{"report_id":"a92a30e2-862f-42fb-ab27-cc87833b36e4","version":6,"status":"done","tags":[],"date":"2025-08-31T07:55:03Z","url":{"schema":"http","addr":"claimgomining.pages.dev/app/connect/","fqdn":"claimgomining.pages.dev","domain":"claimgomining.pages.dev","tld":"pages.dev"},"ip":{"addr":"104.21.48.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"claimgomining.pages.dev/app/connect","fqdn":"claimgomining.pages.dev","domain":"claimgomining.pages.dev","tld":"pages.dev"},"title":"Connect Wallet"},"submit":{"url":{"schema":"http","addr":"claimgomining.pages.dev/app/connect/","fqdn":"claimgomining.pages.dev","domain":"claimgomining.pages.dev","tld":"pages.dev"},"ip":{"addr":"104.21.48.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-05T07:55:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-31T07:54:37Z","timestamp":1756626877,"ip_dst":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.11","port":50430,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2025-08-31T07:54:37.658014+0000\",\"flow_id\":702643760392665,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":50430,\"dest_ip\":\"104.21.48.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"claimgomining.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":925,\"bytes_toclient\":3554,\"start\":\"2025-08-31T07:54:37.649689+0000\"}}"}],"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Crypto/Wallet","trigger":"claimgomining.pages.dev","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Crypto/Wallet","trigger":"claimgomining.pages.dev/app/connect/","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com","meta":null}],"urlquery":null},"summary":[{"fqdn":"claimgomining.pages.dev","ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":10,"request_count":10,"received_data":3076013,"sent_data":4926,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-08-27T15:20:49.600294Z","alert_count":0,"request_count":1,"received_data":32012,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-31T07:54:37Z","timestamp":1756626877,"ip_dst":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.11","port":50430,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2025-08-31T07:54:37.658014+0000\",\"flow_id\":702643760392665,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":50430,\"dest_ip\":\"104.21.48.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"claimgomining.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":925,\"bytes_toclient\":3554,\"start\":\"2025-08-31T07:54:37.649689+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"claimgomining.pages.dev/app/main.js","fqdn":"claimgomining.pages.dev","domain":"claimgomining.pages.dev","tld":"pages.dev"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d93e2c9c5e49cb505d3b3d540df72a46","sha1":"b83a9eeea514e71d584d38c30e49eb78ffe59679","sha256":"7fa40f3c1add617ad24e196bf4fda00f84dd9c450cb83ab4fc832e3913c75716","sha512":"303c2a3920f18a38df7eb628b7dddbd3a8af68e4b4329c9ef1cb4a9533fb55391225bc36eb464d86fa39bc254fde4d912af00ccf14b4029f6cc0735a4741f48c","ssdeep":"96:pRpu66ptdrRhepZMjTksbu5Ol+Dg/S+Ujd+p2w10tlPu+mgQdvnAlI+RYqk:q3nlYn+ydBjXujgQdvn8RYZ","tlshash":"6ba1ba102da611d1233607ab671798b5d7270f1f9300068bb27caa96fff6915cac7d36","size":4891,"data":"","first_seen":"2025-08-31T04:40:19.212071Z","last_seen":"2025-08-31T07:55:07.429691Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimgomining.pages.dev/app/connect","fqdn":"claimgomining.pages.dev","domain":"claimgomining.pages.dev","tld":"pages.dev"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"666638f4f0309beb90d88b6cd0b35554","sha1":"af2bf36681f9f2989fc5b880e76c5f3b4df55c5f","sha256":"049439259576a5395dc5066b0b6a28436625a18471860a1d644ccb18a7400c23","sha512":"f433707005bc9c027ceff6b21cc06b2fe84881d52f47fcf256b485afd198d59c18f8e5d56a329a1a46774bcfb67cda285191da49efc6069d0e57b2c019535fef","ssdeep":"","tlshash":"0bc09b0d34e25441677b726d4f2f610515312037814bdf407d4e95d04f6047bd15555d","size":187,"data":"","first_seen":"2025-08-31T04:40:19.222086Z","last_seen":"2025-08-31T07:55:07.430757Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"claimgomining.pages.dev/app/images/wallccc.png","fqdn":"claimgomining.pages.dev","domain":"claimgomining.pages.dev","tld":"pages.dev"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claimgomining.pages.dev/app/connect","date":"2025-08-31T07:54:38.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimgomining.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 19:10:33 GMT","end":"Mon, 17 Nov 2025 19:55:18 GMT"},"fingerprint":{"sha1":"37:AD:44:9A:B1:40:EE:A9:93:C7:FF:39:14:75:0F:57:D6:08:27:65","sha256":"C0:27:FA:07:FD:B5:23:52:4A:5A:91:EC:D8:18:1B:80:1B:4C:61:A6:59:4A:D3:4B:3E:9B:F0:4A:DE:01:B0:94"}}},"request":{"raw":"GET /app/images/wallccc.png HTTP/1.1\r\nHost: claimgomining.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claimgomining.pages.dev/app/connect\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 Aug 2025 07:54:38 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=F3skXuZ10nVKzFnoGeeVJFygv7pIn5AwoRh%2BDKL2WZvd0gVA%2B%2F8nS3yhVxXPGMasQNNaYfgfZrsIJodc8ov5XParb8gkQEsvBLIay%2F2W%2BaGeFyFWzoYyFbi%2BJyqhjBPop9dU3w9DvRD1kQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncf-ray: 977af605cca05693-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=721\u0026min_rtt=0\u0026rtt_var=156\u0026sent=331\u0026recv=105\u0026lost=0\u0026retrans=0\u0026sent_bytes=369927\u0026recv_bytes=7510\u0026delivery_rate=21030494\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=31651\u0026ss_exit_reason=2\u0026cwnd=18595\u0026unsent_bytes=0\u0026cid=049b388f8a9d42cb\u0026ts=703\u0026inflight_dur=122\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":539603,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"e1795ec2f06cf658b4b2e435609d013d","sha1":"28fd7f1e43e5854da53b1228d00c4465b5e96ea0","sha256":"ecf61446c0403a9da4ad8343252064ec4df20cd2c084ac2555ee260eb5414411","sha512":"51e937a56c0c8a223ee384e1397f1fef3a39cb056d0df026555926f641390ae5543e3ad6c08cb0b45ee69dce05b0b0be317824ea40904d5150048769f1e75256","ssdeep":"6144:ihYip7pJjm1xX0wsVX+bK/8zdwVCZd9c6weQdqT:K7pJjm1xX0wsVOe/lVwo4","tlshash":"cdb4e89637f611d0582bd3f89b752a057225f123d509cd58bbec26948f838eae8937cc","first_seen":"2025-08-31T04:40:19.206437Z","last_seen":"2025-08-31T07:55:07.424098Z","times_seen":2,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Crypto/Wallet","trigger":"claimgomining.pages.dev","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimgomining.pages.dev/app/connect/","fqdn":"claimgomining.pages.dev","domain":"claimgomining.pages.dev","tld":"pages.dev"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-31T07:54:37.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimgomining.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 19:10:33 GMT","end":"Mon, 17 Nov 2025 19:55:18 GMT"},"fingerprint":{"sha1":"37:AD:44:9A:B1:40:EE:A9:93:C7:FF:39:14:75:0F:57:D6:08:27:65","sha256":"C0:27:FA:07:FD:B5:23:52:4A:5A:91:EC:D8:18:1B:80:1B:4C:61:A6:59:4A:D3:4B:3E:9B:F0:4A:DE:01:B0:94"}}},"request":{"raw":"GET /app/connect/ HTTP/1.1\r\nHost: claimgomining.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 308 Permanent Redirect\r\ndate: Sun, 31 Aug 2025 07:54:37 GMT\r\ncontent-length: 0\r\ncf-ray: 977af6016f980b65-OSL\r\nlocation: /app/connect\r\naccess-control-allow-origin: *\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=j%2B0iAxnP%2ByQoRnRXZx7qqI2aSuXVr8hgak1xzBN3hrsmpVTsRVKZlN6nfbStMj8R8EQIuPwj%2Ff2HD9AeN6o1XrCHyKXngGkjUcc6y0e0pLFoECAHpf%2BEAKoib2PGpZENj5wrG42%2BiJCfVw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=538\u0026min_rtt=480\u0026rtt_var=155\u0026sent=7\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3309\u0026recv_bytes=1275\u0026delivery_rate=6895238\u0026cwnd=253\u0026unsent_bytes=0\u0026cid=075edb4f0326f569\u0026ts=53\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21272,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"6680686fe814ae51376d8c99b3668bbc","sha1":"32b4422cb01f1d75c303d43c3dfcd26a2ba0479a","sha256":"dbcd931fca6879189ee06b9a4b23b8129bc79ba10a73f1816e4109decc4ee58c","sha512":"8919145b50ffb5394ec5ff714a7261a1e0cf7a8444a7ec3f0916f5770b43422e33120280ab6dc4dfb717628fe718b673c48282113d54b2fb985a04b2868c4b98","ssdeep":"192:HelF0KfOlKqnInBnpn4fb+JG1Smww2HaaJUJve5DaFM0pFZnEaPpaZUa4sJrH+3X:HeqqxZ4KTHyvBoWe0v","tlshash":"b7a2655e59f30d059a4b56adaffbea54a320d013c315ec58feac4789cf87a508e43788","first_seen":"2025-08-31T04:40:19.217286Z","last_seen":"2025-08-31T07:55:07.425482Z","times_seen":2,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":20,"dns":1,"connect":1,"send":0,"wait":37,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Crypto/Wallet","trigger":"claimgomining.pages.dev/app/connect/","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimgomining.pages.dev/app/css/style2.css","fqdn":"claimgomining.pages.dev","domain":"claimgomining.pages.dev","tld":"pages.dev"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claimgomining.pages.dev/app/connect","date":"2025-08-31T07:54:37.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimgomining.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 19:10:33 GMT","end":"Mon, 17 Nov 2025 19:55:18 GMT"},"fingerprint":{"sha1":"37:AD:44:9A:B1:40:EE:A9:93:C7:FF:39:14:75:0F:57:D6:08:27:65","sha256":"C0:27:FA:07:FD:B5:23:52:4A:5A:91:EC:D8:18:1B:80:1B:4C:61:A6:59:4A:D3:4B:3E:9B:F0:4A:DE:01:B0:94"}}},"request":{"raw":"GET /app/css/style2.css HTTP/1.1\r\nHost: claimgomining.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claimgomining.pages.dev/app/connect\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 Aug 2025 07:54:38 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=FKudfsvOShyjmMop8RDeZvlic%2FoLAMsf0h6t6%2F7FinMonbaxXc68uxWOf5T7NNeClvg7SeoF4%2BXv0xDVA4RGp5NlY6g2rsYbB0U5BWYHmEMdm86hZGo4F8IakjxIsDB%2BBpvjKcGcotN2PA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncf-ray: 977af6033c6b5693-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1111\u0026min_rtt=0\u0026rtt_var=505\u0026sent=92\u0026recv=38\u0026lost=0\u0026retrans=0\u0026sent_bytes=86269\u0026recv_bytes=3291\u0026delivery_rate=9016387\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=31651\u0026ss_exit_reason=2\u0026cwnd=20091\u0026unsent_bytes=0\u0026cid=049b388f8a9d42cb\u0026ts=394\u0026inflight_dur=71\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T18:56:23.617879Z","times_seen":17584920,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Crypto/Wallet","trigger":"claimgomining.pages.dev","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claimgomining.pages.dev/app/connect","date":"2025-08-31T07:54:37.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claimgomining.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 07:54:37 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 5631\r\ncf-ray: 977af6034a93569b-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03e5f-7918\"\r\nlast-modified: Mon, 04 May 2020 16:10:07 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 184078\r\nexpires: Fri, 21 Aug 2026 07:54:37 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=GrvPL7NcbTZqEuaw4Gn%2BMYx9LS1Pc4n%2B5an3TFT8h%2Fkbz39%2FmgQNWrJSTx0O1epfcQoD9s90lNgDqOpBm6nYMV7%2FODwRik%2FPIkc9Np42O9zdqL%2BojxY7HzRd5PyKlk%2B1A2PWgSS5\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-07-28T18:58:03.072066Z","times_seen":303491,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":3,"dns":0,"connect":1,"send":0,"wait":13,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimgomining.pages.dev/images/GoMinig.webp","fqdn":"claimgomining.pages.dev","domain":"claimgomining.pages.dev","tld":"pages.dev"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claimgomining.pages.dev/app/connect","date":"2025-08-31T07:54:37.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimgomining.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 19:10:33 GMT","end":"Mon, 17 Nov 2025 19:55:18 GMT"},"fingerprint":{"sha1":"37:AD:44:9A:B1:40:EE:A9:93:C7:FF:39:14:75:0F:57:D6:08:27:65","sha256":"C0:27:FA:07:FD:B5:23:52:4A:5A:91:EC:D8:18:1B:80:1B:4C:61:A6:59:4A:D3:4B:3E:9B:F0:4A:DE:01:B0:94"}}},"request":{"raw":"GET /images/GoMinig.webp HTTP/1.1\r\nHost: claimgomining.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claimgomining.pages.dev/app/connect\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 Aug 2025 07:54:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5352\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=0DgWBr6JSjSHl1Is52tNn3NN3RJDskriZ%2F2rQqrf0ILmajLeLLdYMZ45l3QriZck2MfSOZF4hMcOHE2UZuAVs1crrdPqR42nLlSwXTJ8sRDfefW%2FpXtM8Ztu645V7MigoFWRRVEXM5Vayg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncf-ray: 977af6033c6c5693-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"4be1786af56a4dca36e07cf6d0df16e3\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=7494\u0026min_rtt=1253\u0026rtt_var=8301\u0026sent=18\u0026recv=14\u0026lost=0\u0026retrans=0\u0026sent_bytes=5647\u0026recv_bytes=2219\u0026delivery_rate=659965\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=18429\u0026unsent_bytes=0\u0026cid=049b388f8a9d42cb\u0026ts=322\u0026inflight_dur=50\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5352,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ed47df4bee2cb0b3db972fe3042edc31","sha1":"cc33c0bfdb0d4e76ab06e2e8a61986e1796619db","sha256":"f7815fb796858016e800a0a0e58431ed04d5758e590f68b4d0b7bf180f4485bc","sha512":"bee3118e383f15ffa7c7f7c16c7e5e53795b5a68290e3b9e85f83aca333ef54c946b1021731ece71348b5a0de8c1d1dc0117a273cf88d287e2653359d774031f","ssdeep":"96:TElbw+iqUVloMV8+ON5aZ83rlyUlkw0iVU4dNJj4a0lIj7bJ5esrhxZ7AJTQKSNE:OwZ+T+r2EQ0J4dNJUa0lI3DeMNAdQbNo","tlshash":"8db19ee1668e29f6d1050df884039ba3930a6ebbf964062a924607331b38fcf34951d6","first_seen":"2025-08-31T04:40:19.214856Z","last_seen":"2025-08-31T07:55:07.427646Z","times_seen":2,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Crypto/Wallet","trigger":"claimgomining.pages.dev","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimgomining.pages.dev/app/fonts/Euclid/EuclidCircularB-Regular-WebXL.html","fqdn":"claimgomining.pages.dev","domain":"claimgomining.pages.dev","tld":"pages.dev"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claimgomining.pages.dev/app/connect","date":"2025-08-31T07:54:38.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimgomining.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 19:10:33 GMT","end":"Mon, 17 Nov 2025 19:55:18 GMT"},"fingerprint":{"sha1":"37:AD:44:9A:B1:40:EE:A9:93:C7:FF:39:14:75:0F:57:D6:08:27:65","sha256":"C0:27:FA:07:FD:B5:23:52:4A:5A:91:EC:D8:18:1B:80:1B:4C:61:A6:59:4A:D3:4B:3E:9B:F0:4A:DE:01:B0:94"}}},"request":{"raw":"GET /app/fonts/Euclid/EuclidCircularB-Regular-WebXL.html HTTP/1.1\r\nHost: claimgomining.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claimgomining.pages.dev/app/connect.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 Aug 2025 07:54:38 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=YRzjkVroTCt%2FiF86hpHmMGQHMhrgOXQYkK5ai%2Fp3HXzHfPlNJ5BIMrIqEkmUSonXlGWYjjSPheSnW3%2Ff8cc1%2Fj9zE7jzi1VMH9wkobJSFvnNcVl5l27i%2B8ES7EQoKFawYAMMB0l2SQAQuw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncf-ray: 977af604ac865693-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=814\u0026min_rtt=0\u0026rtt_var=423\u0026sent=116\u0026recv=47\u0026lost=0\u0026retrans=0\u0026sent_bytes=110628\u0026recv_bytes=4304\u0026delivery_rate=9016387\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=31651\u0026ss_exit_reason=2\u0026cwnd=20091\u0026unsent_bytes=0\u0026cid=049b388f8a9d42cb\u0026ts=535\u0026inflight_dur=76\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":539603,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"e1795ec2f06cf658b4b2e435609d013d","sha1":"28fd7f1e43e5854da53b1228d00c4465b5e96ea0","sha256":"ecf61446c0403a9da4ad8343252064ec4df20cd2c084ac2555ee260eb5414411","sha512":"51e937a56c0c8a223ee384e1397f1fef3a39cb056d0df026555926f641390ae5543e3ad6c08cb0b45ee69dce05b0b0be317824ea40904d5150048769f1e75256","ssdeep":"6144:ihYip7pJjm1xX0wsVX+bK/8zdwVCZd9c6weQdqT:K7pJjm1xX0wsVOe/lVwo4","tlshash":"cdb4e89637f611d0582bd3f89b752a057225f123d509cd58bbec26948f838eae8937cc","first_seen":"2025-08-31T04:40:19.206437Z","last_seen":"2025-08-31T07:55:07.424098Z","times_seen":2,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":64,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Crypto/Wallet","trigger":"claimgomining.pages.dev","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimgomining.pages.dev/app/fonts/Roboto/Roboto-Regular.html","fqdn":"claimgomining.pages.dev","domain":"claimgomining.pages.dev","tld":"pages.dev"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claimgomining.pages.dev/app/connect","date":"2025-08-31T07:54:38.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimgomining.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 19:10:33 GMT","end":"Mon, 17 Nov 2025 19:55:18 GMT"},"fingerprint":{"sha1":"37:AD:44:9A:B1:40:EE:A9:93:C7:FF:39:14:75:0F:57:D6:08:27:65","sha256":"C0:27:FA:07:FD:B5:23:52:4A:5A:91:EC:D8:18:1B:80:1B:4C:61:A6:59:4A:D3:4B:3E:9B:F0:4A:DE:01:B0:94"}}},"request":{"raw":"GET /app/fonts/Roboto/Roboto-Regular.html HTTP/1.1\r\nHost: claimgomining.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claimgomining.pages.dev/app/connect.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 Aug 2025 07:54:38 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4e9Yueq%2BzjTRbWEgbPj%2BN3fcGCm1sZxId7kubaXRbVSAVngEIDRGeMJnBMRFNNVRtB3zEl6rD70wWucxrtIsYGZHAsiuUzUvrPdE%2FVB4dhjs9TBrZpb7eIFJDef4w6tgqdGCdWWbYBsZOA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncf-ray: 977af604ac875693-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=707\u0026min_rtt=0\u0026rtt_var=189\u0026sent=183\u0026recv=60\u0026lost=0\u0026retrans=0\u0026sent_bytes=193173\u0026recv_bytes=4888\u0026delivery_rate=11270508\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=31651\u0026ss_exit_reason=2\u0026cwnd=19374\u0026unsent_bytes=0\u0026cid=049b388f8a9d42cb\u0026ts=555\u0026inflight_dur=91\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":539603,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"e1795ec2f06cf658b4b2e435609d013d","sha1":"28fd7f1e43e5854da53b1228d00c4465b5e96ea0","sha256":"ecf61446c0403a9da4ad8343252064ec4df20cd2c084ac2555ee260eb5414411","sha512":"51e937a56c0c8a223ee384e1397f1fef3a39cb056d0df026555926f641390ae5543e3ad6c08cb0b45ee69dce05b0b0be317824ea40904d5150048769f1e75256","ssdeep":"6144:ihYip7pJjm1xX0wsVX+bK/8zdwVCZd9c6weQdqT:K7pJjm1xX0wsVOe/lVwo4","tlshash":"cdb4e89637f611d0582bd3f89b752a057225f123d509cd58bbec26948f838eae8937cc","first_seen":"2025-08-31T04:40:19.206437Z","last_seen":"2025-08-31T07:55:07.424098Z","times_seen":2,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Crypto/Wallet","trigger":"claimgomining.pages.dev","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimgomining.pages.dev/app/connect","fqdn":"claimgomining.pages.dev","domain":"claimgomining.pages.dev","tld":"pages.dev"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-31T07:54:37.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimgomining.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 19:10:33 GMT","end":"Mon, 17 Nov 2025 19:55:18 GMT"},"fingerprint":{"sha1":"37:AD:44:9A:B1:40:EE:A9:93:C7:FF:39:14:75:0F:57:D6:08:27:65","sha256":"C0:27:FA:07:FD:B5:23:52:4A:5A:91:EC:D8:18:1B:80:1B:4C:61:A6:59:4A:D3:4B:3E:9B:F0:4A:DE:01:B0:94"}}},"request":{"raw":"GET /app/connect HTTP/1.1\r\nHost: claimgomining.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 07:54:37 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=oc%2FJKu9qR%2FmHaBDw3Q%2Fwq7fW5N8qptlW%2FFOLUfwzzxpaOW6r1go90yW4VAvUvOhdpHx7Jwc3JPjaTN2c9GiBmfTEMvDm4kemRIe9EQUn9Tx0Xw8SgwGD%2FPGW2xjw%2FirkuV5Kwm%2FZLUtPYA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 977af601aff30b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=5109\u0026min_rtt=480\u0026rtt_var=9259\u0026sent=8\u0026recv=12\u0026lost=0\u0026retrans=0\u0026sent_bytes=3941\u0026recv_bytes=1350\u0026delivery_rate=6895238\u0026cwnd=255\u0026unsent_bytes=0\u0026cid=075edb4f0326f569\u0026ts=96\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21272,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"6680686fe814ae51376d8c99b3668bbc","sha1":"32b4422cb01f1d75c303d43c3dfcd26a2ba0479a","sha256":"dbcd931fca6879189ee06b9a4b23b8129bc79ba10a73f1816e4109decc4ee58c","sha512":"8919145b50ffb5394ec5ff714a7261a1e0cf7a8444a7ec3f0916f5770b43422e33120280ab6dc4dfb717628fe718b673c48282113d54b2fb985a04b2868c4b98","ssdeep":"192:HelF0KfOlKqnInBnpn4fb+JG1Smww2HaaJUJve5DaFM0pFZnEaPpaZUa4sJrH+3X:HeqqxZ4KTHyvBoWe0v","tlshash":"b7a2655e59f30d059a4b56adaffbea54a320d013c315ec58feac4789cf87a508e43788","first_seen":"2025-08-31T04:40:19.217286Z","last_seen":"2025-08-31T07:55:07.425482Z","times_seen":2,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Crypto/Wallet","trigger":"claimgomining.pages.dev","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimgomining.pages.dev/app/connect.css","fqdn":"claimgomining.pages.dev","domain":"claimgomining.pages.dev","tld":"pages.dev"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claimgomining.pages.dev/app/connect","date":"2025-08-31T07:54:37.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimgomining.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 19:10:33 GMT","end":"Mon, 17 Nov 2025 19:55:18 GMT"},"fingerprint":{"sha1":"37:AD:44:9A:B1:40:EE:A9:93:C7:FF:39:14:75:0F:57:D6:08:27:65","sha256":"C0:27:FA:07:FD:B5:23:52:4A:5A:91:EC:D8:18:1B:80:1B:4C:61:A6:59:4A:D3:4B:3E:9B:F0:4A:DE:01:B0:94"}}},"request":{"raw":"GET /app/connect.css HTTP/1.1\r\nHost: claimgomining.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claimgomining.pages.dev/app/connect\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 Aug 2025 07:54:38 GMT\r\ncontent-type: text/css; charset=utf-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=fobbzEDT5T67TcMFzgZwKHN3WzfnGQdd3gxwxPo6stJsIJIFHZkQeRW0MHBiwCUgGmFK0l6WtQazC4GS1fLBBL9MU0Vtvvy0z2V3bAN21q7Jd1Gpf9KvKkyhRufpFce3zXFycVElIz7RgA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"32b498a03cab53d605446bd17358b30f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncf-ray: 977af6033c6a5693-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=6844\u0026min_rtt=1253\u0026rtt_var=7524\u0026sent=23\u0026recv=15\u0026lost=0\u0026retrans=0\u0026sent_bytes=11877\u0026recv_bytes=2263\u0026delivery_rate=1733319\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=24659\u0026unsent_bytes=0\u0026cid=049b388f8a9d42cb\u0026ts=328\u0026inflight_dur=53\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":854727,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"f3edb8446233df0d574e1fd74303a5e4","sha1":"f4dad8bbd273161fdfd70f2ec1d1698bcdbbc0b8","sha256":"52f2d94567bb55d2e6fef7f53b12f412e1ebe06fb1af426b14b11a6b0aef63eb","sha512":"56beca6f59c9017f7d93ed3e22070bc37fb76ab1f9fe3cfad0ebee6dea600338e929463ab3d78475b0b7c1e7d2957547978cc734a3537450eed752dc42b22b9f","ssdeep":"6144:P5IR/LgmOmgRfthWqlZQSUWJ5IR/LI5IR/LW5IR/LF5IR/LldQqzx:hg/LgmOmDWDg/Lqg/Log/LXg/Ll/x","tlshash":"62055cfc941f11425337cea5a7536a01fa24b237ee090859f6e1a68c8ff5275a182fcd","first_seen":"2025-08-31T07:55:07.428609Z","last_seen":"2025-08-31T07:55:07.428609Z","times_seen":1,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Crypto/Wallet","trigger":"claimgomining.pages.dev","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimgomining.pages.dev/app/main.js","fqdn":"claimgomining.pages.dev","domain":"claimgomining.pages.dev","tld":"pages.dev"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claimgomining.pages.dev/app/connect","date":"2025-08-31T07:54:37.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimgomining.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 19:10:33 GMT","end":"Mon, 17 Nov 2025 19:55:18 GMT"},"fingerprint":{"sha1":"37:AD:44:9A:B1:40:EE:A9:93:C7:FF:39:14:75:0F:57:D6:08:27:65","sha256":"C0:27:FA:07:FD:B5:23:52:4A:5A:91:EC:D8:18:1B:80:1B:4C:61:A6:59:4A:D3:4B:3E:9B:F0:4A:DE:01:B0:94"}}},"request":{"raw":"GET /app/main.js HTTP/1.1\r\nHost: claimgomining.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claimgomining.pages.dev/app/connect\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 Aug 2025 07:54:38 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=gf6puUjEjsPodCbp2X92%2BDqLfuF70EbnwbQGmQDo34ZgzXVKycsR8aCgovw3sqimT3gJYYpRz4FTkCL%2B%2BfAV7SDs4JKSbgx%2BmDG3c%2FWttnz4jbnNV6mSC1MKs07Mm%2Bie%2Fil16VC6cwfUQw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"a314592aa5afdf5eb809b58ae1866879\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncf-ray: 977af6034c6e5693-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1060\u0026min_rtt=0\u0026rtt_var=538\u0026sent=90\u0026recv=37\u0026lost=0\u0026retrans=0\u0026sent_bytes=84143\u0026recv_bytes=3246\u0026delivery_rate=9016387\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=31651\u0026ss_exit_reason=2\u0026cwnd=20091\u0026unsent_bytes=0\u0026cid=049b388f8a9d42cb\u0026ts=354\u0026inflight_dur=69\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4891,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"d93e2c9c5e49cb505d3b3d540df72a46","sha1":"b83a9eeea514e71d584d38c30e49eb78ffe59679","sha256":"7fa40f3c1add617ad24e196bf4fda00f84dd9c450cb83ab4fc832e3913c75716","sha512":"303c2a3920f18a38df7eb628b7dddbd3a8af68e4b4329c9ef1cb4a9533fb55391225bc36eb464d86fa39bc254fde4d912af00ccf14b4029f6cc0735a4741f48c","ssdeep":"96:pRpu66ptdrRhepZMjTksbu5Ol+Dg/S+Ujd+p2w10tlPu+mgQdvnAlI+RYqk:q3nlYn+ydBjXujgQdvn8RYZ","tlshash":"6ba1ba102da611d1233607ab671798b5d7270f1f9300068bb27caa96fff6915cac7d36","first_seen":"2025-08-31T04:40:19.212071Z","last_seen":"2025-08-31T07:55:07.429691Z","times_seen":2,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Crypto/Wallet","trigger":"claimgomining.pages.dev","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimgomining.pages.dev/app/fonts/Roboto/Roboto-Medium.html","fqdn":"claimgomining.pages.dev","domain":"claimgomining.pages.dev","tld":"pages.dev"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claimgomining.pages.dev/app/connect","date":"2025-08-31T07:54:38.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimgomining.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 19:10:33 GMT","end":"Mon, 17 Nov 2025 19:55:18 GMT"},"fingerprint":{"sha1":"37:AD:44:9A:B1:40:EE:A9:93:C7:FF:39:14:75:0F:57:D6:08:27:65","sha256":"C0:27:FA:07:FD:B5:23:52:4A:5A:91:EC:D8:18:1B:80:1B:4C:61:A6:59:4A:D3:4B:3E:9B:F0:4A:DE:01:B0:94"}}},"request":{"raw":"GET /app/fonts/Roboto/Roboto-Medium.html HTTP/1.1\r\nHost: claimgomining.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claimgomining.pages.dev/app/connect.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 Aug 2025 07:54:38 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2Bal71wWSp07E%2FPx%2F6Hbul3z9rM6thOFNYYZYAZzEnWL27EDz6RjPz%2B2G8GCdvqj%2FuYC9n27uYRkDSap9A0lSw4zr7IVWl5UmTbI00bXGfavWoWmJC1kH7lfswqVl6uA8o5pIbBxreTkbuw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncf-ray: 977af6053c985693-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=681\u0026min_rtt=0\u0026rtt_var=68\u0026sent=259\u0026recv=85\u0026lost=0\u0026retrans=0\u0026sent_bytes=283488\u0026recv_bytes=6328\u0026delivery_rate=21030494\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=31651\u0026ss_exit_reason=2\u0026cwnd=18595\u0026unsent_bytes=0\u0026cid=049b388f8a9d42cb\u0026ts=633\u0026inflight_dur=106\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":539603,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"e1795ec2f06cf658b4b2e435609d013d","sha1":"28fd7f1e43e5854da53b1228d00c4465b5e96ea0","sha256":"ecf61446c0403a9da4ad8343252064ec4df20cd2c084ac2555ee260eb5414411","sha512":"51e937a56c0c8a223ee384e1397f1fef3a39cb056d0df026555926f641390ae5543e3ad6c08cb0b45ee69dce05b0b0be317824ea40904d5150048769f1e75256","ssdeep":"6144:ihYip7pJjm1xX0wsVX+bK/8zdwVCZd9c6weQdqT:K7pJjm1xX0wsVOe/lVwo4","tlshash":"cdb4e89637f611d0582bd3f89b752a057225f123d509cd58bbec26948f838eae8937cc","first_seen":"2025-08-31T04:40:19.206437Z","last_seen":"2025-08-31T07:55:07.424098Z","times_seen":2,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Crypto/Wallet","trigger":"claimgomining.pages.dev","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null}],"urlquery":null}}]}