cded4","sha1":"496b8e753292cc78d4964d94eee5c250d53ca13a","sha256":"ee3512f8c59eaa415d996f68ce467b98f6a0cfe42631bb0196df90dccb04f855","sha512":"c97d51f2e5a2d75c4f7d8ec70e0eeb90b2fff45d63abc1f28b3f2a1780d5da779d5f821597baee476fa1dd315c78721c4f93aaee8a0a8b4f5465b237f41ef297","ssdeep":"192:CBh5Cif2Ib/m3ozgBVdX+LZDcFPAtmFHiJw3epAd/34JpG:CB72IrjgIFAFPAtmQa3Mu/ofG","tlshash":"43b2f9a1aa88e017f67a862f59c0f60875d9e50bfdf3085ef414d1008fd7e5f2a792a4","first_seen":"2023-07-01T11:25:55Z","last_seen":"2026-08-12T13:03:52.460154Z","times_seen":1947,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-20","alert":"Sinkholed","trigger":"shib-mainnet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shib-mainnet.xyz/claim/normalize.css","fqdn":"shib-mainnet.xyz","domain":"shib-mainnet.xyz","tld":"xyz"},"ip":{"addr":"172.67.222.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://shib-mainnet.xyz/claim/","date":"2025-07-20T16:13:11.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shib-mainnet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Jun 2025 23:30:11 GMT","end":"Fri, 26 Sep 2025 00:28:44 GMT"},"fingerprint":{"sha1":"DC:C6:47:9D:9E:32:63:93:7B:A7:3F:BF:05:50:C9:19:68:A3:4B:06","sha256":"F4:79:4C:77:58:8E:34:DF:EE:B9:50:89:46:7A:BB:5C:A0:82:5E:57:41:CF:B8:04:EA:79:33:FA:5B:96:E2:EF"}}},"request":{"raw":"GET /claim/normalize.css HTTP/1.1\r\nHost: shib-mainnet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shib-mainnet.xyz/claim/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 20 Jul 2025 16:13:11 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 28 Jun 2025 01:08:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"685f40a5-1e5c\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fws8N70DXDmTyFsmdwmfV8WUjezKeIFVYbF1DJmJnkJPyzH2oUbnLGJXq0FH1p0hyJUZ6hRA2NOdNcAYUHpAKQJ3G4vGFFCn5OJGW4bc\"}]}\r\ncf-ray: 9623be9139b356ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7772,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"afb4942e5838a7dc3b63d00ffcc87c9d","sha1":"f1a4ae2fbaa13ef9d9500648d5a16f7adaa88d30","sha256":"0d336a97efd52a4ef44ef3270e71eac24ba405d4450016f9d3e943256e9e58c8","sha512":"8b897ca084c9e5aba585a3c8036ca2b9e10243e262e93f0761635db00d1da2544803f8937163d278e94c4d6ff6b23031f87660b55a9000a72211bb27a3ebab7e","ssdeep":"96:MrWcFPpkRUwojaszRO5LVSrwnTgPjnRo5wUEKs2NE4P+49NaN71UB9:M/9pVjasdEvQnRo2UEKsSBP+W67w","tlshash":"82f1b59923a04b9252395df5f3a7938533481127832c7c6eb4d240fc8fc8b5553baf99","first_seen":"2023-04-05T04:08:19Z","last_seen":"2026-08-16T07:06:37.604331Z","times_seen":3734,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-20","alert":"Sinkholed","trigger":"shib-mainnet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://shib-mainnet.xyz/claim/","date":"2025-07-20T16:13:16.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 May 2025 14:38:44 GMT","end":"Wed, 20 Aug 2025 15:38:38 GMT"},"fingerprint":{"sha1":"4B:06:E9:E2:47:47:F5:3C:33:58:F8:2A:95:70:22:5E:23:19:03:77","sha256":"92:B0:F4:51:5C:E9:3A:03:19:F4:50:36:49:FA:A1:01:1D:F0:A1:91:F7:A3:53:E6:19:AA:C4:FA:3D:C4:31:6E"}}},"request":{"raw":"GET /ajax/libs/crypto-js/4.2.0/crypto-js.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shib-mainnet.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 20 Jul 2025 16:13:16 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 19621\r\ncf-ray: 9623beb46e8b56bd-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65384d58-4ca5\"\r\nlast-modified: Tue, 24 Oct 2023 23:03:52 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 125242\r\nexpires: Fri, 10 Jul 2026 16:13:16 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=zHbJkCSo9TT7Ak7YbYyzkIy8CC4S0kSLNLKDo0PdoAlii8waNrLYU%2F3w3%2F%2FjY8rpgKC%2BCynBe%2BxI9CkCHNgVnLKjKCU4F0%2BdXyT9PBnLZpCg6C7rDBYYoDfubkbxzPHeXvFFNH2o\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":60819,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (60819), with no line terminators","md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-08-16T04:35:11.637631Z","times_seen":31906,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":23,"dns":1,"connect":1,"send":0,"wait":17,"receive":2,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed3.bnbchain.org/","fqdn":"bsc-dataseed3.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"34.250.210.43","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"","requested_by":"https://shib-mainnet.xyz/claim/","date":"2025-07-20T16:13:17.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:A4:BE:0F:33:E9:DC:36:3B:B7:3C:5A:E4:42:EE:DE:F1:46:52:E4","sha256":"15:55:B7:24:9E:06:40:29:6B:D0:0D:FD:D2:2B:02:D8:1B:63:50:F2:26:B3:56:69:5D:9D:DF:3E:40:64:99:5E"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-dataseed3.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://shib-mainnet.xyz/\r\nOrigin: https://shib-mainnet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 20 Jul 2025 16:13:18 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T07:31:00.386395Z","times_seen":17914964,"resource_available":true,"data":null}},"time_used":691,"timings":{"blocked":327,"dns":31,"connect":33,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/merkletreejs@latest/merkletree.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://shib-mainnet.xyz/claim/","date":"2025-07-20T16:13:17.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/merkletreejs@latest/merkletree.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shib-mainnet.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 0.5.1\r\nx-jsd-version-type: version\r\netag: W/\"38b62-hb7yiPDOf36GeGwNtiLPc6Lfotc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 9745\r\ndate: Sun, 20 Jul 2025 16:13:17 GMT\r\nx-served-by: cache-fra-etou8220103-FRA, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 49570\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":232290,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ea425bcaf8d5bcc4cd1b787a9067be7c","sha1":"85bef288f0ce7f7e86786c0db622cf73a2dfa2d7","sha256":"8dfd04b5d4631811c6f25b7ebd6d0444222afc0a7ab5a740320731b0e50f08ac","sha512":"66ee506a0e657b1fe597d6434c186db3ebbc12f5f540d29689dbb1119efbbc8cae1b1edf9e6682cbf602f4540be1b2f61af725ee1ec2036c5b57ab817f01362f","ssdeep":"3072:ZcBVt9NAALrlr9KorpLppLR8Cs4HOIFV99:Zo9NAAvOYRVssOIF/9","tlshash":"ae342ac53685a0a583da71a8043f980fb176a827405cd484e928fcf59cfce9956bbf7c","first_seen":"2025-03-02T05:43:21.853177Z","last_seen":"2026-07-08T12:41:40.125836Z","times_seen":1308,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":81,"dns":6,"connect":27,"send":0,"wait":39,"receive":32,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}