Report - penguclaim.online/

Report Overview

Visited public
2025-01-02 20:18:37
Tags
Submit Tags
URL
penguclaim.online/
Finishing URL
penguclaim.online/
IP / ASN
89.116.109.48
#47583 Hostinger International Limited
Title
403 Forbidden

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
penguclaim.online	unknown	2024-12-18	2025-01-02	2025-01-02	3.0 kB	14 kB	195.200.9.222

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-12-18	medium	penguclaim.online/	Crypto/Wallet
2024-12-18	medium	penguclaim.online/	Crypto/Wallet
2024-12-18	medium	penguclaim.online/	Crypto/Wallet
2024-12-18	medium	penguclaim.online/	Crypto/Wallet
2024-12-18	medium	penguclaim.online/	Crypto/Wallet
2024-12-18	medium	penguclaim.online/	Crypto/Wallet
2024-12-18	medium	penguclaim.online/	Crypto/Wallet

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (7)

URL IP Response Size

GET penguclaim.online/

195.200.9.222

403 Forbidden

2.2 kB

URL User Request GET HTTP/3
penguclaim.online/
IP
195.200.9.222:443
ASN
#8851 GCI Network Solutions Limited

Certificate
IssuerGoogle Trust Services
Subjectpenguclaim.online
Fingerprint24:C6:AC:D5:06:4A:4A:8C:AE:90:F1:89:42:3E:6C:6C:05:B1:64:8D
ValidityTue, 17 Dec 2024 23:45:41 GMT - Mon, 17 Mar 2025 23:45:40 GMT

File type
HTML document, ASCII text, with very long lines (4792), with no line terminators
Size
2.2 kB (2193 bytes)
Hash
b649bb4bbcec6444434d2df7501effb6
f8a04ac654e2234fa2644abf8e293d02bc01c8fd
c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET / HTTP/1.1
Host: penguclaim.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 403 Forbidden
date: Thu, 02 Jan 2025 20:18:12 GMT
content-type: text/html
content-length: 2193
vary: Accept-Encoding
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
permissions-policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
server: hcdn
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: b84a5c808986ea9db266d596d347895c-fast-edge5
X-Firefox-Spdy: h2

GET penguclaim.online/

195.200.9.222

403 Forbidden

2.4 kB

URL User Request GET HTTP/3
penguclaim.online/
IP
195.200.9.222:443
ASN
#8851 GCI Network Solutions Limited

Certificate
IssuerGoogle Trust Services
Subjectpenguclaim.online
Fingerprint24:C6:AC:D5:06:4A:4A:8C:AE:90:F1:89:42:3E:6C:6C:05:B1:64:8D
ValidityTue, 17 Dec 2024 23:45:41 GMT - Mon, 17 Mar 2025 23:45:40 GMT

File type
HTML document, ASCII text, with very long lines (4792), with no line terminators
Size
2.4 kB (2393 bytes)
Hash
b649bb4bbcec6444434d2df7501effb6
f8a04ac654e2234fa2644abf8e293d02bc01c8fd
c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET / HTTP/1.1
Host: penguclaim.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
Date: Thu, 02 Jan 2025 20:18:12 GMT
Content-Type: text/html
Content-Length: 2393
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Server: hcdn
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: 7329d3b79b04cbe4584ecdd80aaead5e-fast-edge6

penguclaim.online/hcdn-cgi/jschallenge

195.200.9.222

200 OK

133 B

URL
penguclaim.online/hcdn-cgi/jschallenge
IP
195.200.9.222:0
ASN
#8851 GCI Network Solutions Limited

Certificate
IssuerGoogle Trust Services
Subjectpenguclaim.online
Fingerprint24:C6:AC:D5:06:4A:4A:8C:AE:90:F1:89:42:3E:6C:6C:05:B1:64:8D
ValidityTue, 17 Dec 2024 23:45:41 GMT - Mon, 17 Mar 2025 23:45:40 GMT

File type
ASCII text
Size
133 B (133 bytes)
Hash
94a7ecbaca09b470fe3ad03b3a34d9c0
5ee64c5534efcefed143cbd3fab86095891d5696
e1cd40ea3473062d190f6b07124765c8a12fd12dd41a44798bb108010ab7cba3

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /hcdn-cgi/jschallenge HTTP/1.1
Host: penguclaim.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://penguclaim.online/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 02 Jan 2025 20:18:13 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Server: hcdn
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: 95f7fef55cad978380840ceb8d5a4819-fast-edge6
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Content-Encoding: gzip

GET penguclaim.online/favicon.ico

195.200.9.222

403 Forbidden

2.4 kB

URL GET HTTP/1.1
penguclaim.online/favicon.ico
IP
195.200.9.222:80
ASN
#8851 GCI Network Solutions Limited

Requested by
http://penguclaim.online/

File type
HTML document, ASCII text, with very long lines (4792), with no line terminators
Size
2.4 kB (2393 bytes)
Hash
b649bb4bbcec6444434d2df7501effb6
f8a04ac654e2234fa2644abf8e293d02bc01c8fd
c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: penguclaim.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://penguclaim.online/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
Date: Thu, 02 Jan 2025 20:18:13 GMT
Content-Type: text/html
Content-Length: 2393
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Server: hcdn
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: cd1b507e9465f21482438080e69557f0-fast-edge6

penguclaim.online/hcdn-cgi/jschallenge-validate

195.200.9.222

200 OK

0 B

URL
penguclaim.online/hcdn-cgi/jschallenge-validate
IP
195.200.9.222:0
ASN
#8851 GCI Network Solutions Limited

Certificate
IssuerGoogle Trust Services
Subjectpenguclaim.online
Fingerprint24:C6:AC:D5:06:4A:4A:8C:AE:90:F1:89:42:3E:6C:6C:05:B1:64:8D
ValidityTue, 17 Dec 2024 23:45:41 GMT - Mon, 17 Mar 2025 23:45:40 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

POST /hcdn-cgi/jschallenge-validate HTTP/1.1
Host: penguclaim.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://penguclaim.online/
Content-Type: application/x-www-form-urlencoded
Content-Length: 74
Origin: http://penguclaim.online
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 02 Jan 2025 20:18:16 GMT
Content-Type: application/octet-stream
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: hcdn=AQEAKvarLLhSS4A9hB_vaSZrKgp2mCZAZBiz3gT9Lli5acmI9HZnAAAAAADOAAACDNkoTZPUj3WSkc6_ZUCiAAAAt1G5MKs1Zq9yUz1aK_Y18g; Path=/; SameSite=Lax; HttpOnly
Server: hcdn
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: e6dde6e5d1330c7e172f59c00ca2d5bf-fast-edge6
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT

GET penguclaim.online/

195.200.9.222

403 Forbidden

787 B

URL User Request GET HTTP/3
penguclaim.online/
IP
195.200.9.222:443
ASN
#8851 GCI Network Solutions Limited

Certificate
IssuerGoogle Trust Services
Subjectpenguclaim.online
Fingerprint24:C6:AC:D5:06:4A:4A:8C:AE:90:F1:89:42:3E:6C:6C:05:B1:64:8D
ValidityTue, 17 Dec 2024 23:45:41 GMT - Mon, 17 Mar 2025 23:45:40 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
787 B (787 bytes)
Hash
ff715af41f83fb38cd35c4e91c77c46d
11e71530661013137721d635f95630722eaa6afd
036bacf3bd34365006eac2a78e4520a953a6250e9550dcf9c9d4b0678c225b4c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET / HTTP/1.1
Host: penguclaim.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://penguclaim.online/
DNT: 1
Connection: keep-alive
Cookie: hcdn=AQEAKvarLLhSS4A9hB_vaSZrKgp2mCZAZBiz3gT9Lli5acmI9HZnAAAAAADOAAACDNkoTZPUj3WSkc6_ZUCiAAAAt1G5MKs1Zq9yUz1aK_Y18g
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
Date: Thu, 02 Jan 2025 20:18:16 GMT
Content-Type: text/html
Content-Length: 787
Connection: keep-alive
Vary: Accept-Encoding
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
platform: hostinger
panel: hpanel
Server: hcdn
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: e58455910d4d3a5eaea505609b7062d2-fast-edge6

GET penguclaim.online/favicon.ico

195.200.9.222

404 Not Found

1.2 kB

URL GET HTTP/1.1
penguclaim.online/favicon.ico
IP
195.200.9.222:80
ASN
#8851 GCI Network Solutions Limited

Requested by
http://penguclaim.online/

File type
HTML document, ASCII text, with very long lines (355)
Size
1.2 kB (1159 bytes)
Hash
e53fdf76753edcd8773ab17ae968bfd6
4bea38cd83442080bdf51cd1db206715f9198955
3d70ce95eb1eb78620cc57fe1a6a479e6f2d70508bf813238e573863df000d6e

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: penguclaim.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://penguclaim.online/
Cookie: hcdn=AQEAKvarLLhSS4A9hB_vaSZrKgp2mCZAZBiz3gT9Lli5acmI9HZnAAAAAADOAAACDNkoTZPUj3WSkc6_ZUCiAAAAt1G5MKs1Zq9yUz1aK_Y18g
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Thu, 02 Jan 2025 20:18:16 GMT
Content-Type: text/html
Content-Length: 1159
Connection: keep-alive
Vary: Accept-Encoding
last-modified: Wed, 11 Jan 2023 12:29:40 GMT
etag: "999-63beabb4-97441d1d4287a6dd;gz"
content-encoding: gzip
platform: hostinger
panel: hpanel
x-turbo-charged-by: LiteSpeed
Server: hcdn
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: 6fcbabc5d73999f81bdcd5cf39b02135-fast-edge6

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (7)

URL User Request GET HTTP/3

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/3

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/3

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers