{"report_id":"87da86b6-51c3-4aee-8a84-eab9e7f05a6c","version":0,"status":"done","tags":[],"date":"2026-10-13T09:24:44Z","url":{"schema":"http","addr":"claudeess.com/","fqdn":"claudeess.com","domain":"claudeess.com","tld":"com"},"ip":{"addr":"158.94.209.113","port":0,"asn":202412,"as":"Omegatech LTD","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"claudeess.com/","fqdn":"claudeess.com","domain":"claudeess.com","tld":"com"},"title":"Download Claude | Claude by Anthropic","dom":{"size":248738,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5979)","md5":"e86d79b72b0a495a22b799626455697d","sha1":"3141b615d25c1490bbac4e4609f1dba1cf0d8e63","sha256":"0d8075d7912e63e4c8cca5c1543ae527324549f11dc609d0b127d11fe66233e4","sha512":"beea7a6d69aa05fde45ebc3f83378a2f3cdf11125dda6c9f904d793971d87b49f1475b0a4c28ac8971e2579b8747dfe1c5be6bac207d30e6dfa057ee14263826","ssdeep":"1536:dPkZfbTWzGiR++TunfwcVspG1HwCKbG61plnilLBIXSplj8puNlUH4ILoIrj7fzp:8qc1fwyUn8i","tlshash":"ff34e9dda2f007eb40ce93d6fb465514bfe270fba9844d80f16c8b905b52c78a9da44b","dom_hash":"domhash4934d76b6df618924571ef93e3d9c9c3","first_seen":"2026-10-13T09:23:13.966221Z","last_seen":"2026-10-13T09:24:47.568898Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"claudeess.com/","fqdn":"claudeess.com","domain":"claudeess.com","tld":"com"},"ip":{"addr":"158.94.209.113","port":0,"asn":202412,"as":"Omegatech LTD","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-17T09:24:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"claudeess.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"claudeess.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"claudeess.com","ip":{"addr":"158.94.209.113","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2026-10-12","domain_rank":0,"first_seen":"2026-10-13T09:23:04.650643Z","last_seen":"2026-10-13T09:23:04.650643Z","alert_count":44,"request_count":22,"received_data":1569960,"sent_data":10451,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"claudeess.com/","fqdn":"claudeess.com","domain":"claudeess.com","tld":"com"},"ip":{"addr":"158.94.209.113","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad4623cb4954d2e5b86c98ea76553a8c","sha1":"b7cf82b58fdb294c21a1a36fb6b9b4c3edea5edb","sha256":"f9275c9f5ffa82c792b2b215c6407bc9c79da7c951ab0215a913b5c0bb5aebb4","sha512":"842e6293d924cc56a6609f1e93f62d0b314b302db5a73845d131e478a0e02c448d071b7f9fb70557d434d78b51a93fde4719db08ca4f3dece13124419dd2ef33","ssdeep":"","tlshash":"8ff0979a2c43e45633ea2639c367a6aa2766070268c2d505fa0194242fa499618429ce","size":479,"data":"","first_seen":"2026-10-13T09:23:14.029747Z","last_seen":"2026-10-13T09:24:47.617247Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claudeess.com/","fqdn":"claudeess.com","domain":"claudeess.com","tld":"com"},"ip":{"addr":"158.94.209.113","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"7635f1c4714b859bcce01bff51dbb022","sha1":"b8a63c165b3887d3c2501722714b0053c1bd67e5","sha256":"d1bcc5b839fdf1c188597910a84a085de16ef8199b2927165451bcceeb3c7506","sha512":"57b0258cfaf064e183b9c5672cbb8d10ff162ee33cfeaaa8ab25ebc621fb8333587c43518999322ee3a56a1ef61bf3bd62989b39a9223d0eb63d634619b8f983","ssdeep":"","tlshash":"1df0dcae2c57a4a637fa253dc32baa6b2763070364c2d809fa05c8142fd49961c529ce","size":479,"data":"","first_seen":"2026-10-13T09:23:14.031663Z","last_seen":"2026-10-13T09:24:47.618621Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claudeess.com/","fqdn":"claudeess.com","domain":"claudeess.com","tld":"com"},"ip":{"addr":"158.94.209.113","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd69826d6b396d6f282155e1238e80d5","sha1":"3fa3ceef17701fa73b000e0dd8ebe3c502bd2e00","sha256":"9f047ee41c7287731c97986ee5783edf7f43a67e1083baf2f0997e19a7ffaf1e","sha512":"b76e4c7c32cda0b6555f4463a761fc3262736fc793fb5b7148db93557b7c3ffdc6878468a658f2875fecf3fc6d4507c38ff8b46071d8ae78e6d29370d66e076f","ssdeep":"","tlshash":"c2d0121c74f16562009b7c3c0a0f044d7a26d403714c9ec1bcdc95506fb1ebc44e091c","size":286,"data":"","first_seen":"2026-10-13T09:23:14.033669Z","last_seen":"2026-10-13T09:24:47.620271Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claudeess.com/","fqdn":"claudeess.com","domain":"claudeess.com","tld":"com"},"ip":{"addr":"158.94.209.113","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"adcb93e3980f80f84a0344b7036aabdb","sha1":"adb9abfbc37944e0a6a508e2a5036b13feb13198","sha256":"46c8d552363bcbc4a870c4351ab54d651b7e13ea8d620369d5ab211eefa91221","sha512":"9aae16d39e9a5c450834ebd96ff7b601d22b01e71e463f72872f6aad8c39d28eb6d421e2656ad07ac1220218df9a3f8aed89a58501c4dde0f1717431bd6ec60c","ssdeep":"","tlshash":"7cc02b6e0303d0441014a803034c3714a80709071c0c9c147ecc192f3b0c82d5c719cf","size":169,"data":"","first_seen":"2026-10-13T09:23:14.035909Z","last_seen":"2026-10-13T09:24:47.622957Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claudeess.com/","fqdn":"claudeess.com","domain":"claudeess.com","tld":"com"},"ip":{"addr":"158.94.209.113","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"941d4f09fb9d691df74a261c8409d71a","sha1":"785b15c84991353063d8283412623f6042896bb3","sha256":"4747947362952e5ea2ee1c6ec6cdb87905fb31d6c29b6ad80388bd8fb3e8b666","sha512":"409fc1262e5a0c3c6695454785a6aa46714a5404ede28b2f73688e7f7261f6a2d3115816d7e2ec3ec8a380dc9ccc037aaa34edd6c5f7d0443e9ad5ef38a89895","ssdeep":"192:gNkFcCyikvMXmGC/iqmOCyiC75zIC4Xnrh8SC3zyGrfnin:gpvMXcP1zEp","tlshash":"fa025b7e9e920636986bf5bd8f9b7080292284275909ed203d4ce102df8cd3997f6f94","size":8573,"data":"","first_seen":"2026-10-13T09:23:14.037176Z","last_seen":"2026-10-13T09:24:47.624157Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claudeess.com/","fqdn":"claudeess.com","domain":"claudeess.com","tld":"com"},"ip":{"addr":"158.94.209.113","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"9babd8442cb8a8925c16288e7d86ea25","sha1":"02a158a906985ff7a12540ea5d7d7a363c8d4b55","sha256":"e13293a53249431083cfab9ecba68b11ca5cca29331f2b06763b7003f8fc0129","sha512":"c44e35b102b62178f0ae2a70f6387c7e116f5032691144d02dd3603794167fab76bac30cea928df08e1d8d99297c873cd2fd70ba5b52480ad317f8ebc511d1f0","ssdeep":"","tlshash":"5f51131d31b7a0ba002f20bac74f52107a312547700bdc597f6cdb8a2f516226df1bca","size":3007,"data":"","first_seen":"2026-10-13T09:23:14.038612Z","last_seen":"2026-10-13T09:24:47.626068Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"claudeess.com/","fqdn":"claudeess.com","domain":"claudeess.com","tld":"com"},"ip":{"addr":"158.94.209.113","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-13T09:24:13.565Z","timestamp":1791883453565,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claudeess.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Oct 2026 16:52:31 GMT","end":"Sun, 10 Jan 2027 16:52:30 GMT"},"fingerprint":{"sha1":"5C:DC:0D:38:61:53:5F:95:0C:80:2F:99:BC:31:9E:BC:3F:35:37:E9","sha256":"DF:1F:91:68:E4:CD:E2:F9:15:19:2B:98:3F:48:7D:53:E5:81:EB:D9:FC:52:D8:AA:DF:8F:61:CF:14:8C:49:F2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claudeess.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 13 Oct 2026 09:24:13 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 12 Oct 2026 19:25:10 GMT\r\netag: W/\"6acd3416-453ba\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":283578,"size_decoded":47411,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (5977)","md5":"7e08a8c91d7ca5026e5bc5fee055203a","sha1":"97762a5d5a30ec705df275276c23dc4e9b4f5fa4","sha256":"c6703d0ce34b86938306fe471725b7ae223f05055e65d06f43ae99deb8587740","sha512":"25eb067e07194db0ff31d8beb25959c36003a0214304a8dd4f18335a2fc633f9842c59154562b6f92fe5bc1d4b14a700b09da7892451cd13049aef7ae5032acb","ssdeep":"1536:+PGZfv5qzGAKf2V+nfwcVYpGFHwCKbG6kpvTilLBI3ppv1cpKNHsjkYNMUJzbfzm:BEkPfwy4nID","tlshash":"0054e7d9a2f007eb40cea3d6ff165508bfd270fba9844d80f16c8a905f52c74a99a54b","first_seen":"2026-10-13T09:23:14.002009Z","last_seen":"2026-10-13T09:24:47.570984Z","times_seen":2,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":3,"connect":76,"send":0,"wait":150,"receive":0,"ssl":85},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"claudeess.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"claudeess.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claudeess.com/47ef4466364f409c.css","fqdn":"claudeess.com","domain":"claudeess.com","tld":"com"},"ip":{"addr":"158.94.209.113","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claudeess.com/","date":"2026-10-13T09:24:14.183Z","timestamp":1791883454183,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claudeess.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Oct 2026 16:52:31 GMT","end":"Sun, 10 Jan 2027 16:52:30 GMT"},"fingerprint":{"sha1":"5C:DC:0D:38:61:53:5F:95:0C:80:2F:99:BC:31:9E:BC:3F:35:37:E9","sha256":"DF:1F:91:68:E4:CD:E2:F9:15:19:2B:98:3F:48:7D:53:E5:81:EB:D9:FC:52:D8:AA:DF:8F:61:CF:14:8C:49:F2"}}},"request":{"raw":"GET /47ef4466364f409c.css HTTP/1.1\r\nHost: claudeess.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claudeess.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 13 Oct 2026 09:24:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Oct 2026 18:49:16 GMT\r\netag: W/\"6acd2bac-1c730\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":116528,"size_decoded":13259,"mime_type":"text/css","magic":"ASCII text, with very long lines (18699)","md5":"38c632d941393488eb6f408f3e2b9729","sha1":"5a65148967de6f9bf4ba6e6ea1ebb8c10b06eaa2","sha256":"ac570e7b9137118a7d51b14db36995c906d028fb572f4133fd2044e0f9f62464","sha512":"ea326b5b8ee8b36789a63e65e97b0d4b87586f9bec392a1916180aad592ff91201ad6154078ed7f9d8371bcd46fb2cb5de2d08912ff28e9a4842bf68ddb8a436","ssdeep":"1536:0E4dcYiT6rYrtCGBGSjgQaZLBKHTX98EZ:0E4dzIZ","tlshash":"20b31d56f1f0233f081e712af6895848cfe474dbeec5afc4952c29e546c2ab172f164a","first_seen":"2026-10-13T09:23:14.019732Z","last_seen":"2026-10-13T09:24:47.572376Z","times_seen":2,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"claudeess.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"claudeess.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claudeess.com/f2978ed852d5142f.css","fqdn":"claudeess.com","domain":"claudeess.com","tld":"com"},"ip":{"addr":"158.94.209.113","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claudeess.com/","date":"2026-10-13T09:24:14.189Z","timestamp":1791883454189,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claudeess.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Oct 2026 16:52:31 GMT","end":"Sun, 10 Jan 2027 16:52:30 GMT"},"fingerprint":{"sha1":"5C:DC:0D:38:61:53:5F:95:0C:80:2F:99:BC:31:9E:BC:3F:35:37:E9","sha256":"DF:1F:91:68:E4:CD:E2:F9:15:19:2B:98:3F:48:7D:53:E5:81:EB:D9:FC:52:D8:AA:DF:8F:61:CF:14:8C:49:F2"}}},"request":{"raw":"GET /f2978ed852d5142f.css HTTP/1.1\r\nHost: claudeess.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claudeess.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 13 Oct 2026 09:24:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Oct 2026 18:49:18 GMT\r\netag: W/\"6acd2bae-2cf5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11509,"size_decoded":2290,"mime_type":"text/css","magic":"ASCII text, with very long lines (11508)","md5":"13d0cdb50a7e8bd4cdc1c3e84d106e97","sha1":"1b3a911b595612bc8a7580074c7b6c32c07910e8","sha256":"c51c041b528d80098e4056f5534805fa04d81eff533bad9e3c8818e85090a8b8","sha512":"cc0fb9805373fa2c74e17af11a7af2af07c4348be5c428509a1737732da8e783d25f79019bb2c498e107ee32aedb95b42c85d2ef206b0eb33b4c687dc6820c61","ssdeep":"96:NZneIio9ZE0zTnX6ztuPjiW0xIXq/anWLAIADSIT66IE+kPI4qn0U:NZn6o9ZE0zTX6zg+dEWLAXFOE+kun0U","tlshash":"7732e4516af1433b481e6273f3d4b92ccf9461cae4996fd6420ce9b00482db632e7b86","first_seen":"2026-10-13T09:23:13.984852Z","last_seen":"2026-10-13T09:24:47.575723Z","times_seen":2,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"claudeess.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"claudeess.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claudeess.com/ae01c02bb2c8fafb.css","fqdn":"claudeess.com","domain":"claudeess.com","tld":"com"},"ip":{"addr":"158.94.209.113","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claudeess.com/","date":"2026-10-13T09:24:14.193Z","timestamp":1791883454193,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claudeess.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Oct 2026 16:52:31 GMT","end":"Sun, 10 Jan 2027 16:52:30 GMT"},"fingerprint":{"sha1":"5C:DC:0D:38:61:53:5F:95:0C:80:2F:99:BC:31:9E:BC:3F:35:37:E9","sha256":"DF:1F:91:68:E4:CD:E2:F9:15:19:2B:98:3F:48:7D:53:E5:81:EB:D9:FC:52:D8:AA:DF:8F:61:CF:14:8C:49:F2"}}},"request":{"raw":"GET /ae01c02bb2c8fafb.css HTTP/1.1\r\nHost: claudeess.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claudeess.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 13 Oct 2026 09:24:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Oct 2026 18:49:18 GMT\r\netag: W/\"6acd2bae-4d6a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19818,"size_decoded":2621,"mime_type":"text/css","magic":"ASCII text, with very long lines (19817)","md5":"8876301c653f6e75d0dbb72a159bc29d","sha1":"8cbbcad0b06ed1bf45dbf3b741e56371ba3a9ead","sha256":"07028b3c1db1a829d82b2357aa6dc198d40202ce72a32578b71bd5ded918cce0","sha512":"a3f4759be566b3039798e2423277329c47bbc52342546f5ec3034e3c3d4d6ff0bb65308010e43ba0801eb60b17bd86a2609a045960a34dc39c3515966075cf8a","ssdeep":"192:chEQynqWbEFBp/EBPep/EBPT71EHqDXnCUC7Uz7jPabikW0qOhbfpwgN+k2:TqWbErp/Ecp/ETZDXnndz7Gn2U52","tlshash":"c892c6eae8f6827fd81e202bf38c545c8f94b8c39f496ed5aa1d40d051d2bf211b9647","first_seen":"2026-10-13T09:23:13.972835Z","last_seen":"2026-10-13T09:24:47.576948Z","times_seen":2,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"claudeess.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"claudeess.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claudeess.com/034c0d400ac5dcdc.css","fqdn":"claudeess.com","domain":"claudeess.com","tld":"com"},"ip":{"addr":"158.94.209.113","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claudeess.com/","date":"2026-10-13T09:24:14.199Z","timestamp":1791883454199,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claudeess.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Oct 2026 16:52:31 GMT","end":"Sun, 10 Jan 2027 16:52:30 GMT"},"fingerprint":{"sha1":"5C:DC:0D:38:61:53:5F:95:0C:80:2F:99:BC:31:9E:BC:3F:35:37:E9","sha256":"DF:1F:91:68:E4:CD:E2:F9:15:19:2B:98:3F:48:7D:53:E5:81:EB:D9:FC:52:D8:AA:DF:8F:61:CF:14:8C:49:F2"}}},"request":{"raw":"GET /034c0d400ac5dcdc.css HTTP/1.1\r\nHost: claudeess.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claudeess.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 13 Oct 2026 09:24:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Oct 2026 18:49:18 GMT\r\netag: W/\"6acd2bae-1245\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":4677,"size_decoded":1179,"mime_type":"text/css","magic":"ASCII text, with very long lines (4676)","md5":"157e8ec60d383e5ba2ad703d2547e961","sha1":"8d27d7c5054891064b2bc7636fde7dbbe58fbc6b","sha256":"0ddff66f1cde225abdebeab82fb2f5b903ce6ac179b495947b0a0b10b7260c8a","sha512":"556d040a815f8c7c349db983842cffbdc2c5ad6558918478a0f44f2881c362595172a41244012d12c41206d33380e8e0b2e07ac6392451f35ef9254c737d0bdd","ssdeep":"48:DkVCaRKSG49TitRjaZvdg7ozNy7cNh06V54YI7nok/40pAjUI45Es8MFDMR7UzWz:GCaRKSqr2WP18VUSGFDMR46Ab2Pxh","tlshash":"b5a1250b92f167ff86daf051f19a482acfe9b5cead4e4bc4510d4ee04c019e1b1e13a2","first_seen":"2026-10-13T09:23:13.987047Z","last_seen":"2026-10-13T09:24:47.578472Z","times_seen":2,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"claudeess.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"claudeess.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claudeess.com/95a868946ac8a31e5ff832e2899f294aa368b836.png","fqdn":"claudeess.com","domain":"claudeess.com","tld":"com"},"ip":{"addr":"158.94.209.113","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claudeess.com/","date":"2026-10-13T09:24:15.190Z","timestamp":1791883455190,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claudeess.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Oct 2026 16:52:31 GMT","end":"Sun, 10 Jan 2027 16:52:30 GMT"},"fingerprint":{"sha1":"5C:DC:0D:38:61:53:5F:95:0C:80:2F:99:BC:31:9E:BC:3F:35:37:E9","sha256":"DF:1F:91:68:E4:CD:E2:F9:15:19:2B:98:3F:48:7D:53:E5:81:EB:D9:FC:52:D8:AA:DF:8F:61:CF:14:8C:49:F2"}}},"request":{"raw":"GET /95a868946ac8a31e5ff832e2899f294aa368b836.png HTTP/1.1\r\nHost: claudeess.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claudeess.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 13 Oct 2026 09:24:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 1198\r\nlast-modified: Mon, 12 Oct 2026 18:49:18 GMT\r\netag: \"6acd2bae-4ae\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1198,"size_decoded":1446,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"85eb4ab06c9521eb74dae37efa7c6c2a","sha1":"95a868946ac8a31e5ff832e2899f294aa368b836","sha256":"4004381309500f25e49a1ae639912ce307ea81da74cc383954a1ac8b9d343fe6","sha512":"8cffdfd502b7d6714db98fc048a5b78a4568ccea6cc00fecdc6da23d818cc41b913fab944e77c71810d043df8903b0200080a1d1ca7bbb2136dcae7facf555ee","ssdeep":"","tlshash":"d921d76542028889d9fd1b31b2cbfa90da46baa54c0728c532009bb3eba7531b1a0104","first_seen":"2026-09-17T12:27:28.605251Z","last_seen":"2026-10-13T09:24:47.580894Z","times_seen":7,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"claudeess.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"claudeess.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claudeess.com/5bca218e6052de8f.css","fqdn":"claudeess.com","domain":"claudeess.com","tld":"com"},"ip":{"addr":"158.94.209.113","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claudeess.com/","date":"2026-10-13T09:24:14.171Z","timestamp":1791883454171,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claudeess.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Oct 2026 16:52:31 GMT","end":"Sun, 10 Jan 2027 16:52:30 GMT"},"fingerprint":{"sha1":"5C:DC:0D:38:61:53:5F:95:0C:80:2F:99:BC:31:9E:BC:3F:35:37:E9","sha256":"DF:1F:91:68:E4:CD:E2:F9:15:19:2B:98:3F:48:7D:53:E5:81:EB:D9:FC:52:D8:AA:DF:8F:61:CF:14:8C:49:F2"}}},"request":{"raw":"GET /5bca218e6052de8f.css HTTP/1.1\r\nHost: claudeess.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claudeess.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 13 Oct 2026 09:24:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Oct 2026 18:49:18 GMT\r\netag: W/\"6acd2bae-f938\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":63800,"size_decoded":5615,"mime_type":"text/css","magic":"ASCII text, with very long lines (59615)","md5":"35c9c635ebd445319c0f0af69b7db30c","sha1":"4718599b2fdd3794494f72fc2a2587efa70e2278","sha256":"e0a57001be3d67cb8b0bea01bd269374db734536067ed27ef73526b4194f2ccb","sha512":"0f2ba9f698429685eac196df81f80d1317cf21cf882698c15dcf0623384e1c64d8c6306bf4defb90d5e3395ea5abe145e2f6843f3d1e4c6749e76d059817ab96","ssdeep":"384:YkkWcbgPFZ0ebn1cu1QEAHE/QEXWbEvrVE4HEDQEMWbEorVEdHEKHE7p/EOHE+p6:RkPgPFZ/n1cCPjIhL055mndlK","tlshash":"585316bce8b6d1baad2b153f6388a46c5f04f8435f097b98fb1a41c460d3af341a9745","first_seen":"2026-10-13T09:23:13.968372Z","last_seen":"2026-10-13T09:24:47.582896Z","times_seen":2,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"claudeess.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"claudeess.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claudeess.com/e13d83a8a53acbbb.css","fqdn":"claudeess.com","domain":"claudeess.com","tld":"com"},"ip":{"addr":"158.94.209.113","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claudeess.com/","date":"2026-10-13T09:24:14.175Z","timestamp":1791883454175,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claudeess.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Oct 2026 16:52:31 GMT","end":"Sun, 10 Jan 2027 16:52:30 GMT"},"fingerprint":{"sha1":"5C:DC:0D:38:61:53:5F:95:0C:80:2F:99:BC:31:9E:BC:3F:35:37:E9","sha256":"DF:1F:91:68:E4:CD:E2:F9:15:19:2B:98:3F:48:7D:53:E5:81:EB:D9:FC:52:D8:AA:DF:8F:61:CF:14:8C:49:F2"}}},"request":{"raw":"GET /e13d83a8a53acbbb.css HTTP/1.1\r\nHost: claudeess.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claudeess.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 13 Oct 2026 09:24:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Oct 2026 18:49:16 GMT\r\netag: W/\"6acd2bac-1f38d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":127885,"size_decoded":13491,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (21084)","md5":"5063a45a8ec1b4c3deb2528fe18b13ec","sha1":"ac2f8b570416763fa91fc3fcf166ea87389c303b","sha256":"c6c9dd2d961579c119a8cdf4a6a150aef9341f1a67379321dd8af3e1ec181e8c","sha512":"bd87ae94f947f1ce173f4e24b994f5016da8adde0c929c226781cde09a41617db12b2a3aa58a66bc3059b2a4f17d137f157d11124d12e7a118eac3cd6beb6771","ssdeep":"768:Y6UhH6oPeHPhdDA/9lMP603EltDBLW3VOAbIAq/vaziky9Cb2TIIU8OG4oTX6I2:YFH6oPeHPhdkAAtDBLWUlLhG","tlshash":"56c31c96a2f0637f151e7417f1904848efe4b5dba992aed4621dcaf046c6ab133f034b","first_seen":"2026-10-13T09:23:13.980451Z","last_seen":"2026-10-13T09:24:47.585786Z","times_seen":2,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"claudeess.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"claudeess.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claudeess.com/724c8593bbdde418.css","fqdn":"claudeess.com","domain":"claudeess.com","tld":"com"},"ip":{"addr":"158.94.209.113","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claudeess.com/","date":"2026-10-13T09:24:14.185Z","timestamp":1791883454185,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claudeess.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Oct 2026 16:52:31 GMT","end":"Sun, 10 Jan 2027 16:52:30 GMT"},"fingerprint":{"sha1":"5C:DC:0D:38:61:53:5F:95:0C:80:2F:99:BC:31:9E:BC:3F:35:37:E9","sha256":"DF:1F:91:68:E4:CD:E2:F9:15:19:2B:98:3F:48:7D:53:E5:81:EB:D9:FC:52:D8:AA:DF:8F:61:CF:14:8C:49:F2"}}},"request":{"raw":"GET /724c8593bbdde418.css HTTP/1.1\r\nHost: claudeess.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claudeess.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 13 Oct 2026 09:24:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Oct 2026 18:49:16 GMT\r\netag: W/\"6acd2bac-16478\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":91256,"size_decoded":9260,"mime_type":"text/css","magic":"ASCII text, with very long lines (33846)","md5":"335e4fc15c55c8f9ac594e1435229095","sha1":"30d9aaaf04e9d9e153b95c5f8ffc7e33daa76a07","sha256":"f320c866ef8275453987886d366422312f9eb6da6603bc2971b88960fc19df41","sha512":"660c664fb731442d84694b21da6c2f8a2c9f413ba152799fe49540d340600a0bc00438aaad9807abbdc2d31a5b310556946bf033936eaa6afd6487ed5ccf0812","ssdeep":"768:JzN9o2GILkyvyyQyyJyyP3JqaDwRuauYYV9yXRCYwwCSp0:JzNbLY3JquSu5Vhw/q","tlshash":"fb93aa66e4f1877fc81e212bf3541448cfd4b8dbab89efc4a61d58e014c6ae266f4706","first_seen":"2026-10-13T09:23:13.971484Z","last_seen":"2026-10-13T09:24:47.587824Z","times_seen":2,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"claudeess.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"claudeess.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claudeess.com/460a3a2ec566ba0d.css","fqdn":"claudeess.com","domain":"claudeess.com","tld":"com"},"ip":{"addr":"158.94.209.113","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claudeess.com/","date":"2026-10-13T09:24:14.195Z","timestamp":1791883454195,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claudeess.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Oct 2026 16:52:31 GMT","end":"Sun, 10 Jan 2027 16:52:30 GMT"},"fingerprint":{"sha1":"5C:DC:0D:38:61:53:5F:95:0C:80:2F:99:BC:31:9E:BC:3F:35:37:E9","sha256":"DF:1F:91:68:E4:CD:E2:F9:15:19:2B:98:3F:48:7D:53:E5:81:EB:D9:FC:52:D8:AA:DF:8F:61:CF:14:8C:49:F2"}}},"request":{"raw":"GET /460a3a2ec566ba0d.css HTTP/1.1\r\nHost: claudeess.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claudeess.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 13 Oct 2026 09:24:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Oct 2026 18:49:18 GMT\r\netag: W/\"6acd2bae-747\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1863,"size_decoded":829,"mime_type":"text/css","magic":"ASCII text, with very long lines (1862)","md5":"357714d56a4fda512dd95a770f25ec2e","sha1":"db8e698323a25133569acbd9a2cdb1d07a7a74f0","sha256":"6f7f117fbad6109c3c540fbce638bd19e35ed9025009c0727335e182a8c5b296","sha512":"411b20de5f73efd12edda683aee13e8e0847872eab81a691d1117c62e2451b5ecf2f9d099636add279339e25c86816859c60fd7c54786c1707ced29516400338","ssdeep":"","tlshash":"2c31d02655f1457f806f7607fdd484cccfaab1cab8a25fcc4668a8e122a0b7411f920b","first_seen":"2026-10-13T09:23:14.024878Z","last_seen":"2026-10-13T09:24:47.590279Z","times_seen":2,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"claudeess.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"claudeess.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claudeess.com/a273a1fb11bb50fa.css","fqdn":"claudeess.com","domain":"claudeess.com","tld":"com"},"ip":{"addr":"158.94.209.113","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claudeess.com/","date":"2026-10-13T09:24:14.203Z","timestamp":1791883454203,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claudeess.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Oct 2026 16:52:31 GMT","end":"Sun, 10 Jan 2027 16:52:30 GMT"},"fingerprint":{"sha1":"5C:DC:0D:38:61:53:5F:95:0C:80:2F:99:BC:31:9E:BC:3F:35:37:E9","sha256":"DF:1F:91:68:E4:CD:E2:F9:15:19:2B:98:3F:48:7D:53:E5:81:EB:D9:FC:52:D8:AA:DF:8F:61:CF:14:8C:49:F2"}}},"request":{"raw":"GET /a273a1fb11bb50fa.css HTTP/1.1\r\nHost: claudeess.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claudeess.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 13 Oct 2026 09:24:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Oct 2026 18:49:18 GMT\r\netag: W/\"6acd2bae-1d903\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":121091,"size_decoded":8928,"mime_type":"text/css","magic":"ASCII text, with very long lines (33184)","md5":"e60948b922f180535c5ac18b311ea324","sha1":"1ae3c03fd78da6f7e3a3de539d8a86d49eb59d26","sha256":"79817e1aa8aeb8be02a098353f179b2b81ce3d8a1ab2f967ffa4393696fdd7b5","sha512":"67042c3303063b7cf51c3b1559899cee977afad23969cb3b411c6ba49caa10c83c0efea3f80240814b4b5a61edca64d401f12a8f514fa5337a6bb38dd3c15060","ssdeep":"384:pLwG31Wvu23mqtwWbEnp/E2p/EgQEdHE0HEIQEgQE1QEvC0YdbfTz+MCnspOp9/y:EcHRz7oxEE+4K+U1z","tlshash":"c2c3666fe4f4a77f252f257ef2640858af8875dbab455fc0b21d99e010d1af1e2e4202","first_seen":"2026-10-13T09:23:13.977624Z","last_seen":"2026-10-13T09:24:47.592249Z","times_seen":2,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"claudeess.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"claudeess.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claudeess.com/AnthropicSans_Roman_Web-s.p.050e7498.woff2","fqdn":"claudeess.com","domain":"claudeess.com","tld":"com"},"ip":{"addr":"158.94.209.113","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claudeess.com/","date":"2026-10-13T09:24:14.945Z","timestamp":1791883454945,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claudeess.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Oct 2026 16:52:31 GMT","end":"Sun, 10 Jan 2027 16:52:30 GMT"},"fingerprint":{"sha1":"5C:DC:0D:38:61:53:5F:95:0C:80:2F:99:BC:31:9E:BC:3F:35:37:E9","sha256":"DF:1F:91:68:E4:CD:E2:F9:15:19:2B:98:3F:48:7D:53:E5:81:EB:D9:FC:52:D8:AA:DF:8F:61:CF:14:8C:49:F2"}}},"request":{"raw":"GET /AnthropicSans_Roman_Web-s.p.050e7498.woff2 HTTP/1.1\r\nHost: claudeess.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claudeess.com/5bca218e6052de8f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 13 Oct 2026 09:24:14 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 118340\r\nlast-modified: Mon, 12 Oct 2026 18:49:18 GMT\r\netag: \"6acd2bae-1ce44\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":118340,"size_decoded":118593,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 118340, version 1.0","md5":"c3fa6192c00bcfaba60d8cd3be70d146","sha1":"8a94768002abdba0ef5d3cabc2c58cf0d8edd8a3","sha256":"1b75c8ee81a05fa77331366e9602b82072bb5223593c928a6488dfe6fd023f1b","sha512":"0c48676e275b3d0820c2a9ff1d5fd9d762ab4b435c00835fdb589413af3b9c280fc62d4dbcb67cff515ca5b34e12e3f5d727269246ccddf209a94e6afd6940b0","ssdeep":"3072:IgxOregGfz3N5L8GYp60gvGPS39tblnttD3HH8N:Gkz95L8GI6BGKt1RPi","tlshash":"d1c312744cd597b081b6ad3b324e92e14233af0eabaced12032a5076f94c04b2f771d6","first_seen":"2026-03-27T01:58:20.238256Z","last_seen":"2026-10-13T09:24:47.593622Z","times_seen":83,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"claudeess.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"claudeess.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claudeess.com/AnthropicMono_Roman_Web-s.p.80d4607c.woff2","fqdn":"claudeess.com","domain":"claudeess.com","tld":"com"},"ip":{"addr":"158.94.209.113","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claudeess.com/","date":"2026-10-13T09:24:14.981Z","timestamp":1791883454981,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claudeess.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Oct 2026 16:52:31 GMT","end":"Sun, 10 Jan 2027 16:52:30 GMT"},"fingerprint":{"sha1":"5C:DC:0D:38:61:53:5F:95:0C:80:2F:99:BC:31:9E:BC:3F:35:37:E9","sha256":"DF:1F:91:68:E4:CD:E2:F9:15:19:2B:98:3F:48:7D:53:E5:81:EB:D9:FC:52:D8:AA:DF:8F:61:CF:14:8C:49:F2"}}},"request":{"raw":"GET /AnthropicMono_Roman_Web-s.p.80d4607c.woff2 HTTP/1.1\r\nHost: claudeess.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claudeess.com/5bca218e6052de8f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 13 Oct 2026 09:24:15 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 66056\r\nlast-modified: Mon, 12 Oct 2026 18:49:18 GMT\r\netag: \"6acd2bae-10208\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":66056,"size_decoded":66308,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 66056, version 1.0","md5":"2a2e6eb0879b5e5be2654294db10ec81","sha1":"6b8aa1fc78aa9983dff8a02ad869f5ca21d4fbdd","sha256":"49b8b95c950b0bee7ecdf68cda9dd6908e980283c50dc570c401de1e683a22e5","sha512":"60dce3d2bd947304ddf05555469573042fec3669a7116d3d071a2fab00c274f87ed6edf9ff954568acedfaf82863af925b797740686ddacd9a1f6e5232ed5f12","ssdeep":"1536:kUPiIcFWbOCtj36LI4bOUz3AoCU1ENAvh1rFGZGlJ:kgiIccasb6siioCUNvh1rks","tlshash":"245302247a9f11cd81eade76ecd055dc6cacc5eb0c452c80ec25b2f9197676bfc4209a","first_seen":"2026-03-27T01:58:20.304328Z","last_seen":"2026-10-13T09:24:47.595079Z","times_seen":39,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"claudeess.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"claudeess.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claudeess.com/da8664c9359de9a0.css","fqdn":"claudeess.com","domain":"claudeess.com","tld":"com"},"ip":{"addr":"158.94.209.113","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claudeess.com/","date":"2026-10-13T09:24:14.173Z","timestamp":1791883454173,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claudeess.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Oct 2026 16:52:31 GMT","end":"Sun, 10 Jan 2027 16:52:30 GMT"},"fingerprint":{"sha1":"5C:DC:0D:38:61:53:5F:95:0C:80:2F:99:BC:31:9E:BC:3F:35:37:E9","sha256":"DF:1F:91:68:E4:CD:E2:F9:15:19:2B:98:3F:48:7D:53:E5:81:EB:D9:FC:52:D8:AA:DF:8F:61:CF:14:8C:49:F2"}}},"request":{"raw":"GET /da8664c9359de9a0.css HTTP/1.1\r\nHost: claudeess.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claudeess.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 13 Oct 2026 09:24:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Oct 2026 18:49:18 GMT\r\netag: W/\"6acd2bae-1ca18\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":117272,"size_decoded":13693,"mime_type":"text/css","magic":"ASCII text, with very long lines (13627)","md5":"fa14375112f564088ab0e30becb54a5f","sha1":"c7bb3e57f230e469b65283094f5c89852dda25ed","sha256":"732c5ab30edebc0e51d5bb74c98a4509e1613f1b450135f5daebd10d5d9c8f32","sha512":"5d06bc5068c64984530a301222a552eda59e75c73664767f801804bab8adb1085e9e2e01fdeb36470c8807049c2ba60edd7e174821b317c80368e2d6cc6eec36","ssdeep":"768:HFBEHLLsX5Q18FQKdt5sbFjc1eWVWRz1Wnrk/cIttaVY06s8u3uXtzq3inlQGhSF:8HQYbILYhZt8+0JtsRhSF","tlshash":"14b3eb56b5f0533f882e7126f2a80948cfd078dbbac69fd4a61d5af001c29f126f5a47","first_seen":"2026-10-13T09:23:13.969914Z","last_seen":"2026-10-13T09:24:47.596018Z","times_seen":2,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"claudeess.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"claudeess.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claudeess.com/7d92f0a84272e102.css","fqdn":"claudeess.com","domain":"claudeess.com","tld":"com"},"ip":{"addr":"158.94.209.113","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claudeess.com/","date":"2026-10-13T09:24:14.180Z","timestamp":1791883454180,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claudeess.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Oct 2026 16:52:31 GMT","end":"Sun, 10 Jan 2027 16:52:30 GMT"},"fingerprint":{"sha1":"5C:DC:0D:38:61:53:5F:95:0C:80:2F:99:BC:31:9E:BC:3F:35:37:E9","sha256":"DF:1F:91:68:E4:CD:E2:F9:15:19:2B:98:3F:48:7D:53:E5:81:EB:D9:FC:52:D8:AA:DF:8F:61:CF:14:8C:49:F2"}}},"request":{"raw":"GET /7d92f0a84272e102.css HTTP/1.1\r\nHost: claudeess.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claudeess.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 13 Oct 2026 09:24:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Oct 2026 18:49:16 GMT\r\netag: W/\"6acd2bac-1d02e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":118830,"size_decoded":13223,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (16002)","md5":"4bd90aea3071f393a2854a8755d19ae0","sha1":"15cbe31c161749255e72d11e89919898576293ca","sha256":"d07f4b27ec42646e9c1b034f88e8e4014343f6003dae0c5d05a3902f788d383a","sha512":"3ffba377b9b02ccc42d1f7f060166e5a1e3454922c504922beafdfd9f82da352ce8d745b01e00ecb5309a8df0e31685e918c63c9c457dee0e903e9948dc65437","ssdeep":"768:mQppxmXslp0/AjbVEUrn1ef3Cs3dkbwXXW481iXrNCxKX759RUXTZ7FYXT9xGDao:mm6Xslp0/AX2UrnOzpCIvr4R+UA7U","tlshash":"a1c3fd42b2f4577f942e261bf2a40848cfe4b1dae68adfd4161d9ae004c6af137f5247","first_seen":"2026-10-13T09:23:13.981899Z","last_seen":"2026-10-13T09:24:47.598405Z","times_seen":2,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"claudeess.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"claudeess.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claudeess.com/204bb0973f0559c5.css","fqdn":"claudeess.com","domain":"claudeess.com","tld":"com"},"ip":{"addr":"158.94.209.113","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claudeess.com/","date":"2026-10-13T09:24:14.191Z","timestamp":1791883454191,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claudeess.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Oct 2026 16:52:31 GMT","end":"Sun, 10 Jan 2027 16:52:30 GMT"},"fingerprint":{"sha1":"5C:DC:0D:38:61:53:5F:95:0C:80:2F:99:BC:31:9E:BC:3F:35:37:E9","sha256":"DF:1F:91:68:E4:CD:E2:F9:15:19:2B:98:3F:48:7D:53:E5:81:EB:D9:FC:52:D8:AA:DF:8F:61:CF:14:8C:49:F2"}}},"request":{"raw":"GET /204bb0973f0559c5.css HTTP/1.1\r\nHost: claudeess.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claudeess.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 13 Oct 2026 09:24:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Oct 2026 18:49:18 GMT\r\netag: W/\"6acd2bae-1b4f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":6991,"size_decoded":1335,"mime_type":"text/css","magic":"ASCII text, with very long lines (6990)","md5":"96be7a899e686849254ff120976c50c1","sha1":"ef83c1410f68871e88bb8dfe3a99b6b4e0fc586a","sha256":"0a6a637e793bdfd7edd617423d52ffe8fd0e4a77646e9f3eaee819c077d147d9","sha512":"eaf9cfbe1154b8079b40a3992f9ada69c25179803242d75642f6879e667e74846ddf9a7d5a150a7d573ef7c9b4d8fa3acab4804e89ff57eedbbf506026d1fc2a","ssdeep":"24:UKLuVzo07+8coLuAhFk+fTedN7u0wzpdiBpcIDz4gSxwEwlHoB+XClg/UM8qrzrS:UKLSzVRK+U6gmwyahLWPHAgnxHMI5yDc","tlshash":"f6e1138d72f0837b5c6f58a2f19446988ee132c5d145ebc4b86cbaf101c4df9b7a6741","first_seen":"2026-10-13T09:23:14.011378Z","last_seen":"2026-10-13T09:24:47.600839Z","times_seen":2,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"claudeess.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"claudeess.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claudeess.com/c66465a02e9323a6.css","fqdn":"claudeess.com","domain":"claudeess.com","tld":"com"},"ip":{"addr":"158.94.209.113","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claudeess.com/","date":"2026-10-13T09:24:14.197Z","timestamp":1791883454197,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claudeess.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Oct 2026 16:52:31 GMT","end":"Sun, 10 Jan 2027 16:52:30 GMT"},"fingerprint":{"sha1":"5C:DC:0D:38:61:53:5F:95:0C:80:2F:99:BC:31:9E:BC:3F:35:37:E9","sha256":"DF:1F:91:68:E4:CD:E2:F9:15:19:2B:98:3F:48:7D:53:E5:81:EB:D9:FC:52:D8:AA:DF:8F:61:CF:14:8C:49:F2"}}},"request":{"raw":"GET /c66465a02e9323a6.css HTTP/1.1\r\nHost: claudeess.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claudeess.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 13 Oct 2026 09:24:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Oct 2026 18:49:18 GMT\r\netag: W/\"6acd2bae-1d7f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7551,"size_decoded":1676,"mime_type":"text/css","magic":"ASCII text, with very long lines (7550)","md5":"2deb72b7e47c2819d2114e733ef9ccfb","sha1":"daacd8cc2a5c49dcd14aa437d7b25859c689113f","sha256":"c8ea1f8bafac04433761b9e737ac6e427957b5a4bf450291e2bc97d6967f4503","sha512":"04da570a580a504fbc1e5782a3f55802899ec46d4266397a08652ce62d93227ba3c4ccc2b1ac2e8c7d977587f1456fc575c521fc9ea2b54f085cf80b9091e10e","ssdeep":"192:w5acLH+7oWuRvviIRMSRXBN63vXfHPkiTsoq3ws4igQ7xVLVeVRio7o+9R7V4f2L:3knYkuTNlveWbj/N","tlshash":"3ff14b46a0b6537f685e34b6fba41444ff9828ffa5928fd2d50c5ce850d69b123ea302","first_seen":"2026-10-13T09:23:13.974662Z","last_seen":"2026-10-13T09:24:47.602811Z","times_seen":2,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"claudeess.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"claudeess.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claudeess.com/7b12f906d696a816.css","fqdn":"claudeess.com","domain":"claudeess.com","tld":"com"},"ip":{"addr":"158.94.209.113","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claudeess.com/","date":"2026-10-13T09:24:14.204Z","timestamp":1791883454204,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claudeess.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Oct 2026 16:52:31 GMT","end":"Sun, 10 Jan 2027 16:52:30 GMT"},"fingerprint":{"sha1":"5C:DC:0D:38:61:53:5F:95:0C:80:2F:99:BC:31:9E:BC:3F:35:37:E9","sha256":"DF:1F:91:68:E4:CD:E2:F9:15:19:2B:98:3F:48:7D:53:E5:81:EB:D9:FC:52:D8:AA:DF:8F:61:CF:14:8C:49:F2"}}},"request":{"raw":"GET /7b12f906d696a816.css HTTP/1.1\r\nHost: claudeess.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claudeess.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 13 Oct 2026 09:24:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Oct 2026 18:49:16 GMT\r\netag: W/\"6acd2bac-143d4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":82900,"size_decoded":7599,"mime_type":"text/css","magic":"ASCII text, with very long lines (44134)","md5":"529dd7d3711d856b2ca8696b662f1594","sha1":"a97fe5aa5d993d2ab6e7f10bfc6a6a6ad89e6906","sha256":"22c23ef04e3e71daa5db542313974f3e2276d14c0ce45aa3a6412667e0f22687","sha512":"2d1cc6c3f9837b8e2d5495b5e1d54e6c6e5929c6380d03634345f53951bc99288f2da8c7b6cf948f4318024e1c23e946528de0b12455b8e4c06847968d682fbf","ssdeep":"768:phZR+I/vUGJG/fSWYa60QjNQMS4eSxhJ60faljkmPhPGK3:phZR+I/9RaNQZeSxhJ60faljlPhPR3","tlshash":"4d838ca9e9f4537f5c1f206bf26840188fc974dba644afcce62d94e044d2af162f4b49","first_seen":"2026-10-13T09:23:13.99675Z","last_seen":"2026-10-13T09:24:47.604099Z","times_seen":2,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"claudeess.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"claudeess.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claudeess.com/microsoft-store-en-us-light.svg","fqdn":"claudeess.com","domain":"claudeess.com","tld":"com"},"ip":{"addr":"158.94.209.113","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claudeess.com/","date":"2026-10-13T09:24:14.214Z","timestamp":1791883454214,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claudeess.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Oct 2026 16:52:31 GMT","end":"Sun, 10 Jan 2027 16:52:30 GMT"},"fingerprint":{"sha1":"5C:DC:0D:38:61:53:5F:95:0C:80:2F:99:BC:31:9E:BC:3F:35:37:E9","sha256":"DF:1F:91:68:E4:CD:E2:F9:15:19:2B:98:3F:48:7D:53:E5:81:EB:D9:FC:52:D8:AA:DF:8F:61:CF:14:8C:49:F2"}}},"request":{"raw":"GET /microsoft-store-en-us-light.svg HTTP/1.1\r\nHost: claudeess.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claudeess.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 13 Oct 2026 09:24:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 26557\r\nlast-modified: Mon, 12 Oct 2026 18:49:16 GMT\r\netag: \"6acd2bac-67bd\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":26557,"size_decoded":26811,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"814be6338f2b6a98e73e2182e13ac1a2","sha1":"a86d3f70bbc2ee6ba1d0d34dc089ec8c7868e184","sha256":"99a73f61a0dd72dbfffb1645abdbae142ebb8df4fc2aaf6901309944359cb8d2","sha512":"f130116f2f18b2d920f516afccb56498b0fdeaf14a659add80658956e4ed41c797affcca6cce320b9eaa6f4693eda788679f1321a5ca06111e4b5de58daa0b73","ssdeep":"384:o8in8c97jOwoyIAUbyTuCrTt1stzdcdMURb5p8iyZQO+Qv906PDVebNKviw0TxFE:ornPopEbKUR8BvvW6Phg0Kw0TAB","tlshash":"8dc2e8ef6761b6ecd101f3f4da0468783b4e65fab6508219cb6d2e53e12209dc95bcc2","first_seen":"2025-06-26T05:29:32.152685Z","last_seen":"2026-10-13T09:24:47.605191Z","times_seen":18,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"claudeess.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"claudeess.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claudeess.com/AnthropicSerif_Roman_Web-s.p.c28786b4.woff2","fqdn":"claudeess.com","domain":"claudeess.com","tld":"com"},"ip":{"addr":"158.94.209.113","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claudeess.com/","date":"2026-10-13T09:24:14.940Z","timestamp":1791883454940,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claudeess.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Oct 2026 16:52:31 GMT","end":"Sun, 10 Jan 2027 16:52:30 GMT"},"fingerprint":{"sha1":"5C:DC:0D:38:61:53:5F:95:0C:80:2F:99:BC:31:9E:BC:3F:35:37:E9","sha256":"DF:1F:91:68:E4:CD:E2:F9:15:19:2B:98:3F:48:7D:53:E5:81:EB:D9:FC:52:D8:AA:DF:8F:61:CF:14:8C:49:F2"}}},"request":{"raw":"GET /AnthropicSerif_Roman_Web-s.p.c28786b4.woff2 HTTP/1.1\r\nHost: claudeess.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claudeess.com/5bca218e6052de8f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 13 Oct 2026 09:24:14 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 175356\r\nlast-modified: Mon, 12 Oct 2026 18:49:18 GMT\r\netag: \"6acd2bae-2acfc\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":175356,"size_decoded":175609,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 175356, version 1.0","md5":"1ca11f68b43c5d09efbe5de98b02a085","sha1":"04960efa4b4ce297099a8118cbe1537093f3fb07","sha256":"e96fe97bb7ba2190a9a227d27380e0c79894408bfc6acea5a511774d93a16f69","sha512":"c745b0eef3ee4bf5fdfb815c94648adbbd11b881fb5121d9881503372bb9ed4d55d21f2784b23e92de93f51ba34835aa0feae0cdc2b8a00543345fd1e429fd08","ssdeep":"3072:dbC/rnc+mq1AFgHIUXrSD8h/xeEznN+XMkZm3twMdOoIWPBWrkXfSJWeU:tC/A+oyJX2D8hDzO1hwIWPBWrk6EH","tlshash":"9504230436e3d60f93a771ce76a4d6c2dd055cc3cfd3f58f0ae960ae82599ae3862854","first_seen":"2026-03-27T01:58:20.17801Z","last_seen":"2026-10-13T09:24:47.606915Z","times_seen":94,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"claudeess.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"claudeess.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claudeess.com/cf745c4b3f3ac840.css","fqdn":"claudeess.com","domain":"claudeess.com","tld":"com"},"ip":{"addr":"158.94.209.113","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claudeess.com/","date":"2026-10-13T09:24:14.187Z","timestamp":1791883454187,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claudeess.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Oct 2026 16:52:31 GMT","end":"Sun, 10 Jan 2027 16:52:30 GMT"},"fingerprint":{"sha1":"5C:DC:0D:38:61:53:5F:95:0C:80:2F:99:BC:31:9E:BC:3F:35:37:E9","sha256":"DF:1F:91:68:E4:CD:E2:F9:15:19:2B:98:3F:48:7D:53:E5:81:EB:D9:FC:52:D8:AA:DF:8F:61:CF:14:8C:49:F2"}}},"request":{"raw":"GET /cf745c4b3f3ac840.css HTTP/1.1\r\nHost: claudeess.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claudeess.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 13 Oct 2026 09:24:14 GMT\r\ncontent-type: text/css\r\ncontent-length: 341\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 12 Oct 2026 18:49:16 GMT\r\netag: \"2df-65da927a14300-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":735,"size_decoded":667,"mime_type":"text/css","magic":"ASCII text, with very long lines (734)","md5":"3076906c14aa3ad491938ed541f118db","sha1":"5c2a5086fc1230d700efc1acc459a377f5dd393e","sha256":"da581763f9e74abe30664be5c39d114aa9a365aa117ab8cb046455ad5197d44d","sha512":"a375ca0341dc7d45d46039d1a831721f408d93f68a4835fd0ceaa34c94e7907ec0b1168fe975bcdcda1fc6b3d525130381c3171613449eacc0531d7f36325b65","ssdeep":"","tlshash":"a1016d99a1f0932fd82f2416e25d450cce80b8c2aa4fafe9d32903d41dc35d202f764b","first_seen":"2026-10-13T09:23:14.00701Z","last_seen":"2026-10-13T09:24:47.60869Z","times_seen":2,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"claudeess.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"claudeess.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claudeess.com/4be8285ac2227a29.css","fqdn":"claudeess.com","domain":"claudeess.com","tld":"com"},"ip":{"addr":"158.94.209.113","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claudeess.com/","date":"2026-10-13T09:24:14.200Z","timestamp":1791883454200,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claudeess.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Oct 2026 16:52:31 GMT","end":"Sun, 10 Jan 2027 16:52:30 GMT"},"fingerprint":{"sha1":"5C:DC:0D:38:61:53:5F:95:0C:80:2F:99:BC:31:9E:BC:3F:35:37:E9","sha256":"DF:1F:91:68:E4:CD:E2:F9:15:19:2B:98:3F:48:7D:53:E5:81:EB:D9:FC:52:D8:AA:DF:8F:61:CF:14:8C:49:F2"}}},"request":{"raw":"GET /4be8285ac2227a29.css HTTP/1.1\r\nHost: claudeess.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claudeess.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 13 Oct 2026 09:24:14 GMT\r\ncontent-type: text/css\r\ncontent-length: 282\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 12 Oct 2026 18:49:16 GMT\r\netag: \"33d-65da927a14300-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":829,"size_decoded":608,"mime_type":"text/css","magic":"ASCII text, with very long lines (828)","md5":"39d9d32c1d1c06d2fd121ccd5f12e70c","sha1":"b0e75088f3c2bb53a50bb1ff44850ff92e495479","sha256":"92be15509c3cab3e22f9a1cf5083951b452b114a4fd158f10eb55f3725ebd700","sha512":"bfb081785db17d9b9b09e63d8d15eb40507179efcba7a08aaf44b17ebf235ef7f97f9af70275434c0e4004af912fbbcb3db29f49f0b04a8e27dcca9b6a5565c6","ssdeep":"","tlshash":"2701ce2ae2f4437f854a3102f3e1150acaec32c5e18a5ac3062dbde318825a651f3dd6","first_seen":"2026-10-13T09:23:13.97639Z","last_seen":"2026-10-13T09:24:47.615373Z","times_seen":2,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"claudeess.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"claudeess.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}