{"report_id":"e9dcbfe4-cf30-4c80-bd59-0ea5526ac2c1","version":6,"status":"done","tags":[],"date":"2026-01-06T14:24:24Z","url":{"schema":"http","addr":"claimfinder.top","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":0,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"claimfinder.top/pc/#/index","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"title":"Home - AirdropNet","dom":{"size":190383,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (60542)","md5":"f5a66c73017c7be30874218e854cdaa6","sha1":"a50eece25ecf07087378f89867f690387f285336","sha256":"c30024c479cb0fab80752954abb6c45ef9969aa4ec499a7326f715aeb3bdeed2","sha512":"1ee01b65bf3383b04912ac4ad7be3f1b30cbbf48750c646484af711b57a2d9d48ba58e2fa70e46adefb06d2cbbfe09e58b52b79e3e1ce0483bf6d2a5169f85d9","ssdeep":"1536:z9p3p9eYM/9q486OIsODeNoK+SsOBaqTegpRA00PASZwlFOOsxvKczYLzV/0lNgE:xdpk1qFcvDJHSzsMxl7sBQZ/u","tlshash":"d114b471a64855bc540387c5c933a6a03bcff1aef31643f449be97b1a683ee4e643924","dom_hash":"domhash278dee713f251196785b251b78eed24a","first_seen":"2026-01-06T14:24:49.614739Z","last_seen":"2026-01-06T14:24:49.614739Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"claimfinder.top","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":0,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-10T14:24:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimking.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"www.airdropfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"www.airdropfinder.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-04T22:14:09.841371Z","alert_count":0,"request_count":2,"received_data":46417,"sent_data":1098,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.airdropfinder.top","ip":{"addr":"13.228.246.88","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"domain_registered":"2025-11-10","domain_rank":0,"first_seen":"2026-01-06T14:24:28.5831Z","last_seen":"2026-01-06T14:24:28.5831Z","alert_count":2,"request_count":1,"received_data":9358,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"claimfinder.top","ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"domain_registered":"2025-11-10","domain_rank":0,"first_seen":"2026-01-06T14:24:28.585424Z","last_seen":"2026-01-06T14:24:28.585424Z","alert_count":82,"request_count":85,"received_data":6625465,"sent_data":39736,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-01-04T22:21:06.427471Z","alert_count":0,"request_count":1,"received_data":90232,"sent_data":467,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"claimking.top","ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"domain_registered":"2025-11-10","domain_rank":0,"first_seen":"2026-01-06T14:24:28.581485Z","last_seen":"2026-01-06T14:24:28.581485Z","alert_count":1,"request_count":1,"received_data":11253,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"huobicfg.s3.amazonaws.com","ip":{"addr":"52.219.151.57","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"domain_registered":"2005-08-18","domain_rank":5277579,"first_seen":"2021-11-22T07:40:25Z","last_seen":"2026-01-05T17:50:11.995743Z","alert_count":0,"request_count":8,"received_data":112118,"sent_data":3649,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-04T22:17:15.216142Z","alert_count":0,"request_count":2,"received_data":24749,"sent_data":1056,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.b6e40cfc.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"f38188b2a129d0b799cbf3ba08130ac3","sha1":"e2ca0b87e3d168d0382ed29d4d469ba4b6f61185","sha256":"0d99e51cf1b33065ee7c151518d404cba3cb882ff62ed4258fc2f91770f58460","sha512":"af442cd3864e214135a387ffde0fdb7c9be0d300a8ce4fa43a5136f7568d79c3eaeed045614258d51c6f00fe734a46fd4b827b003a2275f6f6fcd12c3839263f","ssdeep":"","tlshash":"a94164cf350decbaa75a4f8485620502d75d089f683428a1d4bf1d103bbcac169c8722","size":1902,"data":"","first_seen":"2026-01-06T14:24:49.631865Z","last_seen":"2026-01-29T18:57:32.399789Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/useRefs.0fea3b73.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"89c32fb72a3a5f17fdb2ad162029a786","sha1":"2d71a956e72c43982b32818969e63d7495dc966f","sha256":"d3d396094a198bdf23c4c4c165416d9af760d482e0fa5b5925d87916c4b7f075","sha512":"b6c1d17d91f0a9002c8e577ff743aeae4db4bd055bc8a142a28a964b75219b0f7cdca503f1cc38bcf3bdff2e7240a831f2087c402bc930cb3176c20c7c2c37b3","ssdeep":"","tlshash":"8fd0124972d1a0e85b13b0d4519f1806723fb67456d456d4906152c41e7859ec20fb3d","size":199,"data":"","first_seen":"2026-01-06T14:24:49.632718Z","last_seen":"2026-01-29T18:57:32.461623Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/RedoOutlined.c0b08b1d.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"95123b3a995f203c06dc7d5192ab5961","sha1":"b75d5ba4834d4cb01516d6f6a408905e0f7dd5c6","sha256":"5f289657eb96ad4cb00ab061a561b3f7b00666d2f57dd9e39499c7b6fcf01925","sha512":"6d841601e14991dac12538a1d0d8af13f5a5d128e3244621d846a2b2e792cb1a0f72c5b521702fd930b8f46bbb3d21a59eba8aafb61ad8fb8241c7302b54799c","ssdeep":"","tlshash":"fd31c7d9b000b7f9666698e08c367510f11f659eb8fafa30d69584a0b0940ee50ede6f","size":1482,"data":"","first_seen":"2026-01-06T14:24:49.627375Z","last_seen":"2026-01-29T18:57:32.453705Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/_app.config.js?v=2.8.5-1765286903243","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3712dae9e1bb22e7b2425aa3b3df9ec","sha1":"647021fe19f886a317b4f483f4dd96f83a676e8e","sha256":"aa1788ae9d8dd7e652d400678b74196e17f81d336f4ade79d7028b4b9ed5d81b","sha512":"4fde32c743296981323c6907118e5618cf606ef5faa6f416f36de3c9e42d0cb2db78c5b8c94a5eaf7c6a0a1567586b6b43b5f97c7fba2983ddac2bde16e2a89b","ssdeep":"","tlshash":"99e02ba507ef8cca1850e414b1123e44eff2f6342e2e364301898cde2f2e4430d4c198","size":378,"data":"","first_seen":"2025-10-14T15:55:51.085371Z","last_seen":"2026-01-29T18:57:32.431681Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/en.094f4ddc.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"78c79810fc813e903a4c6669a347e3ca","sha1":"b64be13d598c088704127b3dd4558c1759e42d2f","sha256":"69837ec92960fb2cf84c1fb56ecc64e535e399f39826af2b5ebe3ee1be1a059c","sha512":"c4a2757a11dc5ee207fa07ee0a20778e77ad3dae6afc3d19eb6b63c1b4f2f76ce29c9e8c256a470e8f3a5488bb08a0439af1ed961b73a6836d97a5cc0a4370fd","ssdeep":"768:M/o8ejVXQGuYMcAcewBYx8d5ofdq+sjrAbdmGd2P54Hnrn7g6lKfLkh:Goh08mMQk+s3edmqKaldh","tlshash":"e7332d0e77066a3e1db3438138cf3714e27515d242a588ad0ddcc47d23f69ae63ab7a9","size":50883,"data":"","first_seen":"2026-01-06T14:24:49.667324Z","last_seen":"2026-01-29T18:57:32.424209Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/useSocket.c394f4c7.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"39d32b4dd5a07380c41b3237506fbe62","sha1":"1a785fb417c5e570ff772d11d968430766893bf7","sha256":"2a23e0aadcb62047ce707d8fd46c9a65bba0d462e3409680ed0cd0867699f4c7","sha512":"2f5757f0c0690ac19cd73f21916174ba3811000b3afffa58eb94f83816d393b19dde4b4192c8da7e8c78b94c0673c51e19e1d4d08f36d5605c89927671ccbf06","ssdeep":"","tlshash":"c411c0c8a272656573f640d3b8356410f10944997f0991cbbd2c4dc372725cad55af76","size":881,"data":"","first_seen":"2026-01-06T14:24:49.62465Z","last_seen":"2026-01-29T18:57:32.404499Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/FullscreenOutlined.a2ea6454.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"996e2398e5071f0fa63793a1390c4600","sha1":"ea1097084136df1a3b76e78c16d5667f891ff497","sha256":"bf943592775662f9c3f0f18a050192d2275c7dc1651e796815c8f797bddb69e7","sha512":"5bc42b86e074fa13e2a42222d10b27ac1089a820220bfed4986ca15bd8f84da5ee954fbb18f0a6184daf385b7a26737e4da8f02d78f523ed9e6e2a791565ca24","ssdeep":"","tlshash":"8c5162c1135cb2f2104242b8452a6603f23de646f4fce1f9ef9c9ae445a58d97075b99","size":3144,"data":"","first_seen":"2026-01-06T14:24:49.625401Z","last_seen":"2026-01-29T18:57:32.415022Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/get.75f3c97a.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"f6892dcb2d55ea8e1bf1338b338122f1","sha1":"9d5aae2c618704ad9a261dd5ec0fa0dd8e33ffa4","sha256":"55efc235739ee03ae4ebc4cef7936f1ef37bb3529d9b300621009525b2e0f8b6","sha512":"d878519e6e4beeadfea0cc3245314d039f3a994ea2b4dc9a4b11c6cfbad6502834b87bcfa9f00091a609d146bbe40e0ac0ff126dda964d403858e0e473d40b2d","ssdeep":"","tlshash":"6ab02bc93050e0f8f1045cc4c0123c31132fb234520685009003c18217ac5e0818bc12","size":125,"data":"","first_seen":"2026-01-06T14:24:49.639125Z","last_seen":"2026-01-29T18:57:32.427295Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/download.58b9eebe.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"d8db402dbe8fef4b78e497a201d4c013","sha1":"872b3ac87f3a334a1320e13c9e93327d80cbc019","sha256":"902946fc6747ad582f6bd9959e3f3de2597641473c5b69104f0416ae0bee773a","sha512":"87965b7c5faae0a0712f761341dba1a16fc246cbdf680aa602a611f7d4e048bb4c1623165cf3d282ba41de1a3c75c3c9dc22c972963435d39afc824e72d6b3dd","ssdeep":"","tlshash":"ecf0d8ae20d1a1b842710c9a32b61b00f273989bf0328140a0ad0d0cb934aa346bfcbd","size":628,"data":"","first_seen":"2026-01-06T14:24:49.6725Z","last_seen":"2026-01-29T18:57:32.418493Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.c0531fe8.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"883eff939efdbfc99cf9bf1226d49a69","sha1":"33e724246c59ea8666e50044973b81a36f090287","sha256":"dc43a58ae393d622e50ed8b4c93f3b2fa19f54f090c58d54b9015e2da5b72589","sha512":"ae6d53d908ebfa6cf8679eaf194386ce5076ee07ef7091be598a6f1668ba5f038d3aa1498a1f04536a8b10a413e1295001bc2740d9950e0754b181a5dfc51916","ssdeep":"768:V4JCRFdFVinkCO9T9xJuy7RpfTTyT0dxOFRp5PMLjVlEhuOFEas4UihoQLLaK8UA:eiFQnkCO9T9bT80d33a2lSG","tlshash":"04c2e99832d571a783e762e5003f4405e2fea870356d58a8fa48d8e77c75d6a80b7f2c","size":27929,"data":"","first_seen":"2026-01-06T14:24:49.618507Z","last_seen":"2026-01-29T18:57:32.40915Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.5ddb69a7.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"e44d7f745573479e31cc06b5882eaf8c","sha1":"1427b0b11e0a3a8f4aa3ea6535e0020adb83b776","sha256":"efaefea5e887711456d2d37b144ec1333ada4478e3d20efb59697972df0635c8","sha512":"640d3ece1d00a3aad233300f59a574544b5cfd172254aba71be7413badec2b694dc5122bfc12105212628a11db32531cd80288725afdfbfa5b9ba67770cab949","ssdeep":"1536:QOnw2AMUv31cfLFn11ILgIf93jRzW2Fg2dMW7FZxe2MOUlXw9GN72fiDTGVjsrtV:Bnw2AM831cfhn1qDf93jFW2Fg2dMiFn2","tlshash":"43432a4a70057534e2aa28b8d42d1848633d8bc9b108c1a4ff764c7d3ad855e96edfbb","size":57940,"data":"","first_seen":"2026-01-06T14:24:49.634083Z","last_seen":"2026-01-29T18:57:32.398965Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/useContentViewHeight.7181d516.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"3456d5a4e492cf22fdb144017d9c994d","sha1":"addea16a5487d35fbcdaab8513a7bc53ab7a5224","sha256":"9c602b7ff8aea61de8e7d2f37de5aed913be464c7cae234be11d0e4e268095fe","sha512":"e35bfd237d7cc4c153855ab58f08c518e6b3ba1ba2bc6abf484e220ad0ab77d462fcfd6ffa72b941def64c7460f404890c50bc0e2630e29e2c7fb6cb41925c66","ssdeep":"","tlshash":"5311657672623530d135809bf16f5e48a2301708f85a82d16219cc493d355aba30fac6","size":998,"data":"","first_seen":"2026-01-06T14:24:49.626547Z","last_seen":"2026-01-29T18:57:32.426266Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/_baseIteratee.550fa07b.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"c3cb28b920568a5e9b00d455eb817bdc","sha1":"4647f837790c908005bcb584a6abb85f18cdd070","sha256":"50e55aa9abf5a89de1596c57e2a495066da78c2a479cbbbdd53a4ea099e1db80","sha512":"6de3ff459aad7347a6cc1dd0f9efa494b8cb1eb48b783dd24fffe794e103a2fee5c0752fc303fb076a83e82bee252df387aa4fada90f27677fdda47440b34d47","ssdeep":"","tlshash":"3b21cdc876ebf4a4b2467439d0ef8197f33dad90964c8610d013b0e63e3592ac577c19","size":1208,"data":"","first_seen":"2026-01-06T14:24:49.623593Z","last_seen":"2026-01-29T18:57:32.409687Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/helpers.23683de1.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"ae9a44a6f8c201c4778fb8ee6d4b5b6e","sha1":"de727c66177e5c277e536f69e0ad3f46bec69fb4","sha256":"06553b3990167a1967f9f077b89289337d50244526a4fa8b95003670decb07ff","sha512":"fe0a6dd851db589d7913eb57ee887dde8b505ecb7e4704affbb95062c1af835c729019466f9704faaa3f676a4213f753a41db6105698b66506de5925746037ee","ssdeep":"192:uDOGsbYD8kPYSlRpRCVLMSOKefR7tLSYczfvWq4IrlrDGJ:4XJYUCOKefHLSYczfvWq4Irlry","tlshash":"eef1d9c8fddeb5b2928e36e404734429e37d004c68cc1696c1d0baab3a3355da0f6f5a","size":8139,"data":"","first_seen":"2026-01-06T14:24:49.657617Z","last_seen":"2026-01-29T18:57:32.414443Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/Col.742d9529.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"aa17991f35ba35eb3305e6c799b8422a","sha1":"9951680ad5f830d25757514ba3ca112297c3218f","sha256":"a9660b677ff11a29b0db330f45a819c134f252a095112b70093d99ef28f949f6","sha512":"a9bda01fec04206ac935cbe0c2885bcd3aeebec6202f0a4972f336969994164dfa7f757703e85601794570dbb957ea350a6cc0d0908e37b095424a1d9e5443d7","ssdeep":"","tlshash":"668122fc7243b1293369e872822f1719b31f26996cb5ddc4a063d9914b3be88c416b1f","size":4072,"data":"","first_seen":"2026-01-06T14:24:49.635644Z","last_seen":"2026-01-29T18:57:32.439606Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/useSize.d8b304cd.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"da819494946d74aa71edede8d968194c","sha1":"3f137e432e2cb50252710d6cb7e16d8167de3599","sha256":"a71b55be883e7261994301420680eeec8690dee5198a4e19e19bc5463e14c9ff","sha512":"f0c9d2f3b7423b8a087cdad4a606bd8431ae01c0de1448442042bea9fc447dbe0e26d6dbf80a7b0c50ac36140f88473be37bac186f8f0a17b6c7b07e6086c757","ssdeep":"","tlshash":"a1e0865e74c2f2b05246b415003f2806a37f19da565da284d14353816bba0488527f5c","size":320,"data":"","first_seen":"2026-01-06T14:24:49.658528Z","last_seen":"2026-01-29T18:57:32.403189Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/scrollTo.d9c71d82.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"b1203e4e9aaaccdaa9d73e4c534e1d26","sha1":"71b2a9ea0b211c386707eb5e75b4632451a747a4","sha256":"63c1ad1b4a351c276390d603f38d68f851c2cff93433452541ea34a3bb2e4b6a","sha512":"2a2094e2d65f0a7bf6c97bd086791700752617284a6eb3fd07260dde7d4288de2f4494ea1d19ffab23ceb8eeab64b9f8c2cc70273dac3d5a3a34ac79f4b78d50","ssdeep":"","tlshash":"fb1154ccf16524e4555d8099a17f631b3a33b232314db480911ee4f62632fb3a2c28df","size":952,"data":"","first_seen":"2026-01-06T14:24:49.653828Z","last_seen":"2026-01-29T18:57:32.417871Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/Form.f159d48e.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"d7ff9dba146581967f878f2aa16520a4","sha1":"445d5c726bc72af1ad9c9c73fc153ac7fdd1cdc6","sha256":"7fabbd65cde88942c5468dded02eacde4b8353ba76af250408e4dcde6ac4c06e","sha512":"b1e8033d6767782b0313569b13413e9a7cf5ffea49b1a306933f40340230fec4ef80cd9b50d77eeb8e44a3b8cfb353251ac47e3b20a9518588fff951f132dce5","ssdeep":"768:lOD4ufbnjmqRSe0ke3Ge6ee3Se3ie3ye3fephe3oe3ge0leL2eR9e3M5ucYIZ/Z7:KhSoNVksOul9/","tlshash":"5223b8cc76dab4555b7260f0603f9107f22f7e81581d9880f29aa5f62ef4e098163f7a","size":45774,"data":"","first_seen":"2026-01-06T14:24:49.652292Z","last_seen":"2026-01-29T18:57:32.406677Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.704b80a7.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"311c9936dd936494e34cda555edca743","sha1":"11e1b29c7e2230126c52320f63fa65290d62aa22","sha256":"2cff26aa292e3415368995a0ba9756684f5700e13b12fead3e5e6626571e3869","sha512":"7c3fa31c96305e491ebc1bb690102c5767af30beada8d26d7b42a6137a63602a8bc209bc9c3ea0038def1ccfc28cab70d6c268d4c3d980d9fa7b4a0d4681a7ad","ssdeep":"384:UPAGPo27lAmPjCHAdYNoFiUO06UqowayD+Ryfy8hyDq:UIGD7lAm7CHAdYNvUfxqnJD+Ify8cDq","tlshash":"4c42190db00daf77891b8c20f03b4441623a07966165c5f5faba4e743ee5c95822ebfb","size":12890,"data":"","first_seen":"2026-01-06T14:24:49.656727Z","last_seen":"2026-01-29T18:57:32.413206Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"7b739e0919917c7c6eda070d1c8a7dfc","sha1":"5cd5781cef41ad1e8485715bf8cbe27e2c9c3ce8","sha256":"b3d468045aaa453284cf4dda32468418bcbb5f79c9bb2399f26ce48f009e9180","sha512":"36516fd0696747bbc4a96b6acbd19b9b0b6edb2675767672b51385b28958f3c9ce12a4ad773ed1d3ab720511bc8716dddaea467fa7a6f8479e6ce87f7c2048cc","ssdeep":"","tlshash":"d0d05e1a106782224c7734aa07ceb1463312b5171d06cb54bc0f58352f647275de57c9","size":284,"data":"","first_seen":"2025-03-08T01:47:03.580206Z","last_seen":"2026-08-02T13:46:43.991959Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.274518f6.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e63aa8d7f404e55b852489101883e02","sha1":"c9df023fba1debf1811df00af45932ce472d88c1","sha256":"7b96168593cf9bdff373011223cdd46a2f31d61bc43eed6c3233253bfe418d10","sha512":"77dff734a0366570165d2e853c69f763ad6b347d40f92491deda33661727922da16e68818a9c28b91a45da464c56baa357375c621b1c2e66265d650f06ae5d69","ssdeep":"1536:BFmOYDesFh2OcmnckN6ceAj+qHCo+KsqzpujdsIzgTYK4Wqijm:bmOYDNhWmH7JsqzpuZN+AW/jm","tlshash":"8af32b4cb314b1bac2eb2159625e810132b72d89b405d5b874f84cab99fdd2c139ffb9","size":160593,"data":"","first_seen":"2026-01-06T14:24:49.639962Z","last_seen":"2026-01-29T18:57:32.405524Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.e5f92897.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"424800be63cfb2efa8e597f854e5893e","sha1":"4422c55b7dbcb7090af451996d9bdcc53927a7ef","sha256":"2c9d2e7b81c98465ad2a29a105e75fd5eb14491d1faf15e97f3864d66a01a8d9","sha512":"ccd3ad1992c012f83c033e1b58252bd7cf72a4712a2f41ce6a75ab98947937c4c62aa0f6b42f9fe1d4842144260dafcea68dd4f6721cd9ce1a834132fa8a9d23","ssdeep":"","tlshash":"1ce0df4cb0c6e9fa2302001264bab603e7398fa005694f648011b1883abacbd9e38a84","size":347,"data":"","first_seen":"2026-01-06T14:24:49.615961Z","last_seen":"2026-01-29T18:57:32.422614Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.b017e258.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"60660c8db334c571f001d48fdfae3970","sha1":"22dddcdf8811a3adb14bc2564d79795c4f1e340e","sha256":"3838ff4368ea3e3767b224506052fa1e54f3d538576a0b0f0d8ffcd92608b32c","sha512":"e45a7027e506dd6de6bf9baff2b86c0c3f59baa668eb946462acaf75cd7d7950c6a84233d4d0a47446725c0af9647417a44ab2591acfc3d4415be048bf244c27","ssdeep":"384:OpRqQ01RuEm0UG999v39q+TR2lHi1V93Le7+rYorcPoGsUhXXrnQbRaB:Opo14Edxn9v9DUHC3C7hxP7ZrnWRW","tlshash":"e5b2a7d9b38a74b29773bda1c17f460973363b405c098ca06223d5e52a6bf589122f7f","size":23696,"data":"","first_seen":"2026-01-06T14:24:49.63496Z","last_seen":"2026-01-29T18:57:32.443658Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.ead8cd55.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"d740e5d46616f84d0d33515bcc8b76ca","sha1":"dc05fe7e894190cd68eb4f11afd902399b8f1761","sha256":"4d146b37a478f099c3794249dcf3453a0329ae51aeeb99b3deebc44191045579","sha512":"4f81dd948b98c4e2d53156d8c7916f275d9c52547411795886107955ddc842c0b31855b13ffe19411f099e45111df99bccce389a983e1f972275c8305697a6b1","ssdeep":"192:gnRs6MLQPrm0/Euiew96XJw9OEo2kD6hch0FSlDdFhp:YdMuiew96XJw9OE5yOd0hPz","tlshash":"1302e868305aa43f9de74568a15e0c09552d1fc9f422e8b1d1beec321bd28fce79cb58","size":8818,"data":"","first_seen":"2026-01-06T14:24:49.659989Z","last_seen":"2026-01-29T18:57:32.401041Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.23b8f0ea.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"6508770558d4f859e90c6d9dfa66cfe9","sha1":"b34e6bc0311a237c654473a2e7198ed98b21cbb5","sha256":"b5a3582d7044c5c2c758b34eed9933c0dd60c86d5ba297ceca95cc548e7d8225","sha512":"135ebc23b415165b64e25b7830886282d1908028b5ee27e6a7e7a7fe898de4e6f7d44ceffa79de3900f429cff0365634d504afb743b2e94c0d5ef7db05159c7a","ssdeep":"384:od3IQLDlzVJWqBn8VD0UCNgAsUgh+8Bd3o8quRT/UIjq:k3IQLDR8VDbGghtgmq","tlshash":"b582d8ac7259b1f58737646001bf9409f23b2bc4a8a9dd90e623c9d43cb8d4c9516faf","size":17631,"data":"","first_seen":"2026-01-06T14:24:49.621661Z","last_seen":"2026-01-29T18:57:32.42315Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.669c6e5b.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"84dfc92008f21e724fe1bd51dfe51da1","sha1":"18f28f71d0fa7e7cbfb8ccae4e9daff03e5c16dc","sha256":"8b493b38058e52b85e87173fa47b321a4f23f0444bfba96dd7e7af1d7c8058f4","sha512":"aff07b31286d477cba828a124cc74169bb39469c2780ab257da45ed721055a96e8b1ac98f9cc51fbf749b5144b4b35b6f7d34a3e8a630548f261d388472f7928","ssdeep":"96:xhviNTQRILRf2jcIjc2heQC6E7mjebP4gLwIGoY2ll/YJW49p0URfkqINs4zepQT:7iNMRILRf2LHhNSbggLwIGwlxCf0UGqy","tlshash":"b8c1c741793afb3d86775560ec6d8800e2240bae806ad0d1e2fc8ad379ded718345b7b","size":6066,"data":"","first_seen":"2026-01-06T14:24:49.628201Z","last_seen":"2026-01-29T18:57:32.434869Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.39a80dee.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4a48aa8d4b2a288b25faed21600cc67","sha1":"c03aa0095929083ba8493428baf37716b8a40f00","sha256":"db977f7e769490b81ee661c396a02674a6915efc9539dccfddc72df981ec8e61","sha512":"8fbdc1d8b50c9cdfb3763ed67b7427dbc2880f8a14e4cae0a1386efdbf451db97392fc6e1d46505fee3e25d80e79d74111f69b7ce96a44ffccdc92ef420d1e28","ssdeep":"24576:PaT1GQEJER2a6+ddGdKgWVDRdlNzwYL0XGq2AER0WbeWom2ee2KP:PaT1GQEJER2a6+ddGdKgWVDRLNzwYL0X","tlshash":"773539e8b289b079436749a4807f0106b33f6aa5780dc4a0e1aed9f53976e4cc167f7d","size":1109880,"data":"","first_seen":"2026-01-06T14:24:49.679307Z","last_seen":"2026-01-29T18:57:32.4708Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.c25d9589.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"745455a980a96d4db4d004e8cd32b0aa","sha1":"ceab2a7cd59780e47a9dc86d74c647a885311f26","sha256":"a122579573e7e4ab22e5e6c8546c323fc3b9db83b1a32c152cd34959e4e643a0","sha512":"5ef6b66570a41a67a4cd278d9d6f9e15a8c7089b6946ec388a3bd2770982b333a276e7c671afa4376e15b76c00d4a8ffefd1478ae52dceeaa8737870b8dfca49","ssdeep":"3072:zb6/QI4Wx0zpzlXl+DD/DCD/DCD/DD/DCD/DCD/DD/DCD/DCD/DDCD/DD/DCD/Da:zPIpIpyMo2f","tlshash":"1b0532281a6bf744e418c0dbfa373d84c59dd18aa44725d24f755bb34ba2793eaacc03","size":846159,"data":"","first_seen":"2026-01-06T14:24:49.630999Z","last_seen":"2026-01-29T18:57:32.425216Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.e5f92897.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:03.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/index.e5f92897.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claimfinder.top/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:03 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 347\r\nlast-modified: Tue, 09 Dec 2025 13:36:22 GMT\r\netag: \"693825d6-15b\"\r\nexpires: Wed, 07 Jan 2026 02:24:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":347,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (346)","md5":"424800be63cfb2efa8e597f854e5893e","sha1":"4422c55b7dbcb7090af451996d9bdcc53927a7ef","sha256":"2c9d2e7b81c98465ad2a29a105e75fd5eb14491d1faf15e97f3864d66a01a8d9","sha512":"ccd3ad1992c012f83c033e1b58252bd7cf72a4712a2f41ce6a75ab98947937c4c62aa0f6b42f9fe1d4842144260dafcea68dd4f6721cd9ce1a834132fa8a9d23","ssdeep":"","tlshash":"1ce0df4cb0c6e9fa2302001264bab603e7398fa005694f648011b1883abacbd9e38a84","first_seen":"2026-01-06T14:24:49.615961Z","last_seen":"2026-01-29T18:57:32.422614Z","times_seen":5,"resource_available":true,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-06T14:24:00.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/ HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:00 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 09 Dec 2025 13:36:48 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825f0-a84\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2692,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1700)","md5":"2505931232425e9f94e9bf3ce3b7bde7","sha1":"7d86c1373c5afa38fbe482cf1a8cfb540af0cafa","sha256":"0d2083c1e4108d8a99cf3e0fe618f5468eb95c78d7ca0a829ee10ef626207941","sha512":"f0e872c3f529e8925ad5c687d8e86a62fd7c467852e62bbd28a9490aafca53843caf7aa369bdb6b5596fb0fa38d9b6181f252ff04a98c85b78b673bcff5b84bf","ssdeep":"","tlshash":"cf51a8560012920daa335d5e55f4bb09a0b6cd67de0359afbd9d133f8fc698708b174c","first_seen":"2026-01-06T14:24:49.616883Z","last_seen":"2026-01-29T18:57:32.421248Z","times_seen":5,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:02.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.0.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 14:24:02 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 15248\r\ncf-ray: 9b9be06e6f8db51b-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"620188b3-3b90\"\r\nlast-modified: Mon, 07 Feb 2022 21:01:39 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1527896\r\nexpires: Sun, 27 Dec 2026 14:24:02 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=kTf%2BXkPOsQi7hgEelz4icpJPL%2FJtpSLz%2BxCjceQP%2FgsLzzNT0Rndflx835EHIxmyPD%2FlNShG7LJS9MIGCuhI%2FBqITa%2FzqQO48bw27Dc2RnC3t41io9ZZ1SeUpuOUZAyxEVShek9T\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89220,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65317)","md5":"dfb8fc36e102730fddf78b5494eb0035","sha1":"b513d9a39af2ee145f12c1ba03f9982960c47029","sha256":"8d321d88cb97fdedc3189506c25de9292c6e73a60ebaab496243346c6404480e","sha512":"f6eb006b5d0844ed078689e9c80215a63af294fbe80f088f52229d5a4e6ddcfca8958d5c39de03484d066beae2e00b93ae83d1e5a42f5d4f710baa8e3e7cc57a","ssdeep":"1536:iUMVM6MVMkMVM9MVMNMVMispxd1zJJ29Nll3IV7UHsR+z:Dd1NY95IV7UMR+z","tlshash":"8a93a9e9e04c05d56732c44baf99b37ca5b6f73cd5810da9f02f580c19d26a822c6f7a","first_seen":"2023-04-06T16:57:15Z","last_seen":"2026-08-13T09:12:26.444021Z","times_seen":13425,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":17,"dns":1,"connect":1,"send":0,"wait":16,"receive":1,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.c0531fe8.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:03.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/index.c0531fe8.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claimfinder.top/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 13:36:21 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825d5-6d19\"\r\nexpires: Wed, 07 Jan 2026 02:24:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27929,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8731)","md5":"883eff939efdbfc99cf9bf1226d49a69","sha1":"33e724246c59ea8666e50044973b81a36f090287","sha256":"dc43a58ae393d622e50ed8b4c93f3b2fa19f54f090c58d54b9015e2da5b72589","sha512":"ae6d53d908ebfa6cf8679eaf194386ce5076ee07ef7091be598a6f1668ba5f038d3aa1498a1f04536a8b10a413e1295001bc2740d9950e0754b181a5dfc51916","ssdeep":"768:V4JCRFdFVinkCO9T9xJuy7RpfTTyT0dxOFRp5PMLjVlEhuOFEas4UihoQLLaK8UA:eiFQnkCO9T9bT80d33a2lSG","tlshash":"04c2e99832d571a783e762e5003f4405e2fea870356d58a8fa48d8e77c75d6a80b7f2c","first_seen":"2026-01-06T14:24:49.618507Z","last_seen":"2026-01-29T18:57:32.40915Z","times_seen":5,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/Wallet.64f99187.png","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:04.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/Wallet.64f99187.png HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 3252\r\nlast-modified: Tue, 09 Dec 2025 13:36:36 GMT\r\nvary: Accept-Encoding\r\netag: \"693825e4-cb4\"\r\nexpires: Thu, 05 Feb 2026 14:24:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3252,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"f5974cbce6de93883b571db84c5ba0fe","sha1":"b2e55c19d05084bef808c073a9eafd7fb87f8424","sha256":"3a8dcd700719ff39dec21a17b7c703f94de3be8498643f6390837f0b3aa22b4d","sha512":"a5f7038ee5ba79033e8fcd30d54bbe646aa5c46d1cc1cad2dc9f9ee1316ffb569bf4dc69834cc5edc4ecc68d3f71b3f90dd3c00c7932528495b78b9bba24521b","ssdeep":"","tlshash":"57615b22bf818fe019324d35ca9d24bb81da0607ac89095ccbf08d394632185bafacf1","first_seen":"2025-10-14T15:55:51.075367Z","last_seen":"2026-01-29T18:57:32.420039Z","times_seen":6,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/bg-banner-top-4.ffa9cda3.jpg","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:04.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/bg-banner-top-4.ffa9cda3.jpg HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/assets/index.1c492309.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15837\r\nlast-modified: Tue, 09 Dec 2025 13:35:59 GMT\r\nvary: Accept-Encoding\r\netag: \"693825bf-3ddd\"\r\nexpires: Thu, 05 Feb 2026 14:24:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15837,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, extended sequential, precision 8, 1920x902, components 3","md5":"76d098b8c7dde98ca9b21a6f70983ddf","sha1":"9444f00903e312128737a50f6b4990ef5fe65828","sha256":"f72a11554c878d89c811a1bef27a800d4c489bcf431cb55d0336d6cac093414d","sha512":"c34af459d1fde1a8595d320de3b39127be7fc97b194dd9284fab6cd80b60f220a62a4a18f5cc00479f05163f6910740490379521adae974ebbffa5e12e7e93cc","ssdeep":"192:UfC2KtvdavgCWj6xWg2vgV904T8pH/dNr8h2YSsyDWQvDS11eUL9y:UXAgI5usINI/Xr8rySb1VQ","tlshash":"59623827e309d453d5cc3b3489a7831c7f6b15f5a6606607a7820d3baaae7493c9d1f0","first_seen":"2025-10-14T15:55:51.098298Z","last_seen":"2026-01-29T18:57:32.454848Z","times_seen":6,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.23b8f0ea.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:05.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/index.23b8f0ea.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/assets/index.704b80a7.js\r\nCookie: PHPSESSID=c5s6d67pks3i7obhqr8lf71rv7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 13:36:12 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825cc-44df\"\r\nexpires: Wed, 07 Jan 2026 02:24:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17631,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17630)","md5":"6508770558d4f859e90c6d9dfa66cfe9","sha1":"b34e6bc0311a237c654473a2e7198ed98b21cbb5","sha256":"b5a3582d7044c5c2c758b34eed9933c0dd60c86d5ba297ceca95cc548e7d8225","sha512":"135ebc23b415165b64e25b7830886282d1908028b5ee27e6a7e7a7fe898de4e6f7d44ceffa79de3900f429cff0365634d504afb743b2e94c0d5ef7db05159c7a","ssdeep":"384:od3IQLDlzVJWqBn8VD0UCNgAsUgh+8Bd3o8quRT/UIjq:k3IQLDR8VDbGghtgmq","tlshash":"b582d8ac7259b1f58737646001bf9409f23b2bc4a8a9dd90e623c9d43cb8d4c9516faf","first_seen":"2026-01-06T14:24:49.621661Z","last_seen":"2026-01-29T18:57:32.42315Z","times_seen":5,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimking.top/attachment/images/2025/11/11/ntda.png","fqdn":"claimking.top","domain":"claimking.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:05.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /attachment/images/2025/11/11/ntda.png HTTP/1.1\r\nHost: claimking.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 10881\r\nlast-modified: Tue, 11 Nov 2025 03:10:10 GMT\r\nvary: Accept-Encoding\r\netag: \"6912a912-2a81\"\r\nexpires: Thu, 05 Feb 2026 14:24:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10881,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 299 x 299, 8-bit/color RGBA, non-interlaced","md5":"7c56ab5df1481d70e83d862f808aa436","sha1":"dbf8a5b2efcb654094829f34a68e0d8729516cf0","sha256":"c265d1697df12c423814fac3c4041ed47e4db7c2f5f2e18b5e407fa4bb7a4356","sha512":"4d77bbe880577932c5d5d0c10fdf241a605c4db5519a2c9f5f41918357c1c77e67cd7fe20c43a56b3ff2b24e4a8e4bcdb37a3ced42ef37ccfc7f6b9d2071ecd5","ssdeep":"192:aFFHHoU+wMve33uRb93yrj3ozvV4DXMqqRYv7ko+YkrJ82pqaDDp1a61JE:aFVId+6bc3oz92BqSJ8NvdDDt1y","tlshash":"ab22bf2c38f7e4c5a42d8d8db875ac43cd42529e4079f5b02fc146eeba1399a80774db","first_seen":"2026-01-06T14:24:49.622601Z","last_seen":"2026-01-29T18:57:32.460628Z","times_seen":5,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":87,"dns":0,"connect":0,"send":0,"wait":256,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimking.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/_baseIteratee.550fa07b.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:03.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/_baseIteratee.550fa07b.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claimfinder.top/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 13:36:38 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825e6-4b8\"\r\nexpires: Wed, 07 Jan 2026 02:24:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1208,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1207)","md5":"c3cb28b920568a5e9b00d455eb817bdc","sha1":"4647f837790c908005bcb584a6abb85f18cdd070","sha256":"50e55aa9abf5a89de1596c57e2a495066da78c2a479cbbbdd53a4ea099e1db80","sha512":"6de3ff459aad7347a6cc1dd0f9efa494b8cb1eb48b783dd24fffe794e103a2fee5c0752fc303fb076a83e82bee252df387aa4fada90f27677fdda47440b34d47","ssdeep":"","tlshash":"3b21cdc876ebf4a4b2467439d0ef8197f33dad90964c8610d013b0e63e3592ac577c19","first_seen":"2026-01-06T14:24:49.623593Z","last_seen":"2026-01-29T18:57:32.409687Z","times_seen":5,"resource_available":true,"data":null}},"time_used":405,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":405,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/useSocket.c394f4c7.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:03.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/useSocket.c394f4c7.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claimfinder.top/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:03 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 881\r\nlast-modified: Tue, 09 Dec 2025 13:36:36 GMT\r\netag: \"693825e4-371\"\r\nexpires: Wed, 07 Jan 2026 02:24:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":881,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (880)","md5":"39d32b4dd5a07380c41b3237506fbe62","sha1":"1a785fb417c5e570ff772d11d968430766893bf7","sha256":"2a23e0aadcb62047ce707d8fd46c9a65bba0d462e3409680ed0cd0867699f4c7","sha512":"2f5757f0c0690ac19cd73f21916174ba3811000b3afffa58eb94f83816d393b19dde4b4192c8da7e8c78b94c0673c51e19e1d4d08f36d5605c89927671ccbf06","ssdeep":"","tlshash":"c411c0c8a272656573f640d3b8356410f10944997f0991cbbd2c4dc372725cad55af76","first_seen":"2026-01-06T14:24:49.62465Z","last_seen":"2026-01-29T18:57:32.404499Z","times_seen":5,"resource_available":true,"data":null}},"time_used":395,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":395,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/FullscreenOutlined.a2ea6454.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:03.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/FullscreenOutlined.a2ea6454.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/assets/index.5ddb69a7.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 13:36:06 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825c6-c48\"\r\nexpires: Wed, 07 Jan 2026 02:24:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3144,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3143)","md5":"996e2398e5071f0fa63793a1390c4600","sha1":"ea1097084136df1a3b76e78c16d5667f891ff497","sha256":"bf943592775662f9c3f0f18a050192d2275c7dc1651e796815c8f797bddb69e7","sha512":"5bc42b86e074fa13e2a42222d10b27ac1089a820220bfed4986ca15bd8f84da5ee954fbb18f0a6184daf385b7a26737e4da8f02d78f523ed9e6e2a791565ca24","ssdeep":"","tlshash":"8c5162c1135cb2f2104242b8452a6603f23de646f4fce1f9ef9c9ae445a58d97075b99","first_seen":"2026-01-06T14:24:49.625401Z","last_seen":"2026-01-29T18:57:32.415022Z","times_seen":5,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/useContentViewHeight.7181d516.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:03.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/useContentViewHeight.7181d516.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/assets/index.5ddb69a7.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:03 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 998\r\nlast-modified: Tue, 09 Dec 2025 13:36:35 GMT\r\netag: \"693825e3-3e6\"\r\nexpires: Wed, 07 Jan 2026 02:24:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":998,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (997)","md5":"3456d5a4e492cf22fdb144017d9c994d","sha1":"addea16a5487d35fbcdaab8513a7bc53ab7a5224","sha256":"9c602b7ff8aea61de8e7d2f37de5aed913be464c7cae234be11d0e4e268095fe","sha512":"e35bfd237d7cc4c153855ab58f08c518e6b3ba1ba2bc6abf484e220ad0ab77d462fcfd6ffa72b941def64c7460f404890c50bc0e2630e29e2c7fb6cb41925c66","ssdeep":"","tlshash":"5311657672623530d135809bf16f5e48a2301708f85a82d16219cc493d355aba30fac6","first_seen":"2026-01-06T14:24:49.626547Z","last_seen":"2026-01-29T18:57:32.426266Z","times_seen":5,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/RedoOutlined.c0b08b1d.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:03.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/RedoOutlined.c0b08b1d.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/assets/index.5ddb69a7.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 13:36:30 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825de-5ca\"\r\nexpires: Wed, 07 Jan 2026 02:24:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1482,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1481)","md5":"95123b3a995f203c06dc7d5192ab5961","sha1":"b75d5ba4834d4cb01516d6f6a408905e0f7dd5c6","sha256":"5f289657eb96ad4cb00ab061a561b3f7b00666d2f57dd9e39499c7b6fcf01925","sha512":"6d841601e14991dac12538a1d0d8af13f5a5d128e3244621d846a2b2e792cb1a0f72c5b521702fd930b8f46bbb3d21a59eba8aafb61ad8fb8241c7302b54799c","ssdeep":"","tlshash":"fd31c7d9b000b7f9666698e08c367510f11f659eb8fafa30d69584a0b0940ee50ede6f","first_seen":"2026-01-06T14:24:49.627375Z","last_seen":"2026-01-29T18:57:32.453705Z","times_seen":5,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.669c6e5b.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:06.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/index.669c6e5b.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/assets/index.704b80a7.js\r\nCookie: PHPSESSID=c5s6d67pks3i7obhqr8lf71rv7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 13:36:15 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825cf-17b2\"\r\nexpires: Wed, 07 Jan 2026 02:24:06 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6066,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6065)","md5":"84dfc92008f21e724fe1bd51dfe51da1","sha1":"18f28f71d0fa7e7cbfb8ccae4e9daff03e5c16dc","sha256":"8b493b38058e52b85e87173fa47b321a4f23f0444bfba96dd7e7af1d7c8058f4","sha512":"aff07b31286d477cba828a124cc74169bb39469c2780ab257da45ed721055a96e8b1ac98f9cc51fbf749b5144b4b35b6f7d34a3e8a630548f261d388472f7928","ssdeep":"96:xhviNTQRILRf2jcIjc2heQC6E7mjebP4gLwIGoY2ll/YJW49p0URfkqINs4zepQT:7iNMRILRf2LHhNSbggLwIGwlxCf0UGqy","tlshash":"b8c1c741793afb3d86775560ec6d8800e2240bae806ad0d1e2fc8ad379ded718345b7b","first_seen":"2026-01-06T14:24:49.628201Z","last_seen":"2026-01-29T18:57:32.434869Z","times_seen":5,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"claimfinder.top/wss/","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:04.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /wss/ HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://claimfinder.top\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: VcRKe5GbZZcFepBrSIv2aQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: openresty\r\nDate: Tue, 06 Jan 2026 14:24:05 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nSec-WebSocket-Accept: 5Jzfw5HS1m2nq60rLSoSEpv/YiA=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T13:51:54.014064Z","times_seen":17872158,"resource_available":true,"data":null}},"time_used":786,"timings":{"blocked":0,"dns":1,"connect":268,"send":0,"wait":254,"receive":0,"ssl":262},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/ada.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.151.57","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:05.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/ada.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: gxojT0WK0JYPzCNxTQJrRiZP6Bnk106EHB5e17fLe/cusUUOe5dsl5PZQMMGNwoOv2+JjbrNSPM=\r\nx-amz-request-id: JW5SMT9V8X2FW0RZ\r\nDate: Tue, 06 Jan 2026 14:24:07 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:08:07 GMT\r\nETag: \"958ad0ab023fedd13301398a46f0ea98\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 6511\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":6511,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"958ad0ab023fedd13301398a46f0ea98","sha1":"1f006086eb1afdeecc534e1f9990435502080c98","sha256":"2f91923ef20d262b5fc74abf33fdffb7888e7cbce646e0380122825cb872f410","sha512":"819afddd9ee026b64182974f5e80c349651953e593725109b1d723884f4bd463e83d8443a8a22ad1b9ed76dbff6456071d19c5ec2787b4673d9c7bc6da4389bc","ssdeep":"96:HEENXWNXq2E8vTAd/IOZVMa/zSdv/RPk9WUvykuM+Xw7zROT02yrnfqzE:jXW02ELNIOZSe2M+Xw7oPSqY","tlshash":"25d1735973faa3b8b001e7fe87a794617a4529e36912d574c3b60e00ea8503d4efa853","first_seen":"2023-08-11T01:17:56Z","last_seen":"2026-07-24T06:14:46.310488Z","times_seen":208,"resource_available":false,"data":null}},"time_used":1309,"timings":{"blocked":1003,"dns":0,"connect":0,"send":0,"wait":305,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-06T14:23:59.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:00 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-expose-headers: \r\nlocation: https://claimfinder.top/pc/\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2692,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T13:51:54.014064Z","times_seen":17872158,"resource_available":true,"data":null}},"time_used":1521,"timings":{"blocked":601,"dns":85,"connect":252,"send":0,"wait":319,"receive":0,"ssl":258},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.96cd5307.css","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:00.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/index.96cd5307.css HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 09 Dec 2025 13:36:14 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825ce-b53be\"\r\nexpires: Wed, 07 Jan 2026 02:24:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":742334,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c42bddfb91bcc54b9b5aaaabad4e16c2","sha1":"bd61c9a6bde191b06e47ba0b6625494723fd6003","sha256":"ae7fdbdfcd1a552af6f7f46f248093d7709a4ac43ca92e3e5c68502c558ed5a6","sha512":"31f1ceb3c0a849532c5e84f43fe4ff70418af3295bc6892a2f241cdd417ba672f04f70609d334bfb0e6f7ba9b18ff780935c6056c2e0c9d81ae7bc4c8fce2802","ssdeep":"6144:UtZpz600I4fDd1i93w98b0jGcRlYtEDjJzsD3g7Lt:v5k93wd","tlshash":"ccf4b7e1f58020d8a767c327d690babc653af651e7164daaf527372ccbc22c71192b1c","first_seen":"2025-10-14T15:55:51.031747Z","last_seen":"2026-01-29T18:57:32.44124Z","times_seen":6,"resource_available":false,"data":null}},"time_used":514,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.c25d9589.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:03.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/index.c25d9589.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claimfinder.top/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 13:36:20 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825d4-ce94f\"\r\nexpires: Wed, 07 Jan 2026 02:24:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":846159,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (56903)","md5":"745455a980a96d4db4d004e8cd32b0aa","sha1":"ceab2a7cd59780e47a9dc86d74c647a885311f26","sha256":"a122579573e7e4ab22e5e6c8546c323fc3b9db83b1a32c152cd34959e4e643a0","sha512":"5ef6b66570a41a67a4cd278d9d6f9e15a8c7089b6946ec388a3bd2770982b333a276e7c671afa4376e15b76c00d4a8ffefd1478ae52dceeaa8737870b8dfca49","ssdeep":"3072:zb6/QI4Wx0zpzlXl+DD/DCD/DCD/DD/DCD/DCD/DD/DCD/DCD/DDCD/DD/DCD/Da:zPIpIpyMo2f","tlshash":"1b0532281a6bf744e418c0dbfa373d84c59dd18aa44725d24f755bb34ba2793eaacc03","first_seen":"2026-01-06T14:24:49.630999Z","last_seen":"2026-01-29T18:57:32.425216Z","times_seen":5,"resource_available":true,"data":null}},"time_used":393,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":393,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.b6e40cfc.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:03.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/index.b6e40cfc.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/assets/index.5ddb69a7.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 13:36:19 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825d3-76e\"\r\nexpires: Wed, 07 Jan 2026 02:24:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1902,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1901)","md5":"f38188b2a129d0b799cbf3ba08130ac3","sha1":"e2ca0b87e3d168d0382ed29d4d469ba4b6f61185","sha256":"0d99e51cf1b33065ee7c151518d404cba3cb882ff62ed4258fc2f91770f58460","sha512":"af442cd3864e214135a387ffde0fdb7c9be0d300a8ce4fa43a5136f7568d79c3eaeed045614258d51c6f00fe734a46fd4b827b003a2275f6f6fcd12c3839263f","ssdeep":"","tlshash":"a94164cf350decbaa75a4f8485620502d75d089f683428a1d4bf1d103bbcac169c8722","first_seen":"2026-01-06T14:24:49.631865Z","last_seen":"2026-01-29T18:57:32.399789Z","times_seen":5,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/useSocket.c394f4c7.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:03.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/useSocket.c394f4c7.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/assets/index.274518f6.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:03 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 881\r\nlast-modified: Tue, 09 Dec 2025 13:36:36 GMT\r\netag: \"693825e4-371\"\r\nexpires: Wed, 07 Jan 2026 02:24:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":881,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (880)","md5":"39d32b4dd5a07380c41b3237506fbe62","sha1":"1a785fb417c5e570ff772d11d968430766893bf7","sha256":"2a23e0aadcb62047ce707d8fd46c9a65bba0d462e3409680ed0cd0867699f4c7","sha512":"2f5757f0c0690ac19cd73f21916174ba3811000b3afffa58eb94f83816d393b19dde4b4192c8da7e8c78b94c0673c51e19e1d4d08f36d5605c89927671ccbf06","ssdeep":"","tlshash":"c411c0c8a272656573f640d3b8356410f10944997f0991cbbd2c4dc372725cad55af76","first_seen":"2026-01-06T14:24:49.62465Z","last_seen":"2026-01-29T18:57:32.404499Z","times_seen":5,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/useRefs.0fea3b73.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:04.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/useRefs.0fea3b73.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/assets/index.b017e258.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 199\r\nlast-modified: Tue, 09 Dec 2025 13:36:36 GMT\r\netag: \"693825e4-c7\"\r\nexpires: Wed, 07 Jan 2026 02:24:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":199,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"89c32fb72a3a5f17fdb2ad162029a786","sha1":"2d71a956e72c43982b32818969e63d7495dc966f","sha256":"d3d396094a198bdf23c4c4c165416d9af760d482e0fa5b5925d87916c4b7f075","sha512":"b6c1d17d91f0a9002c8e577ff743aeae4db4bd055bc8a142a28a964b75219b0f7cdca503f1cc38bcf3bdff2e7240a831f2087c402bc930cb3176c20c7c2c37b3","ssdeep":"","tlshash":"8fd0124972d1a0e85b13b0d4519f1806723fb67456d456d4906152c41e7859ec20fb3d","first_seen":"2026-01-06T14:24:49.632718Z","last_seen":"2026-01-29T18:57:32.461623Z","times_seen":5,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/doge.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.151.57","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:05.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/doge.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: KTUSgyvoMwDFOwjXGkj3VJ8Xihgs+KSqKHkgDpfvmQZkOP2G7xQYCVzAmgmg1AamoDmBgTJ8Juc=\r\nx-amz-request-id: JW5R3CT150327JEY\r\nDate: Tue, 06 Jan 2026 14:24:07 GMT\r\nLast-Modified: Thu, 14 Nov 2024 02:02:53 GMT\r\nETag: \"85a9905c5ded19678ea5c2a0e3eb5b92\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 95699\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":95699,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"85a9905c5ded19678ea5c2a0e3eb5b92","sha1":"758fd685e61ce28ddab9bcebfc60f62f1f2c150f","sha256":"83785fe3ab9c29b35a4884d93864038593ac03e6f605a5cb6bf9f7567e338abb","sha512":"a88cb74309d3fca02ce1fc32c81f0d78c387a4936c0f2924c603037201d14b26a5fa715723f40d01868d2a41361e26e2a2abb315e32332970ce15a186d8043dd","ssdeep":"1536:LEpYE8EXjfWGPQcIhSWQnGQBMDPla2zoW1:f","tlshash":"da9394d5b7e5e2e8f005e3fc872a98f53a632cfa3922c95893e52c15e95102d489dcd3","first_seen":"2024-12-15T14:02:10.456974Z","last_seen":"2026-08-10T05:13:29.735125Z","times_seen":335,"resource_available":false,"data":null}},"time_used":1604,"timings":{"blocked":-1,"dns":7,"connect":281,"send":0,"wait":307,"receive":561,"ssl":448},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.5ddb69a7.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:03.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/index.5ddb69a7.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claimfinder.top/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 13:36:11 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825cb-e254\"\r\nexpires: Wed, 07 Jan 2026 02:24:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":57940,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (57939)","md5":"e44d7f745573479e31cc06b5882eaf8c","sha1":"1427b0b11e0a3a8f4aa3ea6535e0020adb83b776","sha256":"efaefea5e887711456d2d37b144ec1333ada4478e3d20efb59697972df0635c8","sha512":"640d3ece1d00a3aad233300f59a574544b5cfd172254aba71be7413badec2b694dc5122bfc12105212628a11db32531cd80288725afdfbfa5b9ba67770cab949","ssdeep":"1536:QOnw2AMUv31cfLFn11ILgIf93jRzW2Fg2dMW7FZxe2MOUlXw9GN72fiDTGVjsrtV:Bnw2AM831cfhn1qDf93jFW2Fg2dMiFn2","tlshash":"43432a4a70057534e2aa28b8d42d1848633d8bc9b108c1a4ff764c7d3ad855e96edfbb","first_seen":"2026-01-06T14:24:49.634083Z","last_seen":"2026-01-29T18:57:32.398965Z","times_seen":5,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/useContentViewHeight.7181d516.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:03.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/useContentViewHeight.7181d516.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claimfinder.top/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:03 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 998\r\nlast-modified: Tue, 09 Dec 2025 13:36:35 GMT\r\netag: \"693825e3-3e6\"\r\nexpires: Wed, 07 Jan 2026 02:24:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":998,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (997)","md5":"3456d5a4e492cf22fdb144017d9c994d","sha1":"addea16a5487d35fbcdaab8513a7bc53ab7a5224","sha256":"9c602b7ff8aea61de8e7d2f37de5aed913be464c7cae234be11d0e4e268095fe","sha512":"e35bfd237d7cc4c153855ab58f08c518e6b3ba1ba2bc6abf484e220ad0ab77d462fcfd6ffa72b941def64c7460f404890c50bc0e2630e29e2c7fb6cb41925c66","ssdeep":"","tlshash":"5311657672623530d135809bf16f5e48a2301708f85a82d16219cc493d355aba30fac6","first_seen":"2026-01-06T14:24:49.626547Z","last_seen":"2026-01-29T18:57:32.426266Z","times_seen":5,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.b017e258.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:03.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/index.b017e258.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claimfinder.top/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 13:36:19 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825d3-5c90\"\r\nexpires: Wed, 07 Jan 2026 02:24:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":23696,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23695)","md5":"60660c8db334c571f001d48fdfae3970","sha1":"22dddcdf8811a3adb14bc2564d79795c4f1e340e","sha256":"3838ff4368ea3e3767b224506052fa1e54f3d538576a0b0f0d8ffcd92608b32c","sha512":"e45a7027e506dd6de6bf9baff2b86c0c3f59baa668eb946462acaf75cd7d7950c6a84233d4d0a47446725c0af9647417a44ab2591acfc3d4415be048bf244c27","ssdeep":"384:OpRqQ01RuEm0UG999v39q+TR2lHi1V93Le7+rYorcPoGsUhXXrnQbRaB:Opo14Edxn9v9DUHC3C7hxP7ZrnWRW","tlshash":"e5b2a7d9b38a74b29773bda1c17f460973363b405c098ca06223d5e52a6bf589122f7f","first_seen":"2026-01-06T14:24:49.63496Z","last_seen":"2026-01-29T18:57:32.443658Z","times_seen":5,"resource_available":true,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":399,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/RedoOutlined.c0b08b1d.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:03.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/RedoOutlined.c0b08b1d.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claimfinder.top/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 13:36:30 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825de-5ca\"\r\nexpires: Wed, 07 Jan 2026 02:24:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1482,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1481)","md5":"95123b3a995f203c06dc7d5192ab5961","sha1":"b75d5ba4834d4cb01516d6f6a408905e0f7dd5c6","sha256":"5f289657eb96ad4cb00ab061a561b3f7b00666d2f57dd9e39499c7b6fcf01925","sha512":"6d841601e14991dac12538a1d0d8af13f5a5d128e3244621d846a2b2e792cb1a0f72c5b521702fd930b8f46bbb3d21a59eba8aafb61ad8fb8241c7302b54799c","ssdeep":"","tlshash":"fd31c7d9b000b7f9666698e08c367510f11f659eb8fafa30d69584a0b0940ee50ede6f","first_seen":"2026-01-06T14:24:49.627375Z","last_seen":"2026-01-29T18:57:32.453705Z","times_seen":5,"resource_available":true,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":399,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.c25d9589.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:03.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/index.c25d9589.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/assets/index.274518f6.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 13:36:20 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825d4-ce94f\"\r\nexpires: Wed, 07 Jan 2026 02:24:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":846159,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (56903)","md5":"745455a980a96d4db4d004e8cd32b0aa","sha1":"ceab2a7cd59780e47a9dc86d74c647a885311f26","sha256":"a122579573e7e4ab22e5e6c8546c323fc3b9db83b1a32c152cd34959e4e643a0","sha512":"5ef6b66570a41a67a4cd278d9d6f9e15a8c7089b6946ec388a3bd2770982b333a276e7c671afa4376e15b76c00d4a8ffefd1478ae52dceeaa8737870b8dfca49","ssdeep":"3072:zb6/QI4Wx0zpzlXl+DD/DCD/DCD/DD/DCD/DCD/DD/DCD/DCD/DDCD/DD/DCD/Da:zPIpIpyMo2f","tlshash":"1b0532281a6bf744e418c0dbfa373d84c59dd18aa44725d24f755bb34ba2793eaacc03","first_seen":"2026-01-06T14:24:49.630999Z","last_seen":"2026-01-29T18:57:32.425216Z","times_seen":5,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/Col.742d9529.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:04.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/Col.742d9529.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claimfinder.top/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 13:36:00 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825c0-fe8\"\r\nexpires: Wed, 07 Jan 2026 02:24:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4072,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4071)","md5":"aa17991f35ba35eb3305e6c799b8422a","sha1":"9951680ad5f830d25757514ba3ca112297c3218f","sha256":"a9660b677ff11a29b0db330f45a819c134f252a095112b70093d99ef28f949f6","sha512":"a9bda01fec04206ac935cbe0c2885bcd3aeebec6202f0a4972f336969994164dfa7f757703e85601794570dbb957ea350a6cc0d0908e37b095424a1d9e5443d7","ssdeep":"","tlshash":"668122fc7243b1293369e872822f1719b31f26996cb5ddc4a063d9914b3be88c416b1f","first_seen":"2026-01-06T14:24:49.635644Z","last_seen":"2026-01-29T18:57:32.439606Z","times_seen":5,"resource_available":true,"data":null}},"time_used":441,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":441,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/bg-4.420a64b9.jpg","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:04.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/bg-4.420a64b9.jpg HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/assets/index.1c492309.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 90608\r\nlast-modified: Tue, 09 Dec 2025 13:35:59 GMT\r\nvary: Accept-Encoding\r\netag: \"693825bf-161f0\"\r\nexpires: Thu, 05 Feb 2026 14:24:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":90608,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, extended sequential, precision 8, 1920x6812, components 3","md5":"84ddf24f73fa5565d24b8210c46ee78a","sha1":"4eabd9976c2cc8f05ee1916e9b0075009bd339e5","sha256":"2574fc5259027b027e30a40df5d2bd911076c722965b599dcacd393ebc362476","sha512":"b8a3c87fff1114a765f027efad07fe852c885f3bae7f7079efc173192a4d17b510d60145ef92a2e2d142dbf9d257590048ff3eaa10981331f3e51e3573c63327","ssdeep":"768:jZ1qUO5UD2emVPSTgrkn/nMe6bPPeJ0H01OJBvlxw0/r5XSD:d1q1WyeOPQMeyPZ01e8","tlshash":"10932d37eb06d953c6cc2b74c8e387183f6b84b5d2645643d7da0c36a9ea7183d9c8a1","first_seen":"2025-10-14T15:55:51.092706Z","last_seen":"2026-01-29T18:57:32.463011Z","times_seen":6,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/platform-bg.4ddf8254.jpg","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:04.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/platform-bg.4ddf8254.jpg HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/assets/index.1c492309.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9702\r\nlast-modified: Tue, 09 Dec 2025 13:36:29 GMT\r\nvary: Accept-Encoding\r\netag: \"693825dd-25e6\"\r\nexpires: Thu, 05 Feb 2026 14:24:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9702,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, extended sequential, precision 8, 1920x558, components 3","md5":"0d2f0cc2c9c0fd84d73f62e484b19adf","sha1":"da49a6705e4971b634ea6abde64a7082e1be414e","sha256":"71d8fbae2076fc03de86450a7a9b9eba55ccc953d2b4b41cd418466cc3b198e4","sha512":"5c828ea5f4f15738017a7c374a37fabdf5d5d2fc705676fdfca3868df49d7eb251490db664357d8838965bac0686ee60df3e70bed34a5aa329d8636e4cd9bf49","ssdeep":"192:888gxhX1X1HOjaluQyHaw7o3cJUfIduLFoj:8GxtnHwdEL3FfIQRK","tlshash":"d912d7637b01d42ee1c817f817a343043f625288d1b0579756db097a8edbf583e9cab1","first_seen":"2025-10-14T15:55:50.796732Z","last_seen":"2026-01-29T18:57:32.44965Z","times_seen":6,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;1,100;1,200;1,300;1,400;1,500;1,600;1,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:02.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;1,100;1,200;1,300;1,400;1,500;1,600;1,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 06 Jan 2026 14:24:02 GMT\r\ndate: Tue, 06 Jan 2026 14:24:02 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18040,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"8cb37e94959600610588bc89f4d7cd84","sha1":"c39a594c45b054f66fe172ab514383c21ec6f5db","sha256":"e4671d561b069dfb38e50316ec2caf0c3ee9537c61521198ca289dfcc43341cd","sha512":"c233e699795761464a4a76aae6d351296c731f71770e8c35349d5920e3e16ce3be36b5050ed18a59a3c4e13918cef6702e7f50cefdc7e0582c122a973bb15b79","ssdeep":"192:H3pG3pNo3prA6LA6+oA6jn6zn6mon6bOROmoOnN6AN6roN64E6gE6LoE6Yr6Fr6l:H3w3s3VR9xqWSUq+DnLami0ARmkh","tlshash":"d4827991087be114ab871cc122cf7d36ee0ea254b850e9786bfd1cd8ad9bc654371b2d","first_seen":"2025-09-19T04:38:42.440344Z","last_seen":"2026-07-30T12:15:34.585431Z","times_seen":352,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":149,"dns":1,"connect":24,"send":0,"wait":34,"receive":0,"ssl":123},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/get.75f3c97a.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:03.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/get.75f3c97a.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claimfinder.top/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:03 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 125\r\nlast-modified: Tue, 09 Dec 2025 13:36:06 GMT\r\netag: \"693825c6-7d\"\r\nexpires: Wed, 07 Jan 2026 02:24:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":125,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"f6892dcb2d55ea8e1bf1338b338122f1","sha1":"9d5aae2c618704ad9a261dd5ec0fa0dd8e33ffa4","sha256":"55efc235739ee03ae4ebc4cef7936f1ef37bb3529d9b300621009525b2e0f8b6","sha512":"d878519e6e4beeadfea0cc3245314d039f3a994ea2b4dc9a4b11c6cfbad6502834b87bcfa9f00091a609d146bbe40e0ac0ff126dda964d403858e0e473d40b2d","ssdeep":"","tlshash":"6ab02bc93050e0f8f1045cc4c0123c31132fb234520685009003c18217ac5e0818bc12","first_seen":"2026-01-06T14:24:49.639125Z","last_seen":"2026-01-29T18:57:32.427295Z","times_seen":5,"resource_available":true,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.274518f6.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:03.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/index.274518f6.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claimfinder.top/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 13:36:17 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825d1-27351\"\r\nexpires: Wed, 07 Jan 2026 02:24:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":160593,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4e63aa8d7f404e55b852489101883e02","sha1":"c9df023fba1debf1811df00af45932ce472d88c1","sha256":"7b96168593cf9bdff373011223cdd46a2f31d61bc43eed6c3233253bfe418d10","sha512":"77dff734a0366570165d2e853c69f763ad6b347d40f92491deda33661727922da16e68818a9c28b91a45da464c56baa357375c621b1c2e66265d650f06ae5d69","ssdeep":"1536:BFmOYDesFh2OcmnckN6ceAj+qHCo+KsqzpujdsIzgTYK4Wqijm:bmOYDNhWmH7JsqzpuZN+AW/jm","tlshash":"8af32b4cb314b1bac2eb2159625e810132b72d89b405d5b874f84cab99fdd2c139ffb9","first_seen":"2026-01-06T14:24:49.639962Z","last_seen":"2026-01-29T18:57:32.405524Z","times_seen":5,"resource_available":true,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.fa5ecc7c.css","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:04.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/index.fa5ecc7c.css HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 09 Dec 2025 13:36:24 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825d8-82e\"\r\nexpires: Wed, 07 Jan 2026 02:24:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":2094,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2093)","md5":"7b3da7663655fd3488fe63366952e19f","sha1":"12fa8ec3b3c71f19c2acd801d155bfc35a68bf69","sha256":"246f8a490139c24904228daf0271d3d55076bef3c7a073a45a89f4b22c00220c","sha512":"40dc940e0acb9004c7d719a9f821c225d514323663ae2419936414d1e6c767a8eab13fb54b35249b5c2aed0a7259079f5f89b6e82259b8f5653919c741b895c5","ssdeep":"","tlshash":"9541ef304506122df027f26abce0d389a978e942eaf3cb1cd51d35af85e74a725727c4","first_seen":"2025-10-14T15:55:50.893346Z","last_seen":"2026-01-29T18:57:32.416617Z","times_seen":7,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/rm-1.cfb0bd90.png","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:04.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/rm-1.cfb0bd90.png HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 56776\r\nlast-modified: Tue, 09 Dec 2025 13:36:31 GMT\r\nvary: Accept-Encoding\r\netag: \"693825df-ddc8\"\r\nexpires: Thu, 05 Feb 2026 14:24:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56776,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 591 x 824, 4-bit colormap, non-interlaced","md5":"4bfd7abf52504b059110e5d15222f019","sha1":"b97731c72459010c2f89636e3e607a3fffdcd3a5","sha256":"06409ab74a4df16227484b766cef2580ef4101de6b0193bd34ada3bd54afd626","sha512":"edb9c70023d5ef20d72f9b5deb9a2da097e96b6ae007d3031b576f33e091bb5753f43d54de799992a54fe438276eb0d0278ff76ac1f97cab8ff24270a4fa786f","ssdeep":"1536:jhcfTBKrF1wIdA/zn/Oan4qz3DHvD0BqkFaopbJjOKoAks:j0BKrjw3nG24qzDHvDULDXvops","tlshash":"b443129c86d54da038dbe419c7eb5d0b2b88658f863940dc7189c73e8a3dfc2664b0f2","first_seen":"2025-10-14T15:55:50.899892Z","last_seen":"2026-01-29T18:57:32.467894Z","times_seen":6,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/api/v1/common/article/list?type=user_support","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:04.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"POST /api/v1/common/article/list?type=user_support HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=UTF-8\r\nContent-Length: 13\r\nOrigin: https://claimfinder.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13,"data":"{\"lang\":\"en\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:05 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding, Accept\r\nset-cookie: PHPSESSID=1rgqcq18jjan03oao9fovs2ure; path=/; HttpOnly\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":14118,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d1463927a3f92a43252e3287c0faea96","sha1":"a187137e58be2776e2b8950369c5c10b3e95ca94","sha256":"8d292cf0935795c74e874eb81a7ac337e2e9bd49f4bfc8c598f03e292bd7c6be","sha512":"a565d13f8af42ce9092ca7bc441cab64de54348c95290ce4010f0194cadc0620dacc522e97bf6e42ee80fdec6b3536f0e4b2079d1e76850990f4da6426f17291","ssdeep":"192:iXgM5y45wJPgzdpIWieI3tjpeBwMpZqhnqAuR41IdIXYac+7g00k3EMoGiu5jxo:O5CJUdp77ItVeB9UvXXfgrjMtjxo","tlshash":"cb52a04291d457224b0900a9e0ab03b54d945a087f93bcbcb7657df86f808df9ba71fe","first_seen":"2026-01-06T14:24:49.642637Z","last_seen":"2026-01-06T14:24:49.642637Z","times_seen":1,"resource_available":false,"data":null}},"time_used":429,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":429,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/api/v1/home/index/announce","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:04.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"POST /api/v1/home/index/announce HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=UTF-8\r\nContent-Length: 13\r\nOrigin: https://claimfinder.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13,"data":"{\"lang\":\"en\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:05 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding, Accept\r\nset-cookie: PHPSESSID=edh7vro7hr8er8rt04ncut05i2; path=/; HttpOnly\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":761,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"508f550969bca2f51ed68e84576b40ff","sha1":"0217ce9d933bc434376d31a7c88727202df23eb0","sha256":"4b94ea16f63bff40760565ddc80e99e620ac8a3e8296c7be22e79cd919ac6c1b","sha512":"64dcc6ef711ed3269fc191e4cdc3fc1fc3247f4fc6c81c3db63f4be73b52b9e106b433252854c87e312242ac7a12346dadd130d1d126e92d0db9486339b647d1","ssdeep":"","tlshash":"520120229b40613097e270661076fac6533f9d981b4301a54b58c9ae8de1fa1c32bc63","first_seen":"2026-01-06T14:24:49.643428Z","last_seen":"2026-01-06T14:24:49.643428Z","times_seen":1,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/api/v1/common/index/get-setting","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:04.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"POST /api/v1/common/index/get-setting HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=UTF-8\r\nContent-Length: 13\r\nOrigin: https://claimfinder.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13,"data":"{\"lang\":\"en\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:05 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding, Accept\r\nset-cookie: PHPSESSID=ho12hvat82q1msopdftssfj1po; path=/; HttpOnly\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":199,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"631a7f925e6bf88067cf6f2a3f79e386","sha1":"9942622aa908b92c587f2beaf239b0ac93da30c7","sha256":"769a9ea8f3dedbbe9994da496101fec17c6e4b9276be6d92114b7e57ba036ec7","sha512":"bcb1878ad09b00bcd53ca13d1d76d577e5ea4f5195b15c772f90e88718ee249ab9426e72eff4ad54d9024e189bd77353f3c5a0c26b969892c3d5df1a6bb56d62","ssdeep":"","tlshash":"15d0806e164cac76274783b1b90b1804da6ea505d4587d3fb7d5d8948128c27244fa25","first_seen":"2026-01-06T14:24:49.644265Z","last_seen":"2026-01-06T14:24:49.644265Z","times_seen":1,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":432,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.39a80dee.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:00.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/index.39a80dee.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 13:36:12 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825cc-10ef78\"\r\nexpires: Wed, 07 Jan 2026 02:24:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1109880,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bc7f1253d7a20f0c110891591de15178","sha1":"fd43ae634f1a589827bfd2febc6621f7e0936028","sha256":"7cbb0ad3faa725570132e72d6bc0f2125b93ea149ee5e6e3a9a4f717f1a34686","sha512":"d21547527e3c03c6c44122e33e87f29aba1cdc671e99b38c722d2fa942f413f48e934a24abab9c2ddf5610bcb99b8b3fa122e70d84ba49d7d905f9a3206d19b8","ssdeep":"24576:PaT1GQEJER2a6+ddGdKgWVDRdlNzwYL0XGq2AER0WbeWom2eT:PaT1GQEJER2a6+ddGdKgWVDRLNzwYL0q","tlshash":"e32539e8b289b07943a749e4807f0106b33f6aa5740cc4a0e1aed9f53966e4dc167f7d","first_seen":"2026-01-06T14:24:49.645073Z","last_seen":"2026-01-29T18:57:32.432778Z","times_seen":5,"resource_available":false,"data":null}},"time_used":514,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.1c492309.css","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:03.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/index.1c492309.css HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 09 Dec 2025 13:36:09 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825c9-6a1e\"\r\nexpires: Wed, 07 Jan 2026 02:24:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27166,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (27165)","md5":"0310c82991bfc49508e5bc3ca8d4cf7e","sha1":"0d551e4c14361e8b4f798ffd2837b2677961526e","sha256":"ad108d692790ddd06978c16cf4d164e7ab8f21db11302acb09d14fe86518bec2","sha512":"23f286d547570d4f5b120f213d6ad74ba699870c6b56d8b920dc1fc0986a0b2354d90d93d3dfb2c085c6d3c39d4a6a212fbe9468481c3f0ee3863c75c785990a","ssdeep":"384:5/y9LC6f6pHBygC6YEYIEv71Il9MVgts+I01YC3:5/y9Llf6pHyEYI4ZKMgts+Ht3","tlshash":"cac2a70c2748102ae577c707c883c29972669a83ed6316eebe93fa11c7ef551169f64c","first_seen":"2025-10-14T15:55:51.042828Z","last_seen":"2026-01-29T18:57:32.398099Z","times_seen":6,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/_baseIteratee.550fa07b.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:04.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/_baseIteratee.550fa07b.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/assets/index.b6e40cfc.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 13:36:38 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825e6-4b8\"\r\nexpires: Wed, 07 Jan 2026 02:24:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1208,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1207)","md5":"c3cb28b920568a5e9b00d455eb817bdc","sha1":"4647f837790c908005bcb584a6abb85f18cdd070","sha256":"50e55aa9abf5a89de1596c57e2a495066da78c2a479cbbbdd53a4ea099e1db80","sha512":"6de3ff459aad7347a6cc1dd0f9efa494b8cb1eb48b783dd24fffe794e103a2fee5c0752fc303fb076a83e82bee252df387aa4fada90f27677fdda47440b34d47","ssdeep":"","tlshash":"3b21cdc876ebf4a4b2467439d0ef8197f33dad90964c8610d013b0e63e3592ac577c19","first_seen":"2026-01-06T14:24:49.623593Z","last_seen":"2026-01-29T18:57:32.409687Z","times_seen":5,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.cae3fbf9.css","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:04.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/index.cae3fbf9.css HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 09 Dec 2025 13:36:21 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825d5-6ce5\"\r\nexpires: Wed, 07 Jan 2026 02:24:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27877,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (27876)","md5":"809e402488e1f80c6ae73d0c97702e05","sha1":"aaac20592fc0023008d6e3c4f3a7bb3fbbe3a8b6","sha256":"c36c0f8fd3b7aa3ff77135c79a84656c385e533c13bf1dc22cacff11a584929e","sha512":"38fd81d7a9d0578f2167b451eeab67c2fa183341c84c2d2322a990186b4bd849f181a271428f1a734c0431341194d4707bd2c965775e0e70f2dd0ce57551aa9e","ssdeep":"192:EgVeFYSV8w7KQVVGOodoZP7iboPxBtVIkBSxyAGZiwzH3bgY2+ElQ3mGrgSr4r1z:EZZvGSnWr1rLJ1wmgS","tlshash":"65c2f018461c272f9575e7fb98d1b90e5b287b00c66f026bff657b88034e3344636ba8","first_seen":"2025-10-14T15:55:50.89659Z","last_seen":"2026-01-29T18:57:32.410233Z","times_seen":7,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/Comparison.d2c26430.png","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:04.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/Comparison.d2c26430.png HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 3597\r\nlast-modified: Tue, 09 Dec 2025 13:36:00 GMT\r\nvary: Accept-Encoding\r\netag: \"693825c0-e0d\"\r\nexpires: Thu, 05 Feb 2026 14:24:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3597,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"f93c32267164ebb57c723f137df8d39d","sha1":"a78e0a9d41892301f646088586eaddf6444684e1","sha256":"d5aab9c141841565169c8288f31b3a8e92fd95c9953a5b535f44a0b833f0b084","sha512":"023a596d71eb0e17a570ea41db203293d044b4723d8b05746a47d4941cf44bc29a34a3cd6afe3a4c910ac975ca39577f1b20c515e293e8c0970a63b479003d32","ssdeep":"","tlshash":"2b717d6917c3693cc18f7f2ed31b6afe984fa9752727b3270a004d557612212ab24d2e","first_seen":"2025-10-14T15:55:50.818019Z","last_seen":"2026-01-29T18:57:32.412195Z","times_seen":7,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/api/v1/home/index/ieo","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:04.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"POST /api/v1/home/index/ieo HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=UTF-8\r\nContent-Length: 13\r\nOrigin: https://claimfinder.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13,"data":"{\"lang\":\"en\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:05 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding, Accept\r\nset-cookie: PHPSESSID=583jni67luep3l41ekm0b9slr3; path=/; HttpOnly\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":2617,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"6603aae072500d224604d82a28f6184b","sha1":"fbc36b1f33ef6b3b88498e4e7cc9eee232766ab2","sha256":"ed0fdb7f24e7a265f8b0dd3cc505cb0f5dbe4d259101ffe0e156ba55ba654bde","sha512":"5357ae573af9b7927653d66f42d4bc0b547aa60897ea44d9295531124ee77884a43cebe382300343107165954c0dd4d93db567d8437d65732d5cd1a8f5386ecc","ssdeep":"","tlshash":"ca51857b3784b4b1c3da52c25547b6d4d275f008cbc02fd693c98c6c6968e68c257a54","first_seen":"2026-01-06T14:24:49.648933Z","last_seen":"2026-01-06T14:24:49.648933Z","times_seen":1,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/api/v1/common/article/list?type=about_us","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:04.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"POST /api/v1/common/article/list?type=about_us HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=UTF-8\r\nContent-Length: 13\r\nOrigin: https://claimfinder.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13,"data":"{\"lang\":\"en\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:05 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding, Accept\r\nset-cookie: PHPSESSID=c5s6d67pks3i7obhqr8lf71rv7; path=/; HttpOnly\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":61661,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"0b3fb5975060b8c3a7523e9ff35aaaf2","sha1":"5c8c5f7ac1dced57e814b34a2acb0e09db3b5d13","sha256":"3d3a61547c9e2be5e8adc4bd5c1cc43097c3ac7176f51896a58ebb26c220c831","sha512":"1e5d0ce677b792b7b3166aaab2c8d7d436ac5e45516982af163cea5a197a97a75ccdd9400c9e07acc6a8a967700db083dd0b8e15f3fab3ccc7003c1d8a8a2a44","ssdeep":"1536:hnFoehHrRBlawzLKuqdxcvcHLsZEYHJ3mDLYu:hnF/hLRTawz+uqdRsZEYALYu","tlshash":"bc53224bc3c853230b4501a9a5a703b19f54596c7b93bc786729b8bc2b809af47772fd","first_seen":"2026-01-06T14:24:49.649678Z","last_seen":"2026-01-06T14:24:49.649678Z","times_seen":1,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/icomoon.1bf28205.ttf?oe5mqk","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:04.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/icomoon.1bf28205.ttf?oe5mqk HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/assets/index.96cd5307.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:05 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 47952\r\nlast-modified: Tue, 09 Dec 2025 13:36:07 GMT\r\netag: \"693825c7-bb50\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47952,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, icomoon    ","md5":"c95926750397223e0754be40f0adb8ad","sha1":"ca6d5d8073800d6f079c550e4f8119ec48358dcb","sha256":"1bf282051bef7be00d6cf9827c1df67faae78b085a28b2b70dfca9a29a1ac85c","sha512":"25b454c0d2dd6ac22080719e162262c208ac1bf47a12abe62880b27d95b161b899ddc300acf5a415bcc46ebedce50253f92575f7e031868f240c74e2b2a832b6","ssdeep":"768:ncV3Cm7S4S5e4PUq/RWVe2EZXjbkFCMZXS1lBKa1+ecUo77wE6F:eSm7b6UqJWVWnM5UKNecUo70z","tlshash":"57237c2b9b8fdf5fd82295b90c1956320dcae220d33fd2473986dd4556191e80cb8b9f","first_seen":"2025-04-07T20:20:53.43962Z","last_seen":"2026-03-28T13:30:29.413483Z","times_seen":13,"resource_available":false,"data":null}},"time_used":393,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=DM+Sans:ital,wght@0,400;0,500;0,700;1,400;1,500;1,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:02.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=DM+Sans:ital,wght@0,400;0,500;0,700;1,400;1,500;1,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 06 Jan 2026 14:24:02 GMT\r\ndate: Tue, 06 Jan 2026 14:24:02 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5337,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b458ca40ede53de02766760c01c60b30","sha1":"a94795f15110aec67060cca674a8319e4faf5eaf","sha256":"6ec1a6257d053cd4692575a0b49d6b9fe1b429e8e692310a2024d31c1de5c293","sha512":"322ddf278f7be9c00f173520fdb9cf7964c60badb15ee84d444ba069ba7da5fc22440d5b180e2c36ce29384450ff1dbe80f5bf0e917895e182ca8d39ae27b958","ssdeep":"96:jYgEa0Jc+ufYgEacNkYgXa0Jc+ufYgXacNkYgpa0Jc+ufYgpacNkOEaXsXJc+ufx:MOQVOkNQVNkrQVr8wD+rw8+NwG+3","tlshash":"dcb1e081042ba154db972dc426de7d32ef1fa1946454a874affe1888fc9ac2e5361b4c","first_seen":"2025-09-11T18:19:56.026325Z","last_seen":"2026-08-12T19:42:17.064554Z","times_seen":2227,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":156,"dns":3,"connect":21,"send":0,"wait":33,"receive":0,"ssl":132},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/Form.f159d48e.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:04.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/Form.f159d48e.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claimfinder.top/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 13:36:05 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825c5-b2ce\"\r\nexpires: Wed, 07 Jan 2026 02:24:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45774,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (39343)","md5":"d7ff9dba146581967f878f2aa16520a4","sha1":"445d5c726bc72af1ad9c9c73fc153ac7fdd1cdc6","sha256":"7fabbd65cde88942c5468dded02eacde4b8353ba76af250408e4dcde6ac4c06e","sha512":"b1e8033d6767782b0313569b13413e9a7cf5ffea49b1a306933f40340230fec4ef80cd9b50d77eeb8e44a3b8cfb353251ac47e3b20a9518588fff951f132dce5","ssdeep":"768:lOD4ufbnjmqRSe0ke3Ge6ee3Se3ie3ye3fephe3oe3ge0leL2eR9e3M5ucYIZ/Z7:KhSoNVksOul9/","tlshash":"5223b8cc76dab4555b7260f0603f9107f22f7e81581d9880f29aa5f62ef4e098163f7a","first_seen":"2026-01-06T14:24:49.652292Z","last_seen":"2026-01-29T18:57:32.406677Z","times_seen":5,"resource_available":true,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":445,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:04.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://claimfinder.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 03 Jan 2026 07:02:38 GMT\r\nexpires: Sun, 03 Jan 2027 07:02:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 285687\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-08-13T13:51:19.917912Z","times_seen":297118,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":97,"dns":1,"connect":20,"send":0,"wait":65,"receive":1,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/scrollTo.d9c71d82.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:05.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/scrollTo.d9c71d82.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/assets/index.704b80a7.js\r\nCookie: PHPSESSID=c5s6d67pks3i7obhqr8lf71rv7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:05 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 952\r\nlast-modified: Tue, 09 Dec 2025 13:36:31 GMT\r\netag: \"693825df-3b8\"\r\nexpires: Wed, 07 Jan 2026 02:24:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":952,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (951)","md5":"b1203e4e9aaaccdaa9d73e4c534e1d26","sha1":"71b2a9ea0b211c386707eb5e75b4632451a747a4","sha256":"63c1ad1b4a351c276390d603f38d68f851c2cff93433452541ea34a3bb2e4b6a","sha512":"2a2094e2d65f0a7bf6c97bd086791700752617284a6eb3fd07260dde7d4288de2f4494ea1d19ffab23ceb8eeab64b9f8c2cc70273dac3d5a3a34ac79f4b78d50","ssdeep":"","tlshash":"fb1154ccf16524e4555d8099a17f631b3a33b232314db480911ee4f62632fb3a2c28df","first_seen":"2026-01-06T14:24:49.653828Z","last_seen":"2026-01-29T18:57:32.417871Z","times_seen":5,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.airdropfinder.top/attachment/images/2025/12/11/QIDD.png","fqdn":"www.airdropfinder.top","domain":"airdropfinder.top","tld":"top"},"ip":{"addr":"13.228.246.88","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:05.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdropfinder.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:50:23 GMT","end":"Sun, 08 Feb 2026 01:50:22 GMT"},"fingerprint":{"sha1":"15:F6:9A:0D:0F:F2:6B:AE:FF:D0:72:8C:0F:C7:C2:A1:B2:70:E0:DF","sha256":"D4:FE:F1:71:33:F5:C0:E6:56:64:F9:1A:62:A0:1D:07:ED:45:D8:AB:8C:CD:36:06:BB:4F:A6:71:F9:DF:CB:BD"}}},"request":{"raw":"GET /attachment/images/2025/12/11/QIDD.png HTTP/1.1\r\nHost: www.airdropfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 8987\r\nlast-modified: Thu, 11 Dec 2025 07:39:23 GMT\r\nvary: Accept-Encoding\r\netag: \"693a752b-231b\"\r\nexpires: Thu, 05 Feb 2026 14:24:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8987,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"dc11c04d191bad062fbd7131d0fc2308","sha1":"7818c63da0b93de52cf7c0b02dc3c045bd296990","sha256":"c4a08c1d6fd670a2825c70d9a2f06d35d51cec4baac6834a46d449bdd3a5167c","sha512":"73c1caa907d00b378041ec22d7edc416d0746ef7911aa2eca754b9d89e5bce5f7fa00511a78933097befb0699bb2254cef33c323731e47846415353ea0ef119c","ssdeep":"192:W/09sZJCC47YoCOT7hnLgegqFMJ7iuRHtOzUGc/9TBi0MlLVNz5+d:W/0Q4tCAx3y4yHtOzUGc/99MZVl0d","tlshash":"e002bfef7f60b68a1750d1308689019c18af46f215cc8b199579db8b2f54a18992cf96","first_seen":"2026-01-06T14:24:49.654687Z","last_seen":"2026-01-20T02:13:13.744419Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1978,"timings":{"blocked":722,"dns":111,"connect":265,"send":0,"wait":530,"receive":1,"ssl":346},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"www.airdropfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"www.airdropfinder.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/eth.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.151.57","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:05.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/eth.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: x1HU2qjoR4MnYV+NlFgJqI5MAMvZ6HbGX5vp7bRTadbijX8R8MIntO246vPzj10ihzrIlRl9YtU=\r\nx-amz-request-id: JW5WH7PX5KTPH8WP\r\nDate: Tue, 06 Jan 2026 14:24:07 GMT\r\nLast-Modified: Wed, 23 Nov 2022 07:24:47 GMT\r\nETag: \"d8a57c2396575a058eb68a6c0e32caef\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 616\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":616,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d8a57c2396575a058eb68a6c0e32caef","sha1":"6495d31828866f3dbabc4aad7c77e02ff457cfb8","sha256":"b05bb6169930a076c463a15280a165560bd30972e2599f71ca62f44c023d666c","sha512":"7bf60d4e2903aa9f5be3e9268a3379da63feb8a312534d17c48686419a4fb52993c0c75b3686ca004145502266f58d9fa39cf59f19b7ab9dee6b503b877c3f58","ssdeep":"","tlshash":"f1f0a498354a14204804c77b1adead3a625329ecb7a6c0c5bfd91b0b79c48eb3cb55cd","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-08-10T05:13:29.721169Z","times_seen":546,"resource_available":false,"data":null}},"time_used":1711,"timings":{"blocked":697,"dns":10,"connect":284,"send":0,"wait":314,"receive":3,"ssl":400},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/trx.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.151.57","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:05.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/trx.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: QEfEnqekogUTatr2NuFxNdQtB1llpUj8buSGxyXXzQ8YablBLzw9C5+FF4BJLvqOFVueG+j+Lzk=\r\nx-amz-request-id: JW5V4WPDA6SZFJ12\r\nDate: Tue, 06 Jan 2026 14:24:07 GMT\r\nLast-Modified: Tue, 27 Jul 2021 10:16:15 GMT\r\nETag: \"6868416c3e73ea6862b7595bc18525e3\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 610\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":610,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6868416c3e73ea6862b7595bc18525e3","sha1":"4c77ac014aecec29e584cb03972aaddd98c8738d","sha256":"e9c728057aad1b6bb1c591a6a462787ed05ab7371d71e1070abddbe84f6ac4f5","sha512":"7ac560e7c2c27a593f5a5924b79e8eedc5e5155779d61de17d24f9105129fd666a164ade4d25763af42c889378fc9f24653e711009b85c8936fabcffb75bf253","ssdeep":"","tlshash":"a0f0783e72e837747409d732737f88f239271f96f27a510822a51a04752261e144e9ce","first_seen":"2023-05-25T08:09:47Z","last_seen":"2026-07-18T07:25:40.631089Z","times_seen":602,"resource_available":false,"data":null}},"time_used":1300,"timings":{"blocked":992,"dns":0,"connect":0,"send":0,"wait":307,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/FullscreenOutlined.a2ea6454.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:03.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/FullscreenOutlined.a2ea6454.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claimfinder.top/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 13:36:06 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825c6-c48\"\r\nexpires: Wed, 07 Jan 2026 02:24:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3144,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3143)","md5":"996e2398e5071f0fa63793a1390c4600","sha1":"ea1097084136df1a3b76e78c16d5667f891ff497","sha256":"bf943592775662f9c3f0f18a050192d2275c7dc1651e796815c8f797bddb69e7","sha512":"5bc42b86e074fa13e2a42222d10b27ac1089a820220bfed4986ca15bd8f84da5ee954fbb18f0a6184daf385b7a26737e4da8f02d78f523ed9e6e2a791565ca24","ssdeep":"","tlshash":"8c5162c1135cb2f2104242b8452a6603f23de646f4fce1f9ef9c9ae445a58d97075b99","first_seen":"2026-01-06T14:24:49.625401Z","last_seen":"2026-01-29T18:57:32.415022Z","times_seen":5,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.c0531fe8.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:03.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/index.c0531fe8.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/assets/index.5ddb69a7.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 13:36:21 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825d5-6d19\"\r\nexpires: Wed, 07 Jan 2026 02:24:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":27929,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8731)","md5":"883eff939efdbfc99cf9bf1226d49a69","sha1":"33e724246c59ea8666e50044973b81a36f090287","sha256":"dc43a58ae393d622e50ed8b4c93f3b2fa19f54f090c58d54b9015e2da5b72589","sha512":"ae6d53d908ebfa6cf8679eaf194386ce5076ee07ef7091be598a6f1668ba5f038d3aa1498a1f04536a8b10a413e1295001bc2740d9950e0754b181a5dfc51916","ssdeep":"768:V4JCRFdFVinkCO9T9xJuy7RpfTTyT0dxOFRp5PMLjVlEhuOFEas4UihoQLLaK8UA:eiFQnkCO9T9bT80d33a2lSG","tlshash":"04c2e99832d571a783e762e5003f4405e2fea870356d58a8fa48d8e77c75d6a80b7f2c","first_seen":"2026-01-06T14:24:49.618507Z","last_seen":"2026-01-29T18:57:32.40915Z","times_seen":5,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.b017e258.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:03.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/index.b017e258.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/assets/index.5ddb69a7.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 13:36:19 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825d3-5c90\"\r\nexpires: Wed, 07 Jan 2026 02:24:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":23696,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23695)","md5":"60660c8db334c571f001d48fdfae3970","sha1":"22dddcdf8811a3adb14bc2564d79795c4f1e340e","sha256":"3838ff4368ea3e3767b224506052fa1e54f3d538576a0b0f0d8ffcd92608b32c","sha512":"e45a7027e506dd6de6bf9baff2b86c0c3f59baa668eb946462acaf75cd7d7950c6a84233d4d0a47446725c0af9647417a44ab2591acfc3d4415be048bf244c27","ssdeep":"384:OpRqQ01RuEm0UG999v39q+TR2lHi1V93Le7+rYorcPoGsUhXXrnQbRaB:Opo14Edxn9v9DUHC3C7hxP7ZrnWRW","tlshash":"e5b2a7d9b38a74b29773bda1c17f460973363b405c098ca06223d5e52a6bf589122f7f","first_seen":"2026-01-06T14:24:49.63496Z","last_seen":"2026-01-29T18:57:32.443658Z","times_seen":5,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.704b80a7.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:05.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/index.704b80a7.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/assets/index.5ddb69a7.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 13:36:15 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825cf-325a\"\r\nexpires: Wed, 07 Jan 2026 02:24:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12890,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12889)","md5":"311c9936dd936494e34cda555edca743","sha1":"11e1b29c7e2230126c52320f63fa65290d62aa22","sha256":"2cff26aa292e3415368995a0ba9756684f5700e13b12fead3e5e6626571e3869","sha512":"7c3fa31c96305e491ebc1bb690102c5767af30beada8d26d7b42a6137a63602a8bc209bc9c3ea0038def1ccfc28cab70d6c268d4c3d980d9fa7b4a0d4681a7ad","ssdeep":"384:UPAGPo27lAmPjCHAdYNoFiUO06UqowayD+Ryfy8hyDq:UIGD7lAm7CHAdYNvUfxqnJD+Ify8cDq","tlshash":"4c42190db00daf77891b8c20f03b4441623a07966165c5f5faba4e743ee5c95822ebfb","first_seen":"2026-01-06T14:24:49.656727Z","last_seen":"2026-01-29T18:57:32.413206Z","times_seen":5,"resource_available":true,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/helpers.23683de1.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:05.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/helpers.23683de1.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/assets/index.704b80a7.js\r\nCookie: PHPSESSID=c5s6d67pks3i7obhqr8lf71rv7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 13:36:06 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825c6-1fcb\"\r\nexpires: Wed, 07 Jan 2026 02:24:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8139,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8136)","md5":"ae9a44a6f8c201c4778fb8ee6d4b5b6e","sha1":"de727c66177e5c277e536f69e0ad3f46bec69fb4","sha256":"06553b3990167a1967f9f077b89289337d50244526a4fa8b95003670decb07ff","sha512":"fe0a6dd851db589d7913eb57ee887dde8b505ecb7e4704affbb95062c1af835c729019466f9704faaa3f676a4213f753a41db6105698b66506de5925746037ee","ssdeep":"192:uDOGsbYD8kPYSlRpRCVLMSOKefR7tLSYczfvWq4IrlrDGJ:4XJYUCOKefHLSYczfvWq4Irlry","tlshash":"eef1d9c8fddeb5b2928e36e404734429e37d004c68cc1696c1d0baab3a3355da0f6f5a","first_seen":"2026-01-06T14:24:49.657617Z","last_seen":"2026-01-29T18:57:32.414443Z","times_seen":5,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/Col.742d9529.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:05.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/Col.742d9529.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/assets/index.704b80a7.js\r\nCookie: PHPSESSID=c5s6d67pks3i7obhqr8lf71rv7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 13:36:00 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825c0-fe8\"\r\nexpires: Wed, 07 Jan 2026 02:24:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4072,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4071)","md5":"aa17991f35ba35eb3305e6c799b8422a","sha1":"9951680ad5f830d25757514ba3ca112297c3218f","sha256":"a9660b677ff11a29b0db330f45a819c134f252a095112b70093d99ef28f949f6","sha512":"a9bda01fec04206ac935cbe0c2885bcd3aeebec6202f0a4972f336969994164dfa7f757703e85601794570dbb957ea350a6cc0d0908e37b095424a1d9e5443d7","ssdeep":"","tlshash":"668122fc7243b1293369e872822f1719b31f26996cb5ddc4a063d9914b3be88c416b1f","first_seen":"2026-01-06T14:24:49.635644Z","last_seen":"2026-01-29T18:57:32.439606Z","times_seen":5,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/useSize.d8b304cd.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:05.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/useSize.d8b304cd.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/assets/index.704b80a7.js\r\nCookie: PHPSESSID=c5s6d67pks3i7obhqr8lf71rv7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:05 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 320\r\nlast-modified: Tue, 09 Dec 2025 13:36:36 GMT\r\netag: \"693825e4-140\"\r\nexpires: Wed, 07 Jan 2026 02:24:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":320,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (319)","md5":"da819494946d74aa71edede8d968194c","sha1":"3f137e432e2cb50252710d6cb7e16d8167de3599","sha256":"a71b55be883e7261994301420680eeec8690dee5198a4e19e19bc5463e14c9ff","sha512":"f0c9d2f3b7423b8a087cdad4a606bd8431ae01c0de1448442042bea9fc447dbe0e26d6dbf80a7b0c50ac36140f88473be37bac186f8f0a17b6c7b07e6086c757","ssdeep":"","tlshash":"a1e0865e74c2f2b05246b415003f2806a37f19da565da284d14353816bba0488527f5c","first_seen":"2026-01-06T14:24:49.658528Z","last_seen":"2026-01-29T18:57:32.403189Z","times_seen":5,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/sol.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.151.57","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:05.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/sol.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: SF2I6Y8fs7/7wOTtMd1/l1bNq7Eu3xeYPAO+lWUfUsPhgkUbrWGypOwXYQ0mc2dIxSlQKqSfwdY=\r\nx-amz-request-id: JW5Z17KBAPVV5CC3\r\nDate: Tue, 06 Jan 2026 14:24:07 GMT\r\nLast-Modified: Mon, 13 Nov 2023 03:50:00 GMT\r\nETag: \"ee89bcfca63b88fd463f28fb7edbadee\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1901\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1901,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ee89bcfca63b88fd463f28fb7edbadee","sha1":"e519959e2a57b505820d4dba95aa6d99d3113c41","sha256":"4d4cedd0f67d386a8dda8333c82b599994f110887ee16fd38862d8c04ba6061d","sha512":"273f82fd285071a515fa9cdb0d7fb2a4cec70e73b93c26d803cb46cd819d459dc0a7addd61001eff57dbcf51d4a2081544aa43ec43ee3cf31d5ab07b6f8a1991","ssdeep":"","tlshash":"0a41e1aaf0e9f535f30487e9ca85446108ab42e3a541c261c3d1ff0ff8180d61d9daea","first_seen":"2024-04-18T22:13:30Z","last_seen":"2026-07-18T07:25:40.627666Z","times_seen":154,"resource_available":false,"data":null}},"time_used":1012,"timings":{"blocked":-1,"dns":7,"connect":294,"send":0,"wait":314,"receive":0,"ssl":396},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/get.75f3c97a.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:04.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/get.75f3c97a.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/assets/_baseIteratee.550fa07b.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 125\r\nlast-modified: Tue, 09 Dec 2025 13:36:06 GMT\r\netag: \"693825c6-7d\"\r\nexpires: Wed, 07 Jan 2026 02:24:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":125,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"f6892dcb2d55ea8e1bf1338b338122f1","sha1":"9d5aae2c618704ad9a261dd5ec0fa0dd8e33ffa4","sha256":"55efc235739ee03ae4ebc4cef7936f1ef37bb3529d9b300621009525b2e0f8b6","sha512":"d878519e6e4beeadfea0cc3245314d039f3a994ea2b4dc9a4b11c6cfbad6502834b87bcfa9f00091a609d146bbe40e0ac0ff126dda964d403858e0e473d40b2d","ssdeep":"","tlshash":"6ab02bc93050e0f8f1045cc4c0123c31132fb234520685009003c18217ac5e0818bc12","first_seen":"2026-01-06T14:24:49.639125Z","last_seen":"2026-01-29T18:57:32.427295Z","times_seen":5,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/helpers.23683de1.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:04.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/helpers.23683de1.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claimfinder.top/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 13:36:06 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825c6-1fcb\"\r\nexpires: Wed, 07 Jan 2026 02:24:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8139,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8136)","md5":"ae9a44a6f8c201c4778fb8ee6d4b5b6e","sha1":"de727c66177e5c277e536f69e0ad3f46bec69fb4","sha256":"06553b3990167a1967f9f077b89289337d50244526a4fa8b95003670decb07ff","sha512":"fe0a6dd851db589d7913eb57ee887dde8b505ecb7e4704affbb95062c1af835c729019466f9704faaa3f676a4213f753a41db6105698b66506de5925746037ee","ssdeep":"192:uDOGsbYD8kPYSlRpRCVLMSOKefR7tLSYczfvWq4IrlrDGJ:4XJYUCOKefHLSYczfvWq4Irlry","tlshash":"eef1d9c8fddeb5b2928e36e404734429e37d004c68cc1696c1d0baab3a3355da0f6f5a","first_seen":"2026-01-06T14:24:49.657617Z","last_seen":"2026-01-29T18:57:32.414443Z","times_seen":5,"resource_available":true,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":448,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.ead8cd55.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:04.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/index.ead8cd55.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claimfinder.top/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 13:36:23 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825d7-2272\"\r\nexpires: Wed, 07 Jan 2026 02:24:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8818,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (8817)","md5":"d740e5d46616f84d0d33515bcc8b76ca","sha1":"dc05fe7e894190cd68eb4f11afd902399b8f1761","sha256":"4d146b37a478f099c3794249dcf3453a0329ae51aeeb99b3deebc44191045579","sha512":"4f81dd948b98c4e2d53156d8c7916f275d9c52547411795886107955ddc842c0b31855b13ffe19411f099e45111df99bccce389a983e1f972275c8305697a6b1","ssdeep":"192:gnRs6MLQPrm0/Euiew96XJw9OEo2kD6hch0FSlDdFhp:YdMuiew96XJw9OE5yOd0hPz","tlshash":"1302e868305aa43f9de74568a15e0c09552d1fc9f422e8b1d1beec321bd28fce79cb58","first_seen":"2026-01-06T14:24:49.659989Z","last_seen":"2026-01-29T18:57:32.401041Z","times_seen":5,"resource_available":true,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/scrollTo.d9c71d82.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:04.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/scrollTo.d9c71d82.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claimfinder.top/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:05 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 952\r\nlast-modified: Tue, 09 Dec 2025 13:36:31 GMT\r\netag: \"693825df-3b8\"\r\nexpires: Wed, 07 Jan 2026 02:24:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":952,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (951)","md5":"b1203e4e9aaaccdaa9d73e4c534e1d26","sha1":"71b2a9ea0b211c386707eb5e75b4632451a747a4","sha256":"63c1ad1b4a351c276390d603f38d68f851c2cff93433452541ea34a3bb2e4b6a","sha512":"2a2094e2d65f0a7bf6c97bd086791700752617284a6eb3fd07260dde7d4288de2f4494ea1d19ffab23ceb8eeab64b9f8c2cc70273dac3d5a3a34ac79f4b78d50","ssdeep":"","tlshash":"fb1154ccf16524e4555d8099a17f631b3a33b232314db480911ee4f62632fb3a2c28df","first_seen":"2026-01-06T14:24:49.653828Z","last_seen":"2026-01-29T18:57:32.417871Z","times_seen":5,"resource_available":true,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/api/v1/home/index/quotation","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:04.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"POST /api/v1/home/index/quotation HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=UTF-8\r\nContent-Length: 13\r\nOrigin: https://claimfinder.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13,"data":"{\"lang\":\"en\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:05 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding, Accept\r\nset-cookie: PHPSESSID=5agkajosn6514iv8tae32pup7f; path=/; HttpOnly\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":8955,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c347568da07f06657df3810918e7d9f8","sha1":"605b4d0c35df4e695d81c63abe8c2e98c4458926","sha256":"caaf0169677dd278ba71be9a11fe631ccebbe2eaa3bc24736a165a506f077a0d","sha512":"8e766c411d0e93290e239bb3495106d40928e1cf276456b004d3a28b03e2ced671ece4141143cb53032dd581d4d4eca231f3966f3aacaad4d0170396a3cd6f33","ssdeep":"192:i+iPkj3Z3qjPkjiNoib8GPkjpeplC6KPkjpsplDKPPkjp1plWPkjpUpljPkjpPpm:DePnjty6GeXBfH4I0Q","tlshash":"2802bba76658da70d6f218c14bebf6e16231b309cfce0f8687dcae5d52d4e91c50b841","first_seen":"2026-01-06T14:24:49.660816Z","last_seen":"2026-01-06T14:24:49.660816Z","times_seen":1,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":441,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.ead8cd55.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:05.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/index.ead8cd55.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/assets/index.704b80a7.js\r\nCookie: PHPSESSID=c5s6d67pks3i7obhqr8lf71rv7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 13:36:23 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825d7-2272\"\r\nexpires: Wed, 07 Jan 2026 02:24:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8818,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (8817)","md5":"d740e5d46616f84d0d33515bcc8b76ca","sha1":"dc05fe7e894190cd68eb4f11afd902399b8f1761","sha256":"4d146b37a478f099c3794249dcf3453a0329ae51aeeb99b3deebc44191045579","sha512":"4f81dd948b98c4e2d53156d8c7916f275d9c52547411795886107955ddc842c0b31855b13ffe19411f099e45111df99bccce389a983e1f972275c8305697a6b1","ssdeep":"192:gnRs6MLQPrm0/Euiew96XJw9OEo2kD6hch0FSlDdFhp:YdMuiew96XJw9OE5yOd0hPz","tlshash":"1302e868305aa43f9de74568a15e0c09552d1fc9f422e8b1d1beec321bd28fce79cb58","first_seen":"2026-01-06T14:24:49.659989Z","last_seen":"2026-01-29T18:57:32.401041Z","times_seen":5,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/xrp.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.151.57","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:05.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/xrp.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Cd2Mtave8g8JFeFupiSge2F+X0zmywdCuxc9e/Ek92ml3uix0J4ps61r4lbylg5l01GxQkuN4Jo=\r\nx-amz-request-id: JW5KGDM7T77HGTQ2\r\nDate: Tue, 06 Jan 2026 14:24:07 GMT\r\nLast-Modified: Tue, 27 Jul 2021 10:27:13 GMT\r\nETag: \"b4651cc9032d4aa180b49d44dee9f6df\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 857\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":857,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b4651cc9032d4aa180b49d44dee9f6df","sha1":"ad2c09017920248932ad46e869c10ff7ddfb613c","sha256":"9fd7f3b81a4dfa790611dd504160cf34d71387f0cb1c760f577cac2c063be9f3","sha512":"95db416bf9d681fd53f367d3a2a3858a2d8c9c51ef3bce7432140c84c48f30566e24baa9a954abda1daf7df3ba771f016f4a7ccdf5fe017f099b36b2acb37e39","ssdeep":"","tlshash":"e211c01df4ba6b39f60552e017f47424b2b2ab4d2602d09865386ea0fc794aecdbc0c7","first_seen":"2023-07-01T20:42:20Z","last_seen":"2026-07-24T06:14:46.325637Z","times_seen":234,"resource_available":false,"data":null}},"time_used":1699,"timings":{"blocked":693,"dns":13,"connect":284,"send":0,"wait":305,"receive":1,"ssl":396},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/bnb.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.151.57","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:05.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/bnb.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: n9YE7MzoylhGmwsc2yuo3qNUZQqJBftoNKxA+G3REMQTJmy81l5Rio5TVmg48gvNseGnqufcGDQ=\r\nx-amz-request-id: JW5SHRCQT53YEXYB\r\nDate: Tue, 06 Jan 2026 14:24:07 GMT\r\nLast-Modified: Mon, 10 Jan 2022 15:02:55 GMT\r\nETag: \"bed74791845ecaea0b78be9b10c690f6\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1015\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1015,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bed74791845ecaea0b78be9b10c690f6","sha1":"ca96e3d4056d851ed301eeb4a2adf8e0103b8c4a","sha256":"7a938ed34bf0bbd6dba92c49cc3911052777ac55306abee47300bc36b0e6aedc","sha512":"cefe77f1b27c043db212b67fd228a6a208b5e63f079ccfedec269fae9bfe964c9be8b423737c3e16d0f112237808a623d101f4bc9e6f5b039e13747251db50f0","ssdeep":"","tlshash":"20110ea4730cd2511e0cd35a7b29dcb97652b4e6d782910015c6250aafa4aff1c70fcb","first_seen":"2024-01-11T12:12:53Z","last_seen":"2026-07-18T07:25:40.645556Z","times_seen":260,"resource_available":false,"data":null}},"time_used":1915,"timings":{"blocked":785,"dns":15,"connect":291,"send":0,"wait":318,"receive":16,"ssl":487},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/_app.config.js?v=2.8.5-1765286903243","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:00.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/_app.config.js?v=2.8.5-1765286903243 HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:01 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 378\r\nlast-modified: Tue, 09 Dec 2025 13:35:20 GMT\r\netag: \"69382598-17a\"\r\nexpires: Wed, 07 Jan 2026 02:24:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":378,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (378), with no line terminators","md5":"d3712dae9e1bb22e7b2425aa3b3df9ec","sha1":"647021fe19f886a317b4f483f4dd96f83a676e8e","sha256":"aa1788ae9d8dd7e652d400678b74196e17f81d336f4ade79d7028b4b9ed5d81b","sha512":"4fde32c743296981323c6907118e5618cf606ef5faa6f416f36de3c9e42d0cb2db78c5b8c94a5eaf7c6a0a1567586b6b43b5f97c7fba2983ddac2bde16e2a89b","ssdeep":"","tlshash":"99e02ba507ef8cca1850e414b1123e44eff2f6342e2e364301898cde2f2e4430d4c198","first_seen":"2025-10-14T15:55:51.085371Z","last_seen":"2026-01-29T18:57:32.431681Z","times_seen":7,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/favicon.ico","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:03.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:03 GMT\r\ncontent-type: text/html\r\ncontent-length: 474\r\netag: \"66766f60-1da\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":474,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"fd72418b7dd21485bca01639ea8be1e6","sha1":"f64f6ce1a89775287645d5e6afa8b1bc5760d340","sha256":"1fbd9655d6dfe03b0751186180a9121a3a05475bb883cd423dbb52fddd5e3760","sha512":"c00cd6254367cb9884fb27e06240dc0abc5bc8f72b37c69b8e99258a6de9187f3c346417ffdcdd89aeee8bb2d1e7604f0708110e65041ab000b0edad5470168c","ssdeep":"","tlshash":"a3f097a3b1030c0e12a9117033b0b0609886798b6b030e518466707bacc16aac7933c9","first_seen":"2025-07-10T06:46:42.323495Z","last_seen":"2026-08-10T19:18:27.102762Z","times_seen":33,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.b6e40cfc.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:03.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/index.b6e40cfc.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claimfinder.top/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 13:36:19 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825d3-76e\"\r\nexpires: Wed, 07 Jan 2026 02:24:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1902,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1901)","md5":"f38188b2a129d0b799cbf3ba08130ac3","sha1":"e2ca0b87e3d168d0382ed29d4d469ba4b6f61185","sha256":"0d99e51cf1b33065ee7c151518d404cba3cb882ff62ed4258fc2f91770f58460","sha512":"af442cd3864e214135a387ffde0fdb7c9be0d300a8ce4fa43a5136f7568d79c3eaeed045614258d51c6f00fe734a46fd4b827b003a2275f6f6fcd12c3839263f","ssdeep":"","tlshash":"a94164cf350decbaa75a4f8485620502d75d089f683428a1d4bf1d103bbcac169c8722","first_seen":"2026-01-06T14:24:49.631865Z","last_seen":"2026-01-29T18:57:32.399789Z","times_seen":5,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.274518f6.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:03.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/index.274518f6.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/assets/index.39a80dee.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 13:36:17 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825d1-27351\"\r\nexpires: Wed, 07 Jan 2026 02:24:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":160593,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4e63aa8d7f404e55b852489101883e02","sha1":"c9df023fba1debf1811df00af45932ce472d88c1","sha256":"7b96168593cf9bdff373011223cdd46a2f31d61bc43eed6c3233253bfe418d10","sha512":"77dff734a0366570165d2e853c69f763ad6b347d40f92491deda33661727922da16e68818a9c28b91a45da464c56baa357375c621b1c2e66265d650f06ae5d69","ssdeep":"1536:BFmOYDesFh2OcmnckN6ceAj+qHCo+KsqzpujdsIzgTYK4Wqijm:bmOYDNhWmH7JsqzpuZN+AW/jm","tlshash":"8af32b4cb314b1bac2eb2159625e810132b72d89b405d5b874f84cab99fdd2c139ffb9","first_seen":"2026-01-06T14:24:49.639962Z","last_seen":"2026-01-29T18:57:32.405524Z","times_seen":5,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.39a80dee.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:04.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/index.39a80dee.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claimfinder.top/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 13:36:12 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825cc-10ef78\"\r\nexpires: Wed, 07 Jan 2026 02:24:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1109880,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bc7f1253d7a20f0c110891591de15178","sha1":"fd43ae634f1a589827bfd2febc6621f7e0936028","sha256":"7cbb0ad3faa725570132e72d6bc0f2125b93ea149ee5e6e3a9a4f717f1a34686","sha512":"d21547527e3c03c6c44122e33e87f29aba1cdc671e99b38c722d2fa942f413f48e934a24abab9c2ddf5610bcb99b8b3fa122e70d84ba49d7d905f9a3206d19b8","ssdeep":"24576:PaT1GQEJER2a6+ddGdKgWVDRdlNzwYL0XGq2AER0WbeWom2eT:PaT1GQEJER2a6+ddGdKgWVDRLNzwYL0q","tlshash":"e32539e8b289b07943a749e4807f0106b33f6aa5740cc4a0e1aed9f53966e4dc167f7d","first_seen":"2026-01-06T14:24:49.645073Z","last_seen":"2026-01-29T18:57:32.432778Z","times_seen":5,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/attachment/images/2025/11/10/logoA.png","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:05.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /attachment/images/2025/11/10/logoA.png HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/\r\nCookie: PHPSESSID=5agkajosn6514iv8tae32pup7f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 6047\r\nlast-modified: Mon, 10 Nov 2025 06:24:12 GMT\r\nvary: Accept-Encoding\r\netag: \"6911850c-179f\"\r\nexpires: Thu, 05 Feb 2026 14:24:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6047,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 297 x 92, 8-bit/color RGBA, non-interlaced","md5":"d88581cf6aee0c968ea77b2138f471a5","sha1":"978d81d85009c9a0dc33791415312691292a603b","sha256":"10ab8129b01f030bcbf50a1980e857d0b798d709703abf17d01dd98e43e1bd6b","sha512":"0d07b6480e3213076b51dfe23b38c5814904a170d512621e99c879eeaeb45c336e989d89dd35cd25201287e5d6caa8c69be66c99d338e7ee58ad03a3005eec01","ssdeep":"96:uTTUD9xihKrMjLR3JWaBgmQIeIpch51cNoQSFEJmphUlTIeUnZLrQ7TZj+r0mwaK:uDhbLR5DBunIpch51mV42mfqTIeUnS7X","tlshash":"70c19ff84359775d3bcec18133020f59f99562c414dacd50ec8dcd5f0673a952c1aa0d","first_seen":"2026-01-06T14:24:49.665351Z","last_seen":"2026-01-29T18:57:32.435921Z","times_seen":5,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.ff643456.css","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:05.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/index.ff643456.css HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/\r\nCookie: PHPSESSID=c5s6d67pks3i7obhqr8lf71rv7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 09 Dec 2025 13:36:24 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825d8-8c5\"\r\nexpires: Wed, 07 Jan 2026 02:24:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2245,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2244)","md5":"d497321a0035a534d0ace365db918991","sha1":"e6aa512e8ff60a092ac4ee15fe64e7212bec48bc","sha256":"4999ad02b8fad2ea804bf17f6e29319d3e41211e7c20966a40e5e47710b8cba6","sha512":"28f3fe745e72d4fedff6c5aa54f9204972405134acc43254b73e7d2355938cedae6c55b5ab8f03b0130fa8cef798f8ed34df17b7406657920c5b1685deac51a3","ssdeep":"","tlshash":"584149e63937d51d79ff8f28ac4640180504160ae92eb5f95c08f0c496cf9cbfb52a5a","first_seen":"2025-10-14T15:55:50.919144Z","last_seen":"2026-01-29T18:57:32.431089Z","times_seen":6,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/en.094f4ddc.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:02.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/en.094f4ddc.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/assets/index.39a80dee.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 13:36:04 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825c4-c6c3\"\r\nexpires: Wed, 07 Jan 2026 02:24:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50883,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (50882)","md5":"78c79810fc813e903a4c6669a347e3ca","sha1":"b64be13d598c088704127b3dd4558c1759e42d2f","sha256":"69837ec92960fb2cf84c1fb56ecc64e535e399f39826af2b5ebe3ee1be1a059c","sha512":"c4a2757a11dc5ee207fa07ee0a20778e77ad3dae6afc3d19eb6b63c1b4f2f76ce29c9e8c256a470e8f3a5488bb08a0439af1ed961b73a6836d97a5cc0a4370fd","ssdeep":"768:M/o8ejVXQGuYMcAcewBYx8d5ofdq+sjrAbdmGd2P54Hnrn7g6lKfLkh:Goh08mMQk+s3edmqKaldh","tlshash":"e7332d0e77066a3e1db3438138cf3714e27515d242a588ad0ddcc47d23f69ae63ab7a9","first_seen":"2026-01-06T14:24:49.667324Z","last_seen":"2026-01-29T18:57:32.424209Z","times_seen":5,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/Form.f159d48e.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:05.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/Form.f159d48e.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/assets/index.704b80a7.js\r\nCookie: PHPSESSID=c5s6d67pks3i7obhqr8lf71rv7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 13:36:05 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825c5-b2ce\"\r\nexpires: Wed, 07 Jan 2026 02:24:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":45774,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (39343)","md5":"d7ff9dba146581967f878f2aa16520a4","sha1":"445d5c726bc72af1ad9c9c73fc153ac7fdd1cdc6","sha256":"7fabbd65cde88942c5468dded02eacde4b8353ba76af250408e4dcde6ac4c06e","sha512":"b1e8033d6767782b0313569b13413e9a7cf5ffea49b1a306933f40340230fec4ef80cd9b50d77eeb8e44a3b8cfb353251ac47e3b20a9518588fff951f132dce5","ssdeep":"768:lOD4ufbnjmqRSe0ke3Ge6ee3Se3ie3ye3fephe3oe3ge0leL2eR9e3M5ucYIZ/Z7:KhSoNVksOul9/","tlshash":"5223b8cc76dab4555b7260f0603f9107f22f7e81581d9880f29aa5f62ef4e098163f7a","first_seen":"2026-01-06T14:24:49.652292Z","last_seen":"2026-01-29T18:57:32.406677Z","times_seen":5,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.a18cc309.css","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:04.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/index.a18cc309.css HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 09 Dec 2025 13:36:18 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825d2-139c0\"\r\nexpires: Wed, 07 Jan 2026 02:24:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":80320,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f68685a2648e9cae8c7114935524a611","sha1":"23a140aaf7e4d4f8819b8a45d26b07073c0ed6c6","sha256":"806213af927ef7c4698b54ed7bf52c3a692c30d5e8cb96a4476e616a4264eb5f","sha512":"6c94a86ec536459d044528475f81ae567b1a19b0a71d26734450010ce90deebca618660bd99c8893e419cae793eb42ab09345336d404b14a1b9975b7401d5cb4","ssdeep":"384:ua2MmTgEOD0GT8i84aYxWBuyBU8JGqfZl8HjyMmgM+uSwXCURYaWWMOHmjim5U8C:uIdWtdMTIFAP8+UV8k","tlshash":"02732c0d1f32219a40b6cb2bb690b919ad76e442bafedfcbf3d57c219709d564812c43","first_seen":"2023-04-15T04:17:29Z","last_seen":"2026-07-05T16:02:58.170587Z","times_seen":48,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/Cloud.f3d44cc6.png","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:04.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/Cloud.f3d44cc6.png HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 3221\r\nlast-modified: Tue, 09 Dec 2025 13:36:00 GMT\r\nvary: Accept-Encoding\r\netag: \"693825c0-c95\"\r\nexpires: Thu, 05 Feb 2026 14:24:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3221,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"cba36bfd72de0f4f83faf5d09470ba17","sha1":"d89bfb3ec7d861a756e706150861701a508af53a","sha256":"0fb9680eca4b5e194e93a8ff86a8134171dd6d77f8db45656c1bfb2da81e8ea5","sha512":"830dec19a52156fa608148494c6b3f4ed31de6caba6896b7881228a720f18dfdf53e048e1107f51c88dcd05358053e04e374a357fb93f7e009eb4810cb72f74c","ssdeep":"","tlshash":"cc614bf785b72131d63074ac94370e66a81b0d60b39947295dcbbc253a3b6cc6a825fe","first_seen":"2025-10-14T15:55:51.052296Z","last_seen":"2026-01-29T18:57:32.444799Z","times_seen":6,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/useSize.d8b304cd.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:04.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/useSize.d8b304cd.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claimfinder.top/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:05 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 320\r\nlast-modified: Tue, 09 Dec 2025 13:36:36 GMT\r\netag: \"693825e4-140\"\r\nexpires: Wed, 07 Jan 2026 02:24:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":320,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (319)","md5":"da819494946d74aa71edede8d968194c","sha1":"3f137e432e2cb50252710d6cb7e16d8167de3599","sha256":"a71b55be883e7261994301420680eeec8690dee5198a4e19e19bc5463e14c9ff","sha512":"f0c9d2f3b7423b8a087cdad4a606bd8431ae01c0de1448442042bea9fc447dbe0e26d6dbf80a7b0c50ac36140f88473be37bac186f8f0a17b6c7b07e6086c757","ssdeep":"","tlshash":"a1e0865e74c2f2b05246b415003f2806a37f19da565da284d14353816bba0488527f5c","first_seen":"2026-01-06T14:24:49.658528Z","last_seen":"2026-01-29T18:57:32.403189Z","times_seen":5,"resource_available":true,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":437,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/attachment/images/2025/11/10/logoA.png","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:07.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /attachment/images/2025/11/10/logoA.png HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/\r\nCookie: PHPSESSID=c5s6d67pks3i7obhqr8lf71rv7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 6047\r\nlast-modified: Mon, 10 Nov 2025 06:24:12 GMT\r\nvary: Accept-Encoding\r\netag: \"6911850c-179f\"\r\nexpires: Thu, 05 Feb 2026 14:24:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6047,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 297 x 92, 8-bit/color RGBA, non-interlaced","md5":"d88581cf6aee0c968ea77b2138f471a5","sha1":"978d81d85009c9a0dc33791415312691292a603b","sha256":"10ab8129b01f030bcbf50a1980e857d0b798d709703abf17d01dd98e43e1bd6b","sha512":"0d07b6480e3213076b51dfe23b38c5814904a170d512621e99c879eeaeb45c336e989d89dd35cd25201287e5d6caa8c69be66c99d338e7ee58ad03a3005eec01","ssdeep":"96:uTTUD9xihKrMjLR3JWaBgmQIeIpch51cNoQSFEJmphUlTIeUnZLrQ7TZj+r0mwaK:uDhbLR5DBunIpch51mV42mfqTIeUnS7X","tlshash":"70c19ff84359775d3bcec18133020f59f99562c414dacd50ec8dcd5f0673a952c1aa0d","first_seen":"2026-01-06T14:24:49.665351Z","last_seen":"2026-01-29T18:57:32.435921Z","times_seen":5,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/Illustration.636083d3.png","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:04.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/Illustration.636083d3.png HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 69485\r\nlast-modified: Tue, 09 Dec 2025 13:36:09 GMT\r\nvary: Accept-Encoding\r\netag: \"693825c9-10f6d\"\r\nexpires: Thu, 05 Feb 2026 14:24:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69485,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 558 x 528, 8-bit colormap, non-interlaced","md5":"c91693e967e2e58bbbaa40f9e8c780b5","sha1":"2522481fa8b514d04fbf2405997bd3d9c3ce62af","sha256":"1d3827c4fff3ad93ba1591c061bb9b0ed92a59a74ab80fe8f4d4a82372e0860d","sha512":"11fa3afc9318942d745006af7dcbead2297aaa6fa0e0cc1905a6f5d96fbf657592b515a28859e7f61ae67b761fc682cc5adeeec2c967a8a59cdc3d709554fe59","ssdeep":"1536:LvVhJonUvJtAxmcSozlmXdCM8Oajs91lx+m7/JNawxr/zc8X8g:LvLJonUvJtyc8Oau16mdQYzz3","tlshash":"ac63021187e83821c57d688db705821b8ac3cf81f9faf975f261fe684935418ae67ac4","first_seen":"2025-10-14T15:55:50.963438Z","last_seen":"2026-01-29T18:57:32.411251Z","times_seen":6,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":286,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.669c6e5b.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:05.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/index.669c6e5b.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claimfinder.top/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=c5s6d67pks3i7obhqr8lf71rv7\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 13:36:15 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825cf-17b2\"\r\nexpires: Wed, 07 Jan 2026 02:24:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6066,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6065)","md5":"84dfc92008f21e724fe1bd51dfe51da1","sha1":"18f28f71d0fa7e7cbfb8ccae4e9daff03e5c16dc","sha256":"8b493b38058e52b85e87173fa47b321a4f23f0444bfba96dd7e7af1d7c8058f4","sha512":"aff07b31286d477cba828a124cc74169bb39469c2780ab257da45ed721055a96e8b1ac98f9cc51fbf749b5144b4b35b6f7d34a3e8a630548f261d388472f7928","ssdeep":"96:xhviNTQRILRf2jcIjc2heQC6E7mjebP4gLwIGoY2ll/YJW49p0URfkqINs4zepQT:7iNMRILRf2LHhNSbggLwIGwlxCf0UGqy","tlshash":"b8c1c741793afb3d86775560ec6d8800e2240bae806ad0d1e2fc8ad379ded718345b7b","first_seen":"2026-01-06T14:24:49.628201Z","last_seen":"2026-01-29T18:57:32.434869Z","times_seen":5,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/app-antd-dark-theme-style.e3b0c442.css","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:02.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/app-antd-dark-theme-style.e3b0c442.css HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 09 Dec 2025 13:35:56 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825bc-39f97\"\r\nexpires: Wed, 07 Jan 2026 02:24:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":237463,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b9b00b919fe05b52e18fb845093d1324","sha1":"dfc5fbaf60aef9c82e11f5a5141785788584f637","sha256":"587f18fd1bf96aba779a1a2a3839bdd350d081af624201aaa1ecfbe6c72d89d3","sha512":"77a6f8d4ec67323d43f72d6d02a4697c99ba957eef21940c1b50245541922a0512014423755bd56fc27bfed2b33379a13e15317a2012774d92aa0632de2f50cb","ssdeep":"1536:Uc8wDXwpwTrgwm8G8gc+uKQ6KrVKGvgKsQzz:fDJg9KrVKGvgKsy","tlshash":"fe345890ba4e125e6637cf2d8653ef1d531d3361c70f2a6aed2bb19c8e041ab7192f05","first_seen":"2026-01-06T14:24:49.671376Z","last_seen":"2026-01-29T18:57:32.44607Z","times_seen":5,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/download.58b9eebe.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:03.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/download.58b9eebe.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claimfinder.top/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:03 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 628\r\nlast-modified: Tue, 09 Dec 2025 13:36:03 GMT\r\netag: \"693825c3-274\"\r\nexpires: Wed, 07 Jan 2026 02:24:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":628,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (627)","md5":"d8db402dbe8fef4b78e497a201d4c013","sha1":"872b3ac87f3a334a1320e13c9e93327d80cbc019","sha256":"902946fc6747ad582f6bd9959e3f3de2597641473c5b69104f0416ae0bee773a","sha512":"87965b7c5faae0a0712f761341dba1a16fc246cbdf680aa602a611f7d4e048bb4c1623165cf3d282ba41de1a3c75c3c9dc22c972963435d39afc824e72d6b3dd","ssdeep":"","tlshash":"ecf0d8ae20d1a1b842710c9a32b61b00f273989bf0328140a0ad0d0cb934aa346bfcbd","first_seen":"2026-01-06T14:24:49.6725Z","last_seen":"2026-01-29T18:57:32.418493Z","times_seen":5,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/useRefs.0fea3b73.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:03.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/useRefs.0fea3b73.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claimfinder.top/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:03 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 199\r\nlast-modified: Tue, 09 Dec 2025 13:36:36 GMT\r\netag: \"693825e4-c7\"\r\nexpires: Wed, 07 Jan 2026 02:24:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":199,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"89c32fb72a3a5f17fdb2ad162029a786","sha1":"2d71a956e72c43982b32818969e63d7495dc966f","sha256":"d3d396094a198bdf23c4c4c165416d9af760d482e0fa5b5925d87916c4b7f075","sha512":"b6c1d17d91f0a9002c8e577ff743aeae4db4bd055bc8a142a28a964b75219b0f7cdca503f1cc38bcf3bdff2e7240a831f2087c402bc930cb3176c20c7c2c37b3","ssdeep":"","tlshash":"8fd0124972d1a0e85b13b0d4519f1806723fb67456d456d4906152c41e7859ec20fb3d","first_seen":"2026-01-06T14:24:49.632718Z","last_seen":"2026-01-29T18:57:32.461623Z","times_seen":5,"resource_available":true,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":399,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.e5f92897.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:03.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/index.e5f92897.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/assets/index.5ddb69a7.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:03 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 347\r\nlast-modified: Tue, 09 Dec 2025 13:36:22 GMT\r\netag: \"693825d6-15b\"\r\nexpires: Wed, 07 Jan 2026 02:24:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":347,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (346)","md5":"424800be63cfb2efa8e597f854e5893e","sha1":"4422c55b7dbcb7090af451996d9bdcc53927a7ef","sha256":"2c9d2e7b81c98465ad2a29a105e75fd5eb14491d1faf15e97f3864d66a01a8d9","sha512":"ccd3ad1992c012f83c033e1b58252bd7cf72a4712a2f41ce6a75ab98947937c4c62aa0f6b42f9fe1d4842144260dafcea68dd4f6721cd9ce1a834132fa8a9d23","ssdeep":"","tlshash":"1ce0df4cb0c6e9fa2302001264bab603e7398fa005694f648011b1883abacbd9e38a84","first_seen":"2026-01-06T14:24:49.615961Z","last_seen":"2026-01-29T18:57:32.422614Z","times_seen":5,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/download.58b9eebe.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:04.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/download.58b9eebe.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/assets/index.c0531fe8.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 628\r\nlast-modified: Tue, 09 Dec 2025 13:36:03 GMT\r\netag: \"693825c3-274\"\r\nexpires: Wed, 07 Jan 2026 02:24:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":628,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (627)","md5":"d8db402dbe8fef4b78e497a201d4c013","sha1":"872b3ac87f3a334a1320e13c9e93327d80cbc019","sha256":"902946fc6747ad582f6bd9959e3f3de2597641473c5b69104f0416ae0bee773a","sha512":"87965b7c5faae0a0712f761341dba1a16fc246cbdf680aa602a611f7d4e048bb4c1623165cf3d282ba41de1a3c75c3c9dc22c972963435d39afc824e72d6b3dd","ssdeep":"","tlshash":"ecf0d8ae20d1a1b842710c9a32b61b00f273989bf0328140a0ad0d0cb934aa346bfcbd","first_seen":"2026-01-06T14:24:49.6725Z","last_seen":"2026-01-29T18:57:32.418493Z","times_seen":5,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/rm-2.00a93ce5.png","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:04.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/rm-2.00a93ce5.png HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 282854\r\nlast-modified: Tue, 09 Dec 2025 13:36:31 GMT\r\nvary: Accept-Encoding\r\netag: \"693825df-450e6\"\r\nexpires: Thu, 05 Feb 2026 14:24:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":282854,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1349 x 1770, 4-bit colormap, non-interlaced","md5":"0e32c075185dac315c0feeb82219bcd9","sha1":"3cb8b0873fdab38cf2b53de66844fc0ff0363786","sha256":"d416590490e4235372ffc48346d99367fd81e85acc5ffabbd311a8e996d4276b","sha512":"884a6226911ad59cccada3c06e88833cde90f4f54dfed21d1ade6ba6184c03165583e23d97c7bea765a38a88d437c8c20d5befe6eff8520e93727b34be89bfa9","ssdeep":"6144:dkof7Ut7VnQfJpyFgT+LME4o8p7mef1BOf2Gmr6LVw:S1xncbO8+LME4d7meNZ6LVw","tlshash":"2b54239f17fb7b79aa89d2aa0704e7e55fd6c197fee00488c9200d36624e244527ccce","first_seen":"2025-10-14T15:55:50.880581Z","last_seen":"2026-01-29T18:57:32.448435Z","times_seen":6,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.704b80a7.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:04.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/index.704b80a7.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claimfinder.top/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 13:36:15 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825cf-325a\"\r\nexpires: Wed, 07 Jan 2026 02:24:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12890,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12889)","md5":"311c9936dd936494e34cda555edca743","sha1":"11e1b29c7e2230126c52320f63fa65290d62aa22","sha256":"2cff26aa292e3415368995a0ba9756684f5700e13b12fead3e5e6626571e3869","sha512":"7c3fa31c96305e491ebc1bb690102c5767af30beada8d26d7b42a6137a63602a8bc209bc9c3ea0038def1ccfc28cab70d6c268d4c3d980d9fa7b4a0d4681a7ad","ssdeep":"384:UPAGPo27lAmPjCHAdYNoFiUO06UqowayD+Ryfy8hyDq:UIGD7lAm7CHAdYNvUfxqnJD+Ify8cDq","tlshash":"4c42190db00daf77891b8c20f03b4441623a07966165c5f5faba4e743ee5c95822ebfb","first_seen":"2026-01-06T14:24:49.656727Z","last_seen":"2026-01-29T18:57:32.413206Z","times_seen":5,"resource_available":true,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:04.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://claimfinder.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 31 Dec 2025 12:12:06 GMT\r\nexpires: Thu, 31 Dec 2026 12:12:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 526319\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36932,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-08-13T12:32:31.752145Z","times_seen":33571,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":93,"dns":2,"connect":20,"send":0,"wait":21,"receive":42,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.0885382f.css","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:03.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/index.0885382f.css HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 09 Dec 2025 13:36:17 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825d1-5d9e\"\r\nexpires: Wed, 07 Jan 2026 02:24:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23966,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (23965)","md5":"98e29c8136acdd50c3572d99f9ac6ac8","sha1":"5462e764fe2de5f6890ed2155d05060c7b1dd167","sha256":"8216abebbe2bbf009f25250083019322ac1d5ea9e1e96baeee05b3edc856b808","sha512":"bdc091532f414a5daf2cda42fd00cbcd6c91d286b69a2107f5d073c33a498e5767c21890d30e2578693804837adbb504ab39e52f2aac26f4f1ee50500bea0c45","ssdeep":"384:/Npq3IE7RM/35O0dD3Y912Y6/x2/7ph2TQj:5Y91bDpdj","tlshash":"d5b267f05ba310a9a83aef1c9cd1d8a143249601c76539edf539e124cda96cff0d1e2e","first_seen":"2025-10-14T15:55:51.088715Z","last_seen":"2026-01-29T18:57:32.452581Z","times_seen":6,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.a2831ae3.css","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:03.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/index.a2831ae3.css HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 09 Dec 2025 13:36:18 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825d2-4242\"\r\nexpires: Wed, 07 Jan 2026 02:24:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16962,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16961)","md5":"4ccc78ebc3f870ed71def60abb9ac408","sha1":"9ea49a5286117cd247297d5cdffc753c92945bfa","sha256":"f3aa9c9ffa99fad6ebb40ffd83beaadda26994874df29f2738a3ab8f51a0aeab","sha512":"af990145e6e84802087f1d9bd5d836529765f321c390836d2a57401444b146de64bff800bd27c71ae5a4e36c829fa46bc2986f9776c3bc41f81bd0d78297659b","ssdeep":"192:r+gZ7N16QNWqJeDuhxXNrkDKuC82JrH5Q71ysxlAx+:nZ7y5cJJ4B","tlshash":"6672a9345300109bd3b6f3ad9a6bb9b84d917b0f61af806f77e33696e84728114e1d36","first_seen":"2025-10-14T15:55:50.972561Z","last_seen":"2026-01-29T18:57:32.452022Z","times_seen":7,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.5ddb69a7.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:03.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/index.5ddb69a7.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/assets/index.39a80dee.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 13:36:11 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825cb-e254\"\r\nexpires: Wed, 07 Jan 2026 02:24:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":57940,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (57939)","md5":"e44d7f745573479e31cc06b5882eaf8c","sha1":"1427b0b11e0a3a8f4aa3ea6535e0020adb83b776","sha256":"efaefea5e887711456d2d37b144ec1333ada4478e3d20efb59697972df0635c8","sha512":"640d3ece1d00a3aad233300f59a574544b5cfd172254aba71be7413badec2b694dc5122bfc12105212628a11db32531cd80288725afdfbfa5b9ba67770cab949","ssdeep":"1536:QOnw2AMUv31cfLFn11ILgIf93jRzW2Fg2dMW7FZxe2MOUlXw9GN72fiDTGVjsrtV:Bnw2AM831cfhn1qDf93jFW2Fg2dMiFn2","tlshash":"43432a4a70057534e2aa28b8d42d1848633d8bc9b108c1a4ff764c7d3ad855e96edfbb","first_seen":"2026-01-06T14:24:49.634083Z","last_seen":"2026-01-29T18:57:32.398965Z","times_seen":5,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.447b5753.css","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:04.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/index.447b5753.css HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 09 Dec 2025 13:36:14 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825ce-16f5\"\r\nexpires: Wed, 07 Jan 2026 02:24:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5877,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5876)","md5":"def92e5481f69c399626fd784e09bdd1","sha1":"125875e95160c82c673b36bd73eed49b92c6d7b8","sha256":"9b8764faf37c4aeafef298c1a116043471f6720dedbaf644403a79bf5d6af2e8","sha512":"925033e33cc621c5f8c50a6dff221a976bbef6d7bc1615caf38d5ca4583fbed16ac4e1168617e129f8242550809782a948fe983a8faf43fb3094ec4aea942684","ssdeep":"96:JKgC6w3/ONwbfJbwk3atXtf1oQGqQx1tUg29hEBWuLx34N6U/Q9d:ggC/mOblw1firxzUg2bE4WZ4N6U/id","tlshash":"c3c1f0e5132a1058a4278f3d5cd2565c353e9001d2326ffdde24f868da8814ffa22f9e","first_seen":"2025-10-14T15:55:51.062694Z","last_seen":"2026-01-29T18:57:32.437001Z","times_seen":7,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/Mining.b63786e9.png","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:04.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/Mining.b63786e9.png HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 3056\r\nlast-modified: Tue, 09 Dec 2025 13:36:27 GMT\r\nvary: Accept-Encoding\r\netag: \"693825db-bf0\"\r\nexpires: Thu, 05 Feb 2026 14:24:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3056,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"8b0c1027565aaa3d28eb2953f449dafa","sha1":"93c76e0fd8440e58b3b2e0bbc3a091b2b7801b82","sha256":"c2f7325278da96e6ceaf640538daee2377fe01c482633a69acd09de79aed16d0","sha512":"9c98787f319c20b904248e5313f390a4e072e73798a1f98bd8a571c2e9ace9f67505bb2f0224bcd16e27dde677474e153f31dbfab43c56e0223dccb69574b0fb","ssdeep":"","tlshash":"81512cd6369ef4a50d6675935b100b7cad1aae1076b71e4a039a733462b35038e7c4b1","first_seen":"2025-10-14T15:55:50.977031Z","last_seen":"2026-01-29T18:57:32.406105Z","times_seen":7,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"claimfinder.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimfinder.top/pc/assets/index.23b8f0ea.js","fqdn":"claimfinder.top","domain":"claimfinder.top","tld":"top"},"ip":{"addr":"18.139.145.219","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:04.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimfinder.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 01:44:30 GMT","end":"Sun, 08 Feb 2026 01:44:29 GMT"},"fingerprint":{"sha1":"21:57:DB:61:25:5C:76:67:BC:57:C6:0E:F9:E6:86:80:40:1E:75:8C","sha256":"E8:C5:3E:3A:DF:D2:A3:B9:86:CC:26:F0:99:11:43:F7:98:CC:20:F2:65:A3:16:3A:39:CD:AB:F1:06:0E:17:F4"}}},"request":{"raw":"GET /pc/assets/index.23b8f0ea.js HTTP/1.1\r\nHost: claimfinder.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claimfinder.top/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 06 Jan 2026 14:24:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 13:36:12 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"693825cc-44df\"\r\nexpires: Wed, 07 Jan 2026 02:24:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17631,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17630)","md5":"6508770558d4f859e90c6d9dfa66cfe9","sha1":"b34e6bc0311a237c654473a2e7198ed98b21cbb5","sha256":"b5a3582d7044c5c2c758b34eed9933c0dd60c86d5ba297ceca95cc548e7d8225","sha512":"135ebc23b415165b64e25b7830886282d1908028b5ee27e6a7e7a7fe898de4e6f7d44ceffa79de3900f429cff0365634d504afb743b2e94c0d5ef7db05159c7a","ssdeep":"384:od3IQLDlzVJWqBn8VD0UCNgAsUgh+8Bd3o8quRT/UIjq:k3IQLDR8VDbGghtgmq","tlshash":"b582d8ac7259b1f58737646001bf9409f23b2bc4a8a9dd90e623c9d43cb8d4c9516faf","first_seen":"2026-01-06T14:24:49.621661Z","last_seen":"2026-01-29T18:57:32.42315Z","times_seen":5,"resource_available":true,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/btc.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.151.57","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claimfinder.top/pc/","date":"2026-01-06T14:24:05.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/btc.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimfinder.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: VXMwZnHW1k9U/wfNdU14y+H1jmEeZ2j0jxiZfPMkDUYu6psEIdTrxF/2vFIx9ACygdu/fTIj+gc=\r\nx-amz-request-id: JW5SJPM2NQS8KJFY\r\nDate: Tue, 06 Jan 2026 14:24:07 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:37:53 GMT\r\nETag: \"03c74454bc971a3437d588396a5e610e\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1947\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1947,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"03c74454bc971a3437d588396a5e610e","sha1":"1a359cf1c14e757eaee1c5c807cf6c7732646b15","sha256":"733d0c0a99a79f263e8b548b8b1988ccfe80e156d36120371495955b4e51e382","sha512":"dede5e3cd5e0f080f4662e4e2df58482d19df970a2cc3f505eda82fb180a736a4c82523fe35b7a613293f572197e44c3bf963bcbaa32174c00d80b0b1e08bb2a","ssdeep":"","tlshash":"24419620d7bec18cf00196fcda29c87479971cc53e28d089d6e9485ab66405d1d72cff","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-08-10T05:13:29.722239Z","times_seen":523,"resource_available":false,"data":null}},"time_used":1848,"timings":{"blocked":768,"dns":19,"connect":279,"send":0,"wait":306,"receive":0,"ssl":473},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}