{"report_id":"754f5fbc-0253-4dc8-a635-ac1d1db5f064","version":6,"status":"done","tags":[],"date":"2026-03-31T20:10:26Z","url":{"schema":"https","addr":"claim-solaxy.trade/","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"claim-solaxy.trade/","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"title":"Solaxy Token: $SOLX Airdrop is Live","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T22:54:03.779504Z","times_seen":17861910,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"claim-solaxy.trade/","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-05T20:10:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"claim-solaxy.trade","ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-27","domain_rank":0,"first_seen":"2026-03-31T19:58:06.294066Z","last_seen":"2026-03-31T19:58:06.294066Z","alert_count":106,"request_count":53,"received_data":16267442,"sent_data":23834,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"claim-solaxy.trade/","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"52fd0de8f24cb0dd1c91188a0b8c0fe0","sha1":"46ecb49c7aec90f6bcb929344a5e2f857202e53a","sha256":"94c9f915ae666f056a474d1de063027cac871e9159ae128b45136db293429dff","sha512":"a3ea544ec63c4971494ea15664cab1fd0ac79461048f7f8914d8a74d16c286523eaeef178928a416cc8c516bcec176ef8092959a23cb6f126b540ce0aba33ce9","ssdeep":"192:+tkdES6CIf83eeC8uWS6Ct4/SjroSI3brZUqKfzymDHvCd:+ff83JnSrw7","tlshash":"94d16c7d9e92063758abf5bd8f9b7480292284275909ed203d4ce1029f8cd299af6f94","size":6323,"data":"","first_seen":"2025-08-21T04:12:27.408119Z","last_seen":"2026-03-31T20:10:35.857094Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f278e1582a6b32d6a9a05328bba73b0f","sha1":"02780b645a044990e49787663d3dba06626b1e3d","sha256":"07317dc90130ec69ed8e07a8362168074f9067473354101f361449cff37110aa","sha512":"08463b63ba1654bf203117d8f0c0a2ce4b5d92914ffba7c8ac3d942ff1a812c86cc61d9e840e5f3422c2b22d1b71b1a06b9a6d40d4e4259b32fd8cd40cc8357f","ssdeep":"","tlshash":"55319948a43216904242e8f1c676abeeabe774080574446d349cbec7eff8447e521678","size":1529,"data":"","first_seen":"2025-08-01T04:16:24.221852Z","last_seen":"2026-08-12T21:03:58.353756Z","times_seen":3460,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2380d391cf784bce2f77e0e16fa2268b","sha1":"2b88cb08e3d7f56772d46fe1a10d84774e8728d5","sha256":"e65fcff70fe965f3d1878fe515a7ebcd265dfe61b15461521450c882e8d081d7","sha512":"0f3264af3a045928be20d2ee1ef3af905571d07e3fc25eaeda22199baca89b8c9bff94d90d81124ff45b16c5e40df291c2f49d9464ba901d2d961f6fd1196f1f","ssdeep":"","tlshash":"e6411b1e00aa0aa31ba3054333ce846d0956c2cedcc73534d3b27f8134c67832a93bea","size":2254,"data":"","first_seen":"2025-08-01T04:17:54.882582Z","last_seen":"2026-08-12T21:03:58.350554Z","times_seen":3285,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3433c9d3e9b7e8e5b34ed72e309db572","sha1":"d53d7df082088749c1df6b08330ee9b9e4076932","sha256":"1d96fa9904e3743570bccd5be90e83fd91975299f374093cc6f723673d582dd1","sha512":"ffd0e047331871f21738643968b7eb7fa045ee0e45346a9ea986c4b8a3e745dd310542c6b2734f6d244408bba6548ec66f5cd7662c69485b5e59e3b9432cdff2","ssdeep":"","tlshash":"06f04245bd825a24d35670ddc41f978cc53690dd91491c4cbb64ece1de94c2cdfc6534","size":585,"data":"","first_seen":"2025-08-01T04:16:24.219641Z","last_seen":"2026-08-12T21:03:58.355246Z","times_seen":3501,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"dd2cafd94cf8a01766340e79734b30a2","sha1":"baaf9903a171cf15b29cb04b50cf46eb868248bf","sha256":"bf645ac9c95004c4732e92ce0316c19235309dea11781eae649a239f1c6d26c8","sha512":"c80d3a5b57ff1716e0be6f2cc3c95c0e4e8c0e75825346bb5e7d678b19cd10ec5fcbf6a39bd68eeecac0240eef85f003fc069d157da6e8fc3d8172b7f6bbf0c2","ssdeep":"","tlshash":"af110e62685b582ed2ab025a7686546004bee13185af9ca7f7ccaf80789dd925007324","size":1000,"data":"","first_seen":"2026-03-31T19:58:10.887486Z","last_seen":"2026-03-31T20:10:35.868858Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"59a13eef9e5e0ec7844e58e8b47d54a0","sha1":"0fb2b2059a878b87f8524284d448dd46a4351953","sha256":"c890c150b008d069bfddb86ee2c2e3fe979515939053b4c53fd6853b68e4fe35","sha512":"7fcdb614d30b1141e9a1e134a98e2888007f786f866c24e6383106d3e003f094e72901aa295e7d3450fccf5a249b25b436401a5b9439205da6b0eec8d72cfc80","ssdeep":"","tlshash":"33f0beaf336126ca23ae6ad20796c01d1e72e4ab3002163c575a36ca0cb6f52521b07e","size":494,"data":"","first_seen":"2025-08-01T04:17:54.874483Z","last_seen":"2026-08-12T21:03:58.346116Z","times_seen":3247,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0e1ee9f442371606d9a13b41a0dbeaff","sha1":"a05c25c8ad9127fe7d45319ce13e8b4a485d2e01","sha256":"713285cbc0cb910dfd2e7a86c604d191a27789ae50964ab1c674507ff4a20c45","sha512":"1dbac9fa1e0b338e780a3600f1a3da140a6c83a961a1d0c6c80fe3dc5a9041c346c471d264a07ccc87457cdccc2a28b768d02283512ba9cee0fc2e2b7124e42d","ssdeep":"","tlshash":"0221fedeb2826488526794d742cd8dceb8e617a919008c20452ef299225c3e8fb6ad54","size":1177,"data":"","first_seen":"2025-08-01T04:16:24.218288Z","last_seen":"2026-08-12T21:03:58.346953Z","times_seen":3353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1e21743cd2ee2004cd56bfc5c29e3609","sha1":"bf516634ffbcfd3186b71dafc0ecdcc47894c439","sha256":"0e428980439e794b176e0ee3cd84e4878510b1d52c1efc1c00f4af9729a17029","sha512":"4264e5ce5b4f3acb24046582388132a5915398c9266c18c6349d75fb94bd74bac990dc6ebd12e1e118a3a24752a3e4badae2faabd69b9827d1f223a0750da4c2","ssdeep":"48:atoyTqSsM+c69M+c69M+c69M+c60778KK7NaaM//M+A:atlDNDNDNDl778KKw//M+A","tlshash":"25913f32165427da63ce8fd45a85751d01d2c89a383e60bdff3279eded3a683c031612","size":4506,"data":"","first_seen":"2025-08-01T04:16:24.215618Z","last_seen":"2026-08-12T21:03:58.354502Z","times_seen":3416,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/816183a7-6c66-4b59-8830-ffa5e1b76604","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"de7d1cf5bacc7a4272823db50035127d","sha1":"1a7b0e50848f5262fad9a423954b482c898a27f7","sha256":"b278cb650d549b8295eb18b3e0ae1ea396ece0e74e31f64b7ad933364717a4b5","sha512":"c7dad56bda63aa2c4956bd9441ef0f5a5ebca93e8e24528aecccf214c2dbf61782d2fb98fa1cb17159bf1e8c40ad5576105161bce0cf2375f24c3993c10260d2","ssdeep":"","tlshash":"1111e135f047d419929a1e2d37f31d2078bbe159c1dbeca9bbc8dba23894d791183605","size":1000,"data":"","first_seen":"2026-03-31T19:58:10.863789Z","last_seen":"2026-03-31T20:10:35.881169Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/js/utilwidget-5.1.9.min.js","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c779d67a76e5128424d8e935ce5201c","sha1":"bd54e36070f193ddb2eadc12a9f09bec07867488","sha256":"94cb0707bdeed02a29f6a126403426db620f8700c55c59ba2a3256a5c42b7a8e","sha512":"4c11866d4cf4f6ce9dd3535ece781630cda6ee9d4ad9e46902748b2f420ea9c684ad22eae34fbdb0358d72092e24713f3278d2d9c650c6a8086a7badf4be0ad6","ssdeep":"1536:fwT3GYTag1AxIFVEhHMTdEmh1z8ayI7W+Q0O665ZoBCVcXmhzg46AKj:fwTWYTag1A2F4sTdL7ogO5Zo4VcXmumY","tlshash":"f7342de5db9bd4ec8e9111cec073f845e4584963ceacb493aa2ddec17519f22808727b","size":237589,"data":"","first_seen":"2026-02-20T16:36:44.220065Z","last_seen":"2026-06-27T10:04:58.412497Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8de04e3dc63af7585af0e827672eb149","sha1":"02ee5e4b4e73e430d629744c4b7a3e38c36ed06d","sha256":"123e2a4c9c65ad62ea2b0992b1f80073e18a341a810f9ba40d1c4cdc31f1e759","sha512":"a42fcbfd4fc45305b75c0093524abafcf73f7d10f3bbe8cf573f3ea87803f672ae7fd293a116e7c24aeb0ef9fb24b9ea32e48200a56243187d5b550407631184","ssdeep":"","tlshash":"a911cce0aa6c599781c2095034894b02b13cb020203d9fd0bf75f0ce7c7c7ec96d262a","size":1000,"data":"","first_seen":"2025-12-20T20:03:49.143914Z","last_seen":"2026-06-07T00:08:21.702938Z","times_seen":1701,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"claim-solaxy.trade/top-nav-bg-right.svg","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:48.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /top-nav-bg-right.svg HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:48 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 787\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qCCopuMBTEb6bpB3mPwYU%2BI4qbeSK%2FDpIkZ63q9D%2BpjygMCJPCiuIai5QwKSQI%2FKTCDfAPI2eyqEt6XVihL0wP7mUa3hj6KmCwZZmwbIFEo%2BcSlDalnyvPQ7zP5E8GyDBvELmI8%3D\"}]}\r\ncf-ray: 9e51fe6bfd391a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":378566,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (26370)","md5":"120317de831031b8b0792c671f20eafd","sha1":"bf4525b1d5c0aafbd75e753c330362d8e2b54a9e","sha256":"b9670db8c069ed879a047981a35bf2cce8a08a0c8c4f0de76f4cdc470b90b176","sha512":"87c177511d7f4b03f41e9d6507954a45149cf00013f24c15357760213880a8b4117b35d8aad3b81e16c3ed2dbbe3ab948254a4c0fc1e28b9ca0ff2bb00bcc184","ssdeep":"3072:s90FT1vG1DxrPeBFaXKjBKl6I20et3Tk0uL030b5E0M1j0lG7ovUA4VEW0+SkIlh:tB3AW8G7ovUA4VEn","tlshash":"f98409e43bb006edb757e2d63f9287583e015667d1498a1ef77c1c40abcd92918e2ec4","first_seen":"2026-03-25T17:22:20.130634Z","last_seen":"2026-03-31T20:10:35.75353Z","times_seen":6,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/tab-one.png","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:48.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /tab-one.png HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 2870\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\netag: \"69c60821-b36\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 788\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hA9Hae%2BsgqzhTjqbcyIesVL3bluMUaZHCAVi9GDBiWRP3d9K3%2BbQg3g9OtFK64eR5qmt%2FTdHDkjYtyvY5h0LvSt%2Bz6JMAo15A5BaUY%2FiNMqKzoupyqWLf7JY9zozjG6Mdkgo4N8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e51fe6c1d461a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2870,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 107, 8-bit colormap, non-interlaced","md5":"f329e2499351db03892151ee41210843","sha1":"06dd2d9b36af106bebde3e27597ddf574ff8bf85","sha256":"47d69765baa20b55dc7f2637916a3d32250c2a3db22ccabd0ecddaadfaad3eb2","sha512":"94e3bb3bb4dbba7a343623d1c532a78e49cdb504047e7a43b5b31724e4d8af64bdf62c40c87f58acbafe09afcdf781d173413576f7227b802a91b728ffb2b1e7","ssdeep":"","tlshash":"e5510ac756fed56acec662b213e82bd084fb08f1e82c1344b888dcd55754e153137b65","first_seen":"2025-06-02T11:49:35.508158Z","last_seen":"2026-06-10T13:51:38.855691Z","times_seen":21,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/309b96b288a6498af8444ab43a1fffdbc33e1e7f.png","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:47.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /309b96b288a6498af8444ab43a1fffdbc33e1e7f.png HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 337558\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\netag: \"69c60821-52696\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 789\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lpQtEGGWwjuAOsW1xH6WYAr6lX5UOyISpIixopwHFxLPD9uNV5JW6%2FYVioTUF645g6VkzY%2FM%2BCvhyaryE6jxm4MYh9ASZxPaxXIBPUJ5yM6F%2FeqVcoC4UgicCzQr%2BUgwfPw387o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e51fe676c7a1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":337558,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 548 x 468, 8-bit/color RGBA, non-interlaced","md5":"eb28fb6886d2637b996d87e48dd8be18","sha1":"309b96b288a6498af8444ab43a1fffdbc33e1e7f","sha256":"e7e9dd7025ba54b70d563a46ea04c1741e91e6f22d418e7d76d4b49f38b566a6","sha512":"7db837aad2672c79ff79fe206589e4c6feffa27c1dbed6ebcec7e4ae5ca7fc59076a7b343801cdaa188f0e24d9088967a4566bee16f98eafd54bfe106a9ee123","ssdeep":"6144:+eaNakKJYZUNzq0sxcqAgEO/naMrsBvD5eHqmoeAhPK24R6GqCCJ0Jr6sucKr:sNaF2Iez6qsEn4eHqDeAywmcquCKr","tlshash":"527423f94e8f2311ea9c4594f4c3bb3a8e81749a495aa0c2777c7402978ff647a98d70","first_seen":"2025-05-26T12:18:54.594485Z","last_seen":"2026-03-31T20:10:35.760932Z","times_seen":16,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/tab-icon-one.svg","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:47.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /tab-icon-one.svg HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:47 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nage: 789\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69c60821-2833c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HGi92DqT7nkgDzp7SCoH%2ByFvd0afcKuj3zFeve3lqcCj74U9fxNV%2B0GV0pXQD%2BLGefgDrIK%2B3W0obC9jU1rN0r3aFwxew95FCDi1bAVt9op7YvkK8wh8WpwCVGGkfhmNGOZF%2B4k%3D\"}]}\r\ncf-ray: 9e51fe676c7f1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":164668,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"161012b47c2ca8bb9f9bc17a7aab94ad","sha1":"138c9985259a70b48776aff9bb660c66610342d8","sha256":"2c5a7cae8839aef29c2246d7be85f472df8002a0735a2dec6a4654bcb51ccf94","sha512":"14d07e01d4ed6e37d20a183f914ce5c9a253bd0675c97152438bdd30b95de532248da8a0ba92ac4ccc1dabf82cd6360423b5e92b246633ef8290cabb9b65816c","ssdeep":"3072:NtvOQ/zM2c9JcqztiF5QM27fYI3YbT18UfrcJy4cNtsu1UVo:7D/zMjuwiF5Q1j5qDR4cNWIUo","tlshash":"73f31211cf6b467e062962acc5d14d79ac0cb72aa28d7cbcb0f5e8a3147cf5a142359f","first_seen":"2025-06-02T11:49:35.491758Z","last_seen":"2026-06-10T13:51:38.76411Z","times_seen":20,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/rocks.png","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:47.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /rocks.png HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:47 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 788\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zFnah18U5a6hEAdQMsZhUqLlaoFXMgAu6cBzqJqydIpMqiFc85AfBxYdRrOEfFRpALY3gurtqZy%2FLKK3FJrLe4%2BiS%2FmB2IdhJyOzfLoEP6hlcN4B29AxruAhDVTOy82D0QHtb%2B0%3D\"}]}\r\ncf-ray: 9e51fe676c841a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":378566,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (26370)","md5":"120317de831031b8b0792c671f20eafd","sha1":"bf4525b1d5c0aafbd75e753c330362d8e2b54a9e","sha256":"b9670db8c069ed879a047981a35bf2cce8a08a0c8c4f0de76f4cdc470b90b176","sha512":"87c177511d7f4b03f41e9d6507954a45149cf00013f24c15357760213880a8b4117b35d8aad3b81e16c3ed2dbbe3ab948254a4c0fc1e28b9ca0ff2bb00bcc184","ssdeep":"3072:s90FT1vG1DxrPeBFaXKjBKl6I20et3Tk0uL030b5E0M1j0lG7ovUA4VEW0+SkIlh:tB3AW8G7ovUA4VEn","tlshash":"f98409e43bb006edb757e2d63f9287583e015667d1498a1ef77c1c40abcd92918e2ec4","first_seen":"2026-03-25T17:22:20.130634Z","last_seen":"2026-03-31T20:10:35.75353Z","times_seen":6,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/how-to2.svg","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:47.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /how-to2.svg HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:47 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 788\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eC5F6zAylqmAs7k0UaekhD%2FiEwS59YQT9AZp4Kak6dehtaWwOvAMGORQ1jlwo3VMg941JIguudHt%2FVI9Vw5fKKsdC7UufLhzE4dUnSqlq1E0423oY2xeoasscYKCUHN2rxZrhuc%3D\"}]}\r\ncf-ray: 9e51fe676c861a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":378566,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (26370)","md5":"120317de831031b8b0792c671f20eafd","sha1":"bf4525b1d5c0aafbd75e753c330362d8e2b54a9e","sha256":"b9670db8c069ed879a047981a35bf2cce8a08a0c8c4f0de76f4cdc470b90b176","sha512":"87c177511d7f4b03f41e9d6507954a45149cf00013f24c15357760213880a8b4117b35d8aad3b81e16c3ed2dbbe3ab948254a4c0fc1e28b9ca0ff2bb00bcc184","ssdeep":"3072:s90FT1vG1DxrPeBFaXKjBKl6I20et3Tk0uL030b5E0M1j0lG7ovUA4VEW0+SkIlh:tB3AW8G7ovUA4VEn","tlshash":"f98409e43bb006edb757e2d63f9287583e015667d1498a1ef77c1c40abcd92918e2ec4","first_seen":"2026-03-25T17:22:20.130634Z","last_seen":"2026-03-31T20:10:35.75353Z","times_seen":6,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/info-icon.svg","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:47.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /info-icon.svg HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:47 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nage: 789\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69c60821-1cb\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2U1%2BJGAtqZGnf8f9LSHIGdTN89nzMFB82taOvJTxMHcXaEVwLqeXKT2eqFPFmoBIbShg9qVNMA4vd1TNo%2B%2Byr4R2xsXM%2BzzjF8RmSvdI3ZpzWFwvGlP7p6QGHKMqzmYsA5MZVrw%3D\"}]}\r\ncf-ray: 9e51fe677c8f1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":459,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"54c0af113c41f351b88b76e45827b1f2","sha1":"0db86a014a5e7ed032fd256b1fff308147a28943","sha256":"dd8ba57c5d4c4b06f45808e17aa568b733a9bd3a55b42efbd6b51b4389ff76f2","sha512":"3229d0ce6e115779f8f9315657e26944ac25c55c155770c2a015f66ca96ca9be63546a28b8cd51d04af0782e00619bc5b2edf3e5a2f5975233b4c64bb4c1fb91","ssdeep":"","tlshash":"3df05c6463045e2c2109af00b2147830186e61ff7e5c6fe0c3e225b3e0506ebe4274d1","first_seen":"2025-05-26T12:18:54.673675Z","last_seen":"2026-06-10T13:51:38.935177Z","times_seen":23,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/telegram.svg","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:47.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /telegram.svg HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:47 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nage: 789\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69c60821-36f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BKaSnMBDLpIXFVyotclLhi1TlgztRaKKfsdyOaVfcZ43Ji5hrzZtRYiKOzthMVSWKRBsv1IbFZTeBblpl3YAh1RGqFUdcEcaUT0QS76TW7zAeooa%2FUiK64dRqHxAN33zdLxuDe4%3D\"}]}\r\ncf-ray: 9e51fe678c961a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":879,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dddc3c4c66125fa9f6f47382df39a38b","sha1":"7d6ed4a4a52fd2685fc31e7258df99472c6fcb81","sha256":"1c88f1c4d17c315dd2cedc5e8efbbf05ee4ce42082bb1d90d6c188b648bf2aa1","sha512":"9d4f55d9bf33725cade7a24122e92065396ca41b7ae7ac6c9aa9818e812a91cccad48f566b765d85dbc842e2f8224e488b7ba7392a40a630018ac2d6ca7d9462","ssdeep":"","tlshash":"4911008ce3d4d5a4e235f7a0800b7a306e125cb03926d1ad4ae12c15b39221e2c36d9f","first_seen":"2025-05-26T12:18:54.680343Z","last_seen":"2026-06-10T13:51:38.872598Z","times_seen":23,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/x.png","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:47.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /x.png HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 2833\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\netag: \"69c60821-b11\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 788\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yp8sp1wXyKaOPJ98hrxjoDu6cbIW9xFROrdRLyPUdnIEDPuW3nJrbF6CzOmqkAYPUa9eeuA2sIhatgJeN2KvQFXgiX9DWMcxw1Bx4D7MildKd8ZbYHg9iyZDGfyRPff5NfYmAww%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e51fe678c981a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2833,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 92 x 95, 8-bit/color RGBA, non-interlaced","md5":"49a14fcc3d734813ea2b4feb2a6993cc","sha1":"de42abbe54fa539b6f38faf3ea0e9c859be6774e","sha256":"977159d08d3b8963d075f0d6b3a1ecc5457042e77ee3b88612ab93a4d363c5df","sha512":"49c0ca042de2c412bb83506dc2858ce22f3f84fb81a592a539527e14e00d00820b0c8734bd5e59625941cb7562376e5458fc1d967d9a03d35a558dfbb17e927c","ssdeep":"","tlshash":"c1514b99382028fc9fd8d80d4374e1f523d9431fba27471ab50583864a2f7418a3a9cd","first_seen":"2025-05-07T10:44:18.990401Z","last_seen":"2026-06-09T02:14:09.913738Z","times_seen":17,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/98b04a4baee3a4fc.css","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:47.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /98b04a4baee3a4fc.css HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:47 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nage: 788\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69c60821-4363\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hyGpTS6M1QjNqXHCRrdlyzfglqIjUHFLwdvZ3WOaKgau52x7z6iVS1tkXgvMepwsvvsXeo%2Fce0DdkC8PKgjocR0deXSY5jZEPy5Xhh2No4VZy%2BqQCvtji7SLDogHqO3PKfRcwkE%3D\"}]}\r\ncf-ray: 9e51fe676c771a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17251,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (17248), with no line terminators","md5":"a3c58529ef272d28aa083949c32ebfd7","sha1":"c8a36b1c82f3f19b9f208f6c41703704880ac3aa","sha256":"59dc56be16594ac254e692ef6aef45503efb091bbc1d90ba820964eadf90e1e9","sha512":"1488dff65b8cdf39dde548228730c678fcfbf699ca9bdbf3899a691604fdbfd96a367d05f6b6c87b5677bd367aa345598a2f5385309803f7890fe9044cf128ee","ssdeep":"192:lqzQX1+WTyRkkKuYR0noT3wpiGs6u0DeYMGRbSlt337afGT54ouSFjNPcFUbcLLV:gkkpYIviGs6u0jMGOT56SFO","tlshash":"6372a5a1f357ddbfec6398e6b39cb42ca118a056ce3056d9eb032702a6c76f10516b25","first_seen":"2025-06-02T11:49:35.48373Z","last_seen":"2026-03-31T20:10:35.773024Z","times_seen":10,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/telegram.png","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:47.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /telegram.png HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 1730\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\netag: \"69c60821-6c2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 789\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ouJf%2BoINsikJkazjzDOXDVmzfFoL5DpX7E2RUdEecX%2FzdwyLo1i2wdiRFJWnwTYL9iZnb7UKbkR6e4a98Cn47DYSnQ7PmB%2FcO1kQ6XmF6lK%2FggODchN%2FtERTy0SUqDReEE3%2B7YM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e51fe678c991a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1730,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 105 x 88, 8-bit/color RGBA, non-interlaced","md5":"6f1cb43e26db2c8ed424bb2fbee2806f","sha1":"8d357dbea324c984cdfa41ce43fa725579d817c6","sha256":"3323f070830ba7b28797b02ebf2bf4fae1fbd62951376cc9c85e6061cbf59092","sha512":"b2f3502d5bc9a28bfca173a6b55fc5b06172c13bbf4bc42ab66be2d76c211da5bcc3a7d26540d6bc774cfd53f8e5bf27f60d0dc95e74177e09485f21b4881d95","ssdeep":"","tlshash":"9b311ac7b64e5eb9012f834eab882d111563b4f7d1206e4c8533c698c709b60b4b6652","first_seen":"2025-05-07T10:44:19.000244Z","last_seen":"2026-06-09T02:14:09.923342Z","times_seen":17,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/meteoroid.svg","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:48.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /meteoroid.svg HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:48 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 787\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N2DzPVxl6UlwcZoO8bI%2BbjT6Qtpibm1SYamW606fYW3mkTA5bPf0INvPR8IIspr52aZggTCRkY0aiLOS%2FNKIbzNZJxE82yAGE%2BCumlzuJSosL65AguOE4OA85VhizuLwsgaY%2B%2F0%3D\"}]}\r\ncf-ray: 9e51fe6bfd371a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":378566,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (26370)","md5":"120317de831031b8b0792c671f20eafd","sha1":"bf4525b1d5c0aafbd75e753c330362d8e2b54a9e","sha256":"b9670db8c069ed879a047981a35bf2cce8a08a0c8c4f0de76f4cdc470b90b176","sha512":"87c177511d7f4b03f41e9d6507954a45149cf00013f24c15357760213880a8b4117b35d8aad3b81e16c3ed2dbbe3ab948254a4c0fc1e28b9ca0ff2bb00bcc184","ssdeep":"3072:s90FT1vG1DxrPeBFaXKjBKl6I20et3Tk0uL030b5E0M1j0lG7ovUA4VEW0+SkIlh:tB3AW8G7ovUA4VEn","tlshash":"f98409e43bb006edb757e2d63f9287583e015667d1498a1ef77c1c40abcd92918e2ec4","first_seen":"2026-03-25T17:22:20.130634Z","last_seen":"2026-03-31T20:10:35.75353Z","times_seen":6,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/snow-bg.gif","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:48.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /snow-bg.gif HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:48 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 788\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3kSWGyIWIj4SOhj7FP1sucoxoJvGgGMiTl1yn%2FqIzL40CsSEdQueyp%2BeikwBTRYXl2dNb4F5ivLd%2F%2BoJIr8gJVMNuQmsEYlpQbdiKCpPGRvMDmlggf9OuKfM2GHOiVwQtDTiRek%3D\"}]}\r\ncf-ray: 9e51fe6c0d3e1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":378566,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (26370)","md5":"120317de831031b8b0792c671f20eafd","sha1":"bf4525b1d5c0aafbd75e753c330362d8e2b54a9e","sha256":"b9670db8c069ed879a047981a35bf2cce8a08a0c8c4f0de76f4cdc470b90b176","sha512":"87c177511d7f4b03f41e9d6507954a45149cf00013f24c15357760213880a8b4117b35d8aad3b81e16c3ed2dbbe3ab948254a4c0fc1e28b9ca0ff2bb00bcc184","ssdeep":"3072:s90FT1vG1DxrPeBFaXKjBKl6I20et3Tk0uL030b5E0M1j0lG7ovUA4VEW0+SkIlh:tB3AW8G7ovUA4VEn","tlshash":"f98409e43bb006edb757e2d63f9287583e015667d1498a1ef77c1c40abcd92918e2ec4","first_seen":"2026-03-25T17:22:20.130634Z","last_seen":"2026-03-31T20:10:35.75353Z","times_seen":6,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/home-bg.png","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:48.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /home-bg.png HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 768862\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\netag: \"69c60821-bbb5e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 788\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lXTh2KeKQquHhftWusWFmpLMk21cCRxbM485qCR9Olk%2FgTHZvcgixKvxCHZUvqMafvH%2BHszBBJymEimx4xYqVVcfM97wjY1tC7zsJq6IVNS%2BSVhZEzmNIhqj8qkGiRE%2B5PWxGBE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e51fe6c0d421a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":768862,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1713 x 1105, 8-bit/color RGBA, non-interlaced","md5":"18bc509c87f3db2933dc7209fc41f05f","sha1":"1e7342e77b84cb4a804cafd3087e8ab845a29989","sha256":"36ae87b52056d864f9abb0bf17b60c5ca94651351d2002a18fb087b33cfca95b","sha512":"4b0dd2684770850d3c072224dd2fc967d51a3a8af4a8a6cb170e56305cc2a9f4c7c2cf3f5db3efafa7e33df70d7338a17606ecfb8b882dba87e33b2c1bb9d6d9","ssdeep":"12288:BdAVqkCzcYRztuVWmLYZwhny6WCIFj+XbAMtsHx2E4SbIwVBsCvvSKu2ncPXBHcX:BuqkCDRztu1LYSy6W5MAMC1cwJJGPXBq","tlshash":"57f4239406c98b09346780435bba8e213186db7bc95e34774167b186f35099befff922","first_seen":"2025-06-02T11:49:35.472273Z","last_seen":"2026-03-31T20:10:35.777104Z","times_seen":11,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/widget-top.png","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:48.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /widget-top.png HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 1973\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\netag: \"69c60821-7b5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 788\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ECmAJ4167%2FIXlcfBNvxdM%2FaD9eDyiUEm%2BJScB6EGf6XypYa%2Bqk0aMwXs0VgIANnOqm10S0LSvErDRgJ3y1lCjAhosTsXlXwnuoiTq0kERsf7oS2ykbVTStFREarOH2%2FGxWPZDEs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e51fe6c2d491a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1973,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 420 x 39, 8-bit/color RGBA, non-interlaced","md5":"f2a43388aa40da4421b060897dab82b9","sha1":"32b3388fb3775dbf1369a814f93ddd62ba006ab8","sha256":"402462a1b3810c87a44d802abd9008e6c47e74fc6db215970be47ac57951e1db","sha512":"ec1bcc217b38049fbf2b3b70aea1f4f1c19e8d886b6bf8eb3143fb8be4c01c47bba23baaeaf293842314395dcce3a4aaba83f247f8991fd853528df42d35676a","ssdeep":"","tlshash":"e4412a9ff0c3d69b2ff64396c5dc27621e8e8294328599d001d9bd6a295e10e1f53af0","first_seen":"2025-05-26T12:18:54.628966Z","last_seen":"2026-06-10T13:51:38.933837Z","times_seen":22,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/widget-bottom.png","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:48.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /widget-bottom.png HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 3916\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\netag: \"69c60821-f4c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 788\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vSI1F3N%2BTheztNNTGOGLdOQNOh42gTTY%2Bvas5g2f%2BulJQ8BvGj9P4RXkIxoSJ%2FMB4xa%2B9bpmOScFZOzrZyT6hNr%2Fzn%2FjSBwypsrjHgeoXPSUdhHQADVSifkpuK%2B2VMfSv0kve7A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e51fe6c4d4c1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3916,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 420 x 47, 8-bit/color RGBA, non-interlaced","md5":"1c7bb7089fe190b2f7660a0be4aa63f4","sha1":"29444798340b5f450990cab50fc7962af35c9af4","sha256":"e70a9cbaabc35af471eb53879a5a0caa4d1cd672625431bf6814f91d187d98db","sha512":"074fe65ab9bf67b9a8929b06e7dca47db8046dd9a40802772f587afd07175fa26078e4b39dda1b29b01c3d777893e9f961fe83ba4306d016435ff99c187c8cd5","ssdeep":"","tlshash":"1f815df7ed11454bbf5a8e44036625cdfeab8705c643880a80c1a156a1ec3efd6fb156","first_seen":"2025-05-29T17:50:13.592074Z","last_seen":"2026-06-10T13:51:38.972123Z","times_seen":19,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/DesuzaPro.woff2","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:48.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /DesuzaPro.woff2 HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/98b04a4baee3a4fc.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:48 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 16056\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\netag: \"69c60821-3eb8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 788\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MWUvWzVkJEHSIkdEUXEYfzTeXJRmyJrSZSEpXBPRZdskRCds0J%2F3a1ZydyHnANV80AZiBY%2BSypgPd%2BoCW84WgWs8%2FRO72sabLe%2BIGx7E%2F9eagbRbhF6jePKWlvikTddifmkFWH8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e51fe6c4d4d1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16056,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16056, version 1.0","md5":"f6e0048d2348c244d08c2125c1ad8081","sha1":"65ffe0657e7782a2c11a77583151df803a30f1b4","sha256":"1696154e6617176acb4e780593596ca8649abc164b737034371e57d033d8cd33","sha512":"fee8088eaf1954c1a645159ddfe99a766190a37403f79e6ead2d49a7db5990f973e43250ae30d2919b09dca85c594caad9da44cd3c08dd269c47e6c8df4a1516","ssdeep":"384:qcEQljYfDgMsrqz6O1101ObBT19pqP3dUf93kw5dO:s1GU9U/dUf90wXO","tlshash":"6572d1d182156885b7c717bcee7283e87d01596acef2b0a96733716dd8cfd4710205b5","first_seen":"2025-06-02T11:49:35.465509Z","last_seen":"2026-03-31T20:10:35.785214Z","times_seen":10,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-31T20:09:47.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 20:09:47 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FwqstMiphK4c8D6MNbhUOn4ai7RvMIWY%2BdOEhZyITPp0%2FdjG%2Fn7DfLNr4%2FaeN69rLRDVCjmBCEYyja2NmkX2k%2BUZ9MKyXso%2B7MJRaXW73nwZYxC5it7nVq4l06PuVYa1eZVPOe0%3D\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e51fe65ccbab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":378566,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (26370)","md5":"120317de831031b8b0792c671f20eafd","sha1":"bf4525b1d5c0aafbd75e753c330362d8e2b54a9e","sha256":"b9670db8c069ed879a047981a35bf2cce8a08a0c8c4f0de76f4cdc470b90b176","sha512":"87c177511d7f4b03f41e9d6507954a45149cf00013f24c15357760213880a8b4117b35d8aad3b81e16c3ed2dbbe3ab948254a4c0fc1e28b9ca0ff2bb00bcc184","ssdeep":"3072:s90FT1vG1DxrPeBFaXKjBKl6I20et3Tk0uL030b5E0M1j0lG7ovUA4VEW0+SkIlh:tB3AW8G7ovUA4VEn","tlshash":"f98409e43bb006edb757e2d63f9287583e015667d1498a1ef77c1c40abcd92918e2ec4","first_seen":"2026-03-25T17:22:20.130634Z","last_seen":"2026-03-31T20:10:35.75353Z","times_seen":6,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":14,"dns":1,"connect":1,"send":0,"wait":72,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/pepe-hero.gif","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:47.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /pepe-hero.gif HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:47 GMT\r\ncontent-type: image/gif\r\ncontent-length: 553537\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\netag: \"69c60821-87241\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 788\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hFhJidC40wFIgHC7CAO%2FYeK%2BNQQJbkFrr4aWobj8kd2MTRVL2lNVZL3lrSkoMUzgi1epYhvvzS%2FCGUQMKRV7yff0xNSte%2By1ZnsH2MxWwdet1o%2BgZtcsM13OtFg1Yz9Eg21OVo4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e51fe676c7d1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":553537,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 644 x 946","md5":"34d9847412c81e6d5630544634c93cf0","sha1":"579e1bcd0e0a8270f8775e61abe9cbc4f60b43a2","sha256":"093e9417cd9b0760c16617cff6a4df6de72156434584eb9bafcdc1dacc6a3005","sha512":"427e30f4e0e771c9970346234860ae1f1e29768e6b54d209b5a065cedd305587f86fa4bc488627e1f449007d5d82ff2ad107265ea401cc7a3417e60eb23a5bf6","ssdeep":"12288:k0I85UPEXI5lbM68+PQjkiSpD5vP++PQjkiSpO:k5X5lBD6Wj6h","tlshash":"fbc42350e4facf782dc814807b45920bec7315faeda7495b5ac3a151e3921ef4cbad28","first_seen":"2025-05-26T12:18:54.637419Z","last_seen":"2026-06-10T13:51:38.899463Z","times_seen":25,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":134,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/tab-icon-two.svg","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:47.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /tab-icon-two.svg HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:47 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nage: 789\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69c60821-5317a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pW013Lzyf9fY6PdS5aYGBzx%2BTyQ8NZADhYMksTTFuA%2F542AgL%2BRO3SBqdMbgmVUhgnlbKVm9WQvnmg6eIHpSok43nGVFVwxQM9HyelHY06oKUq56yCOZRW0OanRJRhtMqGktgFM%3D\"}]}\r\ncf-ray: 9e51fe676c801a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":340346,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"39fdfa589671c870b0035c5352b60a98","sha1":"21d86bb660a93b731334cc70937ac2db774a1e73","sha256":"06895f4410416e6a20d58de50984d014b7e72c317357bbcbdae3745168a964d8","sha512":"44eb0ba743654839c2465d3485a978fb793e65421800689a1d33f778afc3025165e3491cff5c97d895d08f6701a72932a92a2d4bb0580407977375a3efa5b25c","ssdeep":"6144:DxJ1+3B5Dq8QLpgrKl71J1NhIQJqGAOLn1W8HSAa60nE7XRHTLqdWFxj1aXR4Uk7:Dxq8WrKl1J1NhI8zAMWcSAZv7ZSopahW","tlshash":"4c7423f3fe859d479b57c3b8404abd866789af9819def6f684c85157a70fe023123088","first_seen":"2025-05-26T12:18:54.630582Z","last_seen":"2026-06-10T13:51:38.954431Z","times_seen":26,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/gun.gif","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:47.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /gun.gif HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:47 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 788\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y4MuARRpAyyMHniavrUB89sOfZWbRhk2jTKE3d6gGYrSxWklOPyvbx0l%2BzWJARc7vvdD6JUK7wSS111A1wgvw1X1FGsIGFbyD97w%2BzQKUDnn0glnGBb0kpWIPhAhx%2FeiPGA6YlI%3D\"}]}\r\ncf-ray: 9e51fe677c881a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":378566,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (26370)","md5":"120317de831031b8b0792c671f20eafd","sha1":"bf4525b1d5c0aafbd75e753c330362d8e2b54a9e","sha256":"b9670db8c069ed879a047981a35bf2cce8a08a0c8c4f0de76f4cdc470b90b176","sha512":"87c177511d7f4b03f41e9d6507954a45149cf00013f24c15357760213880a8b4117b35d8aad3b81e16c3ed2dbbe3ab948254a4c0fc1e28b9ca0ff2bb00bcc184","ssdeep":"3072:s90FT1vG1DxrPeBFaXKjBKl6I20et3Tk0uL030b5E0M1j0lG7ovUA4VEW0+SkIlh:tB3AW8G7ovUA4VEn","tlshash":"f98409e43bb006edb757e2d63f9287583e015667d1498a1ef77c1c40abcd92918e2ec4","first_seen":"2026-03-25T17:22:20.130634Z","last_seen":"2026-03-31T20:10:35.75353Z","times_seen":6,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/tokenomics-chart.webp","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:47.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /tokenomics-chart.webp HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:47 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 788\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jHOxEkOe2u7BzXC4fkYxVcDVLpxvWQ%2BwKo7YTOmHoZcwdKh2qAlli2RKNB7kYJuen3fbdqwTa0Wp%2FJcUVBJJ1mYVg2QxKAUAjNjlm8YsIkn78yp1VMZGh4OAHwdc9QOI1tqKwtc%3D\"}]}\r\ncf-ray: 9e51fe677c8c1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":378566,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (26370)","md5":"120317de831031b8b0792c671f20eafd","sha1":"bf4525b1d5c0aafbd75e753c330362d8e2b54a9e","sha256":"b9670db8c069ed879a047981a35bf2cce8a08a0c8c4f0de76f4cdc470b90b176","sha512":"87c177511d7f4b03f41e9d6507954a45149cf00013f24c15357760213880a8b4117b35d8aad3b81e16c3ed2dbbe3ab948254a4c0fc1e28b9ca0ff2bb00bcc184","ssdeep":"3072:s90FT1vG1DxrPeBFaXKjBKl6I20et3Tk0uL030b5E0M1j0lG7ovUA4VEW0+SkIlh:tB3AW8G7ovUA4VEn","tlshash":"f98409e43bb006edb757e2d63f9287583e015667d1498a1ef77c1c40abcd92918e2ec4","first_seen":"2026-03-25T17:22:20.130634Z","last_seen":"2026-03-31T20:10:35.75353Z","times_seen":6,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/sun.gif","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:47.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /sun.gif HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:47 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 789\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ER%2BEewrVMRPLMwjTL9qCjDo8MsTXVxmGcNO%2BbyVbzya3NZecp%2FPSzT9Yw%2BclxAzuShbuC0drSDc%2BJkxwB2JP9fEcMXp%2B1GqXphQ%2Bc5zwwrbSCduOI7j1L5YGO8aaAqWtrfQNCsg%3D\"}]}\r\ncf-ray: 9e51fe677c8d1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":378566,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (26370)","md5":"120317de831031b8b0792c671f20eafd","sha1":"bf4525b1d5c0aafbd75e753c330362d8e2b54a9e","sha256":"b9670db8c069ed879a047981a35bf2cce8a08a0c8c4f0de76f4cdc470b90b176","sha512":"87c177511d7f4b03f41e9d6507954a45149cf00013f24c15357760213880a8b4117b35d8aad3b81e16c3ed2dbbe3ab948254a4c0fc1e28b9ca0ff2bb00bcc184","ssdeep":"3072:s90FT1vG1DxrPeBFaXKjBKl6I20et3Tk0uL030b5E0M1j0lG7ovUA4VEW0+SkIlh:tB3AW8G7ovUA4VEn","tlshash":"f98409e43bb006edb757e2d63f9287583e015667d1498a1ef77c1c40abcd92918e2ec4","first_seen":"2026-03-25T17:22:20.130634Z","last_seen":"2026-03-31T20:10:35.75353Z","times_seen":6,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/coinsult.svg","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:47.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /coinsult.svg HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:47 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nage: 788\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69c60821-10fd\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9EO97bjbNP%2BcevkJ%2BBvp3up2omDz3kstmVm%2BczhFf1PARQlqT80BCbSCiD9f5SsCWjdryyDnLA8kUBnDJiQIY7Lb4lRz%2BiRLcxFcJwa0LhAvkl8EUD53UxG5yf0aZ0yWqw1cCRE%3D\"}]}\r\ncf-ray: 9e51fe678c941a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4349,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1002d822d70b07da4a12d906354ff9e5","sha1":"3ad37bfd19a7c834b8d3759d113ecb3548d4972e","sha256":"c829cabbf43743021e6e3c962b72364f8eabe87a17e7ec2e7625fd061cd9541b","sha512":"8969bc2aae375c1b01518a6c6c03daf2a99a090962d4cea08b3f5564b6bd7533fea303e52f94fdea28ee513f83d9f413e46eb9cad34030b4dd7efb4113e6f6ac","ssdeep":"96:QIg19VGN1C8BxuddHESlkJyHJ0A9sNVCAmx4WG:h8F8BgdREaGyynHCAV","tlshash":"ad91a5c5a3ace2faf10563e8861ad830bf2334f6be36d45487e05e5b651049d18adccb","first_seen":"2025-05-26T12:18:54.704475Z","last_seen":"2026-06-10T13:51:38.759729Z","times_seen":23,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/widget-top.svg","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:47.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /widget-top.svg HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:47 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nage: 788\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69c60821-fc528\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OwDJ8ZUFB0Ly1t7%2BSB7iBN2yqTs%2BCnuPhn8yTVWAtQDgOXmJvQE%2BBLRaCKkzHnmN41%2BjPk7xjsQn0mPWhdKeArFNEThDPjjr54u62hGN%2FP89oFHmXPecCqa92gD4%2BCmtEVGQLpM%3D\"}]}\r\ncf-ray: 9e51fe678c951a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1033512,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"658bb95bd12f118bdfc2a9223f379db9","sha1":"ad642ef3d910216d7058fe97f7b16868da7ee6e5","sha256":"9ed064111f23fa659ba89629c302298d397d576434cfc627b3c7686f32d7e202","sha512":"6a29b4390a6eaf9db498d79c97161b822b481923ade51f2ad14b3e7ec99bf493d0357890f228d69587ba467376b87d44fda4076bc05468ebb7b6123e6c017272","ssdeep":"24576:jXBexyLASR+DABZYk9AnL1QVtOQ31FpayuNyi:jX22dSkqLN+CNB","tlshash":"22258c6a4d4c7b5e77325d6ecb07283e2e8665ecb208d0cf289f71edd3674509a25ca0","first_seen":"2025-05-26T12:18:54.622282Z","last_seen":"2026-06-10T13:51:38.954987Z","times_seen":23,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/how-to3.svg","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:47.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /how-to3.svg HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:47 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 788\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BrCBL0%2F2DhE8SVLa7qoGGrIc6CpIBsd%2F1%2Bv149AJQHR9oizliESr8JF3NO003VBPrkFwoaEdD0WaQBz%2BGGh79KJHocijsZqKooUxl7kS5rceYf20EF6uUaWRtFczbfGlKN1EZw4%3D\"}]}\r\ncf-ray: 9e51fe677c871a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":378566,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (26370)","md5":"120317de831031b8b0792c671f20eafd","sha1":"bf4525b1d5c0aafbd75e753c330362d8e2b54a9e","sha256":"b9670db8c069ed879a047981a35bf2cce8a08a0c8c4f0de76f4cdc470b90b176","sha512":"87c177511d7f4b03f41e9d6507954a45149cf00013f24c15357760213880a8b4117b35d8aad3b81e16c3ed2dbbe3ab948254a4c0fc1e28b9ca0ff2bb00bcc184","ssdeep":"3072:s90FT1vG1DxrPeBFaXKjBKl6I20et3Tk0uL030b5E0M1j0lG7ovUA4VEW0+SkIlh:tB3AW8G7ovUA4VEn","tlshash":"f98409e43bb006edb757e2d63f9287583e015667d1498a1ef77c1c40abcd92918e2ec4","first_seen":"2026-03-25T17:22:20.130634Z","last_seen":"2026-03-31T20:10:35.75353Z","times_seen":6,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/all-arrow.png","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:47.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /all-arrow.png HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:47 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 789\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IwoM48i8sA85dN2LEG%2FtznprG2XG1J8YR43D%2BinpFW91fcmV1myDCymZfFHhSucEL18smlImCf6uy6K5HsuheLmB62k0cNZ1TdMq2npkp16wfnjfmrcW%2B5QVyOAHj9oxqA6xqQ8%3D\"}]}\r\ncf-ray: 9e51fe677c8b1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":378566,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (26370)","md5":"120317de831031b8b0792c671f20eafd","sha1":"bf4525b1d5c0aafbd75e753c330362d8e2b54a9e","sha256":"b9670db8c069ed879a047981a35bf2cce8a08a0c8c4f0de76f4cdc470b90b176","sha512":"87c177511d7f4b03f41e9d6507954a45149cf00013f24c15357760213880a8b4117b35d8aad3b81e16c3ed2dbbe3ab948254a4c0fc1e28b9ca0ff2bb00bcc184","ssdeep":"3072:s90FT1vG1DxrPeBFaXKjBKl6I20et3Tk0uL030b5E0M1j0lG7ovUA4VEW0+SkIlh:tB3AW8G7ovUA4VEn","tlshash":"f98409e43bb006edb757e2d63f9287583e015667d1498a1ef77c1c40abcd92918e2ec4","first_seen":"2026-03-25T17:22:20.130634Z","last_seen":"2026-03-31T20:10:35.75353Z","times_seen":6,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/history.png","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:47.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /history.png HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:47 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 788\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YOSlJzQWpjU9OlQYug0uLcRTVdi0OyYiieFb%2BrTJ2wQy%2FZHiqSomb%2B6eLlME3kBqCldlqpOrcKc3vg3pkki6Mza5mq30pc2W%2BVpdAIlJuCU2d7hO88sseQPrEtoNuMIJxgTSbho%3D\"}]}\r\ncf-ray: 9e51fe677c8e1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":378566,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (26370)","md5":"120317de831031b8b0792c671f20eafd","sha1":"bf4525b1d5c0aafbd75e753c330362d8e2b54a9e","sha256":"b9670db8c069ed879a047981a35bf2cce8a08a0c8c4f0de76f4cdc470b90b176","sha512":"87c177511d7f4b03f41e9d6507954a45149cf00013f24c15357760213880a8b4117b35d8aad3b81e16c3ed2dbbe3ab948254a4c0fc1e28b9ca0ff2bb00bcc184","ssdeep":"3072:s90FT1vG1DxrPeBFaXKjBKl6I20et3Tk0uL030b5E0M1j0lG7ovUA4VEW0+SkIlh:tB3AW8G7ovUA4VEn","tlshash":"f98409e43bb006edb757e2d63f9287583e015667d1498a1ef77c1c40abcd92918e2ec4","first_seen":"2026-03-25T17:22:20.130634Z","last_seen":"2026-03-31T20:10:35.75353Z","times_seen":6,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/W3P_White.svg","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:47.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /W3P_White.svg HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:47 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nage: 789\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69c60821-2631\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rQpFQupldBeA3bHYdt441dm05dfKv%2F5RP8hHGeM2r2Fp18xvb7KM7jh0ONZLd6n2iVD8mDUKXzMCcw6SAAenZVpfWL7YgM0hQwH3AV7X2C%2FYC2hb2IsrwVuP1Va1xXHmIt3YUBo%3D\"}]}\r\ncf-ray: 9e51fe678c911a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9777,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a8dabc1a96b3418bcfff4ec2e3715c6d","sha1":"06d7e55496456c9309ac405afa1e554882d2fcb5","sha256":"5563a7aa65c583e5708628c524336182b1ce33fb71c248fc6f48621c8fddec64","sha512":"1fab799291744659890072447cdce0c64eac3708666c9523729234651e1852f4bc46f83d498a422167e268d3642f819780333d5eff2576df68e78973e54d3f59","ssdeep":"192://yTkkwBtOGIgC0RWvLHRYtu1OZ4eLRGJoc4Uv1XyCD:CKOV4Z18ocRXyu","tlshash":"a31273ee6bb14cd48dc8c3d9af5281d9362be03f29525714c06cdb793981c9de94ae82","first_seen":"2025-05-26T12:18:54.657864Z","last_seen":"2026-06-10T13:51:38.859061Z","times_seen":24,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/feature1.png","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:47.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /feature1.png HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 2227\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\netag: \"69c60821-8b3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 788\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AVszYm5bcMEJrrBuJwDxyOFg9OynqZihq1UfzJHjNT8WZoJZY8mETZpeMcF2Vez7dgHG82wdjFtlDdA1WNeuCc2EPNExyP%2FxAcGDbOslB0zryepMSqopXAZ21F%2F%2FKW%2FNzKPKqgQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e51fe678c9c1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2227,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 202 x 36, 8-bit/color RGBA, non-interlaced","md5":"cff4fd3ab61881922d7b6ab432a08a27","sha1":"3e54481bc6b96e628d04e80fdbc7f7ca27c602b5","sha256":"b1d204f5d53f8aec3045d99c8878a36c1ca55975dc2fbd3cfbdd5f6e532143fc","sha512":"5a29dcd98fe142ae79f0586cbd1a5d8b48a7f84c8fa5b1c3cdc3b6c8f657ce23e02754be06527dfdf8156a7ea77dcf8806f8713df79e1b7ebc875c611029ba23","ssdeep":"","tlshash":"4e41ebc1930e8b618d81cdf6aeaa7e6897fc11a628a06c1b7a5a507c5c5524d0bd1b2c","first_seen":"2025-05-26T12:18:54.687079Z","last_seen":"2026-06-09T02:14:09.926174Z","times_seen":16,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/feature2.png","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:47.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /feature2.png HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 1911\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\netag: \"69c60821-777\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 788\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZyJahiuYZQuqiX6G39VS2pzvl%2BuaNwbGxbYx1ns7WgnWfD0ubjvv8QTNBFIwSqcNJSRC6OVg5VXk%2BYSgqWLvDgGUGK1DEoE5heTQTJwEGx34k%2Bit%2B02TK39pDPeOtWIbHpDRUfQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e51fe678c9a1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1911,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 181 x 37, 8-bit/color RGBA, non-interlaced","md5":"01456a89b810b2dbf77d9e355e6e8bf9","sha1":"9cfbc6cd1acded7eed6b2cbd1e66eafd5cffbda1","sha256":"b585162ba6fdb527c87d6ee9935c3e213a9d5898c6ca966176b1053fef1fa249","sha512":"8ee7011deeb75d3c41c87f632874220ffca3c58be01a18393ab3ff26272067a94f50a4dcc3f9ce6fb2fd71e0153a499c9ba393df27c2a9c3191377fcfa76778c","ssdeep":"","tlshash":"554119c65395e89cd82cc24a860de92d463ffc6b5ba7a6083ea41c7c52538494b1ea25","first_seen":"2025-05-26T12:18:54.577212Z","last_seen":"2026-06-09T02:14:09.925195Z","times_seen":16,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/favicon.ico","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:48.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:48 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nage: 787\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69c60821-10be\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3jDphJ%2BtNw3rN9tHYZza0Ea2t01qrArG7GoB01S6dHr8vxPctFe19Givv1K0XUStVkenaI%2BLHknfNKLmm0lPrZO8q6F9CglDeOaA5nvcMru3xxUNwWSSbsgvIYFenvybLiZ7KbI%3D\"}]}\r\ncf-ray: 9e51fe6cfd6e1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"a8e516e6d37c09ccc3f1f670f8262d22","sha1":"57c827c33433f8142b28f5ed2d5516c3de3dbc71","sha256":"a1dab6a4c1b76dd8b1c0885b6bff21509acad767d3e902c6139b884741e02ca1","sha512":"ea90b6ded1b5ea06e0fddcaf9733c1cb1aa3133770df4660f6d6727199e04da52bdf4e419142b6bb85cd08ab4be5d72c769de73461e9a552029d38c5fd660885","ssdeep":"48:R/UUKg2OtaPKHfiCfZkhmVSvszajj301t1SdBMCAmva7pHTeoW72rn:R/XKFWZ01v01tABar7pHC/yrn","tlshash":"9f911b40e942e90dd630fcf7c7c2ce8d8c9562c83d455aba8f1e1a9b0a4934d61e269f","first_seen":"2025-06-02T11:49:35.482622Z","last_seen":"2026-03-31T20:10:35.807996Z","times_seen":15,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/js/utilwidget-5.1.9.min.js","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:47.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /js/utilwidget-5.1.9.min.js HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:47 GMT\r\ncontent-type: application/javascript\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nage: 788\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69c60821-3a25b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dhuHhF3EMpL9NG%2BVvSo57DwGeHo6wBb9xOojEEeQpkY%2B5wgX1ZPMAqOztAfQyq8f5u8mJarYkfuV6yDcM1tHULVPD%2Fo1TQsxNTt%2BSGK1%2F15TGnqEJNTvYI0ZvtC1D65ctqJti4c%3D\"}]}\r\ncf-ray: 9e51fe675c751a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":238171,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50656), with no line terminators","md5":"4c779d67a76e5128424d8e935ce5201c","sha1":"bd54e36070f193ddb2eadc12a9f09bec07867488","sha256":"94cb0707bdeed02a29f6a126403426db620f8700c55c59ba2a3256a5c42b7a8e","sha512":"4c11866d4cf4f6ce9dd3535ece781630cda6ee9d4ad9e46902748b2f420ea9c684ad22eae34fbdb0358d72092e24713f3278d2d9c650c6a8086a7badf4be0ad6","ssdeep":"1536:fwT3GYTag1AxIFVEhHMTdEmh1z8ayI7W+Q0O665ZoBCVcXmhzg46AKj:fwTWYTag1A2F4sTdL7ogO5Zo4VcXmumY","tlshash":"f7342de5db9bd4ec8e9111cec073f845e4584963ceacb493aa2ddec17519f22808727b","first_seen":"2026-02-20T16:36:44.220065Z","last_seen":"2026-06-27T10:04:58.412497Z","times_seen":38,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/dd6180c9b0bf62450cbeb83417cb5485524fe332.png","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:47.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /dd6180c9b0bf62450cbeb83417cb5485524fe332.png HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 1043535\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\netag: \"69c60821-fec4f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 788\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FZzn07QCjzOjfInuN4mJ0i8AVkWfVE%2FoB2B9FCYPxr3EbhXf7EE1SOTBR4G2%2FaVMUr9QvJO%2F6ogo%2FsnZyWJ2gsbhyr5o877va3WCzY0TXJQNIlFSrxem7opIbcSidvkNWw6a1q4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e51fe676c7b1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1043535,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1700 x 1000, 8-bit/color RGBA, non-interlaced","md5":"3533ff1fb37691528c8db86bf8ebab71","sha1":"dd6180c9b0bf62450cbeb83417cb5485524fe332","sha256":"68151b5ddccc937efc52fd1a4bb079ee557721339eaacc0766a1a9be505dcaa2","sha512":"2520cb7c7df795bcc54c5acb7e2cda7d6d354be31c6028c72f5b903006302022d5bf2d96872ba9b5fd54bad4e72c5421db4ef0bfd0001b18b9ad7310feb0a3f9","ssdeep":"24576:Jx7Fkjd8yRPeCbCfqGm7op4Lt2aPjmxw+s:nhkjdhckkHwf","tlshash":"51252355c7642837b065266136aa92f3482a8d7b75e3ec0022cbb02f575bff41e7de60","first_seen":"2025-05-26T12:18:54.641754Z","last_seen":"2026-03-31T20:10:35.815427Z","times_seen":16,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":189,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/arrow-home.svg","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:47.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /arrow-home.svg HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:47 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nage: 788\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69c60821-626\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E3GWYHRWqk0Dzy4Mi6UQ5iy2ndpGyaecG9oIH7mwrLl3vh0JuZ4%2F3Uc%2Bf%2FbVxflPRci7qumZe1p5agT4ksoDDTPq2HRlU2%2FPE6PGZxm8IV5QM%2F1CuGmLRbv01F8LhWf8CsczxYE%3D\"}]}\r\ncf-ray: 9e51fe676c7e1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1574,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bbb955455e85b674ca04a19af5b36762","sha1":"6d2e3c0083da0fcb290123f3b9ab731ecfed1fa6","sha256":"f8df998ea4457369744711f87ff9366e4d118c7828a59a714aac30560ce2433b","sha512":"274bfd0257e9d8be1cbb8c770215ad269d3a2d727f7f8f64b7c6ef00e500901adb02a7f4d471aed3c17008752577bf8f32834f77ef90ffdaf19f06913397a89f","ssdeep":"","tlshash":"dd3175e172a5b3f8f550f3f0d63b5c652da738a9b3469886d7e09d81905308e9d84cc1","first_seen":"2025-06-02T11:49:35.466678Z","last_seen":"2026-03-31T20:10:35.81773Z","times_seen":10,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/how-to1.svg","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:47.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /how-to1.svg HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:47 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 788\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hP6hnwUzC80qyXiw0rEVB1GSbS9nN%2BU8lodF8ridS2Kk449r0n3zuZxJzHGCb7pm9Imks5fuRr82oP3DVxGCcUXceHajG3K8WR8hEOTjw5sE88WTDNgDkQh9D6aRPlSd4lJzUlk%3D\"}]}\r\ncf-ray: 9e51fe676c851a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":378566,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (26370)","md5":"120317de831031b8b0792c671f20eafd","sha1":"bf4525b1d5c0aafbd75e753c330362d8e2b54a9e","sha256":"b9670db8c069ed879a047981a35bf2cce8a08a0c8c4f0de76f4cdc470b90b176","sha512":"87c177511d7f4b03f41e9d6507954a45149cf00013f24c15357760213880a8b4117b35d8aad3b81e16c3ed2dbbe3ab948254a4c0fc1e28b9ca0ff2bb00bcc184","ssdeep":"3072:s90FT1vG1DxrPeBFaXKjBKl6I20et3Tk0uL030b5E0M1j0lG7ovUA4VEW0+SkIlh:tB3AW8G7ovUA4VEn","tlshash":"f98409e43bb006edb757e2d63f9287583e015667d1498a1ef77c1c40abcd92918e2ec4","first_seen":"2026-03-25T17:22:20.130634Z","last_seen":"2026-03-31T20:10:35.75353Z","times_seen":6,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/satellite.png","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:47.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /satellite.png HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:47 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 788\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fhs96SrrWfjRqfXh8mnpV2ErEf4IHLLHAQ5rj%2BGrcM7XW91E81NJ3Y95VkNDA7ff2EE3flpDvQNobBYAOzel%2BYZeJTjo1PRv10eHghUeE5COMjLI50FZHTyfVUMvmGcriIBcaxs%3D\"}]}\r\ncf-ray: 9e51fe677c8a1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":378566,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (26370)","md5":"120317de831031b8b0792c671f20eafd","sha1":"bf4525b1d5c0aafbd75e753c330362d8e2b54a9e","sha256":"b9670db8c069ed879a047981a35bf2cce8a08a0c8c4f0de76f4cdc470b90b176","sha512":"87c177511d7f4b03f41e9d6507954a45149cf00013f24c15357760213880a8b4117b35d8aad3b81e16c3ed2dbbe3ab948254a4c0fc1e28b9ca0ff2bb00bcc184","ssdeep":"3072:s90FT1vG1DxrPeBFaXKjBKl6I20et3Tk0uL030b5E0M1j0lG7ovUA4VEW0+SkIlh:tB3AW8G7ovUA4VEn","tlshash":"f98409e43bb006edb757e2d63f9287583e015667d1498a1ef77c1c40abcd92918e2ec4","first_seen":"2026-03-25T17:22:20.130634Z","last_seen":"2026-03-31T20:10:35.75353Z","times_seen":6,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/sol.png","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:47.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /sol.png HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 26003\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\netag: \"69c60821-6593\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 788\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VK0gLhofXzRisC9k4hJeXiV%2FoDinslDBsY5uOSmXLV%2FkXKchfF57ygVzRWOhOweMRJM4Pxp0FFzt2a9ciHfp3awv7faJtzXg5G%2FZ1wof6i%2FyWlj7IPjAg%2B0fbzVdq%2BU5cY8DLUY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e51fe678c971a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26003,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 239 x 61, 8-bit/color RGBA, non-interlaced","md5":"f30736ba312935e4de67a898a3d69ddb","sha1":"98793eb0ea9b1ebc6fd09a3a6715052a0c38bda1","sha256":"ad91bf73866a52b246d243f4aaa201b94dce376594fcbf0d0200656dc0a54b52","sha512":"891323e63b910645a115b0175642ff0dd4cb06726bd9944f6ea2d376363600c6945b9d30086915a8ce791808cc4dd6335d2a95ccefbbaae42fc3df8800847442","ssdeep":"384:TuLeChLIr4E2eFXD1e3MKE9CVSaWEN+Ioa+I7S4wgChW8+wZjRLYAsVwiKT:TuV5SpXQ8K8CLWrXI7fwgt4RLYpwl","tlshash":"ffc2e154c6029ac43d5c37ac99688b46035530ef3bc4663bceb902a49db410ffde967a","first_seen":"2025-06-02T11:49:35.463244Z","last_seen":"2026-03-31T20:10:35.819716Z","times_seen":10,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/rocket.svg","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:48.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /rocket.svg HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:48 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 787\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=36wlJYbVnbCEIdv4UhHpp34KwXkl7aK4%2FNSQeGTH91nH8m9sa7vzyeTHx4hxBFRHdLt1QW%2B%2FA6rzRZzDi%2FzW6eobB1gd0RHgQ6BFhOrN3OF76f72mwY7XJj7WsMCNj5nKzrJ%2FmU%3D\"}]}\r\ncf-ray: 9e51fe6bed351a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":378566,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (26370)","md5":"120317de831031b8b0792c671f20eafd","sha1":"bf4525b1d5c0aafbd75e753c330362d8e2b54a9e","sha256":"b9670db8c069ed879a047981a35bf2cce8a08a0c8c4f0de76f4cdc470b90b176","sha512":"87c177511d7f4b03f41e9d6507954a45149cf00013f24c15357760213880a8b4117b35d8aad3b81e16c3ed2dbbe3ab948254a4c0fc1e28b9ca0ff2bb00bcc184","ssdeep":"3072:s90FT1vG1DxrPeBFaXKjBKl6I20et3Tk0uL030b5E0M1j0lG7ovUA4VEW0+SkIlh:tB3AW8G7ovUA4VEn","tlshash":"f98409e43bb006edb757e2d63f9287583e015667d1498a1ef77c1c40abcd92918e2ec4","first_seen":"2026-03-25T17:22:20.130634Z","last_seen":"2026-03-31T20:10:35.75353Z","times_seen":6,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/header-top.webp","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:48.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /header-top.webp HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2632\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\netag: \"69c60821-a48\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 787\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bnhi8aSFJZl74tuZ1ROJifZ7j0SG38LnZiF3mJ03p1%2BsGJuvKKgpFBjlb%2BiR8pTxs2uUPsh4OUNc%2F3IdWr7euHQfJhOKF2LC9nRi%2BRqjYPQeZc7Y0FZ1rS8mmBwI%2BAnYxNAnHf0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e51fe6c0d411a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2632,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0904e72aef54401067d5d8f6c3a1d981","sha1":"365f111067da06efae89792fc3b9f052b5eb38d7","sha256":"1933332f11e60e62e0f23970b1d45a4234861237b937b4ca8d49d79f31cdee14","sha512":"a3e347ab2edda822cfdad6620cf2ab02d7fa3158f30b8c84229034653adb932e5a3bc5a7102a71929ebd22f2240d8fc0582d0f515088a757239af4f2ecd1e88e","ssdeep":"","tlshash":"ee513a81e2c9a3c2286eb1a961ec780e1625f9cd005ec24d3447fd27860f53579193fb","first_seen":"2025-06-02T11:49:35.464322Z","last_seen":"2026-03-31T20:10:35.82174Z","times_seen":10,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/tab-icon-three.svg","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:47.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /tab-icon-three.svg HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:47 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nage: 788\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69c60821-8bb60\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b9C98eNs4p5NcHM1Kuy1oDsRGjtPOIZrOOqnzNwd9e9kpEwsvecDZwQSFPJwn%2FuK7zmwUEe2cVryKbAzHul9b8uh28zJCeRYqFtOpPC8N1OmKB9jNddMXZM77wOJidpPlrP4ti4%3D\"}]}\r\ncf-ray: 9e51fe676c811a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":572256,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f00b3d12d4bba1a7b4e854357cd6cca3","sha1":"1bbf42b54aa23d1d81c0472db12ae4df7c02f015","sha256":"9ab41e06d1160e9694c60b0e70ec15ddde1a621fc5d41144c1b627f638837f0b","sha512":"49b2ec70e2fd4bff165b7eecd06ba4f4a80863760d29f533d4bfaa12c8e2bac63f2c9ee7cac234b07f7cb67cd3fe67830adec1b2cf5a7a796559f5718518e2d4","ssdeep":"12288:NOectBNQ46Ahfcvy8Pz10E3asY7/W49g+XiX7hGh1V1Bkp:lctBf4yqxq3I+XVz1up","tlshash":"abc423377cdb383f07a8a12e2476aa0dfffa4c934064e9a2e4562c8504c7b915477d6e","first_seen":"2025-06-02T11:49:35.48765Z","last_seen":"2026-06-10T13:51:38.911073Z","times_seen":20,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/feature3.png","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:47.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /feature3.png HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 3766\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\netag: \"69c60821-eb6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 789\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KyV%2FOPgSbDYCAYwxND28DMOG42A9M3XH2KjNSO1oWbZSW6DA3Z9rGDvObVuts0WKVhEwc8fu3RGyUBhArSvcMKDJ1Ip64tFvnWLKwuDb6wMKxhpBzOl18mL3fVXdmuK1uq45LMs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e51fe678c9b1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3766,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 197 x 42, 8-bit/color RGBA, non-interlaced","md5":"78bf603f9baf8362215423cf755d86f2","sha1":"83e6619d47c4cdf5f50af7763948edf5b8c47375","sha256":"e18cd0707a14f6dc6ef56431d1656c9530da176af7421e4d52fdc1fb6c12df22","sha512":"66ad724e3f046dd7cd17dc887d8917fdf08d4ba3b04d67dd57c197b024c033e199bad08872136e62841e751118b2a17eac67b102a8b4bdd94673f02776180daf","ssdeep":"","tlshash":"9a716cf3fba872ad558359f5854780a040c7e9b319a2624a3aa6af60051f31886230c7","first_seen":"2025-05-26T12:18:54.610571Z","last_seen":"2026-06-09T02:14:09.922785Z","times_seen":16,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/hand-with-eye.gif","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:48.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /hand-with-eye.gif HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:48 GMT\r\ncontent-type: image/gif\r\ncontent-length: 35218\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\netag: \"69c60821-8992\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 787\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sWz2ApaHZEYU99Vv3CGPE8EmyKGKxOebN2Ffq%2BGGaVLSMYfO5kLzWrqpxDxp2SDlscZrtoeyvNHc4QCI5UwjqcW8cpsX3XQzB%2B77rlw906hkpU%2FN0SRuja3zLAk%2F%2BhRUI7x2H%2Fo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e51fe6bfd361a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35218,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 185 x 210","md5":"4cdedf6c4a7990ed43bf4be6444d328e","sha1":"2ae0ecbdb2295c9de870822b25c37960125a9765","sha256":"cbd2a4a79142ad854defdb8b76ff64a6c28d36355100b0d6d18da3aa243805b7","sha512":"c6839fdb6efd35d3380e66c7dded06586f47122450647481a3641b4f5dea2a90cff7164bf580294fa13554ec4c5e2a1430088b9857db3eab73b97f8d4ba9e2b5","ssdeep":"768:VrDbaIrMjz7t0Q+uxlTADbqASoLODScXhWYqypYtJn4wGga:VrXdMX7t02ovbzqxyIY/n4ea","tlshash":"dbf2f1e48510ade356cf68e45b13ea971dcb480978f5c46998e8e4523e720f1930e8d2","first_seen":"2025-05-26T12:18:54.677247Z","last_seen":"2026-06-10T13:51:38.863096Z","times_seen":28,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/widget-middle.png","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:48.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /widget-middle.png HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 1040\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\netag: \"69c60821-410\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 788\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FWZnLKi294TLr2Vz8DOq%2Bd2sJfAmj9D5s2NcJRCduZwZCYjxYlgFoB6YIkNHfMIvAdHeW9%2FOqquabZgCAf1mu8ZOcgHb6%2FQ9nNn74%2F0qk%2FJNfSuY25aamO53snKYM0eZXPgAvNU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e51fe6c3d4b1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1040,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 420 x 62, 8-bit/color RGBA, non-interlaced","md5":"97c64f7ca7d48ccc1299761fef0f4ba8","sha1":"a2609956d99ca29fb22c566971f14812518042fd","sha256":"727965be31cd7175a423af08f8efed0311e89cbc3274a5b78a3860f9eeae8c7e","sha512":"010448e395a66b723bfc20889561cd111ac24f8f908326a9cfc4e5af73520f4852ab746d80a0c8647b8c083c855ddb4938eac8f564346b933d72ab66cd2099ca","ssdeep":"","tlshash":"ba11d8d440c05eb7a9270d39e303e593b61fb1889d10b9521daa986c11593c487c46ca","first_seen":"2025-05-26T12:18:54.69191Z","last_seen":"2026-06-10T13:51:38.804172Z","times_seen":23,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/secureproxy?e=jscdn/getFile","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:48.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-solaxy.trade/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://claim-solaxy.trade\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"gj7vh757pa76qdomu901\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:48 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=me3qlph7WE6z%2BdIhRT54%2Bkf86EpTB14FZPvnpEcTu4kBroAlCYnmgisTsvD93OamZS6RE1gDK67fEk3W70u3Si2qpnwjoMoXhfDwW4wkqKkWsyuejWMtEF3m7QmJVZKD24oWIkw%3D\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-ray: 9e51fe6d5d7a1a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3410153,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c42dcdf9419903e9a05a36e3c8249c93","sha1":"7428f7c3bb88dda49b36eee8d35bd79c26cfe081","sha256":"b146d22cc42fd5d244fe7521afee562e1e4bb977714cca5984dadb9d87e751a8","sha512":"a38e7e9058631f721460859bb68a1c220b4f3a0857518770e6247e41f816f8470305c97cfcd7d062c53e108257809457c02ab57980832fa8cc03b0859f0a4415","ssdeep":"24576:ib/YWmLkwsOukzMSPbg+lsVo5/Cr0OSzcfUjel7M0RzC:gGkwdNZngkO5W","tlshash":"092523e22f575478cf9c0f9a70971c0f28404e125488a6bde7d6d8c739a9bb041eb97e","first_seen":"2026-03-31T19:58:10.750075Z","last_seen":"2026-03-31T20:10:35.835608Z","times_seen":3,"resource_available":false,"data":null}},"time_used":456,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":113,"receive":343,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/css2.css","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:47.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:47 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nage: 788\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69c60821-238c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4y4Muuyrhsj1UDBHbQdHRpyWKVOo5TDEiQfpJtHba2b8OlFOeYIrZGcT35orqiD%2Fxwr2pn2nxKmxZXS5%2BBKkipgqaMqkjcNKRFGXf2dlNgLZM3O2mMKmiPzDpkh6Q6M7bS3x1eY%3D\"}]}\r\ncf-ray: 9e51fe676c781a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9100,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"2697aa3ac7b847513fe0243c985c479b","sha1":"bbce27c9f7e67d54286e634b280818db09a13de8","sha256":"95575391bb55a8a178fea41d43dd09b1fddd957c6e6d49e9be9263e57092f7d6","sha512":"fd990ca8107b081bac7485242188dca4ba0549d9406fd3a0861999143da2d61ab70a65a41901e922e1a69fb4f978a2a1831675104d95d344169cafac9567d12d","ssdeep":"192:9TNSbO34o5DMTOB0O3/v581Tro9O3iS5lWTEv+O3RB5Gp:NvWsk1i6a","tlshash":"8a127b91002b6400a7a70cc277ce3f3aaedd6044a049da782ffd0d8a6cdeda953a175d","first_seen":"2025-06-02T11:49:35.475344Z","last_seen":"2026-08-07T09:24:33.808336Z","times_seen":286,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/642a8a2a2036f4d291f085adf2fe178679839042.png","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:47.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /642a8a2a2036f4d291f085adf2fe178679839042.png HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 555361\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\netag: \"69c60821-87961\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 788\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sQDbu7pKZox6HZXWf3EsBlmaq9xAVCSHWTesBm5JuMOipakXkL9Q1snvUuD%2F6LrHQ5MNcseqer6OllTy4DrflMhfQvaclg%2FNpMRSIjQixQ%2FDAn433j5Jh7JcydM%2B1K1PM5UBImo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e51fe676c7c1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":555361,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"e2f7e78102f0064d158e3351f5231442","sha1":"642a8a2a2036f4d291f085adf2fe178679839042","sha256":"ca6f6ec316ce7b0ab88b740defc385ec346d647e8844f10b0ff1fbcf46c38ff7","sha512":"2b5a0576d7c0c403f635e0d5ce767563f9d45527bedc9083a0d5d7b331489d82e1fa42833917193dadb0303704f237c16e19203bfe5f24ba38a4597b7df3b753","ssdeep":"12288:Ci3A64jRlyaWJeB9DmckQ2Q0j+FYREQWkwcCG2KXbG1k4:Ci3t4jXtW850PRGcCGJC24","tlshash":"a8c4231b86e3b591b21fc862c3efe152475044f59a3988789ad7b0b8e95348731f2fd2","first_seen":"2025-05-26T12:18:54.64368Z","last_seen":"2026-03-31T20:10:35.841332Z","times_seen":16,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/home-bottom-mobile.png","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:47.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /home-bottom-mobile.png HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 102236\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\netag: \"69c60821-18f5c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 788\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zc%2B%2FJh0C5TffaMLisixaM%2BSgEFJPdU4CjlkO%2BnuyEEpu%2BQx%2B8HL9YEsHXD8%2BKA8vpPQSPCQm24ceXUkJryszNYodjBwVPCQQFI2tsr51Zeji8NvXcxNzWInGV4TqUGSvwEv8n6E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e51fe679c9d1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102236,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 534 x 222, 8-bit/color RGBA, non-interlaced","md5":"80bbae69f331d4032d06dacd1a116f9c","sha1":"ac2f4e9186a0dfc7eaab57c830564a947b646e1c","sha256":"fc95f82080ccbdcd8b22493f76a037a149ffcab65eddea4c8f861009c8f5852a","sha512":"10cfae9af448911f58e399554d3af07484dfd6f58d0d31898c1c3668081507812b68dfbc88b008ba215401a9d28ba37029d41a87bbf94eabad48da68c7fe670e","ssdeep":"1536:E3B+NedHMZRQ2q1MFfJ2yCre/FQPs+/GD3pUhM13ovcmphSGrvQe55YygA:ExERQ23FfcCFQc3KMpovRhVrd55YyV","tlshash":"08a31260fc82aab84a33fde32796438879d4f4864f661405032d77bfb405976709aeed","first_seen":"2025-05-26T12:18:54.663813Z","last_seen":"2026-06-09T02:14:09.901393Z","times_seen":16,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/body-bg-stars.png","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:48.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /body-bg-stars.png HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 616050\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\netag: \"69c60821-96672\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 787\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BNjMRgLyNXn1qkDdgSAhOlU4badaNRFI%2FxNAWGzYGaJi46RM%2FBJtBTuj8OM8GVofaoKsWc5v3nBIFpJNY3v96%2FKl7udEaWx2pquycibCasZpRUSW368xRcFgXYgwiK6xmJPD%2BOw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e51fe6bfd381a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":616050,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 956, 8-bit/color RGBA, non-interlaced","md5":"3d22776d0dbd61de6abb0b724afec4d4","sha1":"344d8150906d80575967d0e83cf1d60ac75a6cc7","sha256":"3f8309ba5a60b717cf073f23c14c846c35fbcf8e3b9b1a6e2cf71b2400c1fd9c","sha512":"fd7ac9990acb41e726c99de45d553af02d52edbfc0ac17e2f4cf5ae86ea70e6b3f55e97468e6c808846a17c9c6c44564926aa648ea95670bc9c8c6af3f1370e0","ssdeep":"12288:lsWFOSkIY1IXFL5YDZ+jMnoqYnI1lQQcCY/GPU0Z8y+vB5+Tc59D8U3:ASLEo5YkSamlQQ6GPbWyOEcfX3","tlshash":"3dd42341bd84c542c9fb8c556931e6b0b78f387ac3561216bb79c784e42ac4f3fe8662","first_seen":"2025-05-26T12:18:54.613963Z","last_seen":"2026-06-10T13:51:38.753598Z","times_seen":31,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/top-nav-bg.svg","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:48.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /top-nav-bg.svg HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:48 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 788\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U2M7HdG9bypfG%2FT%2B4bjL8fbYmJNpuwSR9gLhRMzoZ9dviUZx8lGyfAtXT4Iwxbe2%2B0HumljQWz4zl97ycsIasPIjnxtnvNsp4kyBmBAhQEnlA0rryCKNPggjflPRdEJplsyLzzs%3D\"}]}\r\ncf-ray: 9e51fe6bfd3d1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":378566,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (26370)","md5":"120317de831031b8b0792c671f20eafd","sha1":"bf4525b1d5c0aafbd75e753c330362d8e2b54a9e","sha256":"b9670db8c069ed879a047981a35bf2cce8a08a0c8c4f0de76f4cdc470b90b176","sha512":"87c177511d7f4b03f41e9d6507954a45149cf00013f24c15357760213880a8b4117b35d8aad3b81e16c3ed2dbbe3ab948254a4c0fc1e28b9ca0ff2bb00bcc184","ssdeep":"3072:s90FT1vG1DxrPeBFaXKjBKl6I20et3Tk0uL030b5E0M1j0lG7ovUA4VEW0+SkIlh:tB3AW8G7ovUA4VEn","tlshash":"f98409e43bb006edb757e2d63f9287583e015667d1498a1ef77c1c40abcd92918e2ec4","first_seen":"2026-03-25T17:22:20.130634Z","last_seen":"2026-03-31T20:10:35.75353Z","times_seen":6,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/inside_bitcoins.png","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:47.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /inside_bitcoins.png HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 8208\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\netag: \"69c60821-2010\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 788\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y7QY74qoHrkl%2BvOAWj%2FDJRKV1aToaJNoN3K4by6OcQ8tcGnjkptrUtBS%2FT608qMD%2FJHmS%2B%2BRwAzGFhxx7Z0ZV13SN0cU2OF5EKeZbNGhzywhQbyDniBVfSY0RlcZATsZg1%2BUN%2Fk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e51fe676c821a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8208,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 238 x 40, 8-bit/color RGBA, non-interlaced","md5":"0d736ba61a17c1f0190b45063b856452","sha1":"0cbedb3940a1a91c7b76844967d8641b50dd9a30","sha256":"9e37348462e92ab30031abf15ae26ed009ba75ad4e0311dd2c17c3d0b935cac1","sha512":"22882f59c25f400d1579b8cd87c9bd0db1d08635339778c5025807c03e2ca18e7ecc162e79f9de53b53040b7980c904dcdae203cb8c6344ee439a776d0ca86cd","ssdeep":"192:YzDQKI4PMTlMmLOYWNJOuGDoTF2yNrZoa7pwwGy2Zw/4:6DzITTWIWbOuGDoz72RyWd","tlshash":"3702b001688a4f41a461b0104e5ab6b2b0154fbf2dd0f6791e9a24ec822f0206bbf79f","first_seen":"2025-06-02T11:49:35.505436Z","last_seen":"2026-06-10T13:51:38.95045Z","times_seen":15,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/backarrow.svg","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:47.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /backarrow.svg HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:47 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nage: 789\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69c60821-1e1\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TRLkj7OsE3rTOpYWpscnb%2FuxcG6k4zefeB2BgZgDS96X1XWPqHFh0Y6atyVtjTt4BLy6VIz4qD0TAxK8NSx0auv8lpX7l4PUXplG0%2Bk%2Fvlt09god%2BuQu6kCfuY6Hb7s%2FCzl424g%3D\"}]}\r\ncf-ray: 9e51fe677c901a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":481,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c59c029f28c134ffa09dbdaf73d03806","sha1":"ef889cb471cd11e5c6f2d293ee80ecd8c60d3633","sha256":"d8029e39e47cb705dc2ba2a32202a3bdabacd65e3208efe1795bafdd5d5e9a00","sha512":"30c1ee77228ea56e167cbe85f386e320905ffadd25b5573ab4f9b07ab8fe93519a7d2cb697d0b690c3ab77fdf86136b6645a5526eba6181015bb7a778239899e","ssdeep":"","tlshash":"d5f0523be2298d3ae16ac258eb14a43450a9408389888190e1a2ff3e18240c63c2f2e8","first_seen":"2025-06-02T11:49:35.503461Z","last_seen":"2026-06-10T13:51:38.969673Z","times_seen":18,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-solaxy.trade/twitter.svg","fqdn":"claim-solaxy.trade","domain":"claim-solaxy.trade","tld":"trade"},"ip":{"addr":"104.21.7.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-solaxy.trade/","date":"2026-03-31T20:09:47.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-solaxy.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:36 GMT","end":"Thu, 25 Jun 2026 03:39:35 GMT"},"fingerprint":{"sha1":"10:E5:9E:73:AA:D6:38:F0:97:F0:FE:BE:9B:07:71:A1:87:62:73:27","sha256":"63:54:CB:11:16:84:00:E0:10:FD:2F:7F:BA:31:EB:B9:0F:DC:A1:94:7E:96:E7:C4:C5:F5:92:6A:1F:60:71:02"}}},"request":{"raw":"GET /twitter.svg HTTP/1.1\r\nHost: claim-solaxy.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-solaxy.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 20:09:47 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 27 Mar 2026 04:31:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nage: 789\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69c60821-4189d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kr323IupjFpm1b9RgNnV3iKGL4KEMFha2g24AJz%2F92ipsTMuA9YO%2FRSW2x9i0Ajp3HOPvlcZso4n3LpZXQCKajd%2BDPrupMSl2gtGFzH951rzaT9OroIhSSfjkIco5oPeBjDxydM%3D\"}]}\r\ncf-ray: 9e51fe678c931a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":268445,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"904467a3494df2d67669933fcb35bb6d","sha1":"c2eb0f06c29f52abf2c58bdaa5a862c5fe8db53d","sha256":"5988228853df9f2c162bb98f23ae466771ddc3e9c4778a4750bc96c1e90bc484","sha512":"c7359e0258fee674605ec4fc6e1c7fbf5dc5c9d4929355eaa99874ef1d7a2bbf4632f861f526842064f2255f9509275b9dc5156952a466fe08fdcc8c389d0699","ssdeep":"6144:XH+K6EjagatZK/4mcj4QJtntkLwnfSUc6Jhou84SUy+Xx5L7:XH+jEQAW3iKjoESUy+Xx5n","tlshash":"7d44072e0d5cbb4e33321c6ecb03247e3e8a65edb24991cf29df35edd2664109665da0","first_seen":"2025-05-26T12:18:54.572197Z","last_seen":"2026-06-10T13:51:38.88867Z","times_seen":23,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claim-solaxy.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}