{"report_id":"9209636d-e6cd-4457-86bb-ad268e3cc5f1","version":0,"status":"done","tags":[],"date":"2026-08-11T11:15:26Z","url":{"schema":"http","addr":"treasury-claimsportal.com/","fqdn":"treasury-claimsportal.com","domain":"treasury-claimsportal.com","tld":"com"},"ip":{"addr":"192.177.26.141","port":0,"asn":57043,"as":"Hostkey B.v.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"treasury-claimsportal.com/","fqdn":"treasury-claimsportal.com","domain":"treasury-claimsportal.com","tld":"com"},"title":"Case verification","dom":{"size":56823,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"2368e876bce4b23ea735b7e4a2b87055","sha1":"b840ba1b53700c6324a9a83b2087e66fd7758400","sha256":"b523b6edb06d55b87c194dabab3d922d9216eade864d6757a625fc50212e89a3","sha512":"54407fdd885437d1c5f3654b2403393c1d19b0b5fd2ef8e600c21ab07f72068b95f00cbc3a31f5390682e6aabb60df772c49ad4c36c8cfaa358b5db2f3ec9168","ssdeep":"384:BEDLuq79SazVQetM7OvsGOvOm2XT9GBwVDhOi9zrtr7X4smDrBeBHGuRXI5mv/tI:BEHuNH6u2m2XT5VDUepWGyEFH7rkTh","tlshash":"6843749f69e31032a573b17d5baf92053332c403450bce517d8c9268ef906b59af6bc9","dom_hash":"domhashc828f81bef3149d1cf0a4692c3958c86","first_seen":"2026-08-11T10:50:50.804237Z","last_seen":"2026-08-11T11:15:28.139527Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"treasury-claimsportal.com/","fqdn":"treasury-claimsportal.com","domain":"treasury-claimsportal.com","tld":"com"},"ip":{"addr":"192.177.26.141","port":0,"asn":57043,"as":"Hostkey B.v.","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-15T11:15:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"treasury-claimsportal.com","ip":{"addr":"192.177.26.141","port":443,"asn":57043,"as":"Hostkey B.v.","country":"United States","country_code":"US"},"domain_registered":"2026-08-10","domain_rank":0,"first_seen":"2026-08-11T10:50:47.519713Z","last_seen":"2026-08-11T10:50:47.519713Z","alert_count":0,"request_count":4,"received_data":3643063,"sent_data":2101,"comment":"","tags":null,"fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"treasury-claimsportal.com/","fqdn":"treasury-claimsportal.com","domain":"treasury-claimsportal.com","tld":"com"},"ip":{"addr":"192.177.26.141","port":443,"asn":57043,"as":"Hostkey B.v.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8a642cdf6a810da277c0e54072beb7cf","sha1":"b84400afde4debfc9bdd48141bfd49e5486f80b8","sha256":"8b5e0935ea85cca6a8ce575d5c03b5f031b7b653f7c75b3cfd7b28f50b46c5b8","sha512":"5dd32dbd394a8e1bf1658c714cac171b05c856141ac069780a63f0ced71c1c5231243eb125694e72af9a40370c654d13080af6d6723634a56d327d1dafb4d8e1","ssdeep":"384:aQetM7OvsGOvOm2XT9GBwVDhOi9zrtr7X4smDrBeBHGuRXI5mv/tH7r42YT/:T6u2m2XT5VDUepWGyEFH7rkT/","tlshash":"2f0340af69e7207296b3713e8b9f91053732c403050ace907d5cd268afa067457b6fda","size":39523,"data":"","first_seen":"2026-08-11T10:50:50.809628Z","last_seen":"2026-08-11T11:15:28.155027Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"treasury-claimsportal.com/assets/landing-hero.jpg","fqdn":"treasury-claimsportal.com","domain":"treasury-claimsportal.com","tld":"com"},"ip":{"addr":"192.177.26.141","port":443,"asn":57043,"as":"Hostkey B.v.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://treasury-claimsportal.com/","date":"2026-08-11T11:14:56.213Z","timestamp":1786446896213,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasury-claimsportal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 19:25:04 GMT","end":"Sun, 08 Nov 2026 19:25:03 GMT"},"fingerprint":{"sha1":"E9:9F:54:88:87:22:AD:1A:D9:10:FA:DC:3F:D0:25:8E:BB:AD:F7:D5","sha256":"98:BC:DC:82:E1:AE:CE:BC:2E:C4:B6:3D:0C:4E:AA:D0:D9:BE:36:AB:23:65:06:FC:6D:83:49:FB:89:A4:08:DF"}}},"request":{"raw":"GET /assets/landing-hero.jpg HTTP/1.1\r\nHost: treasury-claimsportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://treasury-claimsportal.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=86400\r\ncontent-type: image/jpeg\r\ndate: Tue, 11 Aug 2026 11:14:52 GMT\r\netag: W/\"25f49d-19f4af48270\"\r\nlast-modified: Fri, 10 Jul 2026 07:36:06 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 2487453\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":2487453,"size_decoded":2487871,"mime_type":"image/jpeg","magic":"PNG image data, 1536 x 1024, 8-bit/color RGB, non-interlaced","md5":"87311c6d6304ec67508c31b1b67baaad","sha1":"07c3ea84d8fffaac0e7acaefd1142623c8d107b1","sha256":"88609bdbaf821f956a55070e1b5fca143366322f0aad4685e2aa2222c3625682","sha512":"99d93b546f4439793fcc38ec9436deb21577634dabd3442f9c80cc4ffe47b2055f89eb42e77a5072e0c6a8e34c51e060a9b7b75dc48f41ff02869bb82a7183ed","ssdeep":"24576:B8uPUZM4beUyUc8TQKSRtFncOym8lOkjnXfN9bjoimNB7n:zUZM1AcgQLRchskjn1Zjol7n","tlshash":"e82523ed7e63d516d0b6deb0f7df04990e64a7e0732e02707a265a80f748b809875eb4","first_seen":"2026-08-11T10:50:50.80577Z","last_seen":"2026-08-11T11:15:28.14284Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6665,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1032,"receive":5633,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"treasury-claimsportal.com/favicon.ico","fqdn":"treasury-claimsportal.com","domain":"treasury-claimsportal.com","tld":"com"},"ip":{"addr":"192.177.26.141","port":443,"asn":57043,"as":"Hostkey B.v.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://treasury-claimsportal.com/","date":"2026-08-11T11:14:56.441Z","timestamp":1786446896441,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasury-claimsportal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 19:25:04 GMT","end":"Sun, 08 Nov 2026 19:25:03 GMT"},"fingerprint":{"sha1":"E9:9F:54:88:87:22:AD:1A:D9:10:FA:DC:3F:D0:25:8E:BB:AD:F7:D5","sha256":"98:BC:DC:82:E1:AE:CE:BC:2E:C4:B6:3D:0C:4E:AA:D0:D9:BE:36:AB:23:65:06:FC:6D:83:49:FB:89:A4:08:DF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: treasury-claimsportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://treasury-claimsportal.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-security-policy: default-src 'none'\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 11 Aug 2026 11:14:52 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 150\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":150,"size_decoded":510,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"84241342d84ac29592a5d9516f8edf7f","sha1":"03c53980e18e17625f439c20e7d438f066202428","sha256":"6e21162bc64073fe9e3d3d6375ca24d04fed1912a5b7716aac0cb0f2d16fae7c","sha512":"7509483335c7a30365f7f403098491ac0b44fffcc68a5cdacb86ec191f02dbda5b16a20a09e924b6a29ac938578d43bacb9a50115db5c5668ea27fe1811bd530","ssdeep":"","tlshash":"34c08c9e140012010b2087042ac1326464973b992de685006a87e027ece8a1ad987288","first_seen":"2023-04-05T13:59:49Z","last_seen":"2026-08-18T13:40:21.480468Z","times_seen":9013,"resource_available":false,"data":null}},"time_used":1240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":979,"receive":261,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"treasury-claimsportal.com/","fqdn":"treasury-claimsportal.com","domain":"treasury-claimsportal.com","tld":"com"},"ip":{"addr":"192.177.26.141","port":443,"asn":57043,"as":"Hostkey B.v.","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-11T11:14:54.766Z","timestamp":1786446894766,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasury-claimsportal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 19:25:04 GMT","end":"Sun, 08 Nov 2026 19:25:03 GMT"},"fingerprint":{"sha1":"E9:9F:54:88:87:22:AD:1A:D9:10:FA:DC:3F:D0:25:8E:BB:AD:F7:D5","sha256":"98:BC:DC:82:E1:AE:CE:BC:2E:C4:B6:3D:0C:4E:AA:D0:D9:BE:36:AB:23:65:06:FC:6D:83:49:FB:89:A4:08:DF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: treasury-claimsportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: no-store, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 11 Aug 2026 11:14:52 GMT\r\netag: W/\"dd23-19f902fa770\"\r\nlast-modified: Thu, 23 Jul 2026 18:14:30 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":56611,"size_decoded":14101,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"e1ada2172ab487615f0023a838254c8e","sha1":"d0555b5b0fa92312eafa4339d04dc31c57846872","sha256":"2f4713a08bba7abd8dbab07beb0591ba944a1e5154630702b0df292555992680","sha512":"694fab3d324048308fbf9c3e6534a620ce636da686672a03692f1f8c9bbd2f7e398e2b7c959c06da2f5f5f44715f0d8844a2320953371a212c2bba079bf5b5a9","ssdeep":"384:zEDLuq79SJzgQetM7OvsGOvOm2XT9GBwVDhOi9zrtr7X4smDrBeBHGuRXI5mv/tH:zEHuN/6u2m2XT5VDUepWGyEFH7rkTe","tlshash":"2443739f69e31032a573b17d5baf92053332c403450bce517d8c9268ef906b99af6bc9","first_seen":"2026-08-11T10:50:50.807391Z","last_seen":"2026-08-11T11:15:28.148469Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1141,"timings":{"blocked":-1,"dns":290,"connect":87,"send":0,"wait":91,"receive":0,"ssl":672},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"treasury-claimsportal.com/assets/portal-seal.png","fqdn":"treasury-claimsportal.com","domain":"treasury-claimsportal.com","tld":"com"},"ip":{"addr":"192.177.26.141","port":443,"asn":57043,"as":"Hostkey B.v.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://treasury-claimsportal.com/","date":"2026-08-11T11:14:56.198Z","timestamp":1786446896198,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasury-claimsportal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 19:25:04 GMT","end":"Sun, 08 Nov 2026 19:25:03 GMT"},"fingerprint":{"sha1":"E9:9F:54:88:87:22:AD:1A:D9:10:FA:DC:3F:D0:25:8E:BB:AD:F7:D5","sha256":"98:BC:DC:82:E1:AE:CE:BC:2E:C4:B6:3D:0C:4E:AA:D0:D9:BE:36:AB:23:65:06:FC:6D:83:49:FB:89:A4:08:DF"}}},"request":{"raw":"GET /assets/portal-seal.png HTTP/1.1\r\nHost: treasury-claimsportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://treasury-claimsportal.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=86400\r\ncontent-type: image/png\r\ndate: Tue, 11 Aug 2026 11:14:52 GMT\r\netag: W/\"10bdf0-19f4af48270\"\r\nlast-modified: Fri, 10 Jul 2026 07:36:06 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 1097200\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":1097200,"size_decoded":1097617,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"5a6c682db5ed2dbb1210cb83ac8d5c3d","sha1":"7a41b7f06cb26905729493bee53a0f4def0a7dd3","sha256":"74ac10288f46afc5434d78e3004c20be363abedbaa228431ac9337d47bab030e","sha512":"3189dc7c37e24bf866ebd643a66bcc7bc29682ff57450e170c67673f4a6633b95517066a92ed39d80dfd0dfb21f25246ea3881ff25c8295256ab765a5fe162f9","ssdeep":"12288:VS4IwNk55DXhx0Gw9jOqsaFToiENSGyunNERHyI8jT7PF2w2ySxhlauZtY48mWv8:c2HsOiNTNEajToywh848Nfqn3H7j3l","tlshash":"642523f77037db86c0e2a57f25992668099a131de58548a0d0f9c67fb3b4cb8091bec7","first_seen":"2026-08-11T10:50:50.808604Z","last_seen":"2026-08-11T11:15:28.151955Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5457,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":5367,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}