{"report_id":"91f8ade0-0915-4e7b-8bf2-14683a2d374b","version":6,"status":"done","tags":[],"date":"2025-08-17T01:54:21Z","url":{"schema":"http","addr":"claim-public.xyz/","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":0,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"final":{"url":{"schema":"https","addr":"claim-public.xyz/","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"title":"PublicAI - Web3 AI Data Infrastructure"},"submit":{"url":{"schema":"http","addr":"claim-public.xyz/","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":0,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-21T01:54:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"claim-public.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"eligibility-publicai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.web3modal.org","ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-11-18","domain_rank":433029,"first_seen":"2023-09-19T09:52:23Z","last_seen":"2025-08-16T12:48:38.108274Z","alert_count":0,"request_count":1,"received_data":360,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"eligibility-publicai.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-08-14","domain_rank":0,"first_seen":"2025-08-15T04:05:18.988049Z","last_seen":"2025-08-15T04:05:18.988049Z","alert_count":6,"request_count":6,"received_data":0,"sent_data":2542,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.ipwho.org","ip":{"addr":"69.62.76.167","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2025-05-08","domain_rank":0,"first_seen":"2025-07-11T11:18:46.569057Z","last_seen":"2025-08-13T13:06:08.210473Z","alert_count":0,"request_count":1,"received_data":405,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-08-13T15:14:14.224423Z","alert_count":0,"request_count":1,"received_data":10794,"sent_data":475,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"claim-public.xyz","ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"domain_registered":"2025-08-15","domain_rank":0,"first_seen":"2025-08-17T01:54:23.538221Z","last_seen":"2025-08-17T01:54:23.538221Z","alert_count":33,"request_count":33,"received_data":4337998,"sent_data":15337,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-08-13T15:26:13.000794Z","alert_count":0,"request_count":2,"received_data":1522683,"sent_data":890,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"claim-public.xyz/fpbundle.js","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c59909ad8d56060bf239a34a275da3d","sha1":"1164057a0631f6b5dd80387a1c3a9e332fb00bb4","sha256":"126a8b465ef8734b4d7a289781e0535cd283ccf24394e08c44f23ae300be3a5a","sha512":"39d33737c908bf2a1430f157990f931a0644471a0cf20de61721596e1330fe5867108db7e47d1869576710a72f886ef42e7492a2c0ed05fde2644f6d338e3eac","ssdeep":"768:v8UXI0Nc5VArhXDh1bnUsAq1++umYUT15+2gT/RcKrNcFV3BT/Vo:vN/NcnArV7f5+9cxT6","tlshash":"a413c7a873c67139a217b0719dcf4845b67d6d182289884dca2ec4a4b879d3dc77ecec","size":45503,"data":"","first_seen":"2025-07-11T11:18:53.943693Z","last_seen":"2026-08-10T20:36:38.759665Z","times_seen":753,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/modals.js","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecbc5043a1e25f2bd5bbd6e3c3be49f0","sha1":"d66eb695679871221c52958d94029c6358b7613d","sha256":"6d0c2c8d032982e9a86a1bed14f709911058b6b693abb5d46335a0106c12c411","sha512":"38b9aedf74859ade1e5445634b338f560c4d0520ab126de202ad98942bc0f34e740b93c7123a3bc53dcdded31944c174ad06bf1ca006e137cb4e06a949e86088","ssdeep":"768:ywjvL/eQ0ae2vBKRDpoKvTQv4n59+Y44U7kFlaoGHv5:ywz2n59J4inM5","tlshash":"943311071cbe31361daf0fa3b7cc1a1b4e2eb351e612aaee71bd1446438bd74c5a5618","size":52833,"data":"","first_seen":"2025-07-20T10:23:41.460008Z","last_seen":"2026-08-10T20:36:38.765424Z","times_seen":755,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/_next/static/chunks/47b97997-eda74525aac72fa6.js","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"f098845c0e88a8d76fac07216fcd7e1a","sha1":"6e0d2dc71face2913f0604e2eec07fa0c259441e","sha256":"941c9f80ec5bc77048248099cca4a881521a4619ecbd1f08fbc00c6f3e988e2d","sha512":"4f284ae1190b014eee7f04745971b7fc5fa91bea295a6c84dd0c58a7b83d966155695951c833d82ea6613dad1c64848dbff8fbb1257ff50fbbeab995b3549ff5","ssdeep":"3072:VtfjLiM+NFCC4YQbCCAaI/02UHCgwLRE4:Vtfj2ld4Y40fUHQRE4","tlshash":"d2f3f7e83d99e2116eb342a7109f2803737c262b240d4c60a615fd9db5b845bb17bfde","size":168412,"data":"","first_seen":"2025-08-15T04:05:28.459622Z","last_seen":"2025-08-17T01:54:27.221721Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/main.js","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4f13f968ea5550176390d15e1c928e7","sha1":"aab1ac2a0ec36f230439f380d71571ff76608747","sha256":"8612dd6321112827c0c5973a14631c73a5f3e3125293b8b2f1e591d42895b91f","sha512":"3adbfa15a052b5631f12dc0bf0fa063ffcf34f1316acb85d5c6383e7170f0123699473fcd4885bf24ed5bfb490ff8a886b208fec5daae0c2abc241a908f0bac2","ssdeep":"6144:YU/y71otlzO1JxXI3ICH+MSKDZ2kNw95x7F3N:YUa71/3N","tlshash":"c12443a802f7e8f6cf8f2769dc710ac9962a740b83752087e99bfcf435a467056e5134","size":211030,"data":"","first_seen":"2025-08-15T04:05:28.443755Z","last_seen":"2025-08-17T01:54:27.215242Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/_next/static/chunks/app/layout-56c293fdd8babe4e.js","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"35fced83f883d34f3a0f963078e762a6","sha1":"7f075b0db4fbd6ccf93b1af06a0e4f93d33338c7","sha256":"f8a5fe086b929dc509aa5de8c44803b0aa885a7089f9d9ac1a9ea31f99a485b8","sha512":"b4449ef74f5c7a089fe3a2f3a0d2d6e92d027ad03f34f493cde69990eaca44281ad889cd39be8dc343b36d4fc5d2e240deff0164c0d2a1d540665a34123de6cc","ssdeep":"384:uUQqMIFUI/HT5RlEe3VuDM37nCMycZomZeP:9QmHT13okCiIP","tlshash":"c1622a856384f5fec49b4ac9c57b950df30f65a9e92a8c54f1acec173183ad8b203b54","size":14936,"data":"","first_seen":"2025-08-15T04:05:28.441348Z","last_seen":"2025-08-17T01:54:27.219893Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/_next/static/chunks/380-47488b0cf851de96.js","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"d378a4069e965348086ce687e975e86e","sha1":"a3ae318dab799df09f789e0fbe4dd20956602b18","sha256":"f1e5143d298d5e0cfb0d7423e8285255112610d86eb7842e8c23f69ebf77cc5e","sha512":"83bb834210a3df4451d7bb010a578583ced7797dc4dd492cfb15e8e01c1dd1d1c0c42fae633aa5c5e1cf4322b0dc4e8bf1fb38c18f18e9a897a490ac8c0c638a","ssdeep":"1536:KDqgaav/aODdVCLA3zdHIxMvg8YI0oRiiiee8MWHOO62w6CeE5:MCADTfH8/5","tlshash":"c3b3f8da73517225d3cb9199c0af0b01b33b19d8245a402cb67da9cb297058d62fbf7e","size":111262,"data":"","first_seen":"2025-08-15T04:05:28.438044Z","last_seen":"2025-08-17T01:54:27.228825Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/_next/static/chunks/980-a82a2507edc16a3a.js","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"214f9648992673654c4a9a93422ab509","sha1":"6cacdc7f16ee17f988a055208672313d67596e00","sha256":"59d9517a6a935a55a2f1f407a6b1cf2f55ee34af522629d97334bcafcb8f08f1","sha512":"8903841f92844b8d297437dd295739f00f9566a80ac4932080b8018311849aee8b000a4b03c290990983004f85be0030dcf5041138db6a4e3e5600ae34fc963c","ssdeep":"384:O5QL+fRju9xlf0l9plhZ86SDYbB/xa9/yo+K4KygAL0gG6ATCnnSHU9lV:xLcSolL8bYbXa9q0yghaOulV","tlshash":"e1b2a5de31d2b162639b20b9803f500af37f59c1681e4920f17896d67c7966983b3fad","size":25482,"data":"","first_seen":"2025-08-15T04:05:28.480121Z","last_seen":"2025-08-17T01:54:27.232432Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/_next/static/chunks/907-40fba8ee6877e903.js","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"298c5c28c9ce6395bda598b54e3ce1c7","sha1":"a8bc1bbf05f30d2248f2ed57bfefa64c8feaf28f","sha256":"ce4c7350481117873cb7e9030cb63e63ff59c904c122c1a0165d924ec4b6ffb3","sha512":"f3103d5cabdbfd1049adee9e91380c5bf95664d22455cc4253cc807d7fafdf93c3c37fa523c4c0abf1df26686cc6c637f877602ab48bb1d938b6bf5dccb4ec81","ssdeep":"1536:FEUOa/oM+G6GZVs01bpUZyzSfEAXHsyZaZf6+CWzn3X4TUTGoHHEo4wdJ16RajD:CGZm01GZyAcyCMkGkpdJ16U","tlshash":"ea04c8b676d0f8d107a780d5843b400af3395c3a146f74a0a3e6cce975645dea1b3faa","size":174922,"data":"","first_seen":"2025-08-15T04:05:28.450244Z","last_seen":"2025-08-17T01:54:27.180257Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"Function","is_inline":false,"md5":"43087852429d09bba6b793b7eff51187","sha1":"28c906f0afed40e0e32485a794606774594875d7","sha256":"c8b0949c98e45765c4eb2f52ca81d0b7d6728e8f9dc2fe181cd0f9ea02bbae53","sha512":"47c01c89c785e7716453088a6e592bafc3a6175ac69871d7557d5e35405afe781170847a30931000c954c22a6d9783d1e8b8d76faa5813b1cfd59856afcd187f","ssdeep":"6144:JqHuzNKtlzOzJxXI3ICH+MSKfZ2kNw95xxx3Y:JqOzNl3Y","tlshash":"291466a802f7a8f6cfcf236ddc6142c9962a740b83752087e99bbcf435a467157e6134","size":207195,"data":"","first_seen":"2025-08-15T04:05:28.483598Z","last_seen":"2025-08-17T01:54:27.242684Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@5.7.2/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"71f8c498e792c6179d4e2840228f777a","sha1":"b651545587f6257345dc3de9ddaa444b10dedf3e","sha256":"a66293a6a2bb4dee061a68612be0be3c5c0ab7e4068ab8d98a4a357baf664c73","sha512":"14371563e83bbdce425c035bad34a0d4ae6a2f2ae20ac183602134d8b8b5b5711874d40fbcb3c7344fab4f63237a2f0dedf65b7b458b870dbb8f64ab191a5d32","ssdeep":"12288:TfamYTKkkAJs8P+H8Xb2F/nNuwEYtnob6qQr:TfjkhPaNnN9EYtwo","tlshash":"35f43b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","size":760171,"data":"","first_seen":"2023-03-13T00:48:53Z","last_seen":"2026-08-16T22:48:21.134989Z","times_seen":3811,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/_next/static/chunks/main-app-7130c44130204985.js","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"22c03e71bea62a6d0788a2e868b82bfb","sha1":"6c151008cee8b3138517e7fae516950762f584a8","sha256":"7bc90bd8674b3ec6589cc55abd5b40b9ffb9ea38a60343ffe84c3097addafa60","sha512":"a4cd7ed175ebb08fcceac5c55c2ae009eb36445f836f0b10d4906b1456b62b52c20054f847a4fdce2753b59831a28af40c7caf67bfc68a61d2838e33a0c930a9","ssdeep":"","tlshash":"79f0f49a4f0df52f5d26ad24fda7ace2284f4675302b4e606d00ed612c23b6cd260408","size":519,"data":"","first_seen":"2025-08-15T04:05:28.435256Z","last_seen":"2025-08-17T01:54:27.239403Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4f58df8ef556437633bb90cc31469c4","sha1":"c1c713bb5046a54cb79a8e7537b6d7fca624fd45","sha256":"2dcb2e50c883929aebb7a64a7a22cfe2260d856a3c36a6926c082da19c552b7b","sha512":"54c8a79f5897cd198db689700c24f950ad7fe19eed815f8bfa0e47428701d8c84a1fd8f677a6f1b2a4f1443f35f2dbd19e6f456ceeebfb1c59275bb356e1a5e9","ssdeep":"","tlshash":"bfc02b041427c47b421c6f4dc02243d4e4b020bcdc492480801d181800d0c313b40cd6","size":130,"data":"","first_seen":"2025-03-25T18:26:20.414558Z","last_seen":"2026-08-17T19:33:54.039056Z","times_seen":53284,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/bundle.js","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"29681f25e1e25a870bd6656b8d48646f","sha1":"7b8c8d1c3af639b6ec50c84660a9e9f0a3a2d3a3","sha256":"969be4f64afdeaca0568779c3b0f7291bc9a7185cc983a5104fbd90e4f901039","sha512":"69c94d52b83c5cfc9b4d86e042cf6b99ab9d00c1b9f417ed35f789a41b2d21a92606bef9e1a7a02e64622e31feecb9cdb451ed23f8fa7a69392a0575944867e9","ssdeep":"49152:LRIMXDbdUW4HlHZg+dY3yBgS6cUKZJNrl4G1SE0BuuJpxHiRo6r3XOWxYrowVpaz:Qg+wyBgSxUKZTRbUajO9U7","tlshash":"abc56d907395a46c03b352d458771101f339684aa40d80ecf7ecd9e7afb998a897bf39","size":2510372,"data":"","first_seen":"2025-07-20T10:23:41.470184Z","last_seen":"2026-08-10T20:36:38.774189Z","times_seen":721,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/_next/static/chunks/558-e031205682965b1f.js","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"b51ec2a4d5c0d44892c7e52cb217ad4f","sha1":"5c0613908e0eb5049c4ce32bda101040e5280a28","sha256":"a70d0f3341775f4bfafae1d2adef6169155648d1337fc3fd54ac8816c121baac","sha512":"14cc477e21a437e7bea9b0fb56abd145a43e6f81da921bfde1066fed3f3604ce0fc352d0d4f36e33c8cac3a08a714d7a0738d184fdb4d50316ebdfa1c199ce17","ssdeep":"384:K9Z88QP7YFnCUE+Ff8IiUlrnUJGB7rlUeBjFUOiWskkcaLGYAI9k2ieu6u6iOaOH:G7QslrVflLW6YMe","tlshash":"5cb2b7366a4704be2aef83d7e05ceb95d9395602d119464de3834f32a744bb8178bb0e","size":24807,"data":"","first_seen":"2025-08-15T04:05:28.425978Z","last_seen":"2025-08-17T01:54:27.237314Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/_next/static/chunks/774-c481a9b64d85d44e.js","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"e438d1369b3566bf19f61e4957979aea","sha1":"60cd20160ab94be8f3884292cddec132cfaa5cda","sha256":"808b602ab3f86e67e8c7c00e21e2fb15ace568097a03720747cba69a2f849579","sha512":"27457fdcc0f1b62e78ff9cc482f64c3c983af34109bfa27e1116ce31cd37cf72ad36e02e63269043c6e058f0122f506e2c8640b00d35987cf9555987fc3e2b5f","ssdeep":"192:iRFxYkz4zZ6IYm4azd2BS+wroAVmFZfijdQavdhbC4Bn9WdlTiU:CtzyTWaz6SnqLId7o418HT1","tlshash":"7e521ab33694fce6135bc0d5c83b000df3656d71623ab09473ea8cd9a6e4584f1a2bb6","size":13808,"data":"","first_seen":"2025-08-15T04:05:28.429242Z","last_seen":"2025-08-17T01:54:27.212578Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/main.js","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4f13f968ea5550176390d15e1c928e7","sha1":"aab1ac2a0ec36f230439f380d71571ff76608747","sha256":"8612dd6321112827c0c5973a14631c73a5f3e3125293b8b2f1e591d42895b91f","sha512":"3adbfa15a052b5631f12dc0bf0fa063ffcf34f1316acb85d5c6383e7170f0123699473fcd4885bf24ed5bfb490ff8a886b208fec5daae0c2abc241a908f0bac2","ssdeep":"6144:YU/y71otlzO1JxXI3ICH+MSKDZ2kNw95x7F3N:YUa71/3N","tlshash":"c12443a802f7e8f6cf8f2769dc710ac9962a740b83752087e99bfcf435a467056e5134","size":211030,"data":"","first_seen":"2025-08-15T04:05:28.443755Z","last_seen":"2025-08-17T01:54:27.215242Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"Function","is_inline":false,"md5":"43087852429d09bba6b793b7eff51187","sha1":"28c906f0afed40e0e32485a794606774594875d7","sha256":"c8b0949c98e45765c4eb2f52ca81d0b7d6728e8f9dc2fe181cd0f9ea02bbae53","sha512":"47c01c89c785e7716453088a6e592bafc3a6175ac69871d7557d5e35405afe781170847a30931000c954c22a6d9783d1e8b8d76faa5813b1cfd59856afcd187f","ssdeep":"6144:JqHuzNKtlzOzJxXI3ICH+MSKfZ2kNw95xxx3Y:JqOzNl3Y","tlshash":"291466a802f7a8f6cfcf236ddc6142c9962a740b83752087e99bbcf435a467157e6134","size":207195,"data":"","first_seen":"2025-08-15T04:05:28.483598Z","last_seen":"2025-08-17T01:54:27.242684Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@5.7.2/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"71f8c498e792c6179d4e2840228f777a","sha1":"b651545587f6257345dc3de9ddaa444b10dedf3e","sha256":"a66293a6a2bb4dee061a68612be0be3c5c0ab7e4068ab8d98a4a357baf664c73","sha512":"14371563e83bbdce425c035bad34a0d4ae6a2f2ae20ac183602134d8b8b5b5711874d40fbcb3c7344fab4f63237a2f0dedf65b7b458b870dbb8f64ab191a5d32","ssdeep":"12288:TfamYTKkkAJs8P+H8Xb2F/nNuwEYtnob6qQr:TfjkhPaNnN9EYtwo","tlshash":"35f43b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","size":760171,"data":"","first_seen":"2023-03-13T00:48:53Z","last_seen":"2026-08-16T22:48:21.134989Z","times_seen":3811,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/_next/static/chunks/970-90b60a59cbd27bc9.js","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"80b48d6bcac75ea069038b04cbddd499","sha1":"fc567ce383ef6269139b5699d65043e84b807936","sha256":"61680d82bd82d228d6fd6f28a20bfb56c25c23887effec374f26f8201a8eb15d","sha512":"b4998c87897137c27fedb38f9614ef0e7e897f6fc5bcc2bf284609b4b6b66aced5950e6b8e3c9eeb496a8105ef00c3510c6c314cd313f9b56d5cc9775684f8a5","ssdeep":"192:DDxR1VlTA36aoMzSs7XCgItBItRp392Q24IezZmKuwF0cjUEA1EY6:3x3AKuZRwm38pbydAaY6","tlshash":"f002e7f276c5fcb1929a8894043793067b443f3a141e3844f7be9cea6374d879491f8a","size":8377,"data":"","first_seen":"2025-08-15T04:05:28.474521Z","last_seen":"2025-08-17T01:54:27.204037Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/_next/static/chunks/321-b4520a78ae6e6a18.js","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a701965a282eaf3611e36452b16597b","sha1":"fbcb40d96c4d41e436e6159af38bdc0a6833b62f","sha256":"3cecbdeff682a30ee5ffd3474eacd3037c320d96f093a6a32d06c9f414b04a98","sha512":"c6a137c12300f6fc41327a12829b5208bc93676e06a9af2b72db2222e074efb1c262605d65a6bde3630022d378e0ee70efec38468ff5d56e510bddb809b2f8cd","ssdeep":"192:j9x8AiLMS5O7HZLxbfLkAYO/C0dwMcGWCc2cWTj:5xVQM/ljKmwMcGWyr/","tlshash":"8802b7d671e1f8e2835b1050443b100bf37e1db5641e6098e7a99cebf9b046ca1a3f69","size":8480,"data":"","first_seen":"2025-08-15T04:05:28.466108Z","last_seen":"2025-08-17T01:54:27.230536Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/_next/static/chunks/app/page-7786454edd9cdf41.js","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"99019a4ad2756c395465c8dbf2c7442e","sha1":"58703ee4765bb986849ceb93cfbc6f4df45707ba","sha256":"ca8daef506e18496f057f424debdc161bf0f58570b0976c25560d61482aae394","sha512":"51d99bcd7820b144726eb2bc546f11750f80e95da8354948b406d0b1976c99a3cb196ef64e2cd7bd1021ca29ea8c455632f014d5810dd80f2f39cf0f5499d472","ssdeep":"384:XsFMBtwP87cXMZ4/YIx4YL6HCQiYieX829UC0KXJAAQsRFSelF:FIn3xPL89JFjF","tlshash":"46e29576560abc4f937508e9f5aaed089c178427e05a3c24ff95fc0bd4ead48b2b9530","size":31835,"data":"","first_seen":"2025-08-15T04:05:28.46789Z","last_seen":"2025-08-17T01:54:27.240777Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"claim-public.xyz/_next/static/chunks/907-40fba8ee6877e903.js","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:57.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.claim-public.xyz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 15:58:44 GMT","end":"Thu, 13 Nov 2025 15:58:43 GMT"},"fingerprint":{"sha1":"77:9B:F6:5C:A6:9A:CB:9A:05:0C:6C:52:2A:09:D9:44:B0:2C:B0:7F","sha256":"F5:51:6A:77:37:8D:F2:A0:78:35:03:43:F4:64:4D:EC:56:49:48:BE:60:E4:1E:B0:9F:A9:DD:FA:A4:43:9F:40"}}},"request":{"raw":"GET /_next/static/chunks/907-40fba8ee6877e903.js HTTP/1.1\r\nHost: claim-public.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-public.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:53:57 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 174922\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 03:16:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":174922,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"298c5c28c9ce6395bda598b54e3ce1c7","sha1":"a8bc1bbf05f30d2248f2ed57bfefa64c8feaf28f","sha256":"ce4c7350481117873cb7e9030cb63e63ff59c904c122c1a0165d924ec4b6ffb3","sha512":"f3103d5cabdbfd1049adee9e91380c5bf95664d22455cc4253cc807d7fafdf93c3c37fa523c4c0abf1df26686cc6c637f877602ab48bb1d938b6bf5dccb4ec81","ssdeep":"1536:FEUOa/oM+G6GZVs01bpUZyzSfEAXHsyZaZf6+CWzn3X4TUTGoHHEo4wdJ16RajD:CGZm01GZyAcyCMkGkpdJ16U","tlshash":"ea04c8b676d0f8d107a780d5843b400af3395c3a146f74a0a3e6cce975645dea1b3faa","first_seen":"2025-08-15T04:05:28.450244Z","last_seen":"2025-08-17T01:54:27.180257Z","times_seen":2,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":55,"dns":0,"connect":0,"send":0,"wait":18,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"claim-public.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/fpbundle.js","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:58.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.claim-public.xyz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 15:58:44 GMT","end":"Thu, 13 Nov 2025 15:58:43 GMT"},"fingerprint":{"sha1":"77:9B:F6:5C:A6:9A:CB:9A:05:0C:6C:52:2A:09:D9:44:B0:2C:B0:7F","sha256":"F5:51:6A:77:37:8D:F2:A0:78:35:03:43:F4:64:4D:EC:56:49:48:BE:60:E4:1E:B0:9F:A9:DD:FA:A4:43:9F:40"}}},"request":{"raw":"GET /fpbundle.js HTTP/1.1\r\nHost: claim-public.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-public.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:53:58 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 45503\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:47:38 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45503,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44961), with CRLF line terminators","md5":"1c59909ad8d56060bf239a34a275da3d","sha1":"1164057a0631f6b5dd80387a1c3a9e332fb00bb4","sha256":"126a8b465ef8734b4d7a289781e0535cd283ccf24394e08c44f23ae300be3a5a","sha512":"39d33737c908bf2a1430f157990f931a0644471a0cf20de61721596e1330fe5867108db7e47d1869576710a72f886ef42e7492a2c0ed05fde2644f6d338e3eac","ssdeep":"768:v8UXI0Nc5VArhXDh1bnUsAq1++umYUT15+2gT/RcKrNcFV3BT/Vo:vN/NcnArV7f5+9cxT6","tlshash":"a413c7a873c67139a217b0719dcf4845b67d6d182289884dca2ec4a4b879d3dc77ecec","first_seen":"2025-07-11T11:18:53.943693Z","last_seen":"2026-08-10T20:36:38.759665Z","times_seen":753,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"claim-public.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/_next/static/media/c7264a3a2106b0d0.p.woff2","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:57.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.claim-public.xyz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 15:58:44 GMT","end":"Thu, 13 Nov 2025 15:58:43 GMT"},"fingerprint":{"sha1":"77:9B:F6:5C:A6:9A:CB:9A:05:0C:6C:52:2A:09:D9:44:B0:2C:B0:7F","sha256":"F5:51:6A:77:37:8D:F2:A0:78:35:03:43:F4:64:4D:EC:56:49:48:BE:60:E4:1E:B0:9F:A9:DD:FA:A4:43:9F:40"}}},"request":{"raw":"GET /_next/static/media/c7264a3a2106b0d0.p.woff2 HTTP/1.1\r\nHost: claim-public.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-public.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:53:57 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 11796\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 03:16:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11796,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11796, version 1.0","md5":"cc886b76220a6d02b97b5697ea281ea8","sha1":"ddc936c2d74b9e09c456a9ec23ef92a282b48642","sha256":"387a3f4f928ea82f084a49c4f1618954d640c5155622bc88962e30732d97dfd1","sha512":"6211021ce6ca92d2aec92b2c719a02d9add97164de006bcc425129ace26e3db352aed4955f6745fcf3be1cd9c14b7084e42a05350df14f928ad11ebe1e7edd96","ssdeep":"192:RMxFOpvz9KDPVdLE33khyIWgaPHuOu/BF8hSjc2MGcl5Cu6RpX:Zvz9KzLo8yvgaPHWvjLMVlguGX","tlshash":"c332d03cef3c8f59df91597a72306f4a21f3328cb0782d2524ac81b2f861550849da7c","first_seen":"2025-08-15T04:05:28.455685Z","last_seen":"2026-08-16T21:47:34.514694Z","times_seen":22,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":34,"dns":1,"connect":19,"send":0,"wait":33,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"claim-public.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/_next/static/chunks/webpack-0aee41f58d0b76cc.js","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:57.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.claim-public.xyz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 15:58:44 GMT","end":"Thu, 13 Nov 2025 15:58:43 GMT"},"fingerprint":{"sha1":"77:9B:F6:5C:A6:9A:CB:9A:05:0C:6C:52:2A:09:D9:44:B0:2C:B0:7F","sha256":"F5:51:6A:77:37:8D:F2:A0:78:35:03:43:F4:64:4D:EC:56:49:48:BE:60:E4:1E:B0:9F:A9:DD:FA:A4:43:9F:40"}}},"request":{"raw":"GET /_next/static/chunks/webpack-0aee41f58d0b76cc.js HTTP/1.1\r\nHost: claim-public.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-public.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:53:57 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 3434\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 03:16:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3434,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3434), with no line terminators","md5":"082be2e57958b6eeb2bc840e7bf1dd8b","sha1":"a9371f6612760702eff6187ca9b3a95cd24e9428","sha256":"e61e08c9dbe432f59bc5ecd6ea8f702c0622bf6da691de03f241b2b1b9cb934a","sha512":"f1270de2f2c00ff503ae1491bda88a956b2b9a9e18b341ae7ac5ba0653f53293a9d8a7cfea74f3ff0d6314e1c58ffe1c217febdf9523c4d0a870099c9d6e7166","ssdeep":"","tlshash":"8b61b5a93525fab556f109c5887fc142f619203b052afca0e717dcb9b464ae20562ff3","first_seen":"2025-08-15T04:05:28.458089Z","last_seen":"2025-08-17T01:54:27.192755Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"claim-public.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@5.7.2/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:58.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/ethers@5.7.2/dist/ethers.umd.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-public.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 17 Aug 2025 01:53:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 155070\r\ncf-ray: 97058a7329d156aa-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.7.2\r\nx-jsd-version-type: version\r\netag: W/\"b996b-tlFUVYf2JXNF3D3p3apESxDe3z4\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-eddf8230173-FRA, cache-lga21927-LGA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 3691021\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=PnNM9zlxX%2F%2BSJpNHvp5pu13n3IVz5O%2FmEMTevyblTf7Xk5JMVwXo%2FHMwBd6Ig9gSx3jp%2FmDqLjoNTMglU17ikHe58ZLZtNw%2BL2SBcaF8WCSDhrjkFbato57cPr0Z23Cgbm4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":760171,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"71f8c498e792c6179d4e2840228f777a","sha1":"b651545587f6257345dc3de9ddaa444b10dedf3e","sha256":"a66293a6a2bb4dee061a68612be0be3c5c0ab7e4068ab8d98a4a357baf664c73","sha512":"14371563e83bbdce425c035bad34a0d4ae6a2f2ae20ac183602134d8b8b5b5711874d40fbcb3c7344fab4f63237a2f0dedf65b7b458b870dbb8f64ab191a5d32","ssdeep":"12288:TfamYTKkkAJs8P+H8Xb2F/nNuwEYtnob6qQr:TfjkhPaNnN9EYtwo","tlshash":"35f43b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-13T00:48:53Z","last_seen":"2026-08-16T22:48:21.134989Z","times_seen":3811,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/bundle.js","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:58.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.claim-public.xyz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 15:58:44 GMT","end":"Thu, 13 Nov 2025 15:58:43 GMT"},"fingerprint":{"sha1":"77:9B:F6:5C:A6:9A:CB:9A:05:0C:6C:52:2A:09:D9:44:B0:2C:B0:7F","sha256":"F5:51:6A:77:37:8D:F2:A0:78:35:03:43:F4:64:4D:EC:56:49:48:BE:60:E4:1E:B0:9F:A9:DD:FA:A4:43:9F:40"}}},"request":{"raw":"GET /bundle.js HTTP/1.1\r\nHost: claim-public.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-public.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:53:58 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 2510372\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:47:42 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2510372,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11784), with CRLF line terminators","md5":"a579f43be016af96b1d14b0be3ab2239","sha1":"eb0403b0e34d6943a3242206f9845843fab6d225","sha256":"9b2c009690d8d43f3a351bc36362316b6474ce1fc03c24fdd1cf2ce2da5b2509","sha512":"64befe664a2fbf04844b475a8b918dd5feed48a9c77110963a9f589be8e19e04d3a98233a44ae343b1efe20fafe18770dc18dc10e39402e822bf37c63d081619","ssdeep":"24576:LREHMe8DbdUW4HlHZg+dY3yBgS6cUKZd3NlNUQ4G1SE0Byz5o:LRIMXDbdUW4HlHZg+dY3yBgS6cUKZJNW","tlshash":"60254c9072a6f07603a755d864761101f2385854700d90ecfafc9debbfa988a867ff39","first_seen":"2025-07-26T22:48:52.272458Z","last_seen":"2026-08-10T20:36:38.763214Z","times_seen":683,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":182,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"claim-public.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/modals.js","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:58.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.claim-public.xyz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 15:58:44 GMT","end":"Thu, 13 Nov 2025 15:58:43 GMT"},"fingerprint":{"sha1":"77:9B:F6:5C:A6:9A:CB:9A:05:0C:6C:52:2A:09:D9:44:B0:2C:B0:7F","sha256":"F5:51:6A:77:37:8D:F2:A0:78:35:03:43:F4:64:4D:EC:56:49:48:BE:60:E4:1E:B0:9F:A9:DD:FA:A4:43:9F:40"}}},"request":{"raw":"GET /modals.js HTTP/1.1\r\nHost: claim-public.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-public.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:53:58 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 52833\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:47:38 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52833,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (52831), with no line terminators","md5":"ecbc5043a1e25f2bd5bbd6e3c3be49f0","sha1":"d66eb695679871221c52958d94029c6358b7613d","sha256":"6d0c2c8d032982e9a86a1bed14f709911058b6b693abb5d46335a0106c12c411","sha512":"38b9aedf74859ade1e5445634b338f560c4d0520ab126de202ad98942bc0f34e740b93c7123a3bc53dcdded31944c174ad06bf1ca006e137cb4e06a949e86088","ssdeep":"768:ywjvL/eQ0ae2vBKRDpoKvTQv4n59+Y44U7kFlaoGHv5:ywz2n59J4inM5","tlshash":"943311071cbe31361daf0fa3b7cc1a1b4e2eb351e612aaee71bd1446438bd74c5a5618","first_seen":"2025-07-20T10:23:41.460008Z","last_seen":"2026-08-10T20:36:38.765424Z","times_seen":755,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"claim-public.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getAnalyticsConfig?st=appkit\u0026sv=html-wagmi-undefined","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:59.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Jun 2025 14:01:31 GMT","end":"Sat, 20 Sep 2025 15:01:06 GMT"},"fingerprint":{"sha1":"A0:AE:07:7F:A9:F8:E8:80:20:DA:1D:62:48:AE:E7:DE:11:42:9A:DE","sha256":"77:4C:DE:42:9E:81:C3:77:31:75:E0:A8:59:25:F0:DA:02:A6:89:85:33:F5:EE:29:84:60:BF:0C:26:37:FC:EE"}}},"request":{"raw":"GET /getAnalyticsConfig?st=appkit\u0026sv=html-wagmi-undefined HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-public.xyz/\r\nOrigin: https://claim-public.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sun, 17 Aug 2025 01:53:59 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 9\r\ncf-ray: 97058a78c9b956b7-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300, s-maxage=300\r\ncf-placement: local-OSL\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"722969577a96ca3953e84e3d949dee81","sha1":"3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5","sha256":"78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3","sha512":"54b2b4596cd1769e46a12a0ca6ede70468985cf8771c2b11e75b3f52567a64418bc24c067d96d52037e0e135e7a7ff828ad0241d55b827506e1c67de1caee8bc","ssdeep":"","tlshash":"26500000000c000c33c3030000000f000003030000030000cf000003000000c00c000c","first_seen":"2023-04-05T07:39:32Z","last_seen":"2026-08-17T20:16:09.678497Z","times_seen":32483,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":56,"dns":34,"connect":1,"send":0,"wait":14,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-17T01:53:57.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.claim-public.xyz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 15:58:44 GMT","end":"Thu, 13 Nov 2025 15:58:43 GMT"},"fingerprint":{"sha1":"77:9B:F6:5C:A6:9A:CB:9A:05:0C:6C:52:2A:09:D9:44:B0:2C:B0:7F","sha256":"F5:51:6A:77:37:8D:F2:A0:78:35:03:43:F4:64:4D:EC:56:49:48:BE:60:E4:1E:B0:9F:A9:DD:FA:A4:43:9F:40"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claim-public.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:53:57 GMT\r\nContent-Type: text/html\r\nContent-Length: 134502\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 03:16:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":134502,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1193)","md5":"c005dbae928cb647f134cec8752d7e2d","sha1":"442daa8a033c7d1954f8dcf80a73ccec0912d04e","sha256":"0665c6b6abd9ea454e74c21bdd66b1dc47d56589aaf31322de01f49e92ced275","sha512":"cf61ba7be95e88324eeb51d942794817798e42e49c17b176b3570d25087a710660a7318002e3f5620dedbd28c0ef9db136408d7d5831bf83fd62ad79dff79e2b","ssdeep":"1536:ANxW+hbIJQ/UBFZzFKLpV3B9iRP2WjR6ykctecxuRhO3RK2DKJuOfhsuc9Zq9Cx8:ANxEam9G/f","tlshash":"ebd31990f6a18d7b766341ee36e1edc895115547c30ba549b3ec02a1afd98f39e330b8","first_seen":"2025-08-15T04:05:28.464219Z","last_seen":"2025-08-17T01:54:27.200245Z","times_seen":2,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":126,"dns":84,"connect":17,"send":0,"wait":35,"receive":38,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"claim-public.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/_next/static/chunks/970-90b60a59cbd27bc9.js","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:57.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.claim-public.xyz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 15:58:44 GMT","end":"Thu, 13 Nov 2025 15:58:43 GMT"},"fingerprint":{"sha1":"77:9B:F6:5C:A6:9A:CB:9A:05:0C:6C:52:2A:09:D9:44:B0:2C:B0:7F","sha256":"F5:51:6A:77:37:8D:F2:A0:78:35:03:43:F4:64:4D:EC:56:49:48:BE:60:E4:1E:B0:9F:A9:DD:FA:A4:43:9F:40"}}},"request":{"raw":"GET /_next/static/chunks/970-90b60a59cbd27bc9.js HTTP/1.1\r\nHost: claim-public.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-public.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:53:57 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 8377\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 03:16:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8377,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8377), with no line terminators","md5":"80b48d6bcac75ea069038b04cbddd499","sha1":"fc567ce383ef6269139b5699d65043e84b807936","sha256":"61680d82bd82d228d6fd6f28a20bfb56c25c23887effec374f26f8201a8eb15d","sha512":"b4998c87897137c27fedb38f9614ef0e7e897f6fc5bcc2bf284609b4b6b66aced5950e6b8e3c9eeb496a8105ef00c3510c6c314cd313f9b56d5cc9775684f8a5","ssdeep":"192:DDxR1VlTA36aoMzSs7XCgItBItRp392Q24IezZmKuwF0cjUEA1EY6:3x3AKuZRwm38pbydAaY6","tlshash":"f002e7f276c5fcb1929a8894043793067b443f3a141e3844f7be9cea6374d879491f8a","first_seen":"2025-08-15T04:05:28.474521Z","last_seen":"2025-08-17T01:54:27.204037Z","times_seen":2,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"claim-public.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/_next/static/css/649b0bc5c401abb7.css","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:57.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.claim-public.xyz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 15:58:44 GMT","end":"Thu, 13 Nov 2025 15:58:43 GMT"},"fingerprint":{"sha1":"77:9B:F6:5C:A6:9A:CB:9A:05:0C:6C:52:2A:09:D9:44:B0:2C:B0:7F","sha256":"F5:51:6A:77:37:8D:F2:A0:78:35:03:43:F4:64:4D:EC:56:49:48:BE:60:E4:1E:B0:9F:A9:DD:FA:A4:43:9F:40"}}},"request":{"raw":"GET /_next/static/css/649b0bc5c401abb7.css HTTP/1.1\r\nHost: claim-public.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-public.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:53:57 GMT\r\nContent-Type: text/css\r\nContent-Length: 95910\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 03:16:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":95910,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (54827)","md5":"9ea36f168dd8296f6f4dedc3489064dd","sha1":"6643dde13b7fd7af8201a39a258dd8bf7953b2cc","sha256":"5cb58c245992a07efc6828284c7a0b0753f4730a6d8942f0645d4bfd92bcbdec","sha512":"45b8240605cd52f5d9bc3585b71ee7a3e9e7eee5243e0599c31eccedb1a8317cfbbfe69cf19cc29ca1f9a7281a3dde0809cbd5ffb1751eebe83c229967d7d4eb","ssdeep":"768:lnsrlIh2YxMspO9kLGnLnafaiRjINqOBAWnbF:QYqs7GLafa1NJuIF","tlshash":"6193a564d325e6bebc37719897bcb40d32153266daf90bedea6171029fc27f10819638","first_seen":"2025-08-15T04:05:28.472953Z","last_seen":"2025-08-17T01:54:27.206797Z","times_seen":2,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"claim-public.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/www.googletagmanager.com/gtag/js3a5a?id=G-JMRE2DXFNN","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:57.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.claim-public.xyz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 15:58:44 GMT","end":"Thu, 13 Nov 2025 15:58:43 GMT"},"fingerprint":{"sha1":"77:9B:F6:5C:A6:9A:CB:9A:05:0C:6C:52:2A:09:D9:44:B0:2C:B0:7F","sha256":"F5:51:6A:77:37:8D:F2:A0:78:35:03:43:F4:64:4D:EC:56:49:48:BE:60:E4:1E:B0:9F:A9:DD:FA:A4:43:9F:40"}}},"request":{"raw":"GET /www.googletagmanager.com/gtag/js3a5a?id=G-JMRE2DXFNN HTTP/1.1\r\nHost: claim-public.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-public.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:53:57 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 315\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-17T18:01:52.968488Z","times_seen":146777,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":1,"connect":17,"send":0,"wait":17,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"claim-public.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@5.7.2/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:57.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/ethers@5.7.2/dist/ethers.umd.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-public.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 Aug 2025 01:53:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 155070\r\ncf-ray: 97058a6edc630b59-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.7.2\r\nx-jsd-version-type: version\r\netag: W/\"b996b-tlFUVYf2JXNF3D3p3apESxDe3z4\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-eddf8230173-FRA, cache-lga21927-LGA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 3691020\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DLFyDSCcsb5U8C%2B8w%2BD%2BV4XDkM2fddfRqYuw%2FTAHQ2L0V%2BL4065HzxeGw0rhKOnzPc1IB8j21qc%2F3DRkauEBRZGP942MRHxg0rX3KgaA%2Fz3f%2FSUhBGhQEPhIMmWa%2BF%2F6Bmo%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":760171,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"71f8c498e792c6179d4e2840228f777a","sha1":"b651545587f6257345dc3de9ddaa444b10dedf3e","sha256":"a66293a6a2bb4dee061a68612be0be3c5c0ab7e4068ab8d98a4a357baf664c73","sha512":"14371563e83bbdce425c035bad34a0d4ae6a2f2ae20ac183602134d8b8b5b5711874d40fbcb3c7344fab4f63237a2f0dedf65b7b458b870dbb8f64ab191a5d32","ssdeep":"12288:TfamYTKkkAJs8P+H8Xb2F/nNuwEYtnob6qQr:TfjkhPaNnN9EYtwo","tlshash":"35f43b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-13T00:48:53Z","last_seen":"2026-08-16T22:48:21.134989Z","times_seen":3811,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":11,"connect":1,"send":0,"wait":15,"receive":6,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eligibility-publicai.com/modals.js","fqdn":"eligibility-publicai.com","domain":"eligibility-publicai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:57.575Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /modals.js HTTP/1.1\r\nHost: eligibility-publicai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-public.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T19:43:02.922917Z","times_seen":17941321,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"eligibility-publicai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/_data_image/svg%2bxml%3bbase64%2cCiAgICA8c3ZnIHdpZHRoPSIxNjAiIGhlaWdodD0iOTAiIHZlcnNpb249IjEuMSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB4bWxuczp4bGluaz0iaHR0cDovL3d3dy53My5vcmcvMTk5OS94bGluayI%2bCiAgICAgIDx","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:58.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.claim-public.xyz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 15:58:44 GMT","end":"Thu, 13 Nov 2025 15:58:43 GMT"},"fingerprint":{"sha1":"77:9B:F6:5C:A6:9A:CB:9A:05:0C:6C:52:2A:09:D9:44:B0:2C:B0:7F","sha256":"F5:51:6A:77:37:8D:F2:A0:78:35:03:43:F4:64:4D:EC:56:49:48:BE:60:E4:1E:B0:9F:A9:DD:FA:A4:43:9F:40"}}},"request":{"raw":"GET /_data_image/svg%2bxml%3bbase64%2cCiAgICA8c3ZnIHdpZHRoPSIxNjAiIGhlaWdodD0iOTAiIHZlcnNpb249IjEuMSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB4bWxuczp4bGluaz0iaHR0cDovL3d3dy53My5vcmcvMTk5OS94bGluayI%2bCiAgICAgIDx HTTP/1.1\r\nHost: claim-public.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-public.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:53:58 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 315\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-17T18:01:52.968488Z","times_seen":146777,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"claim-public.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/_next/static/media/b682ab4e94fdbfaf.p.woff2","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:57.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.claim-public.xyz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 15:58:44 GMT","end":"Thu, 13 Nov 2025 15:58:43 GMT"},"fingerprint":{"sha1":"77:9B:F6:5C:A6:9A:CB:9A:05:0C:6C:52:2A:09:D9:44:B0:2C:B0:7F","sha256":"F5:51:6A:77:37:8D:F2:A0:78:35:03:43:F4:64:4D:EC:56:49:48:BE:60:E4:1E:B0:9F:A9:DD:FA:A4:43:9F:40"}}},"request":{"raw":"GET /_next/static/media/b682ab4e94fdbfaf.p.woff2 HTTP/1.1\r\nHost: claim-public.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-public.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:53:57 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 11668\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 03:16:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11668,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11668, version 1.0","md5":"e6a98074114ba6dc2229941ba34ca2eb","sha1":"527a3184ee06f649534faa6eb4c8e9d3a1926fd9","sha256":"97d89b4877e46d9a3a4fe17119f886111647fe53916995431eee5dbce5860474","sha512":"d1a51fb89dab627b0c15596f050ad98951c3108838b75cf24178bc435ee28980355649a68fc229d66c1e88caef3c94e1b3d863574b56d0a39ff032cb0f484531","ssdeep":"192:Q4i4JF7ac24sRhzD75gaT8zY2kbo5Nd/QHOol8YRJEoUT9GpFqwUAuye:Q4T77abzf5gaT8E3qdwb7EoFzqwwye","tlshash":"8732bfff547308e0d653a0b6b068b5e4884ede5f076371d0df257d6e88c52ed1a5c9a0","first_seen":"2025-07-04T08:50:43.365447Z","last_seen":"2026-08-16T21:47:34.568081Z","times_seen":47,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":35,"dns":1,"connect":20,"send":0,"wait":35,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"claim-public.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/_next/static/media/dcb7dbe335a6f155.p.woff2","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:57.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.claim-public.xyz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 15:58:44 GMT","end":"Thu, 13 Nov 2025 15:58:43 GMT"},"fingerprint":{"sha1":"77:9B:F6:5C:A6:9A:CB:9A:05:0C:6C:52:2A:09:D9:44:B0:2C:B0:7F","sha256":"F5:51:6A:77:37:8D:F2:A0:78:35:03:43:F4:64:4D:EC:56:49:48:BE:60:E4:1E:B0:9F:A9:DD:FA:A4:43:9F:40"}}},"request":{"raw":"GET /_next/static/media/dcb7dbe335a6f155.p.woff2 HTTP/1.1\r\nHost: claim-public.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-public.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:53:57 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 11824\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 03:16:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11824,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11824, version 1.0","md5":"e710c9e0e54fb1e180765689743aa025","sha1":"fa42e9afd327f25b68a2e71bc2851902d7b5e305","sha256":"9de7dbe9ec9a3ac0826a4d7994778f930f22b272b666814c32795ee0848b5e4d","sha512":"084fce6e129b32433c831c0b1883d7d50a79bc4483b4e46d20419d7413783f7d28661d74c7d722f36b46ad83250757cdc9bf2f327551d85c99905c91eb495bf2","ssdeep":"192:6AvWEV5N99SKRuikYjI/Vfkvn3XwEpIKIEqpqj5g16c9Cr9hVK5yH5QPsPbfWMmB:6AWEbVvU/av3NPIvEdEZ9Cr9lyYuMuhR","tlshash":"1132ae5ad5410d49c6ecebb7cbdb907afda4860292dca83ad89fd382152727d8d53c80","first_seen":"2025-07-04T08:50:43.366363Z","last_seen":"2026-08-16T21:47:34.58162Z","times_seen":74,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"claim-public.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/_next/static/chunks/774-c481a9b64d85d44e.js","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:57.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.claim-public.xyz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 15:58:44 GMT","end":"Thu, 13 Nov 2025 15:58:43 GMT"},"fingerprint":{"sha1":"77:9B:F6:5C:A6:9A:CB:9A:05:0C:6C:52:2A:09:D9:44:B0:2C:B0:7F","sha256":"F5:51:6A:77:37:8D:F2:A0:78:35:03:43:F4:64:4D:EC:56:49:48:BE:60:E4:1E:B0:9F:A9:DD:FA:A4:43:9F:40"}}},"request":{"raw":"GET /_next/static/chunks/774-c481a9b64d85d44e.js HTTP/1.1\r\nHost: claim-public.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-public.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:53:57 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 13808\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 03:16:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13808,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13808), with no line terminators","md5":"e438d1369b3566bf19f61e4957979aea","sha1":"60cd20160ab94be8f3884292cddec132cfaa5cda","sha256":"808b602ab3f86e67e8c7c00e21e2fb15ace568097a03720747cba69a2f849579","sha512":"27457fdcc0f1b62e78ff9cc482f64c3c983af34109bfa27e1116ce31cd37cf72ad36e02e63269043c6e058f0122f506e2c8640b00d35987cf9555987fc3e2b5f","ssdeep":"192:iRFxYkz4zZ6IYm4azd2BS+wroAVmFZfijdQavdhbC4Bn9WdlTiU:CtzyTWaz6SnqLId7o418HT1","tlshash":"7e521ab33694fce6135bc0d5c83b000df3656d71623ab09473ea8cd9a6e4584f1a2bb6","first_seen":"2025-08-15T04:05:28.429242Z","last_seen":"2025-08-17T01:54:27.212578Z","times_seen":2,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"claim-public.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/main.js","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:57.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.claim-public.xyz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 15:58:44 GMT","end":"Thu, 13 Nov 2025 15:58:43 GMT"},"fingerprint":{"sha1":"77:9B:F6:5C:A6:9A:CB:9A:05:0C:6C:52:2A:09:D9:44:B0:2C:B0:7F","sha256":"F5:51:6A:77:37:8D:F2:A0:78:35:03:43:F4:64:4D:EC:56:49:48:BE:60:E4:1E:B0:9F:A9:DD:FA:A4:43:9F:40"}}},"request":{"raw":"GET /main.js HTTP/1.1\r\nHost: claim-public.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-public.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:53:57 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 211030\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:47:44 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":211030,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c4f13f968ea5550176390d15e1c928e7","sha1":"aab1ac2a0ec36f230439f380d71571ff76608747","sha256":"8612dd6321112827c0c5973a14631c73a5f3e3125293b8b2f1e591d42895b91f","sha512":"3adbfa15a052b5631f12dc0bf0fa063ffcf34f1316acb85d5c6383e7170f0123699473fcd4885bf24ed5bfb490ff8a886b208fec5daae0c2abc241a908f0bac2","ssdeep":"6144:YU/y71otlzO1JxXI3ICH+MSKDZ2kNw95x7F3N:YUa71/3N","tlshash":"c12443a802f7e8f6cf8f2769dc710ac9962a740b83752087e99bfcf435a467056e5134","first_seen":"2025-08-15T04:05:28.443755Z","last_seen":"2025-08-17T01:54:27.215242Z","times_seen":2,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"claim-public.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ipwho.org/me","fqdn":"api.ipwho.org","domain":"ipwho.org","tld":"org"},"ip":{"addr":"69.62.76.167","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:59.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipwho.org","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 16:08:31 GMT","end":"Tue, 14 Oct 2025 16:08:30 GMT"},"fingerprint":{"sha1":"87:88:D2:F8:B6:23:06:38:98:C4:B0:E2:06:68:C4:E3:63:EA:AB:2B","sha256":"21:76:B6:9A:29:3A:7D:88:85:23:77:5F:33:A5:A8:D9:7F:63:79:69:AD:62:6A:CC:8F:63:72:1D:81:74:45:82"}}},"request":{"raw":"GET /me HTTP/1.1\r\nHost: api.ipwho.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-public.xyz/\r\nOrigin: https://claim-public.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sun, 17 Aug 2025 01:53:59 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-17T19:38:20.063331Z","times_seen":551659,"resource_available":true,"data":null}},"time_used":723,"timings":{"blocked":292,"dns":1,"connect":136,"send":0,"wait":139,"receive":0,"ssl":152},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:59.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.claim-public.xyz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 15:58:44 GMT","end":"Thu, 13 Nov 2025 15:58:43 GMT"},"fingerprint":{"sha1":"77:9B:F6:5C:A6:9A:CB:9A:05:0C:6C:52:2A:09:D9:44:B0:2C:B0:7F","sha256":"F5:51:6A:77:37:8D:F2:A0:78:35:03:43:F4:64:4D:EC:56:49:48:BE:60:E4:1E:B0:9F:A9:DD:FA:A4:43:9F:40"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: claim-public.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-public.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:53:59 GMT\r\nContent-Type: text/html\r\nContent-Length: 134502\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 03:16:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T19:43:02.922917Z","times_seen":17941321,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"claim-public.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/_next/static/media/0260ff06fcf37a93.p.woff2","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:57.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.claim-public.xyz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 15:58:44 GMT","end":"Thu, 13 Nov 2025 15:58:43 GMT"},"fingerprint":{"sha1":"77:9B:F6:5C:A6:9A:CB:9A:05:0C:6C:52:2A:09:D9:44:B0:2C:B0:7F","sha256":"F5:51:6A:77:37:8D:F2:A0:78:35:03:43:F4:64:4D:EC:56:49:48:BE:60:E4:1E:B0:9F:A9:DD:FA:A4:43:9F:40"}}},"request":{"raw":"GET /_next/static/media/0260ff06fcf37a93.p.woff2 HTTP/1.1\r\nHost: claim-public.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-public.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:53:57 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 11404\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 03:16:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11404,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11404, version 1.0","md5":"e1ef69901e5d8d28d5ecb57d36cef34d","sha1":"82fa340db3e8295ae0aa0e5fc8f1fef2abad5aac","sha256":"61434f7c5a21af559d8c52fcbc610f4439d8dbe7cfdd60c040b75776233fac2e","sha512":"d1c0c42ca615e2c1d39b8f41166918f2547c63b2b7de79630f10405d93f0d5d5a37107efc92497f999f4485896cb3445da11d42b8d11a58b2a4c8ec2518167a0","ssdeep":"192:GrxxV5wtfcrUAOANkmvqR9glM6AkMA7qpkDZoOpSpM7yWy3aEt:4XUt0rU/AN/vqcqCl8kqOUWyWyqEt","tlshash":"0a32cf13286e2f9cc942e9b3bf7644f4d201403dd62f9e9dd878fda1bf8a8460574156","first_seen":"2025-08-15T04:05:28.453129Z","last_seen":"2026-07-21T19:56:32.461653Z","times_seen":14,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"claim-public.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/_next/static/chunks/app/layout-56c293fdd8babe4e.js","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:57.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.claim-public.xyz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 15:58:44 GMT","end":"Thu, 13 Nov 2025 15:58:43 GMT"},"fingerprint":{"sha1":"77:9B:F6:5C:A6:9A:CB:9A:05:0C:6C:52:2A:09:D9:44:B0:2C:B0:7F","sha256":"F5:51:6A:77:37:8D:F2:A0:78:35:03:43:F4:64:4D:EC:56:49:48:BE:60:E4:1E:B0:9F:A9:DD:FA:A4:43:9F:40"}}},"request":{"raw":"GET /_next/static/chunks/app/layout-56c293fdd8babe4e.js HTTP/1.1\r\nHost: claim-public.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-public.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:53:57 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 14936\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 03:16:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14936,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (14936), with no line terminators","md5":"35fced83f883d34f3a0f963078e762a6","sha1":"7f075b0db4fbd6ccf93b1af06a0e4f93d33338c7","sha256":"f8a5fe086b929dc509aa5de8c44803b0aa885a7089f9d9ac1a9ea31f99a485b8","sha512":"b4449ef74f5c7a089fe3a2f3a0d2d6e92d027ad03f34f493cde69990eaca44281ad889cd39be8dc343b36d4fc5d2e240deff0164c0d2a1d540665a34123de6cc","ssdeep":"384:uUQqMIFUI/HT5RlEe3VuDM37nCMycZomZeP:9QmHT13okCiIP","tlshash":"c1622a856384f5fec49b4ac9c57b950df30f65a9e92a8c54f1acec173183ad8b203b54","first_seen":"2025-08-15T04:05:28.441348Z","last_seen":"2025-08-17T01:54:27.219893Z","times_seen":2,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"claim-public.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/_next/static/chunks/47b97997-eda74525aac72fa6.js","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:57.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.claim-public.xyz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 15:58:44 GMT","end":"Thu, 13 Nov 2025 15:58:43 GMT"},"fingerprint":{"sha1":"77:9B:F6:5C:A6:9A:CB:9A:05:0C:6C:52:2A:09:D9:44:B0:2C:B0:7F","sha256":"F5:51:6A:77:37:8D:F2:A0:78:35:03:43:F4:64:4D:EC:56:49:48:BE:60:E4:1E:B0:9F:A9:DD:FA:A4:43:9F:40"}}},"request":{"raw":"GET /_next/static/chunks/47b97997-eda74525aac72fa6.js HTTP/1.1\r\nHost: claim-public.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-public.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:53:57 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 168412\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 03:16:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":168412,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f098845c0e88a8d76fac07216fcd7e1a","sha1":"6e0d2dc71face2913f0604e2eec07fa0c259441e","sha256":"941c9f80ec5bc77048248099cca4a881521a4619ecbd1f08fbc00c6f3e988e2d","sha512":"4f284ae1190b014eee7f04745971b7fc5fa91bea295a6c84dd0c58a7b83d966155695951c833d82ea6613dad1c64848dbff8fbb1257ff50fbbeab995b3549ff5","ssdeep":"3072:VtfjLiM+NFCC4YQbCCAaI/02UHCgwLRE4:Vtfj2ld4Y40fUHQRE4","tlshash":"d2f3f7e83d99e2116eb342a7109f2803737c262b240d4c60a615fd9db5b845bb17bfde","first_seen":"2025-08-15T04:05:28.459622Z","last_seen":"2025-08-17T01:54:27.221721Z","times_seen":2,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":34,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"claim-public.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eligibility-publicai.com/bundle.js","fqdn":"eligibility-publicai.com","domain":"eligibility-publicai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:57.574Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /bundle.js HTTP/1.1\r\nHost: eligibility-publicai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-public.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T19:43:02.922917Z","times_seen":17941321,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"eligibility-publicai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eligibility-publicai.com/fpbundle.js","fqdn":"eligibility-publicai.com","domain":"eligibility-publicai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:57.577Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /fpbundle.js HTTP/1.1\r\nHost: eligibility-publicai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-public.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T19:43:02.922917Z","times_seen":17941321,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"eligibility-publicai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/_next/static/media/decorative-cone.36ebf3e1.svg","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:57.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.claim-public.xyz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 15:58:44 GMT","end":"Thu, 13 Nov 2025 15:58:43 GMT"},"fingerprint":{"sha1":"77:9B:F6:5C:A6:9A:CB:9A:05:0C:6C:52:2A:09:D9:44:B0:2C:B0:7F","sha256":"F5:51:6A:77:37:8D:F2:A0:78:35:03:43:F4:64:4D:EC:56:49:48:BE:60:E4:1E:B0:9F:A9:DD:FA:A4:43:9F:40"}}},"request":{"raw":"GET /_next/static/media/decorative-cone.36ebf3e1.svg HTTP/1.1\r\nHost: claim-public.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-public.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:53:57 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 286507\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 03:16:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":286507,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"50a5f5b543b4338a39b5c3e6206241ef","sha1":"048632ed414402d3f4eb4659236f19b723090ddc","sha256":"30e2f42ef42ca12bcf2ebe4e9dd9d99d60cb2e28a91e042cfbbf8ab5b2897e4d","sha512":"ce81bcbc72511687c7d9766ad5e8616e61bdb26e94c6428ff5a823da519172e515227038d3f60b28b023930539d13826a62dc91c1f7c6217f100d8f79da2863e","ssdeep":"1536:ZmFq1Ke8PuMuaA7cD49E6pP1UTNKQeRUSpjlWl96oeVgyGxj/GonOQa2BEQqqLAC:+z","tlshash":"b4544ac0237687f9b506bbfdc91204a53d1a34ff7a9162bcc696ae2064275e88d5ccd3","first_seen":"2025-08-15T04:05:28.469683Z","last_seen":"2025-08-17T01:54:27.223528Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"claim-public.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eligibility-publicai.com/modals.js","fqdn":"eligibility-publicai.com","domain":"eligibility-publicai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:58.197Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /modals.js HTTP/1.1\r\nHost: eligibility-publicai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-public.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T19:43:02.922917Z","times_seen":17941321,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"eligibility-publicai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/favicon.ico","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:58.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.claim-public.xyz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 15:58:44 GMT","end":"Thu, 13 Nov 2025 15:58:43 GMT"},"fingerprint":{"sha1":"77:9B:F6:5C:A6:9A:CB:9A:05:0C:6C:52:2A:09:D9:44:B0:2C:B0:7F","sha256":"F5:51:6A:77:37:8D:F2:A0:78:35:03:43:F4:64:4D:EC:56:49:48:BE:60:E4:1E:B0:9F:A9:DD:FA:A4:43:9F:40"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: claim-public.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-public.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:53:58 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 4286\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 03:16:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"b5b071cf5a67ad4913f7cd1d2bfc3eca","sha1":"6180b0b0db27d446b35bb8bba8fb0bfef785e505","sha256":"7d92c3e7cc832b6727d5193b2368d31bfb9df613cbb336e6c0aa5ecb7c32841b","sha512":"f8e8bf5245bcfdadc7815a95049cc7493e4ac89c0ce167ffc40951517e209e5936da4df6b0cad95a09c3f2969e750072be7228cc4dfa0d3515feb884c533aa4c","ssdeep":"24:subagzvyi93kYG8Cv85m/aCWaVpayPaL+ymE+ah056mwtB8Ude/ElhaXaW:3LX90d8CU636f/+1jQ9QElE","tlshash":"0191e0f22c2cfe27e56653f4562dc2f8e3124d4188da622420e6fc97bf3a1864517107","first_seen":"2025-08-15T04:05:28.462561Z","last_seen":"2025-08-17T01:54:27.225241Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"claim-public.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/_next/static/media/46fe284ea6b208dc.p.woff2","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:57.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.claim-public.xyz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 15:58:44 GMT","end":"Thu, 13 Nov 2025 15:58:43 GMT"},"fingerprint":{"sha1":"77:9B:F6:5C:A6:9A:CB:9A:05:0C:6C:52:2A:09:D9:44:B0:2C:B0:7F","sha256":"F5:51:6A:77:37:8D:F2:A0:78:35:03:43:F4:64:4D:EC:56:49:48:BE:60:E4:1E:B0:9F:A9:DD:FA:A4:43:9F:40"}}},"request":{"raw":"GET /_next/static/media/46fe284ea6b208dc.p.woff2 HTTP/1.1\r\nHost: claim-public.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-public.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:53:57 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 11596\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 03:16:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11596,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11596, version 1.0","md5":"2b4aea4ab6ac943a8906b37a8650c73c","sha1":"2f3ff8efc850d3be248839263b0669bd58c54ae7","sha256":"e06459429688b488b9429727a53168415fe27e691f4887ecdf96214663c85446","sha512":"0f21961976598502419544f7b0a85d9547c409a723734e976602175dbe6cd867c1761a2085db56a70d468a788d8b1f0b43f8c233e6d7370c39d4ecb05c600017","ssdeep":"192:YDP8E0YgxP8mOUQ0DmrBEPU6TYwuT4F2WAUIZh577ZB8SYnm8MoX1SDg4xb6WuD:c8ERgxEm3mK86L44F2WAU+Jk/1+gVD","tlshash":"9532c0cc7ad813baed38e1b2b67b72134a4ea41e58cb52b95084b9e137645620dd494c","first_seen":"2025-07-01T08:15:45.21756Z","last_seen":"2026-08-16T21:47:34.563673Z","times_seen":38,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":34,"dns":0,"connect":20,"send":0,"wait":35,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"claim-public.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/_next/static/media/62f8ef394edf20f4.p.woff2","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:57.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.claim-public.xyz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 15:58:44 GMT","end":"Thu, 13 Nov 2025 15:58:43 GMT"},"fingerprint":{"sha1":"77:9B:F6:5C:A6:9A:CB:9A:05:0C:6C:52:2A:09:D9:44:B0:2C:B0:7F","sha256":"F5:51:6A:77:37:8D:F2:A0:78:35:03:43:F4:64:4D:EC:56:49:48:BE:60:E4:1E:B0:9F:A9:DD:FA:A4:43:9F:40"}}},"request":{"raw":"GET /_next/static/media/62f8ef394edf20f4.p.woff2 HTTP/1.1\r\nHost: claim-public.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-public.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:53:57 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 11880\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 03:16:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11880,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11880, version 1.0","md5":"b937c4900198a4158840cc119f0e5db8","sha1":"1d9ebee2822c9124c224a41f0d5acbb60761c59b","sha256":"01f7eaf19d4ced48b7b0cb177a338298de95fa5034643fc62b64927c51d93f1d","sha512":"73f46b5a12e671f64e2dd4ed29ff7fe6647860f1d98a045d029c10b6e391dcf2d2e095164a2d0c10e46631eae2e4b0123924c8c1c6d246b5e06e3ebef2879aa6","ssdeep":"192:X/Ho3R8Il/M9oMK5wFDkqQoi9UksByKwbXrEy3z/uDSW9qBOBDDCjG4nLzEo6WP:PHhk0+MKPqi9dl73z/QFBfCj9nLzVz","tlshash":"1b32bf2f2090a18ee450db78efdac52dae53cda08f2375962c6502761fcde44960f646","first_seen":"2025-07-04T08:50:43.33765Z","last_seen":"2026-08-16T21:47:34.528557Z","times_seen":63,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":36,"dns":0,"connect":20,"send":0,"wait":35,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"claim-public.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/_next/static/chunks/380-47488b0cf851de96.js","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:57.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.claim-public.xyz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 15:58:44 GMT","end":"Thu, 13 Nov 2025 15:58:43 GMT"},"fingerprint":{"sha1":"77:9B:F6:5C:A6:9A:CB:9A:05:0C:6C:52:2A:09:D9:44:B0:2C:B0:7F","sha256":"F5:51:6A:77:37:8D:F2:A0:78:35:03:43:F4:64:4D:EC:56:49:48:BE:60:E4:1E:B0:9F:A9:DD:FA:A4:43:9F:40"}}},"request":{"raw":"GET /_next/static/chunks/380-47488b0cf851de96.js HTTP/1.1\r\nHost: claim-public.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-public.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:53:57 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 111262\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 03:16:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":111262,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d378a4069e965348086ce687e975e86e","sha1":"a3ae318dab799df09f789e0fbe4dd20956602b18","sha256":"f1e5143d298d5e0cfb0d7423e8285255112610d86eb7842e8c23f69ebf77cc5e","sha512":"83bb834210a3df4451d7bb010a578583ced7797dc4dd492cfb15e8e01c1dd1d1c0c42fae633aa5c5e1cf4322b0dc4e8bf1fb38c18f18e9a897a490ac8c0c638a","ssdeep":"1536:KDqgaav/aODdVCLA3zdHIxMvg8YI0oRiiiee8MWHOO62w6CeE5:MCADTfH8/5","tlshash":"c3b3f8da73517225d3cb9199c0af0b01b33b19d8245a402cb67da9cb297058d62fbf7e","first_seen":"2025-08-15T04:05:28.438044Z","last_seen":"2025-08-17T01:54:27.228825Z","times_seen":2,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":17,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"claim-public.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eligibility-publicai.com/bundle.js","fqdn":"eligibility-publicai.com","domain":"eligibility-publicai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:58.043Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /bundle.js HTTP/1.1\r\nHost: eligibility-publicai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-public.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T19:43:02.922917Z","times_seen":17941321,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"eligibility-publicai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/cdn.jsdelivr.net/gh/paulirish/lite-youtube-embed%40master/src/lite-yt-embed.css","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:57.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.claim-public.xyz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 15:58:44 GMT","end":"Thu, 13 Nov 2025 15:58:43 GMT"},"fingerprint":{"sha1":"77:9B:F6:5C:A6:9A:CB:9A:05:0C:6C:52:2A:09:D9:44:B0:2C:B0:7F","sha256":"F5:51:6A:77:37:8D:F2:A0:78:35:03:43:F4:64:4D:EC:56:49:48:BE:60:E4:1E:B0:9F:A9:DD:FA:A4:43:9F:40"}}},"request":{"raw":"GET /cdn.jsdelivr.net/gh/paulirish/lite-youtube-embed%40master/src/lite-yt-embed.css HTTP/1.1\r\nHost: claim-public.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-public.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:53:57 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 315\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-17T18:01:52.968488Z","times_seen":146777,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"claim-public.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/_next/static/chunks/321-b4520a78ae6e6a18.js","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:57.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.claim-public.xyz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 15:58:44 GMT","end":"Thu, 13 Nov 2025 15:58:43 GMT"},"fingerprint":{"sha1":"77:9B:F6:5C:A6:9A:CB:9A:05:0C:6C:52:2A:09:D9:44:B0:2C:B0:7F","sha256":"F5:51:6A:77:37:8D:F2:A0:78:35:03:43:F4:64:4D:EC:56:49:48:BE:60:E4:1E:B0:9F:A9:DD:FA:A4:43:9F:40"}}},"request":{"raw":"GET /_next/static/chunks/321-b4520a78ae6e6a18.js HTTP/1.1\r\nHost: claim-public.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-public.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:53:57 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 8480\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 03:16:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8480,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8480), with no line terminators","md5":"5a701965a282eaf3611e36452b16597b","sha1":"fbcb40d96c4d41e436e6159af38bdc0a6833b62f","sha256":"3cecbdeff682a30ee5ffd3474eacd3037c320d96f093a6a32d06c9f414b04a98","sha512":"c6a137c12300f6fc41327a12829b5208bc93676e06a9af2b72db2222e074efb1c262605d65a6bde3630022d378e0ee70efec38468ff5d56e510bddb809b2f8cd","ssdeep":"192:j9x8AiLMS5O7HZLxbfLkAYO/C0dwMcGWCc2cWTj:5xVQM/ljKmwMcGWyr/","tlshash":"8802b7d671e1f8e2835b1050443b100bf37e1db5641e6098e7a99cebf9b046ca1a3f69","first_seen":"2025-08-15T04:05:28.466108Z","last_seen":"2025-08-17T01:54:27.230536Z","times_seen":2,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"claim-public.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/_next/static/chunks/980-a82a2507edc16a3a.js","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:57.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.claim-public.xyz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 15:58:44 GMT","end":"Thu, 13 Nov 2025 15:58:43 GMT"},"fingerprint":{"sha1":"77:9B:F6:5C:A6:9A:CB:9A:05:0C:6C:52:2A:09:D9:44:B0:2C:B0:7F","sha256":"F5:51:6A:77:37:8D:F2:A0:78:35:03:43:F4:64:4D:EC:56:49:48:BE:60:E4:1E:B0:9F:A9:DD:FA:A4:43:9F:40"}}},"request":{"raw":"GET /_next/static/chunks/980-a82a2507edc16a3a.js HTTP/1.1\r\nHost: claim-public.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-public.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:53:57 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 25482\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 03:16:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25482,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (25482), with no line terminators","md5":"214f9648992673654c4a9a93422ab509","sha1":"6cacdc7f16ee17f988a055208672313d67596e00","sha256":"59d9517a6a935a55a2f1f407a6b1cf2f55ee34af522629d97334bcafcb8f08f1","sha512":"8903841f92844b8d297437dd295739f00f9566a80ac4932080b8018311849aee8b000a4b03c290990983004f85be0030dcf5041138db6a4e3e5600ae34fc963c","ssdeep":"384:O5QL+fRju9xlf0l9plhZ86SDYbB/xa9/yo+K4KygAL0gG6ATCnnSHU9lV:xLcSolL8bYbXa9q0yghaOulV","tlshash":"e1b2a5de31d2b162639b20b9803f500af37f59c1681e4920f17896d67c7966983b3fad","first_seen":"2025-08-15T04:05:28.480121Z","last_seen":"2025-08-17T01:54:27.232432Z","times_seen":2,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":67,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"claim-public.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/_next/static/media/earth.d8df36e7.svg","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:57.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.claim-public.xyz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 15:58:44 GMT","end":"Thu, 13 Nov 2025 15:58:43 GMT"},"fingerprint":{"sha1":"77:9B:F6:5C:A6:9A:CB:9A:05:0C:6C:52:2A:09:D9:44:B0:2C:B0:7F","sha256":"F5:51:6A:77:37:8D:F2:A0:78:35:03:43:F4:64:4D:EC:56:49:48:BE:60:E4:1E:B0:9F:A9:DD:FA:A4:43:9F:40"}}},"request":{"raw":"GET /_next/static/media/earth.d8df36e7.svg HTTP/1.1\r\nHost: claim-public.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-public.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:53:57 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 116999\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 03:16:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116999,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9a6f645e109a4ca77b3c386546941bbb","sha1":"87ae21f51f2ab36fdd31ff10b9c123c432aa33fa","sha256":"fca05ab815c9a232e3c4491c1c64bc9697ca244401457fffea68a25d4e841ef9","sha512":"6187d241866ebba2b377395839ba9d49dc53ddd568749efadef604e41fe042bcff2b9fd1e21974094d48cffca0036ddda53ebddc0384c129dbf1f11aba12146e","ssdeep":"1536:h3gg5vzKYwy6H1JLAWLHgS3xvBSidxdP5ydHe7QPEJkYMktwGNL:i","tlshash":"31b33ce9236882fbf407e7a4cdd210a5395f30fb3d5153bcc6999b6679254e88818ce3","first_seen":"2025-08-15T04:05:28.47618Z","last_seen":"2025-08-17T01:54:27.234166Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"claim-public.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/_next/static/css/e45df098ce1c653a.css","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:57.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.claim-public.xyz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 15:58:44 GMT","end":"Thu, 13 Nov 2025 15:58:43 GMT"},"fingerprint":{"sha1":"77:9B:F6:5C:A6:9A:CB:9A:05:0C:6C:52:2A:09:D9:44:B0:2C:B0:7F","sha256":"F5:51:6A:77:37:8D:F2:A0:78:35:03:43:F4:64:4D:EC:56:49:48:BE:60:E4:1E:B0:9F:A9:DD:FA:A4:43:9F:40"}}},"request":{"raw":"GET /_next/static/css/e45df098ce1c653a.css HTTP/1.1\r\nHost: claim-public.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-public.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:53:57 GMT\r\nContent-Type: text/css\r\nContent-Length: 4684\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 03:16:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4684,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4684), with no line terminators","md5":"9f6184c4a772fe2d1b65b9bd85a5aed7","sha1":"2d1c3bb0e2616c437b3c646e539d97cbaa89def6","sha256":"994bd02377b90201bb19d59a47b11ff421221c4bb109b0c887fe51077fb45014","sha512":"8e92d38424613fd504ec435687b6cc71deb6c5964f988f8f1202e639d6713a068173980a4972e055622033e74d67a3e04e0ffbc85d5169b2557a7d48c08a7275","ssdeep":"96:1AizrA9GraFg2QQ8T76KwbHDAy+TVSFx4dwRu/7:1A6mQQ8T76KKjAy6Sf4d1","tlshash":"d2a166707d84907d6d2bb932926d99cc812875219e2344faf2b2972546d0af8333ef3d","first_seen":"2025-08-15T04:05:28.447709Z","last_seen":"2025-08-17T01:54:27.235785Z","times_seen":2,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"claim-public.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/_next/static/chunks/558-e031205682965b1f.js","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:57.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.claim-public.xyz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 15:58:44 GMT","end":"Thu, 13 Nov 2025 15:58:43 GMT"},"fingerprint":{"sha1":"77:9B:F6:5C:A6:9A:CB:9A:05:0C:6C:52:2A:09:D9:44:B0:2C:B0:7F","sha256":"F5:51:6A:77:37:8D:F2:A0:78:35:03:43:F4:64:4D:EC:56:49:48:BE:60:E4:1E:B0:9F:A9:DD:FA:A4:43:9F:40"}}},"request":{"raw":"GET /_next/static/chunks/558-e031205682965b1f.js HTTP/1.1\r\nHost: claim-public.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-public.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:53:57 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 24807\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 03:16:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24807,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (24807), with no line terminators","md5":"b51ec2a4d5c0d44892c7e52cb217ad4f","sha1":"5c0613908e0eb5049c4ce32bda101040e5280a28","sha256":"a70d0f3341775f4bfafae1d2adef6169155648d1337fc3fd54ac8816c121baac","sha512":"14cc477e21a437e7bea9b0fb56abd145a43e6f81da921bfde1066fed3f3604ce0fc352d0d4f36e33c8cac3a08a714d7a0738d184fdb4d50316ebdfa1c199ce17","ssdeep":"384:K9Z88QP7YFnCUE+Ff8IiUlrnUJGB7rlUeBjFUOiWskkcaLGYAI9k2ieu6u6iOaOH:G7QslrVflLW6YMe","tlshash":"5cb2b7366a4704be2aef83d7e05ceb95d9395602d119464de3834f32a744bb8178bb0e","first_seen":"2025-08-15T04:05:28.425978Z","last_seen":"2025-08-17T01:54:27.237314Z","times_seen":2,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":55,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"claim-public.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:57.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-public.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 17 Aug 2025 01:53:57 GMT\r\ndate: Sun, 17 Aug 2025 01:53:57 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"eea55531c78093c1f80ece9ef6485401","sha1":"406db5cf6ad96dd0b4f7b40dab664c24605e63be","sha256":"b984ffbaf076dc36a9c279697c9eed1539c031769c94aba15ea9b0c4782ddb1a","sha512":"72b0b3950b215a114a026c075d34f79fcc75d58bb13ae230a6afb8130c1470f3ac78900168626b0f9cb88bedb0afa22feba4b00fedb86295d532d55a8618c5f6","ssdeep":"192:9xNktq346lDYxOLuq3/pl8xxruLq3iwllCxEtkq3RXlGV:/bGo4VuCI","tlshash":"93228c92402b9500ab971cc233cf7f3aaece50896485d1b96ff90cd59ceeda6436871d","first_seen":"2025-05-29T20:41:13.521716Z","last_seen":"2025-09-10T17:16:34.521529Z","times_seen":3000,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":158,"dns":0,"connect":17,"send":0,"wait":18,"receive":0,"ssl":176},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/main.js","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:57.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.claim-public.xyz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 15:58:44 GMT","end":"Thu, 13 Nov 2025 15:58:43 GMT"},"fingerprint":{"sha1":"77:9B:F6:5C:A6:9A:CB:9A:05:0C:6C:52:2A:09:D9:44:B0:2C:B0:7F","sha256":"F5:51:6A:77:37:8D:F2:A0:78:35:03:43:F4:64:4D:EC:56:49:48:BE:60:E4:1E:B0:9F:A9:DD:FA:A4:43:9F:40"}}},"request":{"raw":"GET /main.js HTTP/1.1\r\nHost: claim-public.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-public.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:53:57 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 211030\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:47:44 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":211030,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c4f13f968ea5550176390d15e1c928e7","sha1":"aab1ac2a0ec36f230439f380d71571ff76608747","sha256":"8612dd6321112827c0c5973a14631c73a5f3e3125293b8b2f1e591d42895b91f","sha512":"3adbfa15a052b5631f12dc0bf0fa063ffcf34f1316acb85d5c6383e7170f0123699473fcd4885bf24ed5bfb490ff8a886b208fec5daae0c2abc241a908f0bac2","ssdeep":"6144:YU/y71otlzO1JxXI3ICH+MSKDZ2kNw95x7F3N:YUa71/3N","tlshash":"c12443a802f7e8f6cf8f2769dc710ac9962a740b83752087e99bfcf435a467056e5134","first_seen":"2025-08-15T04:05:28.443755Z","last_seen":"2025-08-17T01:54:27.215242Z","times_seen":2,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":82,"dns":0,"connect":0,"send":0,"wait":18,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"claim-public.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eligibility-publicai.com/fpbundle.js","fqdn":"eligibility-publicai.com","domain":"eligibility-publicai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:58.222Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /fpbundle.js HTTP/1.1\r\nHost: eligibility-publicai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-public.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T19:43:02.922917Z","times_seen":17941321,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"eligibility-publicai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/_next/static/chunks/main-app-7130c44130204985.js","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:57.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.claim-public.xyz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 15:58:44 GMT","end":"Thu, 13 Nov 2025 15:58:43 GMT"},"fingerprint":{"sha1":"77:9B:F6:5C:A6:9A:CB:9A:05:0C:6C:52:2A:09:D9:44:B0:2C:B0:7F","sha256":"F5:51:6A:77:37:8D:F2:A0:78:35:03:43:F4:64:4D:EC:56:49:48:BE:60:E4:1E:B0:9F:A9:DD:FA:A4:43:9F:40"}}},"request":{"raw":"GET /_next/static/chunks/main-app-7130c44130204985.js HTTP/1.1\r\nHost: claim-public.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-public.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:53:57 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 519\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 03:16:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":519,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (519), with no line terminators","md5":"22c03e71bea62a6d0788a2e868b82bfb","sha1":"6c151008cee8b3138517e7fae516950762f584a8","sha256":"7bc90bd8674b3ec6589cc55abd5b40b9ffb9ea38a60343ffe84c3097addafa60","sha512":"a4cd7ed175ebb08fcceac5c55c2ae009eb36445f836f0b10d4906b1456b62b52c20054f847a4fdce2753b59831a28af40c7caf67bfc68a61d2838e33a0c930a9","ssdeep":"","tlshash":"79f0f49a4f0df52f5d26ad24fda7ace2284f4675302b4e606d00ed612c23b6cd260408","first_seen":"2025-08-15T04:05:28.435256Z","last_seen":"2025-08-17T01:54:27.239403Z","times_seen":2,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"claim-public.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-public.xyz/_next/static/chunks/app/page-7786454edd9cdf41.js","fqdn":"claim-public.xyz","domain":"claim-public.xyz","tld":"xyz"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-public.xyz/","date":"2025-08-17T01:53:57.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.claim-public.xyz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 15:58:44 GMT","end":"Thu, 13 Nov 2025 15:58:43 GMT"},"fingerprint":{"sha1":"77:9B:F6:5C:A6:9A:CB:9A:05:0C:6C:52:2A:09:D9:44:B0:2C:B0:7F","sha256":"F5:51:6A:77:37:8D:F2:A0:78:35:03:43:F4:64:4D:EC:56:49:48:BE:60:E4:1E:B0:9F:A9:DD:FA:A4:43:9F:40"}}},"request":{"raw":"GET /_next/static/chunks/app/page-7786454edd9cdf41.js HTTP/1.1\r\nHost: claim-public.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-public.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:53:57 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 31835\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 03:16:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31835,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (31835), with no line terminators","md5":"99019a4ad2756c395465c8dbf2c7442e","sha1":"58703ee4765bb986849ceb93cfbc6f4df45707ba","sha256":"ca8daef506e18496f057f424debdc161bf0f58570b0976c25560d61482aae394","sha512":"51d99bcd7820b144726eb2bc546f11750f80e95da8354948b406d0b1976c99a3cb196ef64e2cd7bd1021ca29ea8c455632f014d5810dd80f2f39cf0f5499d472","ssdeep":"384:XsFMBtwP87cXMZ4/YIx4YL6HCQiYieX829UC0KXJAAQsRFSelF:FIn3xPL89JFjF","tlshash":"46e29576560abc4f937508e9f5aaed089c178427e05a3c24ff95fc0bd4ead48b2b9530","first_seen":"2025-08-15T04:05:28.46789Z","last_seen":"2025-08-17T01:54:27.240777Z","times_seen":2,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":83,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"claim-public.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}