{"report_id":"f283917c-0000-44e8-bb4c-86b14aa325d1","version":0,"status":"done","tags":["crypto","phishing"],"date":"2026-06-27T10:15:18Z","url":{"schema":"https","addr":"claim-spacepay.xyz/app.html","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"claim-spacepay.xyz/app.html","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"title":"SpacePay","dom":{"size":216670,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"6f897afbde4d7c0c87dcaeda176ead77","sha1":"c36f2afb8a709069d4fb39e21096301e18fad2eb","sha256":"da579e907c25aec7eab9b28def97d03632654fc6b97243b793b3746770dc25fe","sha512":"0fdfdc1b14a0e609ad03408d997763ad452eaac92875201cf9ab22ca3b75e7c37021f7eb976183f7545beb1aeb1199c0cf93b3af33aaa85447d4234dce1c729c","ssdeep":"1536:TU5c6viQP2MBmcvjeJdK+kweiAS54WOAxL3gWHtrx/Ex/W:Ax2MBmcvm8HwepWHxL3gWvSW","tlshash":"86242b6a61fe00915b42b499231b66407736f21fd84bcc48fa9ebb8ecfc151659e23cd","dom_hash":"domhash762795d4ca0297e77f9ccccf097ce7e0","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"claim-spacepay.xyz/app.html","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-01T10:15:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-06-27","alert":"Detects file containing Telegram Bot API","trigger":"claim-spacepay.xyz/app.html","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-21T22:19:08.810882Z","alert_count":0,"request_count":2,"received_data":17324,"sent_data":1118,"comment":"","tags":null,"fingerprints":null},{"fqdn":"blockdag-network.app","ip":{"addr":"172.67.143.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-21T01:45:55.11394Z","last_seen":"2026-03-21T01:45:55.11394Z","alert_count":0,"request_count":4,"received_data":24853,"sent_data":2130,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-06-21T22:46:13.623663Z","alert_count":0,"request_count":3,"received_data":245229,"sent_data":1520,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-21T22:22:12.048317Z","alert_count":0,"request_count":1,"received_data":6347,"sent_data":544,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"claim-spacepay.xyz","ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-18","domain_rank":0,"first_seen":"2026-06-27T10:15:28.529093Z","last_seen":"2026-06-27T10:15:28.529093Z","alert_count":167,"request_count":139,"received_data":4234731,"sent_data":153841,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Popper:2.10.2","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Bootstrap:5.1.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.129.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-06-21T23:50:19.101112Z","alert_count":0,"request_count":1,"received_data":90143,"sent_data":469,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2026-06-21T23:33:31.856708Z","alert_count":0,"request_count":7,"received_data":755179,"sent_data":5392,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"259e416ef6833be43801b8b68a93b008","sha1":"19080c3b817985336aab5e1ce6925c99803f2efd","sha256":"70c3d690bdc5ce3b9a1527c46044989a3176e610882fa99f4523e75bc395bcce","sha512":"3af0603fd03624182245a77f98cdfa9a4cd749768913d04420436754499e65d213bf04f4f719f12ed4f8b709026bc9bf96831b3c7b2f3e5d13f25446541c2395","ssdeep":"768:pZTlSOLQenVa+Shd413pjWxkRfFdAZTVUzRWQHWxBVm7MT09XAPtThvBEwU8TtL4:p5fkVf5Lw9eEZeqlr","tlshash":"a943c44a3358b8330ade44a79072474bf7255994b147806cb9bc6cde1b3dc8672b7bb8","size":59219,"data":"","first_seen":"2023-03-07T01:23:52Z","last_seen":"2026-06-27T11:34:49.552722Z","times_seen":5815,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"789a389eac10c9b0188bb1f04e7b581f","sha1":"f1b4348fdb9cce098c9e415c763fdbbda0debb78","sha256":"82099cc8e37bed17696b65c41f58aefd794da5f9b42f3248fd3925a133426cb9","sha512":"13bd30cbbc1c16bef1358e49f14085a4c095b204f565b5edeb15ad4a244a7d7e3591db29208aaa5c7993aea5a48457a7aafa9213e14ebc470d55d11fd4d55c26","ssdeep":"","tlshash":"fed0236918bdcd3571d8014e11b6d7ac257020617711e200c1dccc3f5f11ed304b359c","size":217,"data":"","first_seen":"2026-06-27T10:15:41.590356Z","last_seen":"2026-06-27T10:15:41.590356Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbdde017de09c64cf5798e149d5ea6cb","sha1":"c1ab9c90780ec8484c7e7fcd4547bbda131b9883","sha256":"8d37d7d981ae546a2ab95f03d526ed367641e4e219f38a48a2229033c5155507","sha512":"12f7b2d975972e403ad9a7f144f4df223f49719ad11b28baab2edf097bdc517df5490b374dcabf509b9c942c56d8b9cde1992fa15464bcbc07865a466b873e71","ssdeep":"384:FWwOj5WMEdu0SwbByQq+9NW7qYCGCDPyFkrlWmbdBuZpecl26jB1pfINZMUlMR:FNOj58du0SwbBy49fSSm7nV3ANiR","tlshash":"5392b6ed35d1740802a15eb2406374cfe6bbac53730c0559c2a0d6ecfab6789e8a7e59","size":20525,"data":"","first_seen":"2026-06-27T10:11:11.471809Z","last_seen":"2026-06-27T11:00:40.330861Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ce8576186a047514f9e1dc12926a9ecd","sha1":"2bd2dc9f7b409ab2703929dcc4e46291dfcc3e45","sha256":"4e4331e10a76234ec346705c4efd197c7db4240284554549f169604bac5505ee","sha512":"886b59e7bf4c5905b5eb2c0527e756a08ec63d6de65fba253541ef9e5fd8dfd4c49bf861eb1523fcb1f513f5b7db821569ae4428290b92f2edd186752ca7bffe","ssdeep":"3:N/BKL1X+CdcRXn:eL1OecRn","tlshash":"e95504c05d4570700410c540d3501c15700d1500111f0405755d3dd517300040455750","size":1337359,"data":"","first_seen":"2026-06-27T10:15:41.600199Z","last_seen":"2026-06-27T10:15:41.600199Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app.html","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9173634e5affee28516d5d9e44d5eaff","sha1":"914fa755c0ddf6d4e09310caf2464abdd49e458f","sha256":"94aaad1eb07b1c6fa028ed43fe76396c09e30ee7613b9815a18c85d02ff5d4f4","sha512":"b9ceeff7932deedfeb70a93901af617eaa6acb2faaf0b05688c12308989350b5e4ff0127a053ac9d679972a8067ea2c6358009563e3be520d643243e08037979","ssdeep":"3:N/BKL1X+CdccF:eL1OeccF","tlshash":"625504c05c4d30700410c440d3d0143550051500111f0405715f1cd417300040455751","size":1337359,"data":"","first_seen":"2026-06-27T10:15:41.603588Z","last_seen":"2026-06-27T10:15:41.603588Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.129.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-27T13:22:10.922208Z","times_seen":484946,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@popperjs/core@2.10.2/dist/umd/popper.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"541aecc95a7faeef0fc27558070f3647","sha1":"0ec7ca4778ba3ccb4d1b1688094720834fbe9ed3","sha256":"f395875eb5d58c5128c434812cd0a53d438b11536f7fd1577077d8a5c612e1fd","sha512":"9e7ce4236bb60f2e87327ccc22487b08f775297e38e73dfc5c8bb88c6d631b0ef1e6d48bdd5063138e1d6388a1314d628c0415f77d123ccd7670216b075f2c57","ssdeep":"384:PTL+5nmEpLFrCtACZiKkbMAVfb2Bxam1HjsL+MSV1Nn1aixt094nOhpgHfHMh++E:ymEe+CZiTbRVcQyMC1Nn1zt094nOhpgr","tlshash":"a782b5cd3594f0a1167b52bac07f550f73379561228ea100b244d6da2c78ebba26bc3f","size":18795,"data":"","first_seen":"2023-03-07T01:23:52Z","last_seen":"2026-06-27T10:15:41.52233Z","times_seen":3394,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-27T13:34:39.423198Z","times_seen":754934,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4be7b6b8aa783300ae657a82c16d2a09","sha1":"39c051c1ee899fb0fdec892c96de143739ad2628","sha256":"9ce4a40dab4ae7a062f4860f6a5f77bb0f93dd15b4a24f086e633a62dfaa26cc","sha512":"ed4f6be02687fb5ca630c617096aea4f63e85839ce294d6026bac126865ce8de8cfca9d5bfb335b13b135351e13d49cee6712e22d8274a313c9f1b15f858c66d","ssdeep":"","tlshash":"89900277b5817125574568f1842a251be61946d406544459910400862d104648651bd9","size":50,"data":"","first_seen":"2026-04-23T17:24:48.285702Z","last_seen":"2026-06-27T13:37:27.538982Z","times_seen":56518,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app.html","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8646699f925bca40eea4d9c09e2f8c35","sha1":"8f0b162ea8497bd2100b83e00adf94ac4642118e","sha256":"f1693f5c634afdb055696ac8f3d512ec72b42c5e481aafedab7faa7e5f2c7da8","sha512":"46aa7f416292362cac712f61eced0bb687b46c95e28d776b5316b41ab0b980fc37bbda09fb3774d49e64b8ee187a0a4b78e7f1fdec77b3eeca136b411412e203","ssdeep":"3:N/BKL1X+Ccdc:eL1O1c","tlshash":"ee5504c05c4430700410c403d370145551050700111f040571dd1cd71f300140c55750","size":1337359,"data":"","first_seen":"2026-06-27T10:15:41.613114Z","last_seen":"2026-06-27T10:15:41.613114Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app.html","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fc6fb0c12d2853e67ed8f7ecaef61869","sha1":"20d911f106794304e250c9fce55b927ee9ef5d92","sha256":"5cf89c17ea2659310c5ff330bf8138a7835c0716a158cc7497cf7a354eb25ae9","sha512":"f5673cad5b01efbd3c1bc4c303a88aee764281bb41e1079e7c7c80cf4a65c5cc06ec3ea8e4e2247167a4569b6162b88724e97e3215ceaf48f56f2476e2e5c8c1","ssdeep":"3:N/BKL1X+CcCBn:eL1Ow","tlshash":"3e5504c45c4430700410c540d3505c1f51450500131f0405715d1dd517300040c5df50","size":1337359,"data":"","first_seen":"2026-06-27T10:15:41.616136Z","last_seen":"2026-06-27T10:15:41.616136Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ea3d9e2c6ef1c4d907c101a70d9a9897","sha1":"9673eb807a485752620417584d70c9e8109575e1","sha256":"d1fbb4df9bb93f140ced56671375d15c4e5db0c8ba59984c9c16f313f1b55259","sha512":"766a5002a893a7eb8035f1af48c251ada8c9602dc418dab67dd60d0ac77438fe40eb9925dee630c67b3fe2d69dfe1eb55d62e8eb9283476046f3e90c4fc473cc","ssdeep":"3:N/BKL1X+CclSn:eL1OtS","tlshash":"5b5504c07c5430710410c400d350141555054500111f0405f15d1cd517300040c55750","size":1337359,"data":"","first_seen":"2026-06-27T10:15:41.618864Z","last_seen":"2026-06-27T10:15:41.618864Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/2a756ba5-731d-44dc-9c06-98a261c5d55a","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"559b25e286518dd5095285175eaaf1f3","sha1":"73796b05b604f1f9b9e82ba5efe05b1ff0624805","sha256":"e2dec43e5f28a3c6ed7646c44bce131b1a582210b6d7d029b883a283e4b166f4","sha512":"89ef12ceea529b9a9f05dfba8ce32eda13432f1e4942a917c9e83752f94e65d75d2bf37732152214eed075911cdd5c57741fbb6654d931dbd72145aac6b68232","ssdeep":"","tlshash":"86e0cd093d71e64982b311337c7f3926c1656664650992485335cef9db6069f2514f54","size":292,"data":"","first_seen":"2026-06-24T10:51:52.198846Z","last_seen":"2026-06-27T13:50:50.404197Z","times_seen":2581,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4033d07ca3561aed19bd6c7d34ac49a6","sha1":"ddefd7cebde48dcf5175927398f981b5d0d76a9c","sha256":"cad8b578187e5c506ebebf06e9daaa066f1badc28699f4e60bf51f42736a58b6","sha512":"bfedc2d462e14215136d5dd99705458e8df8e03e06bb9544b3ca5aea5ccb364343744046dbe362fbe177d7e5a0aedb7ccd2b38751f9a96ba8ca5b6a3734a97f5","ssdeep":"3:N/BKL1X+CcBUR:eL1OZUR","tlshash":"155504c05c4430700410c440d350141751050710111f0505715d1dd517300040cd5fd0","size":1337359,"data":"","first_seen":"2026-06-27T10:15:41.624175Z","last_seen":"2026-06-27T10:15:41.624175Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7a267bb6ff4af3cf7e0e87f4859b3142","sha1":"f1806532d5c9aa5a71efbd5f7895d65bec42b5d6","sha256":"c123cace18fa7d979066c585a19fd52850af0d03abd1236c143c7660f863880e","sha512":"d546f15b71957c66002127c03d132411d7e0609cc7989e1ee3ebcafa37dd21e1ac0fea2f7455e5afb2e4b34ac0058c550ed6a05b28425902ba9fd4e2e9a5d711","ssdeep":"3:N/BKL1X+CcMdn:eL1OK","tlshash":"205504c05c4471701430c4c0d3d0341755050500111f0505715d1cd517300040cd5f50","size":1337359,"data":"","first_seen":"2026-06-27T10:15:41.627524Z","last_seen":"2026-06-27T10:15:41.627524Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e3724a30d0fbcca347ef00a8bb8f4eb","sha1":"c46f0c81b09dfd4ade2e598df0e054a4f4e9ca6b","sha256":"cd574c01ed0a09e9377b4352a74e76866601937043b4acfd8ede4e7b931e4cb9","sha512":"7e13c19998419682f09d95ae1e37c28bf313963700e3412667d11a2238962666cff32fb62abcbbc882477c3044ef4ae2dacdc459e5a128b2fa10777fc4e3c8c9","ssdeep":"384:mg3CgpfojUvxicobPAlX+AIX/WQmpj/TfbYFeU:mrgloi/iPcOzyq","tlshash":"968286dbb9de710e726b2529046b30cb773e5c80a05c635c9355f0aaf460368ea77a78","size":19308,"data":"","first_seen":"2026-06-27T09:31:55.040077Z","last_seen":"2026-06-27T10:15:41.372059Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b75c4fb786ee79e175057c82b2372124","sha1":"3fc08d6629c7817fcfbe12121fc4390094cab002","sha256":"ea0ba75cf604eb035bbfa7b0cc57d5190fe66ce671595e90b6957edd5148d3d7","sha512":"89ddd3d86d6c34d2e6c74b428f564129f15440de6b9a5e13ed4c2c46fcd9b1ce3d54ae31c2655497e3c8ecf46ad31f620799efc132fe8d19663c581ca065330c","ssdeep":"3:N/BKL1X+Cc5:eL1OR","tlshash":"025504c05c4430700510c440d3501415510507c7135f0445715d1cd5173010c0c55750","size":1337359,"data":"","first_seen":"2026-06-27T10:15:41.629423Z","last_seen":"2026-06-27T10:15:41.629423Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/saved_resource.html","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4a87d27c8592b0512b8ea560bcaffd22","sha1":"3d75dca260eac512254bbf9449d516a7f6c72ccc","sha256":"06e26d1d718bd103d47c98f269ef4e806bf4884a75e4ab632220fbf30c263d5b","sha512":"8b9815fbf25a4a4a12a2142bdc9edb8a487ba8db41ec77df2ca8745fbd4c30210758a2d8976d0587830363f437d7653c3a7f2fb05dfa3ead22249a8b16c5f31e","ssdeep":"","tlshash":"70d097660c3888302b98020b22f3e3a822b125903a21aa0081cdcc2b2b11ee304a1858","size":236,"data":"","first_seen":"2026-06-27T10:15:41.631782Z","last_seen":"2026-06-27T10:15:41.631782Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/saved_resource.html","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ddf10640ecd18721ce4c8ad9065b8bf1","sha1":"119cf142049f35fd275a4f46a7f4af66fb6e1136","sha256":"f6d82eddae8656dd54cce0e2f28436d8d5a6915df62301b4b4b72d206a93833b","sha512":"2d5ae08c76b4e43286a8b56e0943bfde863915475b3624b7c86aebfa71845bb2ac6a9a040e494e8228bcf89596ab559ed274262bc60e26ac3548ca5cd7a0ed62","ssdeep":"","tlshash":"051100793a1a5534c5c5408b317ee7a93d3260317a02a044c3accc395d18ec714efcbe","size":902,"data":"","first_seen":"2026-06-27T10:15:41.633733Z","last_seen":"2026-06-27T10:15:41.633733Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app.html","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1e50fcfc8c752175ff807841572530cf","sha1":"03ad81477e761297b3303f079f659d0269fcd829","sha256":"31f8094427d685dd7b752b1d660ec2612ce236cf5402d8351c685ae1654acce6","sha512":"d3af1b45d5b712563fb0b88ed05ee831eabdbfcf04056f2fd8ed9cb37f4cb2241a83e8523977ae0a06b91fa1572bce52ae3050f47c46889e3e4259aa5cd8ccbf","ssdeep":"","tlshash":"8ac08c887a80e014c28125351c6b428ae638de6008581003a0425249b6a071003aaf0f","size":137,"data":"","first_seen":"2026-06-24T10:51:52.241503Z","last_seen":"2026-06-27T13:50:50.408347Z","times_seen":2699,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/ae9bb50a-0d3b-489f-b461-f645dc2002c4","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"559b25e286518dd5095285175eaaf1f3","sha1":"73796b05b604f1f9b9e82ba5efe05b1ff0624805","sha256":"e2dec43e5f28a3c6ed7646c44bce131b1a582210b6d7d029b883a283e4b166f4","sha512":"89ef12ceea529b9a9f05dfba8ce32eda13432f1e4942a917c9e83752f94e65d75d2bf37732152214eed075911cdd5c57741fbb6654d931dbd72145aac6b68232","ssdeep":"","tlshash":"86e0cd093d71e64982b311337c7f3926c1656664650992485335cef9db6069f2514f54","size":292,"data":"","first_seen":"2026-06-24T10:51:52.198846Z","last_seen":"2026-06-27T13:50:50.404197Z","times_seen":2581,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"93e354e833ee7b4feead7057a3f33168","sha1":"4025c763f11cdc2eef6318108989528620fef9e7","sha256":"80b90237b40178e74c34d6652d95b3918d01b603ba83f9dce47ba6b19343c245","sha512":"2b37a9bb6f2c3e2ad3624228638881eaeb961c98a31e60a424d9c6146f002a852cec318a17772a5be5015fd197ad4582b007eb0b15335ba6d25412b27b576c13","ssdeep":"","tlshash":"19600000c0303003000f0000f00000033cc000f0cccc0003030c00f000c000c0cc000c","size":13,"data":"","first_seen":"2026-04-23T17:24:48.301435Z","last_seen":"2026-06-27T13:37:27.532813Z","times_seen":56455,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"54e1b00687c6b3e91d6ed5405ab2c567","sha1":"34995487462bbad60d3147a484fedf00745e36be","sha256":"b329e51b4ca3dd4c3036612e5a11bbe4025d69ef5c3d175fdeb33c5bbbdb7eab","sha512":"c060b7cc4b314aeb0bfb432ac360057f76d721aa920024f3f9eb843d5e17622d758bfaab3a39d1aae76ed4aa94922ac72709ad66d06bcc8ae58d5d54c6ef9501","ssdeep":"","tlshash":"93c0222ef13f4d44a1231420bd3f36a0cc2b718810083e89aa2a08c607624c0a5d1fb1","size":192,"data":"","first_seen":"2026-06-24T10:51:52.218115Z","last_seen":"2026-06-27T14:06:19.901131Z","times_seen":1658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"94081036cbf595a3dac383955367903b","sha1":"4c78fee58d05c79857142f6a1823b584e693d678","sha256":"a3c4f20a8b17293aceca90edf64056d45c645f5adc2d5c853448063f6fa56a8b","sha512":"99084ac603dabfdbf3736d9064ab97c259689afaf02fe04dccc45f4ed0dbb4be9af01b5e797fa80f5f6881c3f1f245f4b0d79fa6472f1eb8e2aa07f5404e5e69","ssdeep":"","tlshash":"64600000000000000000000cc00300003cc0003300cc0300c30c003000cc3cc0000000","size":13,"data":"","first_seen":"2026-04-23T17:24:48.314042Z","last_seen":"2026-06-27T13:37:27.481289Z","times_seen":56294,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"50bda72e04f85f9b4338c0f939c34b9c","sha1":"d53056a9d7a7424238f0faf0b93b098f28d4d3ca","sha256":"db8d20f2dfaf9df3877967927de5ecb9648fecda131ab44bf854f8d72baa2b23","sha512":"3e55d7e8940bd66ef537062f73d3d2c6982a25a4e9fe9ac98e18253782cf28e01f106382d2e9dbbc05b6cdd62aae372b75cd430aa5a7ce2e327fb2ece33a30d0","ssdeep":"","tlshash":"736000030c00cc300033000c0000003c30f00c3003cc000c033003f003c030c0000030","size":15,"data":"","first_seen":"2026-04-23T17:24:48.299417Z","last_seen":"2026-06-27T13:37:27.482905Z","times_seen":56188,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app.html","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"42783b02d1d6ed73849a29c48ea92221","sha1":"f49d2edd90162a6787b6d2b88efd35cc969133ee","sha256":"7402236f35cfdf0265973f2396103f79e43a66e56313c7009af7706774c5fea2","sha512":"7bef72db403cd9ff019c55ed2bdebc63924288869a388c8c39196a172b439ef24ed2854947c328f62ffda8e2406312b2c2a8e3d1604cf57f2b8e5710f5bdd508","ssdeep":"3:N/BKL1X+Cc/:eL1On","tlshash":"835504c05c4430700410c400d3501c1551070704151f0405735d1cd517300040c557d0","size":1337359,"data":"","first_seen":"2026-06-27T10:15:41.643217Z","last_seen":"2026-06-27T10:15:41.643217Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/25e6c66701a0/api.js?onload=ePmH8\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d26819e314c7334b3a5dd5a004898650","sha1":"559b39e547d32af023ed6ab08c369e93db0c7f80","sha256":"9715b51191ac5c467c5b8d983bf9f77c688c61987ab80f94fe3b4c452429cbf4","sha512":"9f4ea7965bdfe1afd68bd1dbdf79cdaa039492ef8e1d29a4966ec6ae8d9b8cc6af8f8920964deab2926662041ee1ac0feb7d70df7df9e6f0e55c5d130adc818c","ssdeep":"1536:4oYt3AYYdolrsHspjxegN8t5LMhfS8OpyJr:b8+onxeg6Dgc6F","tlshash":"3a632cc472aa7877129ac0f0a03b6753b3267d36a84cc850d427dc65277de869173fba","size":67081,"data":"","first_seen":"2026-06-24T10:51:52.15506Z","last_seen":"2026-06-27T13:41:17.365015Z","times_seen":4638,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c0ba192c3ac1af97ba95393e32faa374","sha1":"2819e76084f9ef2d93d3baf234a5504670547bbf","sha256":"35148408e5bbf2ab54daba1be3d940aeaf2e8d7786f2327c927f3445e4239cbe","sha512":"d5e0559f35963c33fd6aaa99c2275f7ebb8bd7af2f1ded4ba8201d81447a5a362347d30c47ffc8de914779660e85fba1853bcfddf0ac9a104b25f8bbf71ee259","ssdeep":"3:N/BKL1X+Cc5A:eL1OxA","tlshash":"185504c05c4474701410c401d350145551050510111f0405737d1cd5173100d0c5d751","size":1337359,"data":"","first_seen":"2026-06-27T10:15:41.645448Z","last_seen":"2026-06-27T10:15:41.645448Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"656fa1f524e9ef9852a7f1926f9f411c","sha1":"358a113517e7836bd4a32c0579ea57bcc4612895","sha256":"bd279b4d2f2e6bd8b3f5c7a4016434ff0e01acc7d95ed6fa7330cb6ff8112c01","sha512":"1cde8c02ef0b57aa160f2a1d6a6fef4eb8d5cf879d658aa4fea108f65ddecb35a4d6bcbaeaaf5e0dd2aa2764b9e4d7b87081f017d7d1ee2cf4cf18a8fce78237","ssdeep":"","tlshash":"43a004ccf141f0505303f1350c374115f11557c1041c1010554c44537d1414f4111f5c","size":71,"data":"","first_seen":"2026-04-23T17:24:48.307672Z","last_seen":"2026-06-27T13:37:27.505778Z","times_seen":56137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app.html","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"43e87c72b1d06f762eda7d402273a9a6","sha1":"4a38b075f7ab093d47e25f44041ce40ddde9bba7","sha256":"16fd4637bf6b65ee0cdeed3c53c1a36f2ee285a0c68b9f741fa3e2798727c144","sha512":"d8ed239780c6781d21a5d58aa3fcc29b52c7b67d370b587244c3c46063263c7a955ae550f31c275e6bd7458e1491f61660df2ca2943b23a800cca4945b2433c9","ssdeep":"3:N/BKL1X+Cc3L:eL1OPL","tlshash":"fb5504c05c4430700410c400d350141751070740111f0505715d1dd517300040d557d0","size":1337359,"data":"","first_seen":"2026-06-27T10:15:41.648081Z","last_seen":"2026-06-27T10:15:41.648081Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6eaa7c932c5732dd0849437a5ca1bf4e","sha1":"2d8a9b0142442ce9b1b843885d8694d5dc6a6775","sha256":"58db4471a6ef7aebe7d0d1115069b3d4d9a0ff2e33455f3c55b026d751619473","sha512":"d50f643e7742dbdacba48847fccd43733501f40340f3efdbba8eb23d1a92c1434407c2e482f395f8de352f36d7923003084af339fbab1402f8c52b7f5b086aae","ssdeep":"3:N/BKL1X+Cc1Ln:eL1ONL","tlshash":"745504c0dc4470700410c400d350141751070540131f0405715d1cd517300040c557d0","size":1337359,"data":"","first_seen":"2026-06-27T10:15:41.65149Z","last_seen":"2026-06-27T10:15:41.65149Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"540d0f7bb84dc965a402a5c89631bb6a","sha1":"08d04ecce2304a2285b8fbe14efccf561ebdfa14","sha256":"6190339e367966e5fd8d82b3f9617662ace1e2d809fd5e57e8abc1a208ab37c1","sha512":"70a73924d6ac63ad675c9cceff22b7aa8ab90823cb244d44b621677e35dcb3f89a6f4c73d9f1e46f0ed67eb51c550a69968207e12ee6c12b27d50a8a76d9ff00","ssdeep":"384:U/c/gtU1fgNp6epBG4av+U4FX0z9r3P/+j9LH4wR236afHunmRVx:U/mgmofrpBG4a0X0zx3Pyrzgnf4m5","tlshash":"fc9274de3ad1301802a19cb7455779cff27bdc5273080959d1a0c5acf9a2788eaa7ddc","size":19743,"data":"","first_seen":"2026-06-27T10:15:41.411965Z","last_seen":"2026-06-27T11:01:34.064934Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0890444ada6d1ad8162d90329aced01b","sha1":"62248a9e0ab288388d5e6bc922d67435f4580caf","sha256":"70e6f3d292241c5198b5abf19e48b569135266b4ba1762350588a04f9cb06e26","sha512":"d9ff5c6fa8c7387e763309fa8c5ffdba95769564a290a60cd0281c90d7c21f853095f7756606b993d27dc28deaac05f278f5e65a22dc34a10d41ee988ecb17fc","ssdeep":"3:N/BKL1X+Cc/Qn:eL1O3Qn","tlshash":"ec5504c05c4434700510c440d350145555550500111f0415735d1cdd17300050c55751","size":1337359,"data":"","first_seen":"2026-06-27T10:15:41.653828Z","last_seen":"2026-06-27T10:15:41.653828Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app.html","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"811aa5b84a5fea19295de38189e4ad03","sha1":"b9ac6420adca716cc9f393fb432a5042208dc197","sha256":"8aa8e48f658478447001588b3405212c508191743385cc380e85d0d4c01897c2","sha512":"f958c7ae139b5ef51e21cd5ebd67978179ef19768745efb2d1f909f56e43d1903d53dc8c93798dc348acffb246194f40a8320ee660ad7e24da68cc31474b35a6","ssdeep":"3:N/BKL1X+CddSRn:eL1Oecn","tlshash":"0a5504c05c4534700510c540d35014155417350011df0445715d1cdc17300040455750","size":1337359,"data":"","first_seen":"2026-06-27T10:15:41.655898Z","last_seen":"2026-06-27T10:15:41.655898Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1e50fcfc8c752175ff807841572530cf","sha1":"03ad81477e761297b3303f079f659d0269fcd829","sha256":"31f8094427d685dd7b752b1d660ec2612ce236cf5402d8351c685ae1654acce6","sha512":"d3af1b45d5b712563fb0b88ed05ee831eabdbfcf04056f2fd8ed9cb37f4cb2241a83e8523977ae0a06b91fa1572bce52ae3050f47c46889e3e4259aa5cd8ccbf","ssdeep":"","tlshash":"8ac08c887a80e014c28125351c6b428ae638de6008581003a0425249b6a071003aaf0f","size":137,"data":"","first_seen":"2026-06-24T10:51:52.241503Z","last_seen":"2026-06-27T13:50:50.408347Z","times_seen":2699,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/3c1ca31e-b182-46ce-ac8d-fe4eee5e8a52","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"559b25e286518dd5095285175eaaf1f3","sha1":"73796b05b604f1f9b9e82ba5efe05b1ff0624805","sha256":"e2dec43e5f28a3c6ed7646c44bce131b1a582210b6d7d029b883a283e4b166f4","sha512":"89ef12ceea529b9a9f05dfba8ce32eda13432f1e4942a917c9e83752f94e65d75d2bf37732152214eed075911cdd5c57741fbb6654d931dbd72145aac6b68232","ssdeep":"","tlshash":"86e0cd093d71e64982b311337c7f3926c1656664650992485335cef9db6069f2514f54","size":292,"data":"","first_seen":"2026-06-24T10:51:52.198846Z","last_seen":"2026-06-27T13:50:50.404197Z","times_seen":2581,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app.html","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7148074da49e18b16e2561b8e9038d5f","sha1":"27516730aa8cff1fec97d930e31e05bdc29401fe","sha256":"f9579af244de79a50f395f7c4262265b04c644a2d0a5913030e7e602f00eb72c","sha512":"a7ab1ecc8ca1d54af7608d89b3631a14844e9a7d0e9b00b86cfda674e482767c9939d898f3f0efd0341bb680bdfb6e1c35fcf06f09a94fbd6ef1c7c9c6c9230a","ssdeep":"3:N/BKL1X+CcKcn:eL1Ov","tlshash":"e45504c0dc4470700410c403d351141551050550111f0405715d5cd55f300040c55750","size":1337359,"data":"","first_seen":"2026-06-27T10:15:41.657924Z","last_seen":"2026-06-27T10:15:41.657924Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"29986633e375c34ef7f4b53d6b0adc99","sha1":"b3ad1bd4eede20d1042ae73877e496e6706bed25","sha256":"356340e7337bbb7be7806b07089bd7468ec88af83c667e3178d9ee777c206bba","sha512":"b3aff32f31e7d5fd31773a0a545259a86eba621cc90e6aeb65199d9dc9bd6ddae3f69904edd9a0443f1702a52656c5e578b6f71a16df99b6944e79f56cee1f8f","ssdeep":"3:N/BKL1X+Cc6R:eL1Oi","tlshash":"785504c05c4430701411c403d3501c5551070500511f0405715d1cd517300040c57750","size":1337359,"data":"","first_seen":"2026-06-27T10:15:41.660114Z","last_seen":"2026-06-27T10:15:41.660114Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app.html","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5c480d659bffc341ff72d64da1f8114f","sha1":"77b61888cd4850dd330ee8f4ec22dea3ba34c982","sha256":"e25e6a8e0a3926629257a308c47bd70f69bff82f1e368a5049e67db1cc29edab","sha512":"668df69a2a5c6dce1492aa5cfcdbf2175890e23299d59356a0a1c53e4acb90e803a6683e4c43eb7cf7fca19c56d3c52a60c3f5970c71f46c0ca3c555700b3b50","ssdeep":"3:N/BKL1X+CcHVV:eL1Of/","tlshash":"f95504c0dc5430701510c440d350141f51050500111f0405715d1cd51f300041c55f50","size":1337359,"data":"","first_seen":"2026-06-27T10:15:41.662283Z","last_seen":"2026-06-27T10:15:41.662283Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"809c726d33acb305036987dc62bbeb0a","sha1":"5b055144f46ca7982f75266c0f2195b1b69bcb05","sha256":"0bd4d1aee145bc516c2754542672e169e82a23d5c1be0ba19d6c59155d503d73","sha512":"ebec5c9d3ddcc6f0f03ae73920d9243c1c85cf005a5294d08ee1f2c8918ebad790dc50704413b2129379b11120e49820a3fa7ace4390ea2134e75adcb013a62a","ssdeep":"3:N/BKL1X+Cc3n:eL1Ovn","tlshash":"b25504c0fc4430700514c403d350141553051500311f0405715d1cd517300040c55754","size":1337359,"data":"","first_seen":"2026-06-27T10:15:41.664402Z","last_seen":"2026-06-27T10:15:41.664402Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ad0f7a577dc7a0f52779940c3a8e5705","sha1":"33565541c4cedeeba3c9cbe8b88257fa17016560","sha256":"c9efa1b4f7cff64efe8d7a15a49dcb3c5d5814dca055d208f11ad21b1a646ed7","sha512":"e47ef5ae81c89f54542f7dbb25b12c88f43be6597a969e1fbc999c6945d59ffe24ceaa5fbc08b8daab2af5086b561441f226add3da7397e352306aaff501fb93","ssdeep":"3:N/BKL1X+Cczf:eL1OLf","tlshash":"235504c05c4430700414c400d350141751070500111f0455715d3cd517300040c557d0","size":1337359,"data":"","first_seen":"2026-06-27T10:15:41.669127Z","last_seen":"2026-06-27T10:15:41.669127Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"706c9d8a81a207158651f654c8b91f91","sha1":"03241e119af8400526d83029e2ff277c7fc2087c","sha256":"c24b938ff8540f160d752a747d286769b10052e922908e73797fe1acd449d396","sha512":"451a5df43e1ffe5cec2191ce0db5a45a7dad813da30c5b81378353c779aeb620d130879cb52251c1a23d2eeece1dffdd9a1be2d29784bd147668ef8a444b0120","ssdeep":"3072:f0fQMFvaWqOk8OKlPSXpL+4Q0znIY0Ku1cYBW72GOGOYOXOAGIRcIqwyYt:f0vaSk+kpyFLYOyw","tlshash":"613494c6b9c6b72e0395b2b4006770bfb62a4ea4801e1dd9c650a7f07cf173a915ed9c","size":243856,"data":"","first_seen":"2026-06-27T10:15:41.671219Z","last_seen":"2026-06-27T10:15:41.671219Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app.html","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fa3a8bcdf9796d2f9e50ca26e5f6c208","sha1":"80a5dd637f8f69188747484f8f3dae4b3e1bddd3","sha256":"c25ab08a173600415ef63133671e5b7bc8be94351b553e5fed387b6baa20e09f","sha512":"d92e18bc5dae8b0180a9015c4d35f4a5f6dad67b60beeb8d8c3c61f0c4b47c5bb820445a5af67c5a953e28ceabdfe80c7a05b94b96950ace1c16c761dcd7ad5b","ssdeep":"3:N/BKL1X+CcA:eL1O4","tlshash":"dd5504c05c4430700414c4c4d350141551050704111f0c0571dd1cd517300040c557d4","size":1337359,"data":"","first_seen":"2026-06-27T10:15:41.673854Z","last_seen":"2026-06-27T10:15:41.673854Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4db5ffcadfbd73a6b70fe0c9a394a39d","sha1":"f4d3e357a67243f32c885efda7d37901ffec6f4f","sha256":"f5a16a13fde28f3bca6e26af508526a8b6e3c45025bf932641b0549d4ebb25f6","sha512":"b2c44319dfb81e9ee0de61caa3a8903b59ca224f3cf2ad369d1245be92e70233dc35dc6eab19cdf789ec8925bdd68f5ecbc5f20a2632439f2d383863979b2712","ssdeep":"384:XguNn1efP8wIV867v9mLqU0Ye5GznJo59BFRH2O1g+JHGwOJU:XguF1iP8wIV867EJg/fH2O3mwOi","tlshash":"1a9282ee71d4350403625c77556b78cff667dc42b308861d92e094acfeb2789e8a2e9c","size":19417,"data":"","first_seen":"2026-06-27T10:13:17.269588Z","last_seen":"2026-06-27T10:15:41.336983Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app.html?__cf_chl_rt_tk=VjF5GAVFWBp0yt3S1DQSwuxpx_86nOzRub7WVTDtAfI-1782555288-1.0.1.1-ghIYTc3weTGXiCvbEW3zcjPzKJr7vkzNs6NvwhGGTV0","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-27T13:34:39.423198Z","times_seen":754934,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app.html","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-27T13:34:39.423198Z","times_seen":754934,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app.html","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a896026034865edbb208c04e583e8220","sha1":"1ae82eb23908265b0962c1bb0985d26071a54dcf","sha256":"f90b8a4bf25e261f5b41534cac6984220d85673476e5f8af472bb2bf79a63207","sha512":"9532731f92baa518463c44e8d94095c573199c0c691504ae123c160f5e4cfdd0c0b9e253d5635061d0ac6596b9de5a36037e527d4e863d256dc8cf82d7fd0011","ssdeep":"3:N/BKL1X+CdcR7n:eL1Oec9n","tlshash":"115504c05c4530700450c440d350141550051500111f0405715d1cd517300040455750","size":1337359,"data":"","first_seen":"2026-06-27T10:15:41.679352Z","last_seen":"2026-06-27T10:15:41.679352Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app.html","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f08da024d8d22503d70de15c6c62edd7","sha1":"31ebebadc5b59d79020ae9101cba832b474fd00e","sha256":"42a14069798eab7f388d8c7fcfa6388aab1a2f06594c047f78cca098c70343cf","sha512":"2b2c9651557ff3c41b0a9318a7b982cb346dc388f1374712eaf6772d5ca9999874e079f3fd04cb3c8c2f5cc7fb512fbb8c28a5db082b6b60a704b648d9a77867","ssdeep":"3:N/BKL1X+Cc6Rcn:eL1OCcn","tlshash":"345504c05c4434f00510c401d3511c1755070500115f0405735d5dd51f300050c55751","size":1337359,"data":"","first_seen":"2026-06-27T10:15:41.682524Z","last_seen":"2026-06-27T10:15:41.682524Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a123afd88aaf56c0","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"49b48f13a3ae32c5816298eebc677b51","sha1":"46862d6f21d1d42d714779958cad5f2cc16d2ab3","sha256":"f18d64c4d0a19f132a98c7010762553b8d59979ab0902fdbfb8a7d11305381b7","sha512":"4438135bb3d8f491521bb6f35e723f13e62949e135aac496f136235b96686aff94461d8be26b07af524d0d188bd95a71803ebecaf5ba1741ed51ea250549bae1","ssdeep":"3072:ylutvbnM0GkV9FlDid3BGlzjOllzjiIxkwliof9YOtmk6vjcMC2Yere0cejR:ylutvbnM0JV9FjlzSllzTmsJUq0f","tlshash":"1524eacdb481b71f56d7a1b9042bb2aa762e0d80401b34ecd61267f07ca1739a1fad9d","size":221656,"data":"","first_seen":"2026-06-27T10:15:41.567263Z","last_seen":"2026-06-27T10:15:41.567263Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app.html","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d809eadf7abec0c9cc250140fc281e60","sha1":"03d51fa4442c2e0100d5d81a858e32932d42f12a","sha256":"ed34b6309d170b75369c0d6176a19c58b693a74127cf3ba02587545585ae1e46","sha512":"e722faf142ad1889a3048ea329982f94abd13329945a45057ba4a7eb9d5582ed0243baac98983517f0ec4b33ccc1e84a1677378911cd7e628b4b97f0b46068ed","ssdeep":"3:N/BKL1X+Cc6e:eL1OH","tlshash":"e95504c05c4471701410c400d3d0141751070500111f040d715d1cd517300040c557d0","size":1337359,"data":"","first_seen":"2026-06-27T10:15:41.685338Z","last_seen":"2026-06-27T10:15:41.685338Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a87d27c8592b0512b8ea560bcaffd22","sha1":"3d75dca260eac512254bbf9449d516a7f6c72ccc","sha256":"06e26d1d718bd103d47c98f269ef4e806bf4884a75e4ab632220fbf30c263d5b","sha512":"8b9815fbf25a4a4a12a2142bdc9edb8a487ba8db41ec77df2ca8745fbd4c30210758a2d8976d0587830363f437d7653c3a7f2fb05dfa3ead22249a8b16c5f31e","ssdeep":"","tlshash":"70d097660c3888302b98020b22f3e3a822b125903a21aa0081cdcc2b2b11ee304a1858","size":236,"data":"","first_seen":"2026-06-27T10:15:41.631782Z","last_seen":"2026-06-27T10:15:41.631782Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockdag-network.app/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"blockdag-network.app","domain":"blockdag-network.app","tld":"app"},"ip":{"addr":"172.67.143.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"028246411d5c88c88ffceea92948a1c4","sha1":"313e7468987137142ae0df454171cbe71a8081c1","sha256":"fd89ccf1ad443a84ba2e409e8eeb40b8d12d7bd6739bf8d7f6d325c21fbf4969","sha512":"af5879cff1d4b123a01f8e3623b32136b80430cbff496f10336d2754f5e6def92493b940fb61139aa8d4e80d0b0c8558889e416ca8affffee971df158da9512e","ssdeep":"384:CeEvuXj9xrfO9L8I4ACgbBJXPHCdmU6qhAvKpRec3XusLwS523mo93fOOMMZItII:iWXjbfCL8s95PGuTvKzec3d/w3J9vOjf","tlshash":"bd92b6de31c1701802919cb6a55738dfe677fc82670c0a458190e8fcfab6744e4fae98","size":19726,"data":"","first_seen":"2026-06-27T10:14:05.719914Z","last_seen":"2026-06-27T11:02:45.183905Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa4e795cc59beeb1ca0b45d919e93537","sha1":"6295b86d7bf152d83d41b6f2463d69fcf0545497","sha256":"142b1977f983463b82eb291f8b6c1bc53c9f34c3886a3f4de4d97c06b0008a55","sha512":"077625ae2808d87227fd90b6000ec0cb00a8a563cb862314302e5e4e9f47d5318855d6f494fe242449a836fab115204deb9fa17b73c65e4d80dafa165c22a3d0","ssdeep":"","tlshash":"8fd023ad18b9c831b1d8018f11b5e3ad657121617715e204c2dccc7b5f11dd304b659c","size":217,"data":"","first_seen":"2026-06-27T10:15:41.68904Z","last_seen":"2026-06-27T10:15:41.68904Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"The next request for the Private Access Token challenge may return a 401 and show a warning in console.","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":143227},{"level":"debug","text":"","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":143227},{"level":"log","text":"map[actor:server1.conn0.watcher14.process8//obj94 class:RegExp displayString:/.*.*=.*/ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":143227},{"level":"log","text":"map[actor:server1.conn0.watcher14.process8//obj97 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process8//obj98 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":143227},{"level":"log","text":"map[actor:server1.conn0.watcher14.process8//obj101 class:HTMLAnchorElement contentDomReference:map[browsingContextId:1.5032385538e+10 id:0.26908378223521845] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:a nodeType:1] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":143227},{"level":"debug","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":248370},{"level":"error","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":248370},{"level":"info","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":248370},{"level":"log","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":248370},{"level":"warn","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":248370},{"level":"log","text":"map[actor:server1.conn0.watcher14.process8//obj96 class:RegExp displayString:/.*.*=.*/ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":143227},{"level":"log","text":"map[actor:server1.conn0.watcher14.process8//obj99 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process8//obj100 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":143227},{"level":"log","text":"map[actor:server1.conn0.watcher14.process8//obj102 class:HTMLAnchorElement contentDomReference:map[browsingContextId:1.5032385538e+10 id:0.26908378223521845] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:a nodeType:1] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":143227},{"level":"debug","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":248370},{"level":"error","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":248370},{"level":"info","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":248370},{"level":"log","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":248370},{"level":"warn","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":248370},{"level":"debug","text":"","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":143227}]},"http":[{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/gate.jpg","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.352Z","timestamp":1782555296352,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/gate.jpg HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a1ZO2TicDwwl7OPW0fJsfwMpccsudA%2F6y6VD9eFjB1VhJzRPS9vrgub5VR4GDcETaSaz0OLRoV2eIcqU8RD5gPY42GksjW27m7S4mGMYMWx9cS6k6dEI25%2B8Us%2FwgA%2FHKcXx9uU%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-1547\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5447\r\ncf-ray: a123b00a3c6d56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5447,"size_decoded":6378,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 224x224, components 3","md5":"1a324e7dffa7f84bb6074e37650eb6d7","sha1":"294c1aef3335b603e50c4fad76a46da41857284d","sha256":"931232161a719e391fb0d2a1062a4d289bc42842a121b9f2d044205240574880","sha512":"23e8ece6574145c2e415c68be3d70eda1ebedbfc48d5680cdc7800549e406f5e4a2bf5f2429b836a9aebc224cd45c675d7d8813bf7df6af903ac5cb7cc50607d","ssdeep":"96:cXMAPjYLed0zkrZTQanDa8/ql22XRLuo4ZU8X/eah5fxUtTdb7Rzdv81e:yTszI9TQanG8C1RLE+8X/eavZUj7Mk","tlshash":"91b16eb93fc54d1fdde2e03c0a0568f52f3c2968c154278f25a489711f38deaaba09d6","first_seen":"2024-12-31T21:41:30.526445Z","last_seen":"2026-06-27T10:15:41.325099Z","times_seen":32,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.129.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.532Z","timestamp":1782555296532,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://claim-spacepay.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\nage: 1033696\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270047-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 375947, 53842\r\nx-timer: S1782555297.573547,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":89501,"size_decoded":31517,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-27T13:22:10.922208Z","times_seen":484946,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":11,"receive":4,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/lg(5)","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.596Z","timestamp":1782555296596,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/lg(5) HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O%2FvadmGmWufkWmU9ECEM4tLSahYwRbXgW9ssEOB6NbTzCJ4jphuVDSkJk9whslh%2BAoGMNyPbyn%2FOJapT92xnw1yGKTJHWdRk10BOJ1ES7yOCHlBuxIq3mfe4uvnRfIe5c7Jylao%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-174d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5965\r\ncf-ray: a123b00bbcb056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5965,"size_decoded":6888,"mime_type":"application/octet-stream","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"9604f9826ce692bcc4afde9c631aa345","sha1":"dd7b0c4f286379345941bc671a52739a0d7e3c52","sha256":"731c57bcdd773ca1373353a82e66b2b031be492a157a4f3c6a00199d8e885dc1","sha512":"40b6f4df72e726391fda0c638153462b6cf5ad9be895a97ced61d6293ab8ea837eaeb20b083ab06088752df51eaade78df8d23bbd683fa8959b0488ff4144cac","ssdeep":"96:E8Gu+2/uoYvSwEmfXHuUfzWmYf1w/RYdEUInyUokVg+m:E8Gu+auvvYmf+G7Ye/RcInbokVhm","tlshash":"28c14cd7b645876dd4e8f8bdc2a175312799bbbbea17d62cc316428005030a06ba9d8a","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-06-27T10:15:41.33456Z","times_seen":381,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/cdn-cgi/challenge-platform/h/b/scripts/jsd/25e6c66701a0/main.js?","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:57.437Z","timestamp":1782555297437,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/25e6c66701a0/main.js? HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: zstd\r\ndate: Sat, 27 Jun 2026 10:14:57 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a123b010fd0a56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19417,"size_decoded":9145,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (19417), with no line terminators","md5":"4db5ffcadfbd73a6b70fe0c9a394a39d","sha1":"f4d3e357a67243f32c885efda7d37901ffec6f4f","sha256":"f5a16a13fde28f3bca6e26af508526a8b6e3c45025bf932641b0549d4ebb25f6","sha512":"b2c44319dfb81e9ee0de61caa3a8903b59ca224f3cf2ad369d1245be92e70233dc35dc6eab19cdf789ec8925bdd68f5ecbc5f20a2632439f2d383863979b2712","ssdeep":"384:XguNn1efP8wIV867v9mLqU0Ye5GznJo59BFRH2O1g+JHGwOJU:XguF1iP8wIV867EJg/fH2O3mwOi","tlshash":"1a9282ee71d4350403625c77556b78cff667dc42b308861d92e094acfeb2789e8a2e9c","first_seen":"2026-06-27T10:13:17.269588Z","last_seen":"2026-06-27T10:15:41.336983Z","times_seen":2,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/5DxVDK36_400x400.png","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.580Z","timestamp":1782555296580,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/5DxVDK36_400x400.png HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rb2%2BIyi9J81auOM3gllka9WaubZuEATb6TyCLnjQWrvgWnNeoTgY4FWfoGIThd2ytRu%2F7VtrSXSn62dU2FaDcDJH1vVBELP0KmsGdjLXSafvVPDuQWugb7ZpQXH92IEKrASqgtE%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-7858\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 30808\r\ncf-ray: a123b00baca656c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30808,"size_decoded":31735,"mime_type":"image/png","magic":"PNG image data, 270 x 270, 8-bit/color RGBA, non-interlaced","md5":"68746ace389f4ffd684a97b7847269fe","sha1":"b7f59cca550dbd45f63f31fff17b99e57eaf49a5","sha256":"472c20ca51a202c7cf85f59026d8a572495d4a87d325a3bf3ad51a60a6707889","sha512":"93abbeebe8a459baab842681711458c1230919a616e45358c132876a86f17ad25cac804813226a6e4811477578f6f87e1fc4aaf1dc74f0b8d9ff881371dd011e","ssdeep":"768:p2pElQCOcVL1e/485TtFvaUfKscvQY0VMQHNIoiAr:sEBVpe/j5Tt5aKNcvd01HNIoiAr","tlshash":"2ad2f13d7decbe503a1f1d25b3058a6ab31b9fcee386445854684164cac701c067bfab","first_seen":"2023-12-22T03:55:57Z","last_seen":"2026-06-27T10:15:41.338205Z","times_seen":155,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/css2","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.993Z","timestamp":1782555296993,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/css2 HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:57 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1lx5LnqXsokUrn05yRk3Ozzd972rMJwX25gVYeyyJHSXfDoSn2VWl3qR%2BYKeHtlzWU0BBcx9Qw30yNxWIrru5wZumwvM9UtAM0fT7ZUIUa9dzeualcU%2Fy2rlX4u54MvtTiLx%2FM0%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-1769\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-length: 5993\r\ncf-ray: a123b00e3ce256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T13:34:35.299461Z","times_seen":16762706,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/error.gif","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.330Z","timestamp":1782555296330,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/error.gif HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/gif\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=COg2i7HhvBcqcpgRYmKkJDp7UJYXWbDSemodpXbTZjtEvCZps0fl2%2FExbJ0YxLC1Hfr2GGfyFsPu%2BMWkDCVJ2SDOOFU2e5sycF3xlKEGv2zAWxfWLZm%2FkB1DVhJgLCqljBEP3tg%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-7ec\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2028\r\ncf-ray: a123b00a1c6556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2028,"size_decoded":2955,"mime_type":"image/gif","magic":"HTML document, ASCII text","md5":"4429f1c0ff129c0b91c5692a2e08400b","sha1":"913666e8ff60e7941c2d94f01cf7a86010643077","sha256":"c332f0fc4462c8d259bcf30e3ce88b7a7da4981cb154da6f50ebb98bf5098674","sha512":"8555a218af8cdceca941012d75da7f8026d0323f880b8543269b77e5760513f147846aa34b8421a2d7f1bea3b64c93d190646ab104b2352f5dbeecc3fea76295","ssdeep":"","tlshash":"c0416223e5034804e6a48661ff615d1a2746da538305c8707efe6278afca3e688b67cc","first_seen":"2023-09-04T03:42:18Z","last_seen":"2026-06-27T10:15:41.341018Z","times_seen":94,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/phantom.jpeg","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.497Z","timestamp":1782555296497,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/phantom.jpeg HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6dM442fM3I%2BBJHuRzXSgUC63ETILYwxP9s%2B6G0uWH%2BqZPP76FNNUa%2FlFxr4850ES9npZkMXRLqe46f7%2FmlWv3iMHRr%2BbDbUIuTwR83QqVXTYKpRB7KKVP5tM6gyvAQbncvFDbeQ%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-e4f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3663\r\ncf-ray: a123b00b1c8756c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3663,"size_decoded":4597,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"2330366b652d6e9368039d15c7eeadaf","sha1":"40debd1d403b1083d5dd2292cd291835b86356fd","sha256":"e77cb0b24ae5cd3e3c7cec67114b0a2b3856a34cbf71e8872c8e10ef09aa0758","sha512":"58774d3fff273286f2ef3bb41eb8825be607440a1f0ce188be031b997236b13087fe58d233a24b86ec94df0597471bb9370bc9dca198191f75da1d25da41ed07","ssdeep":"","tlshash":"6a714c3fce11a248f66964b30863417eb25eda3d7e51c432945b522928fb5cc6a326b8","first_seen":"2023-06-14T12:59:15Z","last_seen":"2026-06-27T10:15:41.342016Z","times_seen":365,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/trustvault.png","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.598Z","timestamp":1782555296598,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/trustvault.png HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IGCnNMO5Ryg0QhUNS9L2nSrqgbX%2FyKtSSTCy9iOiN6Q4It%2BC8Ga8z8HKfLXhhUrurbMgwNEY191fC021S%2BkAamMJ1NSKHTMtU2aSyleJhWZyjXYAtLqiBPOw8nno0phKhDEiJT0%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-f44b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 62539\r\ncf-ray: a123b00bccb156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62539,"size_decoded":63468,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced","md5":"27573d3265a1ec7647e1757000d02295","sha1":"263a5b523e02465be0099f027e33aa2bcff28245","sha256":"4ca43dfdc091439f0f5e98cbac48f1de73a1c87dd32daee2e24ce64bb6728f5e","sha512":"c99d37ed40fcc410a827824a988da0c1d0f9e4f280daf9acf507248c8097adeac017302481c5d598f44b4348638416d6267c2ab4820a63af523f7a9f51395ee6","ssdeep":"1536:UMLp0YFAw8l8133Hxr/hurIBleT9Gbe7ytpO0yavNIGfg8:hBZ3Hxr5urI49Z7kpH1Tfg8","tlshash":"2a53f1a7b5f0719e47aa52726cd92c10ca310e0359c68d3d385c9e6bef4178c0e7fa29","first_seen":"2023-07-27T09:14:43Z","last_seen":"2026-06-27T10:15:41.342902Z","times_seen":241,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/nightly.jpg","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.361Z","timestamp":1782555296361,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/nightly.jpg HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=765JLpdZmlwfmMg19%2FrTi5%2FLFgo%2FCCDb7q7RtMD0cul5pLjLoCbOtrF3oYI1dLB7SUcNnduFjcgmlDxEo1caWFr5BytFrzRmXa1QyPWjaezAYD24kmRlsO0%2FJIK9pUB7xLVON%2Bw%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-e89\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3721\r\ncf-ray: a123b00a4c7056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3721,"size_decoded":4653,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 224x224, components 3","md5":"4020380916146b6028923ea104f62f63","sha1":"e7e9d1f9f4156ab6e0faa9a64fada9aa0e978aac","sha256":"627bcc82727b366a844368e4a9da28e46b0b65d70330ba79f39bd30355045aa5","sha512":"141c0049dcb2a4e7cf176025f2855b182cf6dd61f313df9761582dd3c329f61c8b762c1d643f0e70f9bb5b192ed76b9805e94a34828b0dc22b5b267eb226c858","ssdeep":"","tlshash":"78710b6efe26dc89df11067186805fb1af227e00f99a397951c36eb5bd78ef00400647","first_seen":"2024-12-31T21:41:30.530877Z","last_seen":"2026-06-27T10:15:41.344448Z","times_seen":33,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/okx.png","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.396Z","timestamp":1782555296396,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/okx.png HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o8GwV1NtH264aEFAhH6b%2Bfylc%2BXbqrQi%2BnIJuD3IUgz1KHSCqeQwcC0IFGLWhK0JsObfoAx7ripvYnb2H9nPw2%2BKmq3NUD4Dugv7N6MVAr%2BsPXuZq7d8B7q8mxdWpKqPo6JhHWM%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-1f1a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 7962\r\ncf-ray: a123b00a7c7b56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7962,"size_decoded":8894,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"b90f0083f10970e876666aec87b7068d","sha1":"8138e49df648f0748b11517b0602ab15d6534720","sha256":"acf594dc629cbcc7f6492f115aefad2441d3acbe3265031dd9b33bd17321a6b1","sha512":"12630c75b68dc2adb0c745328b0e061df85d2dda7b455c386e432fbb497552347a819966a22326a4e3bc70f446bc5b4fddd78092b4095b1ee8b07f58387d40f9","ssdeep":"192:u/TYgHLgwNC3iV+V7Nz8Ewi99TrK8fwBtT51YGUfQGQFGC3h:A0gtgiV+Vf9TrzWlQ+I6h","tlshash":"d9f1c096f2e8099700cb1c75418fbc49e0f500e2093d118ca9fae97243c95c1f89ecbd","first_seen":"2024-07-30T11:46:58Z","last_seen":"2026-06-27T10:15:41.351155Z","times_seen":105,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/rtDOqMXY_400x400.jpg","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.564Z","timestamp":1782555296564,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/rtDOqMXY_400x400.jpg HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qUcOz5LVEaqilRsml9JjxtD1d9Fl4wk9iGeRlOnnQBLi6bHrvLdVIzL8UL6hnd1SWDU44zJvDNEpJK87M4eOwymFLY4Z9a29nL4hziwnXBMq%2BwH8op%2FAGgPcbMiPfJM2XIpx8MQ%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-15bb\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5563\r\ncf-ray: a123b00b8c9f56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5563,"size_decoded":6490,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"85d11fde8a02dd595973136d442f2a8d","sha1":"c670715ea14f532d4408f9538ef1dbe8f01040a8","sha256":"7a96b0bc02901d5b0b400add6f5053ea4aa6db0a8b89c96f53c69e9c4f728dfe","sha512":"58ac470d13eb2e03863865792046d2a5403e493339ab4e59a22c7c25bdffa7463e5449f799d46870fbd3dc0987f022aaeefe31d11a7b24c6f29073c039963c99","ssdeep":"96:X894vz8AuuuuoaVDCTjgTv5bW/1q3jk/sBPkwpXZ:sQLuuuuo6W3S5y/sB8qZ","tlshash":"dcb12aa69b283c26c52d17f19d076b62f7e42f11c6af57c7e5c09049cb2c0f058942f6","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-06-27T10:15:41.358132Z","times_seen":179,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/Sparkpoint-wallet-logo.png","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.708Z","timestamp":1782555296708,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/Sparkpoint-wallet-logo.png HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BsQQgnnX9BkwkE65sY3WQe8Xb3GSU6ZwI41xvVHRVhbNfC02k3iOwq3y4ZaKER3RFvt9t3kI4rXbuRbeXN27z2hMPwV9HQHMS%2B9Xz%2FGFkQDcPxysPwVYHHX%2Fvsl9kDZrGM6Aerk%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-1417\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5143\r\ncf-ray: a123b00c6cc956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5143,"size_decoded":6073,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"d7087cc78317d6c5b46ebef796d55938","sha1":"7c475d4789d43e151c9d3ab13e8c20430ce910d8","sha256":"ed9f8f054b0e0120035659a0295f8be849d7bec383df9e663b63030cee57c768","sha512":"b823f5764ff036dbed039d9f86ebbc3d841d34512ec2cc8a3051d47c6ac4207e9959cdfc329958048eb587b4936eb2dde53ab9d2fdbe29a7ad48ec26accc120a","ssdeep":"96:yOM31qZhyip+6cBM9iv1VX7ZskKILrJjLDCDO83no1ex2OAU0OO8jnW5247YZz:yr31uh0W96VLTLrJH+xtRnc2xZz","tlshash":"92b19ea4e8ce6c36c7e032c64d34ee7df5e8201a676d9122d10ce87f64991850eed8e3","first_seen":"2023-12-22T03:55:57Z","last_seen":"2026-06-27T10:15:41.359203Z","times_seen":133,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/unnamed(11).png","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.725Z","timestamp":1782555296725,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/unnamed(11).png HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W%2FlcmrmWvQUjby%2F0Ugp3PAlmVtXpcE50uyq%2BlIJxtin%2FucJj9nnZ4HJsTxprQdij0zByivwYmUm3MM%2F7KM9hCYaB1Sc2li1F4XqkmVp2tmmmRQByu889Nbpen6N7QDKmcPu09OM%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-1ecf0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 126192\r\ncf-ray: a123b00c8cd256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":126192,"size_decoded":127127,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"84d5b489f5b52df070b6008120a06971","sha1":"e5b1ca752baff184c38596dcab0913968dbb54b9","sha256":"33200ff05dfe696e49dbdb6b0ea4b8521547db5471a05ed19c1359ce2220fb4c","sha512":"dc273aad70bcd6ff4566845f6ee53bad07fa7533fc24ef1a8eec3a49d1ab0f3615d29aa9d69cbbce377edeb5f97b855dc7da4a4d9ad1746c98434c1130d8d4d3","ssdeep":"3072:Jlk5vc2QyU0GwG3PHFl4iDsbDpsQ3/LsOU:JleQy+h3PHH4igXGQ3jbU","tlshash":"3fc312226f95ea1f221f323bd15317f608356336c999f626c31667b8ac8f62fad51043","first_seen":"2023-06-14T12:59:15Z","last_seen":"2026-06-27T10:15:41.360352Z","times_seen":221,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/2076494389:1782554419:aqsgTKPbj4P8TXe3XoLsNnT-ZxXoeNTiCZDR09NLquA/a123afdd5ee432fa/hLyNPvioN7YiQj.W_iDqR_ZqzEWTuAYeV6tcsBmVI6Y-1782555289-1.2.1.1-kozcgQCQOYR8U3YeZWAltyy0Mxo.sBOEHIdD2O43rxivv83OgniytaLCgNoDqLYF","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-27T10:14:51.366Z","timestamp":1782555291366,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/2076494389:1782554419:aqsgTKPbj4P8TXe3XoLsNnT-ZxXoeNTiCZDR09NLquA/a123afdd5ee432fa/hLyNPvioN7YiQj.W_iDqR_ZqzEWTuAYeV6tcsBmVI6Y-1782555289-1.2.1.1-kozcgQCQOYR8U3YeZWAltyy0Mxo.sBOEHIdD2O43rxivv83OgniytaLCgNoDqLYF HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\ncf-chl: hLyNPvioN7YiQj.W_iDqR_ZqzEWTuAYeV6tcsBmVI6Y-1782555289-1.2.1.1-kozcgQCQOYR8U3YeZWAltyy0Mxo.sBOEHIdD2O43rxivv83OgniytaLCgNoDqLYF\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 88492\r\nOrigin: https://challenges.cloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 10:14:51 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: 7RFGRObs/Tjfs950LFiN2N0pAkOrelHmX287V2goQPqGtyB4SA99rC2Hm4iGQwb0$brvEleRk2LoFz8GVYEwrMA==\r\ntiming-allow-origin: https://challenges.cloudflare.com\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a123afeb093432fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34348,"size_decoded":26248,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (34348), with no line terminators","md5":"17094bd85d80ffd375c4571238031233","sha1":"e7bf435ddc36edaa9d6a95fa0f0b571ae48fdb56","sha256":"c2970401567dec002c42cba65665e5a1826b3c95dbeb6c2cd4a90e1552c3b62c","sha512":"f503f043306e8ee9f186e37518de855ff4949c769a5ef98a583d583f1a9b01f5b97de1410cacb840358ce1dc5efe0dc252ec73b79295ce76cc619a544c914fe3","ssdeep":"768:c8/ibojDfWzPc4NuqTbFLY8+15cOFKJXN9k2lOZ0he4+5Z3Vkiu:c8/ib6KzFXTJLY8A5cOUJXxbe9ZFE","tlshash":"31f2f1d90333e68358eb389d572598855137eac30816b23898614f9fe4cfb224be0d7e","first_seen":"2026-06-27T10:15:41.361143Z","last_seen":"2026-06-27T10:15:41.361143Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/54043975-b6cdb800-4182-11e9-83bd-0cd2eb757c6e.png","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.512Z","timestamp":1782555296512,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/54043975-b6cdb800-4182-11e9-83bd-0cd2eb757c6e.png HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KH76OOGxcBp1A33NdXKnquKtymMdNMTLuw0OJ9dwL5i2KVrcdMyon7ipnTxbjxHA%2B8kq7n65GCp%2BW%2F8JIPMucEdp5b76IDWrC5JQ6HdjSEf1i2c7DH3F39aPzdHHhQ9AeCBXoZ8%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-e96e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 59758\r\ncf-ray: a123b00b3c8e56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59758,"size_decoded":60687,"mime_type":"image/png","magic":"PNG image data, 2400 x 2400, 8-bit/color RGBA, non-interlaced","md5":"39a2af266cb6e3c87524741a2d67e4fd","sha1":"af027a1fbf71b7b21e951a60d17c369ad4c7a869","sha256":"a1427fae355c88bfb514e9da9e908758f055d7b958ae59ac13bf589b6da9632b","sha512":"c6ae8985ed8320658aafce2b1674a6f1138e8b19a13ea6045d7f61f9679932d49cc2b74c749c005a30c649abc599a41b47ee21daf7b2ae2cdb9e3f3163ab0a7f","ssdeep":"1536:xWe2K8nS+YLL0dmk/+npWXq5eN30soZO0GCic10wh7:x0J2Wwe6jniS0wh7","tlshash":"f3435cbcfde3aa18da6c943a68ce46f8f4eb8f7059d19e1163160d20dd5a3ac74034d6","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-06-27T10:15:41.362726Z","times_seen":384,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/7674bb4e353bf52886768a3ddc2a4562ce2f4191c80831291218ebd90f5f5e26.jpeg","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.567Z","timestamp":1782555296567,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/7674bb4e353bf52886768a3ddc2a4562ce2f4191c80831291218ebd90f5f5e26.jpeg HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qO%2FH7zC41UYkOi7AcERckl02g0B5rW6mUnMsCZQzVKho6iJRK1XxBX5J906Ap7B2jJPeVPlacvqyo6WLZO7deDPjn8qoJUJVF4a4QBtSu3oZH2NAyt0PjtpBmQ3OvBclYDzDPwg%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-3429\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13353\r\ncf-ray: a123b00b9ca056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13353,"size_decoded":14279,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"60f4289459b9326996863cfa52422fe5","sha1":"e057d71ca36992fb6f62dd7c1b84b9d39f921ac8","sha256":"43cfdb39a637087c1c4c055c40b0db772977310a32c6b84b7650cfb3871265ad","sha512":"cc3dc03690c183c48520000c46ec3c203be0a65f538a5e1151367824e66894f7cd759eb80e7c64faddca7e2e7cfe163d16cb724497af628edc2401d92e109d8a","ssdeep":"384:RGR5q7FLLGEyEZEc+85dFYjD2hJKmFb7j6zI92M:+uFAMdFYjD3mhOM","tlshash":"9552cfde7d1401f0e46bc7b16f1c18aaab8de72b92827d4fa8bd40515ef44221de29d1","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-06-27T10:15:41.363416Z","times_seen":1034,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/favicon.ico","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:57.401Z","timestamp":1782555297401,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:57 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oqgzMTV7U2M5cFUvag8fZQQv%2BN9FDvaQD%2BeS4T45MaDf%2B5j%2F6HFPkEfdNNmZcFbEJccaJvuVPnx%2FK4R%2BH7KSirmQrAddG0G2%2BU%2Fe6xi7sH7n7WMFQhU0UC%2Fmm8f5Eis9YpZpLvY%3D\"}]}\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=6,i=?0\r\nage: 135\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a0e1ecc-2978\"\r\ncf-ray: a123b010cd0256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10616,"size_decoded":11542,"mime_type":"image/x-icon","magic":"PNG image data, 124 x 124, 8-bit/color RGBA, non-interlaced","md5":"db0438e6ac8a10ac0f5264cd2230c700","sha1":"c4f83ef388a9b8e4fa611e821d8cfd49f4d88e67","sha256":"880a85763b856b2c5d8b67a71f4736594241d8dfefd1b9ac5d6a0fd2f1ad157a","sha512":"159b23a914c5cfe8a4b992f619ff303a636fad228d89ed865e09f8ac59a23f2c41a204f15cec1c5ebae255dfa2ca205d23bdfa820b88b695cd32f379e19fc7b5","ssdeep":"192:kbgBWBk+gfnLKKm41nKgEzxk1bhMq8h+SyDKq6RYGoQhbtt/cZ6tDY9Ytjr:kbgMBqjVmEnKzxkpz8+SRDbthM6twYt3","tlshash":"b022bff632b08d85b57386c3fd7c5b40a93b44dc592a620628cfeb35ea3daa120570d2","first_seen":"2025-07-13T00:11:08.187079Z","last_seen":"2026-06-27T10:15:41.366Z","times_seen":9,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/unnamed(6).png","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.702Z","timestamp":1782555296702,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/unnamed(6).png HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tfDYvsBCzFUP2D0rvNgHCpCBae8gaDNUg2smyrCMHS9mNF5l3dSz1wG%2FTND%2FopHfbTos5Xe440nCwBdpcQk1O%2BEPpBrAbc1caWwPI0QMys%2Ff0ynb8lfNY6d4PB%2FbezRzWQ8fwak%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-1659a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 91546\r\ncf-ray: a123b00c6cc456c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":91546,"size_decoded":92480,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"ff0a9a9979eb2a80d853dc817ffb1979","sha1":"bde26403b7fcfc52f74b048384f0b01ecccfd47c","sha256":"376cc6365be14ce23267f5624723a72d17cba2c2f9b3a5c8212ef6d7c588395a","sha512":"d5ef74804265237f34bc049d47c370748c380c3ae5072f3bc24d2e6b3fefb83222b60cc2aa14ebfe6fa46c849b751c105029b06b22232118ee0fc40db29c6064","ssdeep":"1536:9ble4vny8i4p84EGVFyuiZjnJFveBUaFRpmDGbvAyf/9lwsJwkgNWUVkiGKEUBW:9he4vyp4mXuiZjJFveBUaPJn9AkgMIjC","tlshash":"d593120758c30042ca27d696dd1b09d40df6d1dc939c9a0787a4ff5bc756b0dea2a3ab","first_seen":"2023-06-14T12:59:15Z","last_seen":"2026-06-27T10:15:41.368218Z","times_seen":236,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/tron-trx-logo.png","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.604Z","timestamp":1782555296604,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/tron-trx-logo.png HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dSMn0TdtFdVTlAxLuuDA%2BWU81TpEYT791c8iOBaNGPa5aF4SkSXmCvZsHzQAt%2BKekFYMR%2FjDGtUbhNT7EB5Ge%2FxgTJAeqtv2HTLkOdm8eIkbBqt0WFV5mfKNZFAAT1Yu9CX%2F6ts%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-19627\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 103975\r\ncf-ray: a123b00bccb456c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103975,"size_decoded":104910,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"de3064d6f2b2153aacb6a854038c3a79","sha1":"841f3d1f868a3d71a01649b4307b9a1c1259e399","sha256":"79b386dbf889eb7356ab585421267aebc58e152268253865be5596ba2a2ce36b","sha512":"5c8c4b45222de6310002170dc4a51c033d9153409362fe8ca6841c26f30d467b52542703fc2f078289983a115257086fd1f96c062a7b72fb0449bd4f8607f88e","ssdeep":"3072:cTN3VFvbRgzj0eMqMGc+zfbTYkyA4FI+Tjqr0Zz:6pVFvNM0ea+sTIeqcz","tlshash":"8ea3028e4407eec2cd75d478d41d0f3a762a19f86b893bf79335d1b22db17a19a2800d","first_seen":"2023-05-31T01:01:47Z","last_seen":"2026-06-27T10:15:41.370069Z","times_seen":539,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/cdn-cgi/challenge-platform/h/b/scripts/jsd/25e6c66701a0/main.js?","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-spacepay.xyz/app_files/saved_resource.html","date":"2026-06-27T10:14:57.599Z","timestamp":1782555297599,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/25e6c66701a0/main.js? HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claim-spacepay.xyz/app_files/saved_resource.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=EgcvHG9Dg1XRTLbQxTMb26Rjr_3BMYdje8EaEfTqRYM-1782555297-1.2.1.1-J0RseQnqiZ1bH9iRqWL_JB55V1AbTJSvO1gpC9vB9CxFhWPY5rfIRjaBRb6Aj4EA_OE361NJOK.UWxPkq17mHjlf7CxKgjP0oEcUVOUUrNDB5d2iIEVaOXc2GUuQ5fnRocVF1wBHaokdX6fwl2Xmqe.gxUyiyGRp5rxm0.XH_YdB4xNksQLeepBouAFrI.u_W8qgF1FGN.FVkh0JtoephVOzrbWnNsdUKOvexGD8rpwYtUZbuoMzHsCT2_ezMHmx1vGk6JOAnyQdXyWO8T1V_rLHvtQoo1n7Gk0K4zaPF_nnZxqUt1GwOcXZjo3FQ395esPENUiRVPO9RSlpsjJ5DkHVFoiVGY1EqYDwm.FAvPfB8EN9m0VWecIxAIdS6.lxbuComGbgDWMmjxqka2VYGgnpxfm8x2Kfp.QfJOF0oWmmNTaNoAzColPVMkTAmeXy\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: zstd\r\ndate: Sat, 27 Jun 2026 10:14:57 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a123b011fd1156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19308,"size_decoded":9151,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (19308), with no line terminators","md5":"0e3724a30d0fbcca347ef00a8bb8f4eb","sha1":"c46f0c81b09dfd4ade2e598df0e054a4f4e9ca6b","sha256":"cd574c01ed0a09e9377b4352a74e76866601937043b4acfd8ede4e7b931e4cb9","sha512":"7e13c19998419682f09d95ae1e37c28bf313963700e3412667d11a2238962666cff32fb62abcbbc882477c3044ef4ae2dacdc459e5a128b2fa10777fc4e3c8c9","ssdeep":"384:mg3CgpfojUvxicobPAlX+AIX/WQmpj/TfbYFeU:mrgloi/iPcOzyq","tlshash":"968286dbb9de710e726b2529046b30cb773e5c80a05c635c9355f0aaf460368ea77a78","first_seen":"2026-06-27T09:31:55.040077Z","last_seen":"2026-06-27T10:15:41.372059Z","times_seen":3,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/8EXrk57o_400x400.jpg","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.590Z","timestamp":1782555296590,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/8EXrk57o_400x400.jpg HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rq2n9aEyIXUGjG8xKfhuew0lBr2Zjn1PZeVuvRYgPoaBO6HnHeDu%2FG6XgqaLJmFzZvki6%2FgyzMfa4JlXusUqv%2BLmxG7oH79b5%2Bv0YKWAhqufuTUFSo2mRaXRA6%2B5Yq9ZIVldTCQ%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-fa7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4007\r\ncf-ray: a123b00bbca956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4007,"size_decoded":4939,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"6d1f794435285d6485303241734a2009","sha1":"db24ec95caf87a959101e196c99a2df9522b9190","sha256":"17789014f26dd49d41c5987b50fa8fd493c9d94a4f807391f5cf94d71c698cfc","sha512":"9188ed5e7caff4fec27093fa3e0e21e6fcc8fc4da06193d7d538a442beabddd301374453ac0bd1646f1748ba717bfccc7ffbb81b2768ee13a981ced6bbaefd07","ssdeep":"","tlshash":"fa8119963b544606efa61f7820649fe4fa0fb540de06171209824d03b7bd1e2f934c9e","first_seen":"2023-06-14T12:59:15Z","last_seen":"2026-06-27T10:15:41.374411Z","times_seen":188,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/unnamed(10).png","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.721Z","timestamp":1782555296721,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/unnamed(10).png HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F%2FdNXEUp84GJ%2BaGtAFngUrG00HTqgKh0jjWAODduVBw3jBGtA3fXByS8uxnOm4Gc8FOVYBBBHrU1rQxYWY8ScmOhO0miGlk1o4cVSM8dSekBx%2FdOu0L9f7vsvw46C9eyfNxgzBc%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-11207\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 70151\r\ncf-ray: a123b00c8cd056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70151,"size_decoded":71083,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, interlaced","md5":"b92f371e3728ef11386636b69582ab64","sha1":"13f6010c9244dd281a03c247587628f075e4bf0f","sha256":"d1e4d62e67401c1365cc8ddb1388ea42fe7d3f3a23829e2dc15df6c6824df8cd","sha512":"60c993164f783eba874812e9d95ee827a0a50d31917e04cbb5cf63051907119a91abe3f66397866904185da9a3bf1fcab3a159172f662508d2a0eac93480c7a4","ssdeep":"1536:ApTh2ivg/lJ/L+JJu+VaS8toTIGuRF3fAlLeVh:Apd2iIP/KJJu28yTIG0F3f4Li","tlshash":"9463027c14e26210958a0efadaccf50eed7eacb611d10186ff62ee27f85be664154980","first_seen":"2023-06-14T12:59:15Z","last_seen":"2026-06-27T10:15:41.377168Z","times_seen":269,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/jquery.waypoints.min.js.download","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:57.280Z","timestamp":1782555297280,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/jquery.waypoints.min.js.download HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:57 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=khUElXvbhdu0VE3vAiNVdUQl9UitL2Vx9GerjpgeKYXopacIb5GXaIcRBP%2FWtfLLwGTWSIZ18d0DgHk%2FfMwaQWDDtsUMkAg0KrBe%2BfJTGMG0O9FX1dNCsDXM7HLUzT95HYoielY%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-234e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-length: 9038\r\ncf-ray: a123b0100cfa56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T13:34:35.299461Z","times_seen":16762706,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/surf.jpg","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.376Z","timestamp":1782555296376,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/surf.jpg HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4YeLxCbVKCZitI%2FIcxEIJLHWAK5XV%2BPzpaC%2Fo%2BrbAGjQ06sYnt7%2FGF8yyOWrpEqnZJjpIx%2B3FwxlCsR8z2uo3%2FVr21z83Myat3lEx4Nv1nhWh8HD1d7RZknvWLYnBVFgIiXu8zo%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-ea5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3749\r\ncf-ray: a123b00a6c7456c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3749,"size_decoded":4685,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 224x224, components 3","md5":"d6ccd656360e7f9dd0aa87a03a0c692e","sha1":"187d01432252464de2c62889e9c2b45e489eee84","sha256":"9f6a73aa27f80e1224c55493d724856905685e8a941553c19a39c5bf022b61da","sha512":"d66176936dc6465473efde14837bd9082db2b8469fa33ce6477f7582154ed5e1ebd6ed1d80f9c92d37db6e9d7450c39fd0a89cf4495399185ba9a00d4930bf61","ssdeep":"","tlshash":"0e715c6833cca018c19ee33e495b0a3731163e1fe0544b8fc67a3b248c2b1a51c859e9","first_seen":"2024-12-31T21:41:30.534584Z","last_seen":"2026-06-27T10:15:41.378704Z","times_seen":32,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/leather.svg","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.403Z","timestamp":1782555296403,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/leather.svg HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lgFg9L2RhhTN2rycGe16uyBlIKgTjA%2B3XXXhmaRZT3WpY1WshsZMYQlb4MP00U%2BK0b3zdtMN1oVIbjCrtFs%2FYM%2FCyAxuYFT8le5r5qA5ZNYDOK4JzIkJqatkFHeRwG6F0fag%2FyU%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=5,i\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a0e1ecc-34e\"\r\ncf-ray: a123b00a8c7e56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":846,"size_decoded":1411,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9551a06a2fdbb1b22a92b678a5da881e","sha1":"2834909ca8ab96b3f9fdea98929d11c7b4e5cf7d","sha256":"2871c13f93e8b3d598d2555ceab6073c0c0eb7474558da1817ea9c32c0a26f0a","sha512":"22b73b9cccf97f8f63da428409dc7123ec238df19061f5045fd9c221dba1370936eef276bf0465b9d048d8ddfed53c3d168791098ed3948b2e462d83ff6471c1","ssdeep":"","tlshash":"b20152dcfb62183899d513d0eb10688dac83e06576305b7cd241b438b942eafe53c444","first_seen":"2024-07-30T11:46:58Z","last_seen":"2026-06-27T10:15:41.379809Z","times_seen":90,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/jquery.counterup.min.js.download","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.541Z","timestamp":1782555296541,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/jquery.counterup.min.js.download HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DmU00ADqgTBqVexTBvF4Qww0njnF%2BSe18s%2FqH8oEqefpdwZNY6krHkx4wpJBUj9F0z4Jqg%2BAFHueF%2F2PfG9kkavQI%2BDClwJTi6j9z%2B5FUV1DGp1R%2F%2FA2Ghv5FFAFV4FeDBXHlGE%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-887\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-length: 2183\r\ncf-ray: a123b00b6c9456c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T13:34:35.299461Z","times_seen":16762706,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/unnamed(12).png","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.735Z","timestamp":1782555296735,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/unnamed(12).png HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MQoHj1dRntldFPNKJ7j7fc0Vnl5pIn8YZM%2BsNTB%2Bhm6edTXqUCa1MHiixzdmtATgr1f66D8VTDbWK3FsxFV%2FGAXh514pAHIAQKdwtuCAp5Z2AT8PGezpCwTi%2B0EAqEvmlzy%2F0Cc%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-da60\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 55904\r\ncf-ray: a123b00c9cd856c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55904,"size_decoded":56837,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"df6070c214734c9a844acac6b07f07fc","sha1":"a1be253f1446706ec3cf489e10a8d90f61aad007","sha256":"589bb39fcaa1566d0fdfcb6521a0e9ee2ea158254ddf34f03bea984a45b422fd","sha512":"6bf017902a45e8b2968d1acfc5d641dbb7f7fa1e2e5016415de46d8265ab665f0da0f2393db7a8f9e16c3510e803cf129948ed4d19ef1b92a1e9ca2a29f8d8de","ssdeep":"1536:eVtmXyAfg69I77gk+fTVVYbTFjtzj0vxpZ5bT7um:eVtfAo62ok+fTzGad9am","tlshash":"8a43e1b167d924ec35b0ba906f061c793a86c40b37b247ecd546b9b9dd743c8ae071b8","first_seen":"2023-06-14T12:59:15Z","last_seen":"2026-06-27T10:15:41.380844Z","times_seen":286,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:57.262Z","timestamp":1782555297262,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://claim-spacepay.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 23 Jun 2026 23:00:14 GMT\r\nexpires: Wed, 23 Jun 2027 23:00:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 299683\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7816,"size_decoded":8628,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-06-27T13:37:43.847967Z","times_seen":269309,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":48,"send":0,"wait":33,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/shadow.jpg","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.365Z","timestamp":1782555296365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/shadow.jpg HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zp9lnze4TQqbqGy7wMUIkwkqehMpRicWyAOK%2FjtQgUUrNfX%2BF6JVmdOtKUD%2BoZMYQVRd4YUBIwRTM4EFVTRoNCKtLOWgI7qhLGmIVGgh4pE%2F0z5pezve445iAxDQ%2BEa1EMRqk3w%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-5bae\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 23470\r\ncf-ray: a123b00a4c7156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23470,"size_decoded":24404,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1024x1024, components 3","md5":"82f068efafb7506d08dfa2b31b8e8b2d","sha1":"be1f28c6027e43c3cff09952791f5cd06c2e373a","sha256":"4407038e43b321cd5ce01d87d905f5be28f270a9df9e097ae1c37240cbc52e2d","sha512":"9389985581b6f0175e1e77a097a61dc46cb13facd00e504956fbcd883335f249276dfcad61056b480ac80d8873085f4d7b703055a66f3732a875686d72c20ab1","ssdeep":"384:dxL7JrflL4RWBCnDidAGRezBzI1hdM14f11111QCds7ma:/JrBDEDgAGgzBzI141e11111QCdSma","tlshash":"5bb2298e7d800519c500e37a9da5c27e23112de8cdc9b28feccb9cb6b11e231694e1dd","first_seen":"2024-12-31T21:41:30.532087Z","last_seen":"2026-06-27T10:15:41.382735Z","times_seen":32,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/exodus.png","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.503Z","timestamp":1782555296503,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/exodus.png HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YmiDJqYbMMA4l66Z3T5svMAXqT4wCIHQjGEzHm0XQPPykuaeFE0suyY8zwBfRTnCx%2BC4bsGFwfei%2F8JsicUBSteebwPC4VsYv3oRiI4LyFZpc%2BOfkkpWbzkgGSmwtLcKFb2lDug%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-b949\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 47433\r\ncf-ray: a123b00b2c8956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47433,"size_decoded":48362,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"5e0712fe951176bafb889631b51226dc","sha1":"9bbd0cc3b4395d0cbd2260c35ed7ef973b9f5e99","sha256":"618ef5a3cb6be16d8c87a0e3a64ff295baae4601a3d82cd2e9459260e97981dc","sha512":"d85e2e0034ad12f03b4141b79377933f17a13d4c3dcd36c89d16484878d9bc1bb494e45cf202c77269bae12880f261ef4adc7984bf26b22bfb624a542ded7d2e","ssdeep":"768:jAjOrN/5KM1sZ8im454eycz9UMbsBkG8yR9J40WigCXR+p0MowcEt3gc7Be/nyv:jAjiN/0O5imrwUMwB3/WigCUp0M7HKo7","tlshash":"2023cf6aab6121ccea144a7cf4db8c883d71254ff3e56c5e549093a301f6f860a877d7","first_seen":"2023-05-02T15:15:30Z","last_seen":"2026-06-27T10:15:41.383629Z","times_seen":417,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/1581439195205.jpg","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.569Z","timestamp":1782555296569,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/1581439195205.jpg HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vQ8XMdJ%2FomiPNdwSOlyvwIGuRN8ISBsTElvuZuNg2oFKPmsCvCJIvR1%2FQUE3nMLkSEkQZxOxlJvZwAy7IF3gVNDT%2Fv%2F6CEppwisJKJNMMHXf03wRYOhn3iArVw44Y8Th4pTE0UA%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-a2f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2607\r\ncf-ray: a123b00b9ca156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2607,"size_decoded":3537,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x200, components 3","md5":"491eb4436dffd95d0f4344e5392cee3d","sha1":"e202134a892150fc6d94e6fe9465ef3d202d54f9","sha256":"3d94aec279e15e3a7ca5a4ed544f658e08017ec0232909536955cfcb5289ce76","sha512":"c739ffc9bb43f5e3e541a9fd738db3764cb2424ba6eb38c7010bbe3642f298f444378d0d8c54b8d02d164dda6ce46f8d86e5a182611d08300876113824aa6162","ssdeep":"","tlshash":"f05119abbfc2c443d7692534982b5e1632c99a533f625b310e89ac065469cb0cdca688","first_seen":"2023-06-14T12:59:15Z","last_seen":"2026-06-27T10:15:41.384406Z","times_seen":150,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/28931745","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.664Z","timestamp":1782555296664,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/28931745 HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2ORy1oYqvI228tyi5nEXBZEbV5Rgoxhu5pxl8x9NygNsd69Av9YKhavXSHxcNJrp3Iol8nKVaub%2FSQ%2Fqqbrd1QqBr3MUh3X%2FTmYMQ07rBatinw3lNQLo6wc0LNJf57cC6c%2FAHOY%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-2883\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10371\r\ncf-ray: a123b00c2cbc56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10371,"size_decoded":11297,"mime_type":"application/octet-stream","magic":"PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced","md5":"d122120aa4985f26a469fcd1abbfd71c","sha1":"d4564dd72a65181bd3fc88c002d6bb4f7c9975be","sha256":"141cbacb3706bc0cadd79df44c261b14d243e7569b208b1133ab1a52ae458951","sha512":"f6e01737c230326f76fabc56c0917406891756a13cd3835b8ba191050a36571f5e68a4ead4430bf215cf6edd7decd5c89cc4b8606d1cc4e8d2134dd8ecb68a98","ssdeep":"192:0ET//t2QRVm28pNCaNimn0347ew2RKO6zUuNh4hi0e+:B/t2ag2gCCA4KAO64uNShi0e+","tlshash":"a022b0dd8b50c0a24fb9d02740f508728fb12e26596c27fb79626a2b6b4c7191d5d3bc","first_seen":"2023-06-14T12:59:15Z","last_seen":"2026-06-27T10:15:41.390202Z","times_seen":212,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/0x0.png","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.737Z","timestamp":1782555296737,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/0x0.png HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NQt86YG%2Fn2arfghS8HpKPfswDpTh5ZJRemEI2NlhHlfVJNkR5Q7Wa9lXWaLkm6pkPQn2ZGy2pT58FqIaSimRokUO5mRwJGVG37iQdfNQImUoO41M6YK7iU74TUWitIpgu%2FgNEHU%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-f45e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 62558\r\ncf-ray: a123b00c9cd956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62558,"size_decoded":63485,"mime_type":"image/png","magic":"PNG image data, 274 x 274, 8-bit/color RGBA, non-interlaced","md5":"fe7f5689adca42603cc0f129417efd62","sha1":"d1b9d1d47c0fa4734aa84dbe936325a375aeba0b","sha256":"f03daa5ee1d0fd176d93a7f1256430464dc53a3d3ff3b5ec35834a2f0c11dc64","sha512":"221570c2a45cec6e823988569282ac40e3966892462e666db32aa80fd665b469e6196a64f00bca75b8e9db931054c8653a1146e112c5368b56f47fdf655ace07","ssdeep":"1536:UOBtY/QsvowSmqDCo7iyxgTtCwgul6ucEs:bBq/3bwCobxKtKEs","tlshash":"1a53f1d7d0564dcb0eef75bf880ec2e1dcb128092c951e6c9ca577d3ec4c1a589066ba","first_seen":"2023-06-14T12:59:15Z","last_seen":"2026-06-27T10:15:41.39219Z","times_seen":221,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/512x512bb.jpg","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.593Z","timestamp":1782555296593,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/512x512bb.jpg HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rj%2Fw0D8BEB91nT6sMup4d9M%2Bd0bpUrB1i8nqEXrknZGCEFuGS23b0eMJ4qlTwtjvOlNkbTUf0rz0h3UCL06IbEvhhxmgp7HbBu0S362bpw9bXdiS09c4kVBAJeCuh8%2FpR9DvWT8%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-45b7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 17847\r\ncf-ray: a123b00bbcaa56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17847,"size_decoded":18777,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 512x512, components 3","md5":"a78d80a1c9775a0cd211e2e0b72b584d","sha1":"2b0d1d1730ba68ddf77ad3a370cad8cb73c162dc","sha256":"b9f88a34b99f003733466a3540b0b6d8b60ba44073eb71688a2805a972f63ef1","sha512":"ec469fb52b3fd891e8bbec858f0ba6d9988cd8756ae4b826e931f6cab81fd5bae6eac352f4380acb16199c076d67560a83ce79f3be8d21886f00fd024f61f532","ssdeep":"384:LqGGTh+VLLRMNkq1ZdxZ1iODjdNP1N6j7wmIwniO58Fu:LlGThUvO+aZzBN6j7wmIJaf","tlshash":"fe824a03912817426695cb947d2b6eb46f9e3a4c9dc274ff0a132ee3ab113f148ac55f","first_seen":"2023-08-18T00:45:22Z","last_seen":"2026-06-27T10:15:41.393207Z","times_seen":129,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/asigna.jpg","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.411Z","timestamp":1782555296411,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/asigna.jpg HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sFCV8tUxlG3k6LbU8r3jaOMQVWXf5r%2BFobrgSV48CQa0BwfTf491GEqjLLMCkDruVaNYg7rh3nskrML41Hgbs1B5FSPmCywMCwYPXc0OUS8B6CDgXo8WfPqioV5tskWdM7o%2FCyw%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-4e51\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 20049\r\ncf-ray: a123b00a9c7f56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20049,"size_decoded":20977,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"0ee00aa021b5ca941d195aa2a71b6675","sha1":"3483da0885b5cc06d1e749632b6bc3b5b494e954","sha256":"3b0a1f2f6cd34f126055769c233425488752064e80b31ac9ec758389e371d4d4","sha512":"5518afc339147bdf9f5b487f89f504ec5b117de9dde41a6318c58a6d71e0d53906baa98e734437e9e16e9b257a931de2c8f7d2fc6865cef6fdc38046724f4c6a","ssdeep":"384:sZIZCt4S8kBwFSvmfx6uaaxRxRYvqXDYkOgwSBdbUWOkhdLJDy+doKVWDv/WA/f6:+2SZB1vmfxQa/YvkC8d47wdFDy+doz6","tlshash":"ac92d0c6cfd2e901f29e6e3a55ee0479f6281b3a47bacdc7c248042053380f4da56bd1","first_seen":"2024-07-30T11:46:58Z","last_seen":"2026-06-27T10:15:41.394145Z","times_seen":104,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/images(2)","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.727Z","timestamp":1782555296727,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/images(2) HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=quj5vTZsSQTsB6QuDYwgD6lbrXqT57jo%2Ba%2FFbQccllu1PtJpW49tEN1C%2Fe5TcUFN1%2F8pKuxMyeMAoF7%2B8OoEgomnaFsehNCHLAMEJcxwr6W3tTmdqNWfIKTK%2BuM1oO1rD1pwgcE%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-c38\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3128\r\ncf-ray: a123b00c8cd356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3128,"size_decoded":4056,"mime_type":"application/octet-stream","magic":"PNG image data, 170 x 170, 8-bit colormap, non-interlaced","md5":"1160fdc2b14ece708a3a2fb1113bd685","sha1":"ea6cb71ac8faa64e70c89ef2340a654ae8f9f740","sha256":"7201065171c0f618d32b7b700c6ab911239d045716c582f1bb71292ef91aa1a3","sha512":"e148c3f3282f17160d1f07e8eaa2e98ff8c00f93f076275ff15f29bc34357657338858f13d88dca9ca70aa5fe0ff27eeb9347eed269195d591a641959082c532","ssdeep":"","tlshash":"84512bd3963f3f72677a386e75e550834d554a18a2a4c4ef47898f28dea2037f0811b2","first_seen":"2023-06-14T12:59:15Z","last_seen":"2026-06-27T10:15:41.395058Z","times_seen":212,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/1_N6Uvv2QMQGqQubnGP1tGig.png","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.728Z","timestamp":1782555296728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/1_N6Uvv2QMQGqQubnGP1tGig.png HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eukJuc4ksw%2B7oRVS4AyY8sJr1VE6%2FBBqS7Zr946aSnoZtI4hVLgg7E18NGqNQRuHsym8vFyk3QQaZxQbs8y7je4s6xVkGaWvTv1XX%2FA2%2FIg9r7IFUEdrScCIRbbF%2F8lhkJUzrU8%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-8d0b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 36107\r\ncf-ray: a123b00c9cd456c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36107,"size_decoded":37040,"mime_type":"image/png","magic":"PNG image data, 1000 x 1000, 8-bit/color RGBA, non-interlaced","md5":"58061b4c9e251bb945eab47e5dafcf93","sha1":"1d8dc69507ec24223022e8f8b4e11c2aaaf612c8","sha256":"15f915ede5d484d5697ebbd31d95030f46c5baf87e53cfbb5744600e226c6519","sha512":"1a17dd20bbad40de8ed8212c7a495e3249963daea1b89513952b047d6dc6b4f34c3b6a5425a2472c12a6569c4a5fda2790715826832a9eb4502f55ad9f553744","ssdeep":"768:SvGSK2St33LBXhxo5M1Sa5uM/TpaKX5I1Z6WOrw:Se0cLJ7x195uwaC5mZ6WOrw","tlshash":"d6f2d1b66f3cdf608391c67afcb7ea342d40503d008a5fd79886c6b735aac91ac07848","first_seen":"2023-06-14T12:59:15Z","last_seen":"2026-06-27T10:15:41.395973Z","times_seen":206,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/script.js.download","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:57.334Z","timestamp":1782555297334,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/script.js.download HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:57 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uup%2BnD8qNPL0kB3hMIRbAAuEfoqg7JLnd58Vc5aT%2BUPJgpV%2B3Rm6ilNOiMLvWQ1XuZBwyqPwb5jeQ38e7GpeWLxPptz%2FP5hEVbP7wyGqw3I3dJrAAii%2FVp5jCNva9Qf4SiMQnXI%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-104\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-length: 260\r\ncf-ray: a123b0105cff56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T13:34:35.299461Z","times_seen":16762706,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/TonHubWallet.jpg","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.344Z","timestamp":1782555296344,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/TonHubWallet.jpg HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rDkUpN%2BZiEyuKyRZtBrZ%2FHQt8MXAFkGSW%2FF9dOac%2BdYHRTkX%2Bm8SR%2FGcD6MxT692Qrr2t00GhWZLPUh1j0HFU00pCxF2y0AXg4%2BZL3T86Z3g8uatwRnwVD%2BjHWrPcB7y%2Bbzsvi0%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-20af\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 8367\r\ncf-ray: a123b00a2c6b56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8367,"size_decoded":9308,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 184x181, components 3","md5":"b6e8cae47651069c2547dcaa3df604a7","sha1":"23453740f777aee7c072b2d09512993beb653e53","sha256":"7044e19e5e91d027e313938057da6f9c945b80c393a06f6e96191ddf171a8056","sha512":"1fcbdc2531753a6c5e6736967addc8f7add1145cab9f3c33eeeeede6e40e722b185c2ea658eeacd9898e24f6eba7f04c6f299ae8662c24db8b907fe00c50de4e","ssdeep":"192:q+n1S0By1VSfMFGP3u+EcfwIZVvMrg6QpBf3SeSZZ2:qi1By1grmq4Ijvak533L","tlshash":"4302ae19d7631fc2f326872dc9897c6b43c1d904ba6cca6217f75084f9259cdb91861d","first_seen":"2024-10-12T13:50:51.809782Z","last_seen":"2026-06-27T10:15:41.396857Z","times_seen":143,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/ethos.jpg","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.489Z","timestamp":1782555296489,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/ethos.jpg HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=42g60Zgvrwkgs8Xmf2StYdo7yMxx5cwebPfqs%2BYF66cxK6NS65BDGPHNwWlyXh2XPV%2FaEezS21hhoO9AvgT889psRgMONaVABjSEpgGdkIrhdRFiKe1c3P2hwfWgldJtT7ZlPrQ%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-a22\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2594\r\ncf-ray: a123b00b1c8456c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2594,"size_decoded":3520,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 224x224, components 3","md5":"9bdc620b7c914f06d8dc0577dd8be1c0","sha1":"74efae532772e15b028e5da8f0893a58e37bda2f","sha256":"00cbbe1e75756bf51bc6460163ff7493a14569b90f59f03794f7a07627625f20","sha512":"39c5c53bd01978641be097e00f7d74dd69cfb19583dc5f331c9a56b4e7c0ee02e369d78ca7f804ff308afdc96d32198fa03777310890374c3f4d36d24e5e7369","ssdeep":"","tlshash":"da511a6ebbe1204fd910c7b42ae84222b716dced4a55bbcff3964cc27d344e209911d8","first_seen":"2024-12-31T21:41:30.533287Z","last_seen":"2026-06-27T10:15:41.397871Z","times_seen":32,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/76861339","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.723Z","timestamp":1782555296723,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/76861339 HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z%2BSblNG8t5UK%2B4IPhmv%2FFoRXTxUQqwMcswkhOQKQRzl6bqo9JDOrT08YfBxQ%2BFmXSMASjHmeJkTLHpqnaFKmakKwXRno0D33CA3h08PnlDMDCRJL93Wc%2FtgSrXmrMUzkP1lAtDk%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-120c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4620\r\ncf-ray: a123b00c8cd156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4620,"size_decoded":5547,"mime_type":"application/octet-stream","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"00a40775b1b9c21acacf4ec7d612a450","sha1":"dfefe862a368f4404dddceb4456ff02dd089c143","sha256":"67c18530b0501c67163551700e94257892b4d280fe72657a3501c975b75a6301","sha512":"c1e43c4968c6943646eb11f0c1cee26b03358fbfb32771618eac8c94cd2f161564e042356d4949a3b55e062980b18619f4c797d85b51130226481ef356575638","ssdeep":"96:FgkeFcxIvuBStXBt4RD+TDevgcYtdWefKXaDf48UR/RdknkNJ78pT:ycJubQ+m/gdffKqz4DR/Rdk2KT","tlshash":"a991ae86c3b47524d1f9c526b08b9d7d706b3ed3d0ae5c1e593ecb2423c28529d41a64","first_seen":"2023-06-14T12:59:15Z","last_seen":"2026-06-27T10:15:41.399497Z","times_seen":231,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/cdn-cgi/challenge-platform/h/b/jsd/oneshot/25e6c66701a0/0.925643528967081:1782554421:RK0w8m4voOAyjsVpkywKVodH0j8mUoLxHpvuh05_C_Y/a123b007ae5156c0","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:57.555Z","timestamp":1782555297555,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/25e6c66701a0/0.925643528967081:1782554421:RK0w8m4voOAyjsVpkywKVodH0j8mUoLxHpvuh05_C_Y/a123b007ae5156c0 HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 13263\r\nOrigin: https://claim-spacepay.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: mvSdD5b6yl+Dk8F2Obt/xKZHQI7bPfZTcjHIwFgFCvvipyyXI2rp8PJToZudf9QN28T0/vT8C3ZcxE0LeMAxxhsPDJ2tGtXyTlWfVPFv7M6Xsxm4/pB1I6UO/s3JHDcEjM0mbqxu5uEj8LecQBFlTnVQD2ezhenda3KPd4ODgnSRdTR3O8VuX6JgqtPEXBJwWd3SCpdQy9SDgMKj9t0F7OnO22uidJvPVxqBuk+LSq9WJLnUA3f2VgGIlrsUdgnCsXRbUDZ/bHIT1LxsznqFBA==$Q+13Z85SfCs8GSj7a/8iZA==\r\nset-cookie: cf_clearance=EgcvHG9Dg1XRTLbQxTMb26Rjr_3BMYdje8EaEfTqRYM-1782555297-1.2.1.1-J0RseQnqiZ1bH9iRqWL_JB55V1AbTJSvO1gpC9vB9CxFhWPY5rfIRjaBRb6Aj4EA_OE361NJOK.UWxPkq17mHjlf7CxKgjP0oEcUVOUUrNDB5d2iIEVaOXc2GUuQ5fnRocVF1wBHaokdX6fwl2Xmqe.gxUyiyGRp5rxm0.XH_YdB4xNksQLeepBouAFrI.u_W8qgF1FGN.FVkh0JtoephVOzrbWnNsdUKOvexGD8rpwYtUZbuoMzHsCT2_ezMHmx1vGk6JOAnyQdXyWO8T1V_rLHvtQoo1n7Gk0K4zaPF_nnZxqUt1GwOcXZjo3FQ395esPENUiRVPO9RSlpsjJ5DkHVFoiVGY1EqYDwm.FAvPfB8EN9m0VWecIxAIdS6.lxbuComGbgDWMmjxqka2VYGgnpxfm8x2Kfp.QfJOF0oWmmNTaNoAzColPVMkTAmeXy; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=claim-spacepay.xyz; Expires=Sun, 27 Jun 2027 10:14:57 GMT\r\ntiming-allow-origin: https://claim-spacepay.xyz\r\ndate: Sat, 27 Jun 2026 10:14:57 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a123b011bd0b56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":15777,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T13:34:35.299461Z","times_seen":16762706,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/49746116","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.577Z","timestamp":1782555296577,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/49746116 HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i32SyPpyJyoBmouYJhMPWgA5o7mJlMQwo%2FH3Z%2B5ISKGto6ecPadJc8o0n4QWZ1%2BzQ9k4NR%2BQ3YVGgWod3MdOLlus84123GJMvPl7KOIPyG2f4L5g%2BBn6ozvpEj3Od3J1yWjhTdM%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-361a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13850\r\ncf-ray: a123b00baca556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13850,"size_decoded":14778,"mime_type":"application/octet-stream","magic":"PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced","md5":"f1e13626569e62a25fabe2301683225c","sha1":"fa0d06092fc55550f9a9c0eacc188388b8a5ad55","sha256":"c90e1b779e7d695ff72cdc8daf964756d6810ba9afa443514205f74ebb730282","sha512":"dfcd14b7e35f5fba70a48724909674317e28ca1f665eb4ab75142a57a896036dbab05d17a3f0b9919e5c0e8a09cc4834b0f31d81810d239cefde6e776da45139","ssdeep":"192:TNKSjP2XbZQPxfCERVoe3kKGf6URBA30DecfeUtXGDXWub+DqUVrCgXgBVrmER:TsSWOUELH3BGf6URBAkqAeJfHKTgBVn","tlshash":"f052b0d9b04ada6c3d2a42335dfb0dce115a1f184ce5d79afc1e7901ef150295ca4a3d","first_seen":"2023-06-14T12:59:15Z","last_seen":"2026-06-27T10:15:41.40033Z","times_seen":140,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/jquery.counterup.min.js.download","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:57.298Z","timestamp":1782555297298,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/jquery.counterup.min.js.download HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:57 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TVHdfbCR5E1XWr3Ls1LiczYQZ43QlSSsueVuky7hJo1zvCTr53dcK56Rzp60o5kXbZbU%2FE7el%2B%2FXGNlTJcYANG3z%2Fve4NILOMC6NmhJG1zEW2C714F24xEzamSSmS4m9lQ4mfFk%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-887\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-length: 2183\r\ncf-ray: a123b0102cfc56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T13:34:35.299461Z","times_seen":16762706,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/f2436c67184f158d1beda5df53298ee84abfc367581e4505134b5bcf5f46697d.jpeg","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.522Z","timestamp":1782555296522,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/f2436c67184f158d1beda5df53298ee84abfc367581e4505134b5bcf5f46697d.jpeg HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3zvY8%2BbXqDWNe28fLHJEXgIKthtfcRJcowPYo7Rf40%2BUTa9zfykK%2F7xl5xpj8LLqHEeaX7Ob9cOaUTH68GOd4rGEsFIRvR0Z6Cn%2BeL4HcxvTRWs%2FqS8flnIeuiUIokhSEx9%2FlrI%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-2a8c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10892\r\ncf-ray: a123b00b4c9156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10892,"size_decoded":11828,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"af51356c02ac29ff62a6f193926d5284","sha1":"578c72abc285cc31f3f53995894dbd33b2798180","sha256":"78ac04d45d90c6b9861b6ccba310ed30d7d797fd962babefd4bb024d487284d5","sha512":"7bb6b88cb6e6326341102c4db2173cf0d241b65e7076f4d11021e119a8ee296271a615a6849c6a53e5896a3df59db065b891c80e689a3f3e173487fa98187be5","ssdeep":"192:Talqi4iMvB3A55tAdnGYR0QZAVuxD4M89DBmXhF0jq1FNqAmPZUB:ulj45v65tAXAVM4MuBmXYyePCB","tlshash":"8122aff3b93e2564f5d4ee72d5857a36463e4330389f148e95f323e15aa1d2888478d2","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-06-27T10:15:41.402231Z","times_seen":803,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/lg(6)","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.653Z","timestamp":1782555296653,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/lg(6) HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2He6thPaC7qf7eSn8sQzMskhPWXxAuRLrwnfFOjuZ%2BmfpiM1BU5gEqsEJH4wTHbdwcggSZ6GXZWesYGIEJPSmHO%2BSzfrq9%2Fgnou4JnlRS8jOucDEfW0kM3%2FT2oCGzN9e36Z%2BNTA%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-1fdb\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 8155\r\ncf-ray: a123b00c1cba56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8155,"size_decoded":9082,"mime_type":"application/octet-stream","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"104461e7e4dce9afb135eac0a215b19a","sha1":"9d71d53d7eae917ebb2409cfb50c00ec7b301cd8","sha256":"89d1383830e1a334458a6acb31e44b2eb2fd8162328533e2e4fbe44322011c7b","sha512":"1d6c9d2120851e790d1b62b62fbb9db1e3d459c5970d86b7d3c8f6bc46fab08e950cfee3b3d29236c0f85d2ba963dfd23fd9fa95f255f5b7f61d2327323f2eb6","ssdeep":"96:3wVnYPA7qTFA0FjCQAATa/Dis/wb3cqUSHOT1W2mj6DSOxQ5V3hX:AFY47qxA0F5Q+ywUSuTCj6mOxa3B","tlshash":"21f1af0c3db86064c1e8d9feec3a075082fc21d2a619ee3d7296946843ddd56b9d4ed2","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-06-27T10:15:41.405964Z","times_seen":666,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/2.6%20animate.css.css","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.269Z","timestamp":1782555296269,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/2.6%20animate.css.css HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: W/\"6a0e1ecc-6353\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q%2FM8Q8yNExWtXVcWf4TdZw4YicHwm4jHhDG5zK0hr7zlLUl1VjeZYKqt1Y3QjTxfSujoXycqHu8cyHqRz%2FRf0Uz983hJ72LK%2FIFc7kadOQjGxNpNjITt%2BgoOEa3%2BC0d0TTpMJWU%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a123b009bc5d56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25427,"size_decoded":4547,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"1c7ad0a97d2dc2da70b8d855ae946cae","sha1":"7f3596852663437b7f89231cc750628a0d86e403","sha256":"cb09ab0572c6a6549a782e2843218c00285cb737ae50fe29a5061ca96aff0234","sha512":"c8a8a7fd2fb0793981faa0cd80ed876b58e0959784662360cc65b523f88d0a3c25067c00f3db353d2d432013c4d2b9a81cfd42e41aaba0fefc9581598883c958","ssdeep":"192:uNavX0fZtAXf4j3GQ20de0te8H9nlNApz81cV+DVa/ndCJZZPd3WKmj4CYPyNpu6:ujf4qGc0QsFtdk0j3qOkS","tlshash":"e5b249492d42144487b24779d7ebcf1cef2a54771c231abeb2c1058b5fa46b8638ed8b","first_seen":"2023-04-07T04:18:17Z","last_seen":"2026-06-27T10:15:41.406845Z","times_seen":2307,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/script.js.download","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.546Z","timestamp":1782555296546,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/script.js.download HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SCF4ByfaY0RMv9JshIVFx6ocj6aap8fKHaxyS2xDa18GTxlQ%2B7Rj6PaSa6mtpHOl3t%2FQgs7xigIjs8wTl%2BUEjyIOKxWxssPyfEY%2Bc2cTfh6HdisaaVnijwrZsHmqZ0Pwgm75tkE%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-104\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-length: 260\r\ncf-ray: a123b00b6c9756c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T13:34:35.299461Z","times_seen":16762706,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/dceb063851b1833cbb209e3717a0a0b06bf3fb500fe9db8cd3a553e4b1d02137.jpeg","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.554Z","timestamp":1782555296554,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/dceb063851b1833cbb209e3717a0a0b06bf3fb500fe9db8cd3a553e4b1d02137.jpeg HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gi1Hjtq7QoBEuI5ng%2BPzP6H7BnfAB9lMEguGtf7zlWd8yf8kGBQtb48gECAsSi9sYUH3Si5dbsTHMOJhJRZ2rsXgZcnlj6uqVybfxDQux7YtTwwmx39Qtq223NeZzoJe42RhCe4%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-1e94\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 7828\r\ncf-ray: a123b00b7c9956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7828,"size_decoded":8753,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"e382634b03048e214612be131e264736","sha1":"d9f34fc40d678823237cc7e561446a9b1c0bffdf","sha256":"16badf3b6a1f78e6df1b19e8684a6778a4e3dac2334ef0856ed382f41771f874","sha512":"2c7141810e0e6ab8767e787a4bd2a3bb6f85c86a6446004e05099de77139cf197b5fde7afaf4c8c0847b1210d7849c8dabf2a13443a08364543695819b8ce3c8","ssdeep":"96:zGO1Y2AEWfduJRPuwm1ED2gwvXPIqsvmzIDRzjXMA++klJwUkR0uH+w48baWYvo3:zD5ruwmPgwv0nI+06RhGWYvo3","tlshash":"85f17d6d79202491e72ae5bf2b85b0a1731ab600ffc7524f2041c0725453792bad3c7d","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-06-27T10:15:41.407754Z","times_seen":719,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/lg(4)","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.587Z","timestamp":1782555296587,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/lg(4) HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gc8E4XzI8sYTC2t5v%2B6r%2FbUII6%2Fj%2F4SHKh5VeXDi4BNvPfGDoRsGHDC6lxZssaIYwb2UY9P2vgzu5j6keTMO8zSIqrQaKpT57Wo5lERMg4tECpf7z%2FxYjPH507bS7d%2BOyOlvh18%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-1fe3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 8163\r\ncf-ray: a123b00bbca856c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8163,"size_decoded":9092,"mime_type":"application/octet-stream","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"8889adc3b016ba70946e7f291c6828b2","sha1":"0181da136b5229d07374501217be5d7e3faadf15","sha256":"e52893600547ae340a528bfa7400e5b94536e5153f66a2f966898a3a441ced47","sha512":"bb3c28d2d8f99edf068d9494329fc119bd15b20688980f6ff44d6a39122b65e195a7002a5c7f41f8e491619ea16921bddaa87f0360b4c77fc36e540d83142d48","ssdeep":"192:FBJsqB5Ib6H408BAthFUg34I/mzvePO9SxfmY4GUJxK:FBJsqbYbBtg3jdu1HK","tlshash":"b0f1ae3e7ba4bf02d156fd304eb193aef53d006ab725732e905450b651b613e604fe98","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-06-27T10:15:41.408629Z","times_seen":644,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/ofbdehdu4sju07vlltgf","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.716Z","timestamp":1782555296716,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/ofbdehdu4sju07vlltgf HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hscxSwdi5biUHUzodQsQXqti6%2BCwCzAqPlL3A%2FKLJC%2F%2FpCpEoXJBNsflvWfPTwbpAlqBu7ZOL3%2FV9AcesBgboFWcfRam2pZaYzc2cONey9dqWhRmZsCuuq9Mx46QH7MeKYq7LHM%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-44be\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 17598\r\ncf-ray: a123b00c7ccc56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17598,"size_decoded":18526,"mime_type":"application/octet-stream","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 960x960, components 3","md5":"9d183d4b73246749ed20f9137009401f","sha1":"13070be75efc342bb8301b6f08a688b803f6b8ad","sha256":"63feedcb5327c0328d4a19edc8871a565754b42d831ced2b1848439f0d25e6c6","sha512":"dddf11f7674fa38a7eccee238eebe05a7b33a6de1ec13d31a432488abb10cfe947015a34693517cfa22f7505a6148469718a085be9f3f7805f62d91cdd9b4300","ssdeep":"384:3uQmqvL0HVSczzD+trpdmMloTCAKQm2LOqpK:rL/czzD4rpdmMOt1OqpK","tlshash":"d482a0079f31af44e2d14632b69522e1a6463e2786d74484ed55a83c0ef6ca2eca6493","first_seen":"2023-12-22T03:55:57Z","last_seen":"2026-06-27T10:15:41.409542Z","times_seen":42,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/cdn-cgi/challenge-platform/h/b/scripts/jsd/25e6c66701a0/main.js?","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:57.435Z","timestamp":1782555297435,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/25e6c66701a0/main.js? HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: zstd\r\ndate: Sat, 27 Jun 2026 10:14:57 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a123b010fd0956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19743,"size_decoded":9277,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (19743), with no line terminators","md5":"540d0f7bb84dc965a402a5c89631bb6a","sha1":"08d04ecce2304a2285b8fbe14efccf561ebdfa14","sha256":"6190339e367966e5fd8d82b3f9617662ace1e2d809fd5e57e8abc1a208ab37c1","sha512":"70a73924d6ac63ad675c9cceff22b7aa8ab90823cb244d44b621677e35dcb3f89a6f4c73d9f1e46f0ed67eb51c550a69968207e12ee6c12b27d50a8a76d9ff00","ssdeep":"384:U/c/gtU1fgNp6epBG4av+U4FX0z9r3P/+j9LH4wR236afHunmRVx:U/mgmofrpBG4a0X0zx3Pyrzgnf4m5","tlshash":"fc9274de3ad1301802a19cb7455779cff27bdc5273080959d1a0c5acf9a2788eaa7ddc","first_seen":"2026-06-27T10:15:41.411965Z","last_seen":"2026-06-27T11:01:34.064934Z","times_seen":4,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/favicon.ico","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:48.734Z","timestamp":1782555288734,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claim-spacepay.xyz/app.html?__cf_chl_rt_tk=VjF5GAVFWBp0yt3S1DQSwuxpx_86nOzRub7WVTDtAfI-1782555288-1.0.1.1-ghIYTc3weTGXiCvbEW3zcjPzKJr7vkzNs6NvwhGGTV0\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:48 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NFVCwM0rhUJnct%2BMyFs8RgQu0vAJ%2Fz4Q6jw5QNvzvUFTcDqGdidjahWav%2FOIEVjtR25M%2B443ccdbu%2BmO2K6wJO0vNdwDLAvJfLqXl2zLANaH1NRKe7usvpl2%2BobAPKPs8F3UNWg%3D\"}]}\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=6,i=?0\r\nage: 126\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a0e1ecc-2978\"\r\ncf-ray: a123afda9ac156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10616,"size_decoded":11536,"mime_type":"image/x-icon","magic":"PNG image data, 124 x 124, 8-bit/color RGBA, non-interlaced","md5":"db0438e6ac8a10ac0f5264cd2230c700","sha1":"c4f83ef388a9b8e4fa611e821d8cfd49f4d88e67","sha256":"880a85763b856b2c5d8b67a71f4736594241d8dfefd1b9ac5d6a0fd2f1ad157a","sha512":"159b23a914c5cfe8a4b992f619ff303a636fad228d89ed865e09f8ac59a23f2c41a204f15cec1c5ebae255dfa2ca205d23bdfa820b88b695cd32f379e19fc7b5","ssdeep":"192:kbgBWBk+gfnLKKm41nKgEzxk1bhMq8h+SyDKq6RYGoQhbtt/cZ6tDY9Ytjr:kbgMBqjVmEnKzxkpz8+SRDbthM6twYt3","tlshash":"b022bff632b08d85b57386c3fd7c5b40a93b44dc592a620628cfeb35ea3daa120570d2","first_seen":"2025-07-13T00:11:08.187079Z","last_seen":"2026-06-27T10:15:41.366Z","times_seen":9,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/saitama.png","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.492Z","timestamp":1782555296492,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/saitama.png HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jKpK9dDA16YQs%2F0WkLp10PTGQ0iL7Q3MJyn631AKe4qJMyQyWxlloQLfrDDM%2FhnvCA0guepckIZtLn3J3qBLm27YTRvRTU7EWAdxZjI9kW4wtO9yCfAt3eLgRBEAg63Sdn7uLEU%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-12027\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 73767\r\ncf-ray: a123b00b1c8556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73767,"size_decoded":74695,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"8627f96f683abec1dbf3b2f71d04afb1","sha1":"3af1f48f98e16e7c5dbcc8d0b89171140260fcc9","sha256":"056c97cb6b1ed9d01a0e52da2e17b681fffafa68f2e24a3c0c5376e40e7ca382","sha512":"6d4bbbf95239ab7057b306e90c5569d1b313a6151ab20bebd4c6fda0ab85c4a6f3abfa12fa03394aa95062b233edacd38afa1d078e88bba84b5249ad0d448df8","ssdeep":"768:nSEAfRDsRZtFlLJlYPlnoRw5on7WirpZpzJQy+4Mkw/5RbtwBiTZ5364bkjfdXUD:nfV0lnob7WQjpzCy+4ARhw+4jjZfaNvD","tlshash":"5b7302f6b3606770a66ac1f6d423df3ad4d9d9d2afa0c5461b6986bd83e50cb32c0c41","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-06-27T10:15:41.416052Z","times_seen":414,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/lg(1)","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.520Z","timestamp":1782555296520,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/lg(1) HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vJxIfheCllVSOKDrnAB05jvXAAOvWLqjmXALrWNivxFsWOSqxmUFx8ZL9Gcai2J%2FHjinnoN397GwPjrWwlSNQVN2F89kCkxaCjG3RrCs3DWa5FJSc302LJanwhPl5HXWFMsoQjs%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-219f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 8607\r\ncf-ray: a123b00b4c9056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8607,"size_decoded":9526,"mime_type":"application/octet-stream","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"cfdcd0ec968c8a8053a6c96e683aeb42","sha1":"32e44957ab6437ba4cfbc94a916286605963b58c","sha256":"8d85ae9ea5812224d4f3d363251a804b201d5610bb96f9b5f58e93b08c5b558a","sha512":"e5eb9e1131721d1ea6c677de10e8e8084fd6313114d611d4d0c66befff99c9896c0825a8570278e45a25028bc60fe25ed0ee29220450a336d1e6cd8ff73e8db8","ssdeep":"96:+/tPVlzOjZC5uGOLNKg8IdUla4Fm3zZKX7eJrtG+3/dwNWDBhP3J0EQMOir/v:etP/OjZCobNrs5SzkX4MyMWDBhx0nPiT","tlshash":"c1029f8fb2ce1f99e599c7fd172ff6152423989e2414978d90c62d100c5b7d29dc3148","first_seen":"2023-05-09T01:47:42Z","last_seen":"2026-06-27T10:15:41.417114Z","times_seen":60,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/unnamed(9).png","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.719Z","timestamp":1782555296719,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/unnamed(9).png HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pQb2eZGs7hepeL5qrwrMJ9ARXY8SHZ55WPMCvLZNKLiOXUvXms5R4U4z8UJPceJi11uu6YuK4EkvfEO37ZX9tpFks06FPMTW71K6yCXdKXiuGKTZdOL%2B9Wr5gvZq4CHv58yWQmA%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-16b17\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 92951\r\ncf-ray: a123b00c8ccf56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92951,"size_decoded":93877,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"3b90ace6832e5b149119f4e28697a1cf","sha1":"6dd8083a824eb19e299338d5346ed382481b02ca","sha256":"6aba8cac7468a794fe051e3e9e31d24e5d905058a4bfc528cb678019eba30c3f","sha512":"3af4ba4fb9cfc3a66da8aebc6339893c0d3613baddd0c792656a28e6d301457ea72db980c5c593fe6e742f374e5a09d701d86472456b11b8c7c909ab58d54528","ssdeep":"1536:XUjORz7nftM0hhN5GtHYi7RAogoIUpZwC+m8Z3pxpfsdg/PfYP7+4w3ZgAz:EGXftMY5w7R9NDwfpfs+QP7+H3ZgAz","tlshash":"f39302f004c31f90459ddd8ad0e4a4c59bf480e8c2c9a11ae574b2577fc96b8aafa74f","first_seen":"2023-06-14T12:59:15Z","last_seen":"2026-06-27T10:15:41.418002Z","times_seen":226,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/25e6c66701a0/api.js?onload=ePmH8\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:49.061Z","timestamp":1782555289061,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /turnstile/v0/b/25e6c66701a0/api.js?onload=ePmH8\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://claim-spacepay.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 10:14:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Mon, 22 Jun 2026 14:37:30 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: https://claim-spacepay.xyz\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a123afdcba5e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67081,"size_decoded":22175,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d26819e314c7334b3a5dd5a004898650","sha1":"559b39e547d32af023ed6ab08c369e93db0c7f80","sha256":"9715b51191ac5c467c5b8d983bf9f77c688c61987ab80f94fe3b4c452429cbf4","sha512":"9f4ea7965bdfe1afd68bd1dbdf79cdaa039492ef8e1d29a4966ec6ae8d9b8cc6af8f8920964deab2926662041ee1ac0feb7d70df7df9e6f0e55c5d130adc818c","ssdeep":"1536:4oYt3AYYdolrsHspjxegN8t5LMhfS8OpyJr:b8+onxeg6Dgc6F","tlshash":"3a632cc472aa7877129ac0f0a03b6753b3267d36a84cc850d427dc65277de869173fba","first_seen":"2026-06-24T10:51:52.15506Z","last_seen":"2026-06-27T13:41:17.365015Z","times_seen":4638,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":2,"connect":14,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/jquery.waypoints.min.js.download","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.538Z","timestamp":1782555296538,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/jquery.waypoints.min.js.download HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aqGP6z%2BtJm2YONmNTrERf0eB1ZUYGaZ%2Bwrm9ZvY1j7DSbMbV14MztEfNe2nUC%2F4wmQUtx30J8x00pBlUrFCsgBaniDp9SdPdD3Fx830UwRDT988DN%2FZtpQajvK2dmziFMt%2FrOss%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-234e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-length: 9038\r\ncf-ray: a123b00b5c9256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T13:34:35.299461Z","times_seen":16762706,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/Tonkeeperwallet.jpg","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.342Z","timestamp":1782555296342,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/Tonkeeperwallet.jpg HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RxrHWuEF4lBI9Px1AKE0U3eIB4HBR0MQHo2qaVc%2BlQcXSGrKaFbjUq9RhjB54xDK4vlJGjNHp4KlnNVr7EODAUjWaq5CTRI4fG2G%2FP2SWanhRAahCc4LTTznIny2pNWvOcXHHKw%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-2623\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9763\r\ncf-ray: a123b00a2c6a56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9763,"size_decoded":10690,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 345x346, components 3","md5":"12b065d93dd40329642f465b01a577b6","sha1":"0c7963563eff53fc7423ae713130332d89f3c060","sha256":"708fc1a43dfd354786f4ecd6759eccd9e8b403bbee24bef90b853c88d2f3a689","sha512":"a56bd6d022f49cd3c7775bbd138e1d64c753b1373bba5a6e5eb1d5986ee9a461d13130c94405d79f1b735fef6ec9e9d28b682133da0ca1f6878671d0ea63db30","ssdeep":"192:QG1kR8dNfvJoSTbzB1kybJSfwEPvKlzgXxPsHF5AU7fK:QL2vJoS91kyFSfXXKlQsH7AkfK","tlshash":"9612f7138d1c13c2f02951e9bd134c9ebee9660ced9639ff48a20ec67e706624d4c56b","first_seen":"2024-10-12T13:50:51.788157Z","last_seen":"2026-06-27T10:15:41.419769Z","times_seen":143,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:57.412Z","timestamp":1782555297412,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/25e6c66701a0/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\ndate: Sat, 27 Jun 2026 10:14:57 GMT\r\nserver: cloudflare\r\ncf-ray: a123b010dd0756c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T13:34:35.299461Z","times_seen":16762706,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdag-network.app/app/","fqdn":"blockdag-network.app","domain":"blockdag-network.app","tld":"app"},"ip":{"addr":"172.67.143.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:57.174Z","timestamp":1782555297174,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-network.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 22:45:35 GMT","end":"Thu, 06 Aug 2026 22:45:34 GMT"},"fingerprint":{"sha1":"A6:5B:97:48:B5:35:F7:98:F5:3B:26:B9:2D:9E:67:9F:DD:DE:37:D9","sha256":"AA:B3:30:9D:73:69:EF:56:2C:E0:9A:A4:EA:51:2F:64:3A:3A:9B:F7:07:F4:64:7A:2A:1F:DC:97:15:CF:27:60"}}},"request":{"raw":"GET /app/ HTTP/1.1\r\nHost: blockdag-network.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-wIpwg50GCQbGHnYOWYqrQx' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a123b00f5e9b712b\", cfExtPri\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k8LBxrHPi%2Bm05wUefrRmVeDziuQfZGAsbDld9CgLynZSPECfabLgYLh3FicSN4LvkE4k2yydAEpGi%2FMeHqyKzmfhKJaqZxakXRW1EoH%2FIGszwo%2BnKmSKiuDE3CcCCB1ZbCz7cZ3bqg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 27 Jun 2026 10:14:57 GMT\r\npriority: u=5,i\r\ncontent-encoding: zstd\r\ncf-ray: a123b00f5e9b712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T13:34:35.299461Z","times_seen":16762706,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/cdn-cgi/challenge-platform/h/b/flow/ov1/3325294338:1782554417:3p5N2V9RUXMKIyeJu_20cL9z8lqN-Cj2cAKabyvlENk/a123afd88aaf56c0/lnfV_vE0IkKcaej9x0VetN3Nv.htiwtDyXFgDYMBYYA-1782555288-1.2.1.1-e9A60tdW8my_dGHQXaxmnhGb.F8TF0mcC6F_rtXhVKNI5U3P_FDTY9x_AXONKF04","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:49.083Z","timestamp":1782555289083,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/3325294338:1782554417:3p5N2V9RUXMKIyeJu_20cL9z8lqN-Cj2cAKabyvlENk/a123afd88aaf56c0/lnfV_vE0IkKcaej9x0VetN3Nv.htiwtDyXFgDYMBYYA-1782555288-1.2.1.1-e9A60tdW8my_dGHQXaxmnhGb.F8TF0mcC6F_rtXhVKNI5U3P_FDTY9x_AXONKF04 HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claim-spacepay.xyz/app.html\r\ncf-chl: lnfV_vE0IkKcaej9x0VetN3Nv.htiwtDyXFgDYMBYYA-1782555288-1.2.1.1-e9A60tdW8my_dGHQXaxmnhGb.F8TF0mcC6F_rtXhVKNI5U3P_FDTY9x_AXONKF04\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2252\r\nOrigin: https://claim-spacepay.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: sDfhHEa/kSYzCtixJgGKlKc9q8fSSaCcGwWVbYcHIAQ=$r1zfhGqNaBOYXHj+LtkwyQ==\r\ntiming-allow-origin: https://claim-spacepay.xyz\r\ncontent-encoding: zstd\r\ndate: Sat, 27 Jun 2026 10:14:49 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a123afdccac956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19192,"size_decoded":14846,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (19192), with no line terminators","md5":"8e2e64fa716bfa87d67deb02d0e498f6","sha1":"3dfae91e8410efcf6da6e10924428a949470a28a","sha256":"33fe6523cd7e7ad0b7f061bf6796b9e7d5ca93aee893608ee79762a49ed2fc8b","sha512":"50cd2a854ad12ade1f961a882f019719d0bd73a8f57c863e07e5e4cfa90a0fc59c21a23006595452bf6303d4ac026ba3be15e15cd7cf4450125b3b2f78d11e8b","ssdeep":"384:gVauzw2sabkKrfgu4+GrM7vZkoO7v2ntiKSDxh2+H:vuztsekKE0dVkoHnY1q+H","tlshash":"2582e079a67a7a58ce0f4d22f2ff6aa02841776001f6e019bbea24d83f54dec205350d","first_seen":"2026-06-27T10:15:41.421951Z","last_seen":"2026-06-27T10:15:41.421951Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/qr.png","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.328Z","timestamp":1782555296328,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/qr.png HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CK5Te0Lt8jz7ffzAWNsRdBJp0POLJSCavOBsVLesdpJGqYxydAfno1juKk22rk8bbJKSEFOI19pnF3eSj%2FhFdDj%2BO9rz%2Frk%2FxvTLtc33E9qZf8A3hL7nzQ%2BCBM2wichVuCgeILU%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-7ec\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2028\r\ncf-ray: a123b00a1c6456c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2028,"size_decoded":2959,"mime_type":"image/png","magic":"HTML document, ASCII text","md5":"4429f1c0ff129c0b91c5692a2e08400b","sha1":"913666e8ff60e7941c2d94f01cf7a86010643077","sha256":"c332f0fc4462c8d259bcf30e3ce88b7a7da4981cb154da6f50ebb98bf5098674","sha512":"8555a218af8cdceca941012d75da7f8026d0323f880b8543269b77e5760513f147846aa34b8421a2d7f1bea3b64c93d190646ab104b2352f5dbeecc3fea76295","ssdeep":"","tlshash":"c0416223e5034804e6a48661ff615d1a2746da538305c8707efe6278afca3e688b67cc","first_seen":"2023-09-04T03:42:18Z","last_seen":"2026-06-27T10:15:41.341018Z","times_seen":94,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/Coinbaselogo_Supplied_250x250-2.png","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.369Z","timestamp":1782555296369,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/Coinbaselogo_Supplied_250x250-2.png HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YmWBLu5EMZkurfMBhD0vnPMbEcLNj6KvjScBXNua081X618KFfdYyMG5Y3ztvZUcl38JHAVovM7jIppX4UfJ492%2F%2BiRBxqlLLvJsD5zB0nOdOtgWDN9WklekBcnh0kHVdKn29bk%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-1b9e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 7070\r\ncf-ray: a123b00a5c7256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7070,"size_decoded":7996,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit colormap, non-interlaced","md5":"38cefe8f16fc068ab268f9268b5a5774","sha1":"c4bbc715918770497e7bd46856b5c57a44d4f738","sha256":"d2d300d56afdfd46df155120ddaaeb7d8de4de9c5eb2b867c93fbadea7e34f51","sha512":"6d7596927fe49df8c02544a98b5f19bee1f72f378b61e71eb3fe30e322e042778161fb47c0717eec5b01452a01664f2b128d8038a83cbb6a46f78a8ee44bc318","ssdeep":"192:3N1jkARjZ5GN6IRnyzXAl5pWYoGNckjd9pay:9lhRjaNnyz+5p2fkjd3ay","tlshash":"ace17e47d3232c229c0ad1a5eeb719efa724139ce5c31592a46592185ac24fbdb8b472","first_seen":"2023-06-14T12:59:15Z","last_seen":"2026-06-27T10:15:41.424834Z","times_seen":173,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/magic_eden.png","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.401Z","timestamp":1782555296401,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/magic_eden.png HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TBdjoYeIN6PxEl%2B8Fu4JcnStFH6vRR6jdkplUjS%2FShboxg87OarBTjkZNhIUQLY7GLVkl7iTZtortjCj3KSOvT5hqqz7XCbrBkyeVTruOvpvIbvtW95WQBmjMrvaj0FAjMy7JDA%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-b8fb\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 47355\r\ncf-ray: a123b00a8c7d56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47355,"size_decoded":48282,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"a723bae776d2fa037ecbe4efa6ca8da3","sha1":"e68b1554db15c90ea0079c330042433476b891bd","sha256":"8a03e78c49dd4beaa28b0d92994c4c3e07b17a34782be2601c1fe2a78acc2e82","sha512":"6bebcc4dc822b0a4d27b936bf14b1afff80f4bc37a946156a086c9de667a534aa75edef8b24989bfd05a67dd11a910afcea71932521fb1fb566936620e72364a","ssdeep":"768:P/wqLNeFZkYtQR1TUwgyz5J/NT6tRrdyVjyFOwv5Z5drIBwlnvTskFxYRqDe6bd/:P/w2wFZobirdfOwv5Z5dk2lnBFxKqdwQ","tlshash":"6523f1b4f2226666c5a1a234ddf789249f319f0f6ff8190a61f3a2f4275849e4353d88","first_seen":"2024-07-30T11:46:58Z","last_seen":"2026-06-27T10:15:41.425781Z","times_seen":104,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/success.gif","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:57.168Z","timestamp":1782555297168,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/success.gif HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:57 GMT\r\ncontent-type: image/gif\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RxzUwtcOwHRPjWUQ1X%2BLadrke15wT9izqvnNgPm2SDvlOe%2Fctg5%2BLRRdKcpUW9ps2RZVeBeXCoDAipCtcMh5%2BF0dSCsMBMcut8U3PORAhJ5jK4ANuDB%2FHlseSyp1cgLJLo98QAI%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-7ec\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2028\r\ncf-ray: a123b00f4cf356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2028,"size_decoded":2966,"mime_type":"image/gif","magic":"HTML document, ASCII text","md5":"4429f1c0ff129c0b91c5692a2e08400b","sha1":"913666e8ff60e7941c2d94f01cf7a86010643077","sha256":"c332f0fc4462c8d259bcf30e3ce88b7a7da4981cb154da6f50ebb98bf5098674","sha512":"8555a218af8cdceca941012d75da7f8026d0323f880b8543269b77e5760513f147846aa34b8421a2d7f1bea3b64c93d190646ab104b2352f5dbeecc3fea76295","ssdeep":"","tlshash":"c0416223e5034804e6a48661ff615d1a2746da538305c8707efe6278afca3e688b67cc","first_seen":"2023-09-04T03:42:18Z","last_seen":"2026-06-27T10:15:41.341018Z","times_seen":94,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app.html","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-27T10:14:48.374Z","timestamp":1782555288374,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app.html HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-2VVfvy6DGCcjJNzCa9OTqs' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a123afd88aaf56c0\", cfExtPri\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aKqd5CGzONykahNt663CNdOwbOljBz5aiUt2AcM8TpJ4gWAVOHoRqy8WAGVnAWwb%2F3vx%2Fxa5rtvFly14eeWqdBd4FN447lFx086%2FZX7Hr6wTIbdpKHitMhxNzfc9Ed30M01b6Hk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 27 Jun 2026 10:14:48 GMT\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\ncf-ray: a123afd88aaf56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5625,"size_decoded":5574,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5625), with no line terminators","md5":"47c655e342a0605d66def5fec069cf34","sha1":"153bac10ee0714a7ee9b03113692b87e40429880","sha256":"9417b0e52524186257af5b07f90b91b2643ad92045e4f60d9aae4db8b0b0cce9","sha512":"859adb3c200af152e1beb57aa969e2f24adae5941e0d4df36c02c4f2fd17c7a999c3132de9bc31bf2eac41c2df0abd6bc275023d05e369243c982a7d24098b87","ssdeep":"96:PNyPctoXZzIEb0EaW87Y6X0P3E53W+cegRRVwxhrpLyuYzueh8Opmw:PNptkCBXYe6R6jcTy5w","tlshash":"4fc15da3ae35d01b87626fd198b3736c9211b15abb0196dd8495f90cd2eef0e91d42c8","first_seen":"2026-06-27T10:15:41.426576Z","last_seen":"2026-06-27T10:15:41.426576Z","times_seen":1,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":10,"connect":21,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/MyTonWallet.jpg","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.340Z","timestamp":1782555296340,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/MyTonWallet.jpg HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VX%2BmHAxsbO9%2Fs9ssVoRBryf9H9aLf%2FWcZJ%2FNdCR1M7iNrO%2F6QnYCIC7C8180CTakaELxRr2K8m2%2BzjJXtS74Za4lrMyQM1VkQiGsEPuOHq7j75HJnZm3CxyIjQhqXIrGjIRj%2FHU%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-7aa2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 31394\r\ncf-ray: a123b00a2c6956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31394,"size_decoded":32332,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 323x323, components 3","md5":"010a9fcedd7f813cb08ffdab17aa8354","sha1":"ff7b1b14fae687ecc1e25260471c08585ff36146","sha256":"a1ba4741dca36f7652529d34d565b0b4fcd4c632ada3fb0afaf85db9e09fad54","sha512":"fca444d7b48c4464c1b8eb0575653bbde8019e8dbda6959f0f4ece3b78deab737f2a43c41320d8b092d7e1431e1bdf8c3f4ec442fae571dae9986d3c82e53d26","ssdeep":"768:LrU0OBaGYnJVgdmoAcQue0Tjo8SubHdfZLygErsWv:LIxBaRWdmzc7JSubdBuVrx","tlshash":"82e2e127ef4b2a8bb1702255fe0a6ea0a5d3af75f24778f413d03dd56690ec0540eba1","first_seen":"2024-10-12T13:50:51.798342Z","last_seen":"2026-06-27T10:15:41.428945Z","times_seen":149,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/favicon.ico","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:57.588Z","timestamp":1782555297588,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=EgcvHG9Dg1XRTLbQxTMb26Rjr_3BMYdje8EaEfTqRYM-1782555297-1.2.1.1-J0RseQnqiZ1bH9iRqWL_JB55V1AbTJSvO1gpC9vB9CxFhWPY5rfIRjaBRb6Aj4EA_OE361NJOK.UWxPkq17mHjlf7CxKgjP0oEcUVOUUrNDB5d2iIEVaOXc2GUuQ5fnRocVF1wBHaokdX6fwl2Xmqe.gxUyiyGRp5rxm0.XH_YdB4xNksQLeepBouAFrI.u_W8qgF1FGN.FVkh0JtoephVOzrbWnNsdUKOvexGD8rpwYtUZbuoMzHsCT2_ezMHmx1vGk6JOAnyQdXyWO8T1V_rLHvtQoo1n7Gk0K4zaPF_nnZxqUt1GwOcXZjo3FQ395esPENUiRVPO9RSlpsjJ5DkHVFoiVGY1EqYDwm.FAvPfB8EN9m0VWecIxAIdS6.lxbuComGbgDWMmjxqka2VYGgnpxfm8x2Kfp.QfJOF0oWmmNTaNoAzColPVMkTAmeXy\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:57 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AfHxZ2Z0WL7%2B78cscgu6fbtzRPBMyLnewlL1t539SydJKeqP16MAPu8gMdKUOcFVcR2KCZ4Oj1cpLnHXTVvM%2BIi%2FTmi42QlYnxSxrt%2Bx3c3gqVn5VU7OR9Io0SLezrsfXJGLYIo%3D\"}]}\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=5,i\r\nage: 135\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a0e1ecc-2978\"\r\ncf-ray: a123b011ed1056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10616,"size_decoded":11529,"mime_type":"image/x-icon","magic":"PNG image data, 124 x 124, 8-bit/color RGBA, non-interlaced","md5":"db0438e6ac8a10ac0f5264cd2230c700","sha1":"c4f83ef388a9b8e4fa611e821d8cfd49f4d88e67","sha256":"880a85763b856b2c5d8b67a71f4736594241d8dfefd1b9ac5d6a0fd2f1ad157a","sha512":"159b23a914c5cfe8a4b992f619ff303a636fad228d89ed865e09f8ac59a23f2c41a204f15cec1c5ebae255dfa2ca205d23bdfa820b88b695cd32f379e19fc7b5","ssdeep":"192:kbgBWBk+gfnLKKm41nKgEzxk1bhMq8h+SyDKq6RYGoQhbtt/cZ6tDY9Ytjr:kbgMBqjVmEnKzxkpz8+SRDbthM6twYt3","tlshash":"b022bff632b08d85b57386c3fd7c5b40a93b44dc592a620628cfeb35ea3daa120570d2","first_seen":"2025-07-13T00:11:08.187079Z","last_seen":"2026-06-27T10:15:41.366Z","times_seen":9,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/Uniswap-Logo.webp","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.337Z","timestamp":1782555296337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/Uniswap-Logo.webp HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: W/\"6a0e1ecc-8782\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oMLK36i2QYVuRmtQtdSKuJzRcAGgem7CaIxGDWYpsT%2FO0sy994shBNiINvAgItIcbLdSpY7ybGtwIAx5feOYcJ4%2Fm00JnuumuFdmSj91ZPC7gdyiFuZ8hrw9t05yMW2SqQtiGfs%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: accept-encoding\r\ncf-ray: a123b00a1c6856c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34690,"size_decoded":35352,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fe52399db272c6fc3e10398d1f564fc0","sha1":"d096d2864498cc9deef79b0ffb902401a454210b","sha256":"502d0c345f7190d26ad5d58ce6e2b7fa737fc3ba7eabb98a0628eb8c8da14bab","sha512":"befa8550df8c9f17b18b2ebe5f4192c12ce364c64fe98b5138db9d406033f23bf30bedbd78a58d9902fe1dc121d5f34e177f50d801ed59d25d7bb481ca36d3a5","ssdeep":"768:0zvd1rsJI25yrI3bxOLmOpsH3tAZ+gI1jDh1HVkc5042X:41YforYqPWi+g833LKX","tlshash":"4af2f17154ad020b85bb2f20fe0eaa85f1bdf2529d45144ab8defbe104647894b978a3","first_seen":"2024-12-31T21:41:30.525347Z","last_seen":"2026-06-27T10:15:41.429808Z","times_seen":64,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/unisat.jpg","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.394Z","timestamp":1782555296394,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/unisat.jpg HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8dUKLXwc%2FVOLyQOi17oVGkjJQa8hcyfXgygulPd%2BjHD5suUUwrAdkJ9nJlAan8KzNcvR9YIbgkr0%2Fgwy4ieYTKhnYAR8l2HmJHHF2%2FWs6oYhhskdquMuGJmnviFUgCSA0Jq%2BNb8%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-13ec\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5100\r\ncf-ray: a123b00a7c7a56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5100,"size_decoded":6033,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"b3b4249c16b08c267df0e63276821e2c","sha1":"f27e9e70356cbce5cb6e2435bcec2732e85c58f2","sha256":"41603e7ce50293392f3b6112810db3db09f365be11bab81e5a6beedd852c072c","sha512":"92c23daa1c386853609b6ff66ba8c60ba0d4aa2ca2dce258999de544f4e255f0404335f9027775762f9be845f6b26798b2d865f9ace00ef8fc9a835569ca8d92","ssdeep":"96:Lo7rnhWbJqSy1436YtUMR9PutCbw6+JMHVJc7ZcMpRnWo4LuitwuXJl:ArhWbWO6YPP9wJmHVJc9ZncSawur","tlshash":"8bb15b015442c106f26a8037da76b248b09d4227e2b3a625394495ff639f7694fcf7cc","first_seen":"2024-07-30T11:46:58Z","last_seen":"2026-06-27T10:15:41.430578Z","times_seen":101,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/1433894569.png","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.660Z","timestamp":1782555296660,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/1433894569.png HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v8LFhMQ5UrnCWF8J0b1iEMJAJ4intmxpi%2FtXpsIqnanOuU4wPl%2BNZIjsuLpdYSZLBKKI8FLhnHGGvj3wO9F5De%2FHc7iar9b562pnSBSqibcR7MPc4JoAW8AE4rZynlzuQkNY8nM%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-246c8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 149192\r\ncf-ray: a123b00c2cbb56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":149192,"size_decoded":150123,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"32768fd536544331a3df7e7c453c3e9a","sha1":"8a0a8c485acba739ceee7d87d823969ef63acf1e","sha256":"8b390909072edf85b195dbb73b5cceb52ae9f19093cce5ae313827590ae9d576","sha512":"0b39aee225dbb9fb31348695f58f4f9d7f5c754b4e616443f40f4fb8565f8759cad3054de87ea2954d4fa4e6b2b98a8059f3ad265cddd0a856f95818eaebfffc","ssdeep":"3072:wXynBI/kKrHVaLJ82epR23mc4Jv8CldzB4y85rWVB558Uk6zD:wMwH4LJNep0ORlxB4yCWvr8j6H","tlshash":"39e31266defb8952ddc1ad204761bf78c1ad3ad4756d288afb19f3a717183c828484cc","first_seen":"2023-06-14T12:59:15Z","last_seen":"2026-06-27T10:15:41.431381Z","times_seen":365,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/error.gif","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:57.171Z","timestamp":1782555297171,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/error.gif HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:57 GMT\r\ncontent-type: image/gif\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C4RQxdDcNxgPruPdP6KglYxp1H%2FElUElNnZ1jtu14rvkGDzKywSqfoh56xZICcIR1Q0pg6qzRZcIpS9Hxst%2BROjPkgztSGYghM6pIDZK1AjjpOoQHkv2fcwQWnX5%2FX3qnx9dYEo%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-7ec\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2028\r\ncf-ray: a123b00f5cf556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2028,"size_decoded":2962,"mime_type":"image/gif","magic":"HTML document, ASCII text","md5":"4429f1c0ff129c0b91c5692a2e08400b","sha1":"913666e8ff60e7941c2d94f01cf7a86010643077","sha256":"c332f0fc4462c8d259bcf30e3ce88b7a7da4981cb154da6f50ebb98bf5098674","sha512":"8555a218af8cdceca941012d75da7f8026d0323f880b8543269b77e5760513f147846aa34b8421a2d7f1bea3b64c93d190646ab104b2352f5dbeecc3fea76295","ssdeep":"","tlshash":"c0416223e5034804e6a48661ff615d1a2746da538305c8707efe6278afca3e688b67cc","first_seen":"2023-09-04T03:42:18Z","last_seen":"2026-06-27T10:15:41.341018Z","times_seen":94,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdag-network.app/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"blockdag-network.app","domain":"blockdag-network.app","tld":"app"},"ip":{"addr":"172.67.143.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-spacepay.xyz/app_files/saved_resource.html","date":"2026-06-27T10:14:57.570Z","timestamp":1782555297570,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-network.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 22:45:35 GMT","end":"Thu, 06 Aug 2026 22:45:34 GMT"},"fingerprint":{"sha1":"A6:5B:97:48:B5:35:F7:98:F5:3B:26:B9:2D:9E:67:9F:DD:DE:37:D9","sha256":"AA:B3:30:9D:73:69:EF:56:2C:E0:9A:A4:EA:51:2F:64:3A:3A:9B:F7:07:F4:64:7A:2A:1F:DC:97:15:CF:27:60"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: blockdag-network.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/25e6c66701a0/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=2,i=?0\r\ndate: Sat, 27 Jun 2026 10:14:57 GMT\r\nserver: cloudflare\r\ncf-ray: a123b011deb3712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T13:34:35.299461Z","times_seen":16762706,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:49.170Z","timestamp":1782555289170,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 10:14:49 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-yu3PHPX1nQLcAAbnNWAQBI' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self' https://hagen.challenges.cloudflare.com https://brunhild.challenges.cloudflare.com; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; trusted-types gIqNx7 default; require-trusted-types-for 'script'; sandbox allow-same-origin allow-scripts allow-popups allow-forms\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nreferrer-policy: same-origin\r\ndocument-policy: js-profiling\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a123afdd5ee432fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: aldmbb7s;dur=261723, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":261723,"size_decoded":101176,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"fe01f77578c94448e132be15adcb71a0","sha1":"285779a55e8890bc3ae297297dfae7496103a028","sha256":"476d5dc1693f636a33d13686c11bd8a6c08b3f2b213b8ce3eed6566e256da87b","sha512":"da3c1c3cb76daef2e12e39614cce6c9b93df48f6467781c140a59651f978344a17de6084e857148d2dcb387d3373fc074dcf1c402de46dff1749a1fa9d96338b","ssdeep":"3072:Z0fQMFvaWqOk8OKlPSXpL+4Q0znIY0Ku1cYBW72GOGOYOXOAGIRcIqwyYN:Z0vaSk+kpyFLYOyA","tlshash":"b144c6c6b9c6f72e0395a2b8006770bfb62a4ea4401e5dd8c650a7f07cf173a915ed9c","first_seen":"2026-06-27T10:15:41.435999Z","last_seen":"2026-06-27T10:15:41.435999Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockdag-network.app/app/","fqdn":"blockdag-network.app","domain":"blockdag-network.app","tld":"app"},"ip":{"addr":"172.67.143.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.334Z","timestamp":1782555296334,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /app/ HTTP/1.1\r\nHost: blockdag-network.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-TjZQuFetpoAKVxQUQZ1W7t' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a123b00a8e85712b\", cfExtPri\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VPDeiTxMyZ4T8x19gV0xe0k5YsqnFavXJ44c61rqr5cAluBI5Xj3mLK1AanjDtuJpE5%2BPyK7LoRvVyY00A20DNK40Xxh8WwE%2FBRoP%2FuaFlJV7AuKjoXg3%2FVuP8sn6zSy%2BhbKZTpsRQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\npriority: u=5,i\r\ncontent-encoding: zstd\r\ncf-ray: a123b00a8e85712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T13:34:35.299461Z","times_seen":16762706,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/suiet.jpg","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.358Z","timestamp":1782555296358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/suiet.jpg HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6jwwuj6zJX9%2FNtzLph9y%2FEzKPEbard1GDpxOARDqjgYwns32N%2FWz4Ulk6zjeKGpDpAdUYuohn9YpKQ89w1UxiKNCkLjFLJnqz1Uw7EKSzHdIWHFrsN5pETYDfj3gDwAhivJ5SsQ%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-1f8d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 8077\r\ncf-ray: a123b00a4c6f56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8077,"size_decoded":9006,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 224x224, components 3","md5":"96f784255f03f74e37947bdd50e451aa","sha1":"ce2bca61a82cb3b71e53b42c9c4b0fd0d358d26a","sha256":"fc46457610d8bbef10267523800148288dc0f77530fbd8adacb42a1358f90e88","sha512":"b919ba684692ae426a76a32c8a2b547fc7e495105270b12d194669c41b5d75d09f0d3ad9ce08de1b95679bcf6d0d72b7b1ed6cd9b4fa58065d098ee6ad65ab61","ssdeep":"192:qjRJldNFnmJPjGOgs4eGzfxEX5uUNVjoGRKgrFqOQ3VYbgW:QLLmJPpsNEp1fjlKOFQCbd","tlshash":"5af19e8733d3681ed279e0fc0891172ad7fa4252146717ff17d38a309a1900609e68d7","first_seen":"2024-12-31T21:41:30.529595Z","last_seen":"2026-06-27T10:15:41.4387Z","times_seen":32,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/solana-sol-logo.png","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.389Z","timestamp":1782555296389,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/solana-sol-logo.png HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B2fhw40dmM0I8hGyQignWKpDHGLG1CGNvMyP25dl03bO10d%2FCkr5ub3UI1IL%2FRSV9qvRkJM7FmJCTU0j%2FdcdIkf2ArPKWNN%2F7XM5DAiTITyL5Snawf3fdlXKKu9XT8EI2Bw0lEE%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-1e211\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 123409\r\ncf-ray: a123b00a7c7856c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":123409,"size_decoded":124342,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"0d8e9a185773da474955639b5fc82808","sha1":"20a83c3b86f3fc904f26dcc59419205bdb0a2975","sha256":"e5721ef7bd05455ed2f842ea2f66fd7715b56cea319d819187907838300618ac","sha512":"3660589a5ef0ab74175ed985f79555b264ff68cf5d2bd8f737525630d59387d37b871d9ed7a92de2250b80ea53b08169f333f1b453303ccfce377ef738291b3e","ssdeep":"3072:1E6pISxxAj7GlIoJPxH6o6CMRHqemhgpeKw96T7u5XOAZ:1E6WSxxS7GlIoJPxafHtkEJw","tlshash":"6bc32945d3a6ca85de18caff2e269dca0105b377f0d88ee8344cb1f4b178d5349866d2","first_seen":"2023-05-09T04:14:29Z","last_seen":"2026-06-27T10:15:41.439713Z","times_seen":620,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/portis_logo_dribbble.png","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.562Z","timestamp":1782555296562,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/portis_logo_dribbble.png HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x%2BwZYKAtrFZsJn4Lvc3L22z3RZKniJawJvoQrCYThEPtlqT6s2uxrQyWtaPFFdrrfeY3rYuGiLwHqNUSR251ZCjfwKRyJwiEveChibVRuJTt7eHM%2BdBiD1PSi%2F6knHjguadzjhM%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-41d8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 16856\r\ncf-ray: a123b00b8c9e56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16856,"size_decoded":17785,"mime_type":"image/png","magic":"PNG image data, 800 x 600, 8-bit/color RGB, non-interlaced","md5":"c1c6b21a6061696e993d660742ba82fa","sha1":"423e0f79fb76d3cc0ab73a7a1f1b46a7cf875853","sha256":"2f8894d5e0921b2728ada153b280b6c23637032802fa32295a61716f3c06dd8d","sha512":"6e11d0ed3c9ac15b0f314c32518489b0c0b99a7d2d528dcc99f3e008e77a5c485ac7161b921f9e895db12175341b6f463b1749116323bab172b69e1a5ded835a","ssdeep":"384:yYnhAJV+QrjrokkTC7okmrCBtpsry/Isqq0Gwrz1bOwGllzCU2rA:pabrooE5CkIIs5BCzXGll2U28","tlshash":"9872c019cfd28701361ba08a5ff3908dab1313486c92fc418ff5eacb56691973ebd681","first_seen":"2023-07-14T22:15:25Z","last_seen":"2026-06-27T10:15:41.440693Z","times_seen":326,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/138f51c8d00ac7b9ac9d8dc75344d096a7dfe370a568aa167eabc0a21830ed98.jpeg","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.648Z","timestamp":1782555296648,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/138f51c8d00ac7b9ac9d8dc75344d096a7dfe370a568aa167eabc0a21830ed98.jpeg HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ebNXUo0cSJtza4J%2F5k7NITQWOxVfJJKR16BfzbWThwIEXgZSf1l70YUH%2B21r0FsN0114Yf%2BvDJ4NbixlO4MOA122Av33nXxZy7VQAQzl1uqbNMmio69GcjrPR2Bb6srXMdGC7C0%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-26c2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9922\r\ncf-ray: a123b00c1cb756c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9922,"size_decoded":10851,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"499cc4fa3341f8f542ddb8513ed4f2f9","sha1":"c54323a42168c98953776f5a2959adea5a354c34","sha256":"f1544fcf96dee727b620efc2a5f72d6ec077333f9237f95e5d871e908c29a7b6","sha512":"9b82ff03adf7905246c9b9220e838a7859d5e38bae6f2ea10591d2822810bc9547f456e8b63f7f5375295bed27c8ca646cf0eea055a1688aed64edceb9254ca3","ssdeep":"192:2dacY5+iJ8NlylNMwk6LfFFdrJ/6RsepF1KzaMFG9m6p5C1dkl:2xPCvXe6LfFFdrJsse31K+ME9jC1dkl","tlshash":"b922a0ac2f42a567e0b40df796553307c28ac684622dc57f29ed395065f108ebbb4b68","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-06-27T10:15:41.441666Z","times_seen":272,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/unnamed(2).png","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.650Z","timestamp":1782555296650,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/unnamed(2).png HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FBB9UmejDJg%2FwCBxcz42H2icPKS9v0jyyYUHxfN5NOGs8XKWWVAYvH16SR6E7LiNpwExmz73HCLK2j3jUBX%2BspPxF1XY2YcVJkw8zFypVZw7ySyHA54B%2FhckfkppwZpueqs3WzM%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-45ef\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 17903\r\ncf-ray: a123b00c1cb856c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17903,"size_decoded":18834,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"8b84cb673eff00939f59498b5dab546c","sha1":"f6f6696e6a9c7aa34ebbcf788b627299575b3957","sha256":"788892ae967c4826f07b104726bf5571ebde860b31ded7c6f8cf0a7d1729f7ec","sha512":"698572f9ed8ed05f4e0639f429329185e67e14913864ef216ba43e132bb13a1958e57f7467075700fd9251ca477def8646c7273eef21f773eea3b89d25fe2969","ssdeep":"192:+ZwrS4FV6QH8NTgot/skLP+L0MfLoXt4O4eB+l4/axhf3Tl6DcwNw8tk6Uue6j+C:CwjNHCbGkLWQ54Oe4/qJ6gUwKkN6j6W","tlshash":"d3826d5bc581768f98707859e7b338aa7b32121bbd052f8f6f58467834031b8f5b9c58","first_seen":"2023-06-14T12:59:15Z","last_seen":"2026-06-27T10:15:41.442597Z","times_seen":220,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app.html","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-27T10:14:55.944Z","timestamp":1782555295944,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"POST /app.html HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claim-spacepay.xyz/app.html?__cf_chl_tk=VjF5GAVFWBp0yt3S1DQSwuxpx_86nOzRub7WVTDtAfI-1782555288-1.0.1.1-ghIYTc3weTGXiCvbEW3zcjPzKJr7vkzNs6NvwhGGTV0\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2115\r\nOrigin: https://claim-spacepay.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nSec-Fetch-User: ?1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=0,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2SGwZbUjRY%2BBrG1eMjctOhggm6rMC7UrVSKDsHFJtnScU0es1nZdK99xG8PT0qnmA9%2F6XhHfkOYhDSmPNpg6oVeyecuGdIlCG29yI1zaT0BS1hqHohXg62rv6l%2BbV01p1%2BhbXUs%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a123b007ac4956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Popper:2.10.2","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:5.1.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":216453,"size_decoded":36546,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"eac87c29b79f7a7475023cf16442eee1","sha1":"8283639f57240ecf66ead02c3be08c274bc5f01b","sha256":"0615fce44df34f3bc47a354663f5f99bcf1f7a1a3d2ff107b0d8659951fc378d","sha512":"7a8640367d81ba73e56bc0964f056974e79026e5a47ee28efaa2575dfdfb6b1834cb4ca3dfac083f452ecc23afe68c0fd33c6eb4214e50d134d52bbd33cb5c0a","ssdeep":"1536:uU5c6viQP2MBmcvjeJdK+kweDAS54WOAxL3gWH4Fx/2x/0:Vx2MBmcvm8HweyWHxL3gWkA0","tlshash":"ed242b6a61fe00915b42b499231b66407736f21fd84bcc48fa9ebb8ecfc151659e23cd","first_seen":"2026-06-27T10:15:41.445212Z","last_seen":"2026-06-27T10:15:41.445212Z","times_seen":1,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-06-27","alert":"Detects file containing Telegram Bot API","trigger":"claim-spacepay.xyz/app.html","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.267Z","timestamp":1782555296267,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/bootstrap@5.1.3/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://claim-spacepay.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 25229\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.1.3\r\nx-jsd-version-type: version\r\netag: W/\"28021-7Ba9Gb9K6bwuIzasQJpQO7varK0\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230126-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 3737699\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9eRydCdJdESgAs6mNg9OyRu4mgF4Ab%2B9WhkignhlpFn4Zg49tLQ%2F7%2BR6tDQeE5ErJcqOCUJ323raKxZDrgJsNIvkV9H1J5YOhIuaRazSRgVO3NqFJGAH%2BnAIKatgiRXXe8o%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a123b009ce64b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":163873,"size_decoded":26333,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65306)","md5":"94994c66fec8c3468b269dc0cc242151","sha1":"ec16bd19bf4ae9bc2e2336ac409a503bbbdaacad","sha256":"62f74b1cf824a89f03554c638e719594c309b4d8a627a758928c0516fa7890ab","sha512":"190194d1f30c8b6dfcb80f9afdb75625fa5418a52405d81f15d8019bbd92510e817b25a3a18feda27d2d1231fe3921fd88fe037e1fbb1ccd08f5fe5e4742ffe3","ssdeep":"1536:4t04T8if0W8DsEBpy0cuJBf2rIWE5e0VUpz600I4fM:4t04/0VUpz600I4fM","tlshash":"c1f3b4dbf581341dd4a7c259a4d1bffd052f4586e3025aabb0277bb88b892c70963e4c","first_seen":"2023-04-05T04:27:21Z","last_seen":"2026-06-27T12:51:44.493253Z","times_seen":25109,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":9,"receive":1,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/sui.jpg","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.355Z","timestamp":1782555296355,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/sui.jpg HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DdmIbnIk7YNSxPsV8nw2kam5Cj95xNHVc006EgLDP6x4BFWHEcvC%2BNKoEj7OzrbUeT5p8u440f08bLyrkzYrvq1awQPvShLt7s4SPMThI5a9JaUo0BClXQHESxPAVDV%2FT6ta7Mk%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-10a9\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4265\r\ncf-ray: a123b00a3c6e56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4265,"size_decoded":5192,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 224x224, components 3","md5":"f79b8dc2dafcfb70cb17ac015bc6bf61","sha1":"b6dd0a5979dc0bd745b97ff5817771bb8938dcd3","sha256":"4a4b9cb7080cca5f070ec3583dc5ca118b5990157df003856b292ae23653e8c3","sha512":"7c53e0e387dd686ead75f788368dd730a618ef46d4d83d5724830135d9ed9b75f330d238a39a6547894c1604f92fddc45f523bd68374118847624fc6159f3d46","ssdeep":"96:k5iCdJKKKKKn0KKKKKQBmx3TmpvEu0ZW5n0A+IKRya4:MiCJYAsW+A+Iaya4","tlshash":"1791397cb31392a1ea15d7fb56b903a43db2bc646423150ff740582f0dae2a50a848eb","first_seen":"2024-12-31T21:41:30.528292Z","last_seen":"2026-06-27T10:15:41.449796Z","times_seen":32,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/brd.jpg","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.483Z","timestamp":1782555296483,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/brd.jpg HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0o6QnOyIUlyLK8l%2BftIpOaAOo6YNnqIRY2QAtbepiyLaQhbSXGtvuxYGowX3P1K572Q6L%2F3fJqvoSEwGPpwPIPGz8b0YNjXBcO77uuJFb9X%2FNY0GVXAfrI1xn5ewx8j3usT3MSQ%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-270b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9995\r\ncf-ray: a123b00b0c8356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9995,"size_decoded":10924,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"5559279c73b9a051e071ab450ad50076","sha1":"23bb6b37f56048ae4cb3b0f545b25da070fd676f","sha256":"60e72b47b20a9621b79a3d322a8a38c61b39ece822406cceddbdad4f20fba19f","sha512":"7446404a3b6271d1e0ce3906ae17945aeb38ffbe4e5acf143623ac2ae6062c1d83f943f1616aafe40855cfead85e688871aac89cfa53c883eb56e429867ab8d8","ssdeep":"192:mSI5z3xBj5LgzBQf5DWlN2rCCUfq4/IHHIdX3dS9m5gXXPWkTKYvxt5UAr:dI5VBj5Lgw5DS2fUjgH+3sXXONWn5U2","tlshash":"3e2209ebda051e67bf4f8bd9ba05264ceec5a7c977c46cd50aa5ef4730009210fc8269","first_seen":"2023-06-14T12:59:15Z","last_seen":"2026-06-27T10:15:41.450948Z","times_seen":373,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"blockdag-network.app/cdn-cgi/challenge-platform/h/b/scripts/jsd/25e6c66701a0/main.js?","fqdn":"blockdag-network.app","domain":"blockdag-network.app","tld":"app"},"ip":{"addr":"172.67.143.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-spacepay.xyz/app_files/saved_resource.html","date":"2026-06-27T10:14:57.596Z","timestamp":1782555297596,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-network.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 22:45:35 GMT","end":"Thu, 06 Aug 2026 22:45:34 GMT"},"fingerprint":{"sha1":"A6:5B:97:48:B5:35:F7:98:F5:3B:26:B9:2D:9E:67:9F:DD:DE:37:D9","sha256":"AA:B3:30:9D:73:69:EF:56:2C:E0:9A:A4:EA:51:2F:64:3A:3A:9B:F7:07:F4:64:7A:2A:1F:DC:97:15:CF:27:60"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/25e6c66701a0/main.js? HTTP/1.1\r\nHost: blockdag-network.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claim-spacepay.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: zstd\r\ndate: Sat, 27 Jun 2026 10:14:57 GMT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: a123b011feb4712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19726,"size_decoded":9160,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (19726), with no line terminators","md5":"028246411d5c88c88ffceea92948a1c4","sha1":"313e7468987137142ae0df454171cbe71a8081c1","sha256":"fd89ccf1ad443a84ba2e409e8eeb40b8d12d7bd6739bf8d7f6d325c21fbf4969","sha512":"af5879cff1d4b123a01f8e3623b32136b80430cbff496f10336d2754f5e6def92493b940fb61139aa8d4e80d0b0c8558889e416ca8affffee971df158da9512e","ssdeep":"384:CeEvuXj9xrfO9L8I4ACgbBJXPHCdmU6qhAvKpRec3XusLwS523mo93fOOMMZItII:iWXjbfCL8s95PGuTvKzec3d/w3J9vOjf","tlshash":"bd92b6de31c1701802919cb6a55738dfe677fc82670c0a458190e8fcfab6744e4fae98","first_seen":"2026-06-27T10:14:05.719914Z","last_seen":"2026-06-27T11:02:45.183905Z","times_seen":3,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/qr.png","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:57.170Z","timestamp":1782555297170,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/qr.png HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:57 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RXD4VsoDHvhKtl9aDJv8Jjilqp0JELhamYuTXp662LuUHxrfuXLhsmPiW6H6bajxUYlStnEKy0P%2BEQecma1CeFNjd7ExlYNoLiB45UuilASXCINKHbGsr9U72w0%2F8nLZg8ADYT0%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-7ec\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2028\r\ncf-ray: a123b00f5cf456c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2028,"size_decoded":2960,"mime_type":"image/png","magic":"HTML document, ASCII text","md5":"4429f1c0ff129c0b91c5692a2e08400b","sha1":"913666e8ff60e7941c2d94f01cf7a86010643077","sha256":"c332f0fc4462c8d259bcf30e3ce88b7a7da4981cb154da6f50ebb98bf5098674","sha512":"8555a218af8cdceca941012d75da7f8026d0323f880b8543269b77e5760513f147846aa34b8421a2d7f1bea3b64c93d190646ab104b2352f5dbeecc3fea76295","ssdeep":"","tlshash":"c0416223e5034804e6a48661ff615d1a2746da538305c8707efe6278afca3e688b67cc","first_seen":"2023-09-04T03:42:18Z","last_seen":"2026-06-27T10:15:41.341018Z","times_seen":94,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/success.gif","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.322Z","timestamp":1782555296322,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/success.gif HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/gif\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PGYsmuaQPlWgF2O7jth%2Fe3iIamhuALrze1TScPY5gAxtlIjfEjJSnfcQbpw1lm6jrptCmzDxIvfE47fm6gBcsDp0FWippEZ%2BeZ5Z0rsSim4ej6bYF2vydE8S%2FtvrunTInP4OQog%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-7ec\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2028\r\ncf-ray: a123b00a0c6356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2028,"size_decoded":2955,"mime_type":"image/gif","magic":"HTML document, ASCII text","md5":"4429f1c0ff129c0b91c5692a2e08400b","sha1":"913666e8ff60e7941c2d94f01cf7a86010643077","sha256":"c332f0fc4462c8d259bcf30e3ce88b7a7da4981cb154da6f50ebb98bf5098674","sha512":"8555a218af8cdceca941012d75da7f8026d0323f880b8543269b77e5760513f147846aa34b8421a2d7f1bea3b64c93d190646ab104b2352f5dbeecc3fea76295","ssdeep":"","tlshash":"c0416223e5034804e6a48661ff615d1a2746da538305c8707efe6278afca3e688b67cc","first_seen":"2023-09-04T03:42:18Z","last_seen":"2026-06-27T10:15:41.341018Z","times_seen":94,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-spacepay.xyz/app_files/saved_resource.html","date":"2026-06-27T10:14:57.573Z","timestamp":1782555297573,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app_files/saved_resource.html\r\nCookie: cf_clearance=EgcvHG9Dg1XRTLbQxTMb26Rjr_3BMYdje8EaEfTqRYM-1782555297-1.2.1.1-J0RseQnqiZ1bH9iRqWL_JB55V1AbTJSvO1gpC9vB9CxFhWPY5rfIRjaBRb6Aj4EA_OE361NJOK.UWxPkq17mHjlf7CxKgjP0oEcUVOUUrNDB5d2iIEVaOXc2GUuQ5fnRocVF1wBHaokdX6fwl2Xmqe.gxUyiyGRp5rxm0.XH_YdB4xNksQLeepBouAFrI.u_W8qgF1FGN.FVkh0JtoephVOzrbWnNsdUKOvexGD8rpwYtUZbuoMzHsCT2_ezMHmx1vGk6JOAnyQdXyWO8T1V_rLHvtQoo1n7Gk0K4zaPF_nnZxqUt1GwOcXZjo3FQ395esPENUiRVPO9RSlpsjJ5DkHVFoiVGY1EqYDwm.FAvPfB8EN9m0VWecIxAIdS6.lxbuComGbgDWMmjxqka2VYGgnpxfm8x2Kfp.QfJOF0oWmmNTaNoAzColPVMkTAmeXy\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/25e6c66701a0/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\ndate: Sat, 27 Jun 2026 10:14:57 GMT\r\nserver: cloudflare\r\ncf-ray: a123b011dd0d56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T13:34:35.299461Z","times_seen":16762706,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/unnamed(7).png","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.706Z","timestamp":1782555296706,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/unnamed(7).png HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FRS28XCYACUuATchBfFLdsbc3xQHG%2FEOSnOGTswMTw7gvnGTs3V%2FN2FHxeg8NO1TVx3n83%2B3R71bT38rYIwSdeqjRMolXN0mb%2F8KMywVCcluY%2BBR5P9I68lFd9nL%2FY8wnc00gYc%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-3c13\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 15379\r\ncf-ray: a123b00c6cc756c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15379,"size_decoded":16316,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"20c9c6bd88b87c8c11e08e8976456a3a","sha1":"721c8dde2623b29322859a440899bed88dfd5eaf","sha256":"24ffc5778feb003e8f2486c7f06e37ec57db328ecba3a3a74824356612a26fb2","sha512":"d8332c3d1ebe1ba33cd591bd470921f802e2d50c57d6e9668bad92defa43bf289dcc1698550c6242363445044edb65b4fd0472101fe2c1a41ff8c16480a8cb35","ssdeep":"384:C0wDln+t+5F5CDZrxdXBe8OE298N//1oyU+9e:CjMZ0XJ9o/1oV+9e","tlshash":"fe625d9ae41ad4f001bbb3ad0d98151c520396d0e3658c417f9faf0e257eb08de279be","first_seen":"2023-06-14T12:59:15Z","last_seen":"2026-06-27T10:15:41.453849Z","times_seen":218,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/unnamed(13).png","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.744Z","timestamp":1782555296744,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/unnamed(13).png HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q%2BTjoK21E8L3c81EdVbNmUzQfe6kzYYI6tkrFZSYloHLRJJ0leS3Dpc%2BD4ZCzU6IIHW6uoBIoc1arEcfO47BMBJFVkNvJyPQ5Eyu8%2FrD%2F8eWuvgbyd0UXWf8sc%2Fa5Qgc15n81Wc%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-146d1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 83665\r\ncf-ray: a123b00cacdb56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83665,"size_decoded":84599,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"dffb58cc9aa845a79d9e0458aeb88855","sha1":"0b8de84ef23a2d333204b3a9f5c37575b3b36914","sha256":"45f1a5e53192a1be57578c16fec80554bfcd907e857ce0c8d07afd20740f971d","sha512":"0e1964d0426cdbc3fc5a41bdcf7aa329ee4f3f876083d6dcdb9b2b8b382d82ac2398261cdf04705c9d9b99b125ed82ec0f98a531f232981b60a39b1ad8db6d31","ssdeep":"1536:2N33eKedqj4wTXQYxScys21S5xzHamU2hSAejhTruwrhLrGVsnPvSn0:2adUTX6JsNPzHa6yhTCgc0vc0","tlshash":"31830209cde83d26904f2529c29362f248d76dc58e56dfb1ad278df84906c12e7cdb26","first_seen":"2023-06-14T12:59:15Z","last_seen":"2026-06-27T10:15:41.454825Z","times_seen":184,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/index.html","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:57.410Z","timestamp":1782555297410,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /index.html HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claim-spacepay.xyz/app.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:57 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nage: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y99leH9RXtC6yVdq4QqGpD5%2Fc4QbH6Z6iMPur3dx5Y9GdfrSKk2glfFFVGF2MULlqPNRpxSLG9Vz9Q20CofsPXQ526zvrLqcIj4rBRUVkFPoCOi%2BhrwPKkI5jBjbO3wQIsyK2nI%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a123b010dd0656c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":132436,"size_decoded":34604,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (33525)","md5":"4083d57531582778b0c4c839fbd03d37","sha1":"9302a6955739db133a42ef73f57fe3cdbf154495","sha256":"1f281a8f8b769ad7d9bfe385110988ceaf82ac8b3e95ee65f55d2c94df026b24","sha512":"2950b30eba6d7c3205005215efde3fbf3c98146b31a73c9e1aec7cbf6f3b4c06d679e525980bf62d681fa1209186232a77dbfa3821eadd4f6a8e0d04912992c2","ssdeep":"1536:3KaQFlytNbABXo905HqSo3HsSxGkauJ/8oc3kkH4qXoksDbkvzoCLx/cOu3zuDO2:QBXouFC3nxGkQ3FQksDbIQg","tlshash":"17d3e6315828522c336348afabc66a1f3215a05ed226f6df75ee54d8cf8b5b60373e50","first_seen":"2026-06-27T10:15:41.455714Z","last_seen":"2026-06-27T10:15:41.455714Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/css2","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.264Z","timestamp":1782555296264,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/css2 HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0QdNxbutDr8Ak3%2BogAxUgHCnvWPRBi4i71a4OJE%2BRe0hn71jMjIEGFeiNwJhx28qmTkjCwkp0JI0ti5py3MKgrgTz0kveoEqF5xLEa7kUMAx%2BeEwT%2BwKU3OkV%2FhoVR6V1Kp0xGw%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-1769\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-length: 5993\r\ncf-ray: a123b009ac5c56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T13:34:35.299461Z","times_seen":16762706,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/unnamed(4).png","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.677Z","timestamp":1782555296677,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/unnamed(4).png HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eUbpti9X7OlcslFiMfva97420%2BODdgpor8v68oAeHD4OtHeHwj9gqj%2FqnoYJB4hjpnwfoNP7A4Z17R6Pk4kTznoBA%2FqKrTJXazbO3T97uqQJNHBcqgCRSr1tyi28qmxMrZwCpPA%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-201d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 8221\r\ncf-ray: a123b00c4cc056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8221,"size_decoded":9149,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"7392463c6587b378939b0feb5db50c32","sha1":"77cfa077b3070f3e155d3ced7bfaced505ed9672","sha256":"6632fb3134d9b0a77eca8368021221b918add7122dd6c6419b4b48c2974b70fd","sha512":"20cc876579d054576bf6222fb881e0571d1d913d3e867cfda41e89863b68ece4c6ccadcd1ba245b5c57005cec47f7b7b0b4b5d533f99662c16432800af47e9a8","ssdeep":"192:nSc2Qa85hM/QlEJwwgQRXXcAqpJ22ONMV3J1Nu8:SSamW/sVwfeAJNMV3D","tlshash":"af026cd780919981b17ac99052045b74e8bab159fdebc9f671343a2c012e2b7e326ec6","first_seen":"2023-06-14T12:59:15Z","last_seen":"2026-06-27T10:15:41.457878Z","times_seen":218,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/m92jEcPI_400x400.jpg","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.508Z","timestamp":1782555296508,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/m92jEcPI_400x400.jpg HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ejDhL4HiwfouHD2jnNo6fILb%2FCEycNdzF3479rHB14miYlWnzi8gfULZseOH0i%2BOexaZrYEkEGpZiOXw0DM6i%2BQ3Xc8f6z1ICF1ZIPYap43CKQGsmLDzFh0rCT2g7bnK%2BAv3T2Q%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-164c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5708\r\ncf-ray: a123b00b3c8d56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5708,"size_decoded":6639,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"9e88a7df16c6dc66ebe0503c05b962d6","sha1":"7ee3604e1fac06b3f6ebd18629530f891afb0602","sha256":"7ae7e3d0fd05033885540a88faf4e30adebbfa7749a7f27e3a210704653b0d7e","sha512":"d6f754f86e66bc0986c344e9a4ded4c619b67cae1cf5c58b212621b808f58fcccde93d7c9711213d76576ae0f2c1c7d3ba7b0a198cf9a3b1ddab1cd0e88352fe","ssdeep":"96:a894vojcgEUaahVxGuWrR9QgRKGPi20X6rc7jtBSyBSuCbBhzadxIHk:ZpYg7FV7I9QgEGPi2LQ7jaCSJ8yHk","tlshash":"dfc14b926790cf27ee1c17fa3c504f9ad336bd2183a64b5fca950018eb9e4b058991cf","first_seen":"2023-12-22T03:55:57Z","last_seen":"2026-06-27T10:15:41.460207Z","times_seen":126,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96.jpeg","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.373Z","timestamp":1782555296373,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96.jpeg HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gMIu%2FyYnIIiYDbCGfq6c%2BYSL%2Fk1zzIuBO4pjH279r%2BsV99HPx37GQCNiYayaICyaa9LA5poWOboAA6nIOV1xgoawVDAPG5f%2FwE8aXA15fEwpuVsUojWCW1DfeeVzHfPbv8S9Xc4%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-88c3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 35011\r\ncf-ray: a123b00a6c7356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35011,"size_decoded":35945,"mime_type":"image/jpeg","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"dac29d5d546a9a5b7d8f122f18c35c16","sha1":"6838386d476d1c4e3e0bdd849414fdaa5421cc46","sha256":"ee4d01104e778b03ba5d75b4b6d52ff3a024d24b56c8f38eb24c64fbc8ddfba1","sha512":"ff01f833092446cf049e383ad77217a910975ff859520f2ae42305c72818c36f3cb29493cd208a9c67fed87ceca56346f72e8922243fa010d358f4af9ce0cab1","ssdeep":"768:h7xTv/oYKw6ntmUjkrbKdTdp7rOstv4ygnpZkgsz2w:/ZK3xkOAygnpE","tlshash":"62f2f19c5d0042dd76bd665b32a3f08d66c7a50e7630274a13311e8e2dd8eecac4633d","first_seen":"2023-11-29T05:27:06Z","last_seen":"2026-06-27T10:15:41.461133Z","times_seen":109,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/2772.png","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.559Z","timestamp":1782555296559,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/2772.png HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WX00JzRV4%2F2z7ueTxtpxYo0DqVVHFMaE4Y7v%2Fa9CpGK5M9K70wS9JyvVwyb6yWfelb9jtkQtWz30bIHutXtPvGzv9L5ORh2g7CLDaaBz6JZl42sBiWNn%2FTi2Iqt%2BayS0B%2F6bByg%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-158c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5516\r\ncf-ray: a123b00b8c9d56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5516,"size_decoded":6448,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"89ccc94734126594ee791ed81d02409b","sha1":"bf7818df6647e3a5b1736e96545a5ca4790ac0b7","sha256":"2a118d9d307abe049bf3c13da7f018fcdc8912fc24bc7d305e9ee61162801f43","sha512":"0b1caa6224e53cedeb11733293cb28eb950f8cb94b21dfa38dd7367ffb5fa98998880689eae5798f70f20a1d0cfdca96a2c68d525421303b9e321aee2b220747","ssdeep":"96:H4ZWZBhVbKcvXskKhEGAZaDcLmGjQM7e5VtOfwb2pxjo2eKI6yMEWdXHXkcVpJ:wWnhVKc/6aGcBQODob2U2eeyM9NHVpJ","tlshash":"75b18e99d1440d2e4389315fcc0eb829683a27187d288d9dde9ea71a3cff49b4c70dac","first_seen":"2023-06-14T12:59:15Z","last_seen":"2026-06-27T10:15:41.462006Z","times_seen":369,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/lg(7)","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.742Z","timestamp":1782555296742,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/lg(7) HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FvMARlZlVIvygnRssHaxVgi4yBV1r5PcLJAbdEbnYPH%2Bo6AT%2FGA744hhaDO6HoKAS45H3xHXzau5kMFW3mqeGPLjH4ZKeEKYrUu4YjvrCii9FXzO8Znc5lPNx4PRuCIanEjmyJ0%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-24f7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9463\r\ncf-ray: a123b00cacda56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9463,"size_decoded":10384,"mime_type":"application/octet-stream","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"84d8feebe781731aa6e08cdbdd7308a8","sha1":"4f38c77471524f83bae8137726c6d75f36b223fa","sha256":"5bba75448c46b95dffb78394b2e3597c94fa6e546d2eda6d8a81546ac77aebf6","sha512":"cb9e23f8d712bf6bd06726efb33b91ab03a751e5cf97bf2f440b11621e0ad749c12b5803bb0afe8bfc3b59516711372de0f700d4b86f48babbe9af212c2a6866","ssdeep":"192:vNvMPUwwVnAgDUb+5SboY9pm8myGZuyG+hDD9dfIP:hJwwSgD++wboY9p9D86KdC","tlshash":"2712afbeb703899eeb1cd1fc98b73016e3c3dd1b439c678f0da390298422a17561d995","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-06-27T10:15:41.463481Z","times_seen":561,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/Electrum.jpg","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.347Z","timestamp":1782555296347,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/Electrum.jpg HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8SQ%2FPg%2Fj%2Bi1HCDxPiIRw4nWuNgNEW6cIID4pxrYx%2Bk6KcKvuUjWZg7XvvLvDNQRpFkjbVeZ1PRN6pdwzRW09pTrD%2BkYM0U37KBNrFSHaLI63O6mBXKXJ6zpOagB0BB8z7ii%2FB%2Bo%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-9df7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 40439\r\ncf-ray: a123b00a3c6c56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40439,"size_decoded":41377,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x640, components 3","md5":"396e5247951fbf919fb6fa1247332a79","sha1":"e2cca7fbb97999f388b757c621584dfdbe70f812","sha256":"045ea21933070fb518b318cf05f616cfe53a2d548776d8e555f433d59538cfa0","sha512":"e0afba33d24568227440c7ab48687a28b380fcbf0403718cbd2c5b0b039033382f3691b1572e6b84fa0d7fc991248d343780a2d43720054326c581b825ab4cab","ssdeep":"768:u5/HNjxMpwrzRlJFajBRdTVakCig9MeyPi3R7qmioAoBX0O73OuUI:4/q8llJFMrVyiCMDAZqIBX0O7OuUI","tlshash":"1503f111f060a02df609fb346899217dc938fa19364bfcdbd405562a4c6e46aa4c5fff","first_seen":"2024-10-12T13:50:51.793696Z","last_seen":"2026-06-27T10:15:41.464302Z","times_seen":155,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/e726391f66eb7da7a0ed7d780b4df5e8e2416a17.png","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.383Z","timestamp":1782555296383,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/e726391f66eb7da7a0ed7d780b4df5e8e2416a17.png HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N1aWcILLZzIcAxqArAOLpqYxMsC%2B1UkJkxJ3LEeflalbqy%2BQHuM8C%2FfYUetch7V8PCId2WdVgMEfOP5ZBvB9oGkx347Yv83Q26tWqTiGlLVe8%2F7BD%2Bd8QYmq6ftvG0n7fafRihg%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-951\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2385\r\ncf-ray: a123b00a6c7656c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2385,"size_decoded":3316,"mime_type":"image/png","magic":"PNG image data, 188 x 188, 8-bit colormap, non-interlaced","md5":"b858e8f56920fae6be0d6828d553938c","sha1":"e726391f66eb7da7a0ed7d780b4df5e8e2416a17","sha256":"90f88ed3a19d87595ba207d19cdf7e390375f96ca25a92f061d85dcb815def40","sha512":"273b6e660a38c8d8042b10b51373deae3d65798dfb64e01986f5c3f33c742be430eb253efbec67661827784584e20bc386361829608fcff73de46106dbedfdcc","ssdeep":"","tlshash":"e04118bb41422fc23680ac28ec90ab59103635831fc6c3a41b739e2e784acd3cd70622","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-06-27T10:15:41.465178Z","times_seen":320,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/index.html","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:57.406Z","timestamp":1782555297406,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /index.html HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claim-spacepay.xyz/app.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:57 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uryAMKediXmk0oydJnailtdgL2%2BzgYnkYPQe4PSR5XkPXDpitA6krrDlAXthqHHrPMLYfNLXxEFM8Wn%2F6TImoyKypXY1kBVXrkOHELv%2FBCbyAbKLQhpPuJjkL9It5ZbLeavsKVs%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a123b010cd0356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":132436,"size_decoded":34606,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (33525)","md5":"9044bd445ec5576948dc0a1772b61b8c","sha1":"8987a9868ef902cf4f296c61268ec16ec9692231","sha256":"e35ef8ab58be9b37294a6fa32379ee9728de34721fe5a1975c50f7369bfb9ca9","sha512":"daccf1fc56a1b2997d607576fe8c756c2c34a8f28224ff5396406cf4f5eca8ec3f5394bf9b44cf6df57b4df73580b6165652986e2ce15affd02548a1b6f7e861","ssdeep":"1536:3KaQFlytNbABXo905HqSo3HsSxGkauJ/8oc3kkH4qXoksDbkvzoCHx/cOu3zuDO2:QBXouFC3nxGkQ3FQksDbgQg","tlshash":"8cd3e6315828522c336348afabc66a1f3215a05ed226f6df75ee54d8cf8b5b60373e50","first_seen":"2026-06-27T10:15:41.466144Z","last_seen":"2026-06-27T10:15:41.466144Z","times_seen":1,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/512x512bb(2).jpg","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.704Z","timestamp":1782555296704,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/512x512bb(2).jpg HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ck9UUHIUe7emh%2FUco%2F4GSkZ7vXrrnXrClcIAU0OA%2BKLzhF17OI45gsiqHrhimxJ54%2Fff1wJyiBP3Vjh6O%2FGX3r7y%2Fyt45FAf9XP%2Bp2Njg2gGAZi9Cksl%2F6jvtZ8S5ZJqF57JoiA%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-397d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 14717\r\ncf-ray: a123b00c6cc556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14717,"size_decoded":15657,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 512x512, components 3","md5":"cfb26b1d860e7d834da66ea62702a07b","sha1":"85fb90b86f8390111d4930cef4375e27d6c7fbaa","sha256":"9888d1529b78786d9cf905744d1dbc99372b7a7ebec4149acaef0fd0b2d7c534","sha512":"8e96fc26a99090708b4db94c57cb02e89bf2c01e9b7605d5d90427842d5031a5e273ca8154775486fbfce45a6e7db5bd7b8431af40c2f4480ef6995d87647699","ssdeep":"192:m1xkHZ8Atzb9tcSCY19m6jouFQJmCpTfg+ZBDj45mNvCcR:m1xO+AtzpSQs6RFQMCR4+HsKvlR","tlshash":"c862f50399654e87e228d7e5ff0318892f91364df99376fe44560edbbf10ab20c5c929","first_seen":"2023-06-14T12:59:15Z","last_seen":"2026-06-27T10:15:41.482254Z","times_seen":142,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/favicon.ico","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:49.089Z","timestamp":1782555289089,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claim-spacepay.xyz/app.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:49 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UVo0ILWZ%2FFUAYcy7xtzGjv5yJPkYGqHme5yprujFMUcsOFOe4vz6%2FGyYxjz%2B1vPr%2Blk1LGpHsjoVGzA8X1SsaceBmgxBjVDWxyGgYNwl8fRDqAz3%2BxNh92fVV7E7FCdSsSynHNI%3D\"}]}\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=4,i\r\nage: 127\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a0e1ecc-2978\"\r\ncf-ray: a123afdcdaca56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10616,"size_decoded":11531,"mime_type":"image/x-icon","magic":"PNG image data, 124 x 124, 8-bit/color RGBA, non-interlaced","md5":"db0438e6ac8a10ac0f5264cd2230c700","sha1":"c4f83ef388a9b8e4fa611e821d8cfd49f4d88e67","sha256":"880a85763b856b2c5d8b67a71f4736594241d8dfefd1b9ac5d6a0fd2f1ad157a","sha512":"159b23a914c5cfe8a4b992f619ff303a636fad228d89ed865e09f8ac59a23f2c41a204f15cec1c5ebae255dfa2ca205d23bdfa820b88b695cd32f379e19fc7b5","ssdeep":"192:kbgBWBk+gfnLKKm41nKgEzxk1bhMq8h+SyDKq6RYGoQhbtt/cZ6tDY9Ytjr:kbgMBqjVmEnKzxkpz8+SRDbthM6twYt3","tlshash":"b022bff632b08d85b57386c3fd7c5b40a93b44dc592a620628cfeb35ea3daa120570d2","first_seen":"2025-07-13T00:11:08.187079Z","last_seen":"2026-06-27T10:15:41.366Z","times_seen":9,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/78d167673c.js.download","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.260Z","timestamp":1782555296260,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/78d167673c.js.download HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0oM3NFP7IyUOlxxVFnjzBbIyv4MzXtNdOBgPGUiuG41XY7RBBwHDjUOoA%2BduzA8%2F%2B9mfpNmMqnelrb3qBUPFKnzeftc3he%2FRLu6znMlsxz6VyrohRrWzc7RhgKPkBwrXYoHRM%2Fg%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a123b009ac5b56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T13:34:35.299461Z","times_seen":16762706,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/44049579","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.675Z","timestamp":1782555296675,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/44049579 HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7PUXf%2Faz0PVj59%2FvWtcTw1Xd7geoKHs8k4AegZurd%2FaeTWo7gJ7YLrRn3eqn9vq%2Ft%2F3%2BbnHnXA3nbp6P0cwy5auWYcw7N95iULwVZ8JcHXi%2FHGLnE%2B0d%2BmcylMQvUXcAefVw5wI%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-1081\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4225\r\ncf-ray: a123b00c3cbf56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4225,"size_decoded":5160,"mime_type":"application/octet-stream","magic":"PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced","md5":"d4f0427b24ab1604f5c65e4ae4a1936e","sha1":"4ae69220ecc9e10f79c7bd8446a71d7978675511","sha256":"b587d3b39cecfb2f439f05945fd91e6ef9289efad89b5589cad08da0e9821d71","sha512":"1771f8cc88cd11df2e4f5ae1ee11c9ad49b98288be544f392f7376bbb29380d0d0f14476ed20c4b3757e05a7d90715e701a15e21498fd55cef4f4abd1c9ed5d1","ssdeep":"96:nyHZQXLmAJACGABjtz5iLmEprKObcQBU+Z6qKXg:nUOXNltz5wj0MDBU+ZoQ","tlshash":"1891b8ab73836960c5ab3b3b3b264ba769de0da15c004dd0a8b64fc4f143e5d3089b17","first_seen":"2023-06-14T12:59:15Z","last_seen":"2026-06-27T10:15:41.483327Z","times_seen":122,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/dd8ee41915d967e547c80266e883d77ee808427405f4e8026a85ac1308104221.jpeg","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.746Z","timestamp":1782555296746,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/dd8ee41915d967e547c80266e883d77ee808427405f4e8026a85ac1308104221.jpeg HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sh4Zx1Ki7BekTB83O7t7Bk5ksALMnU21bOXFDhvVKlgVovUcNUgfvXVCJjvLmGERKvAqxFvn0z4UWm0pwupONqwHuRzCPKtNYvwuR9mdv5UwWYIvrpPixVEYbPUE7MhezM2mHAQ%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-1788\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6024\r\ncf-ray: a123b00cacdc56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6024,"size_decoded":6947,"mime_type":"image/jpeg","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"556700eebde78fdb9814f21c66f1fb0d","sha1":"99b10219a0ae38939954b3ebd3d7739ff7e209db","sha256":"d4187bada13b156b89c837faf8e8d43deadbdd8a5940bdd9f0002f59568832a0","sha512":"d6cfe849b071e4763648f5241c74c50012fe060539f50b9557b39bf19f0e341c4e71dbb98ad6a46584659c97c8c0c4a91467f02e87ab3026514d715e28c1886e","ssdeep":"96:AbOCH8yFj6vmG7QVnDNuvKPsJMrFGgJXu/PgaNncgCibBAJ+ovwAI6+7hOBv9:qdJ6vmVNjPsJ2Ggw/PxpHKnIZUBV","tlshash":"31c19c4dc8e58d980ea46afb2b4cada41b74a36f1fd6514f048230471ee42bceb4641f","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-06-27T10:15:41.48478Z","times_seen":159,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/saved_resource.html","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:57.387Z","timestamp":1782555297387,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/saved_resource.html HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:57 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C%2BFzte8ivfg7jRxrK8ObMPurCMLcUxAbBbwSR%2BaOj%2B33H61cef4R9dTjIVdia7sBWknKItN58gbSeBdiUPc0auEX97NdidOx8uafmvB7ZYamzGWpJ%2Fxim7vFHEe2f2i%2BbrTYMRM%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a123b010ad0156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1420,"size_decoded":1568,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (1377)","md5":"00d99c94722adaa5402025f17558368a","sha1":"bcbdbb43b6d944e5bb5605686a4fed4f97cafef5","sha256":"f3ed27992fd6dbbd56ed4edc85216d47e04a3511026e0c5f9f576a69c9fa0a9e","sha512":"ac5e4fbece7d0ae0347a7fe7a848d27f9f87a33bbabfa1d9e1fdfaf088a7dc9ce63815cb50e7ff01ecfad29c08b90035fc3adb9f841d6a4cc9c4869a612e500e","ssdeep":"","tlshash":"422122b92d29853496d0418b31bef3ac3a3120617a02d084c2ecdc795e18fd718efcad","first_seen":"2026-06-27T10:15:41.486023Z","last_seen":"2026-06-27T10:15:41.486023Z","times_seen":1,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/lg(3)","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.583Z","timestamp":1782555296583,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/lg(3) HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RONikjCvOwpbWGobEJAEcT6T2OT0jzQJ9wr%2BOOij9Z1VQiDyfG%2FX6BiR%2B7DFqSuCoDaBCc9T5g9Y9dt8Zxv4UCAzxhCFamDLbvCf%2FvjX0LzlBA%2BW85GZpzaGne8MVLKe20ZzVew%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-462a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 17962\r\ncf-ray: a123b00baca756c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17962,"size_decoded":18890,"mime_type":"application/octet-stream","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"33980d05709d80b3caa512c95943cdc6","sha1":"243d8d4f8c578e16df5192cfe512664e864da473","sha256":"b494e732168825a8daae0c748a215053c536842ee7a9b0b7aba94067a757289e","sha512":"1357faac77af996c6dbd63842276e78f6fc7816ce3441e940a88dd374a517364bd6f00d331d935f0787d79536c383e3cc4d2c0bde3a996014f04641b9d6f1b8d","ssdeep":"384:0BpkSgIpA5O770veolRsxVa66crZl5FqjGkPNQB6ai:wpkK+xlExVr6cLGxPqri","tlshash":"ff82bfcafc4828d96e9ec1b7008350066ae985356fbbfa2c1957fed9f138e4c8584748","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-06-27T10:15:41.489706Z","times_seen":829,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/0b415a746fb9ee99cce155c2ceca0c6f6061b1dbca2d722b3ba16381d0562150.jpeg","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.688Z","timestamp":1782555296688,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/0b415a746fb9ee99cce155c2ceca0c6f6061b1dbca2d722b3ba16381d0562150.jpeg HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nBJAA5J1OZ4GfmT%2BFgff49%2BmAf9thIs7gjC81VpGcXB9DfnXEiYx7rltAp%2FEY4h0D6XfwrF1bAU21KGo3gl8KBe64GWJTZnqh8gUK2yx5xpO1QWRs0%2BpiF9oLKPpz3loossJMg4%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-1153\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4435\r\ncf-ray: a123b00c4cc156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4435,"size_decoded":5366,"mime_type":"image/jpeg","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"dba5370924c0574d529e94347d8f2a48","sha1":"d18bb7047a12355105d68930d0876e9388c041bf","sha256":"eb7f91580f2203ec6a80e4b42b00270d1a772942d3d5059a7764e4f578682f44","sha512":"1d2065864513ea50fb0af549271e18b2159af8e209610aa370bea73f9463e542ac4db7244002958948ec5fac413abb91c80336a844ead942b6ab3ac96f46a9e5","ssdeep":"96:Ek9gBKZkGLDjXMMG2WMoblXuUljeFofbHy4EYWI9ybyjm1fx7OQ5ed5cawFbnJjX:EkOciGLDjXMvM8lXuUlySD1vFafx6u4M","tlshash":"73914a942d39a1d06b20a13bd7b0dd2d55750893621c2eaf012c34bb25ec2ba6b7a60f","first_seen":"2023-06-05T14:25:48Z","last_seen":"2026-06-27T10:15:41.491136Z","times_seen":133,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/cdn-cgi/challenge-platform/h/b/scripts/jsd/25e6c66701a0/main.js?","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-spacepay.xyz/app_files/saved_resource.html","date":"2026-06-27T10:14:57.671Z","timestamp":1782555297671,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/25e6c66701a0/main.js? HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=EgcvHG9Dg1XRTLbQxTMb26Rjr_3BMYdje8EaEfTqRYM-1782555297-1.2.1.1-J0RseQnqiZ1bH9iRqWL_JB55V1AbTJSvO1gpC9vB9CxFhWPY5rfIRjaBRb6Aj4EA_OE361NJOK.UWxPkq17mHjlf7CxKgjP0oEcUVOUUrNDB5d2iIEVaOXc2GUuQ5fnRocVF1wBHaokdX6fwl2Xmqe.gxUyiyGRp5rxm0.XH_YdB4xNksQLeepBouAFrI.u_W8qgF1FGN.FVkh0JtoephVOzrbWnNsdUKOvexGD8rpwYtUZbuoMzHsCT2_ezMHmx1vGk6JOAnyQdXyWO8T1V_rLHvtQoo1n7Gk0K4zaPF_nnZxqUt1GwOcXZjo3FQ395esPENUiRVPO9RSlpsjJ5DkHVFoiVGY1EqYDwm.FAvPfB8EN9m0VWecIxAIdS6.lxbuComGbgDWMmjxqka2VYGgnpxfm8x2Kfp.QfJOF0oWmmNTaNoAzColPVMkTAmeXy\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: zstd\r\ndate: Sat, 27 Jun 2026 10:14:57 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a123b0128d1656c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20525,"size_decoded":9517,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (20525), with no line terminators","md5":"cbdde017de09c64cf5798e149d5ea6cb","sha1":"c1ab9c90780ec8484c7e7fcd4547bbda131b9883","sha256":"8d37d7d981ae546a2ab95f03d526ed367641e4e219f38a48a2229033c5155507","sha512":"12f7b2d975972e403ad9a7f144f4df223f49719ad11b28baab2edf097bdc517df5490b374dcabf509b9c942c56d8b9cde1992fa15464bcbc07865a466b873e71","ssdeep":"384:FWwOj5WMEdu0SwbByQq+9NW7qYCGCDPyFkrlWmbdBuZpecl26jB1pfINZMUlMR:FNOj58du0SwbBy49fSSm7nV3ANiR","tlshash":"5392b6ed35d1740802a15eb2406374cfe6bbac53730c0559c2a0d6ecfab6789e8a7e59","first_seen":"2026-06-27T10:11:11.471809Z","last_seen":"2026-06-27T11:00:40.330861Z","times_seen":4,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/lg(2)","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.573Z","timestamp":1782555296573,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/lg(2) HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o4bF4y8xX%2BQJVPP1lJZRZuXKQntvtJOjvNYbZSlaXvq1%2FeB3jvOfQO4jmP8N07ZLnMc18b5Pi1uWPoo7wLohxoZybsGtT7nDTgKreh8rlY5cXaBzFbDyT4TBDaCoUJoZmHSx%2Bqg%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-1be3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 7139\r\ncf-ray: a123b00b9ca256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7139,"size_decoded":8062,"mime_type":"application/octet-stream","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"b96662aeff8b0fbdd1df05fb5276377d","sha1":"35bdb7f067da2d79f4e074c07a4c75ade5c06f52","sha256":"af750da80779c66ecab4952241e392b6b14db8b684111ed5a045bf684415dad6","sha512":"133d1c1a6ab1e711ee648fa6dfeb13363b03b867ef8ada5d53f1a914b3cd6261462b449c514d043f5b7f84f195c4522b0636bd5c23b0ecbd8fb884e1189a2963","ssdeep":"96:uoIpihulYiHxGDscvm20W+iAX7NprniPnYn188HYk9cCHtvq5js5UJMh9u:faY8G4cvm25+iAZpD2aYuTHtyqUJS9u","tlshash":"88e16c222178a857f82aca7868330346ff51845de305cfcd9ac39e9fd47725a5958b0b","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-06-27T10:15:41.494526Z","times_seen":405,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/a123afdd5ee432fa/1782555289635/Z-h5tVm_cvrxFm_","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-27T10:14:50.320Z","timestamp":1782555290320,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/d/a123afdd5ee432fa/1782555289635/Z-h5tVm_cvrxFm_ HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 10:14:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 1440\r\npriority: u=6,i\r\nserver: cloudflare\r\ncf-ray: a123afe48cb832fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1440,"size_decoded":1661,"mime_type":"image/png","magic":"PNG image data, 39 x 34, 8-bit grayscale, non-interlaced","md5":"0b70edd59b6b89947222d76d6b5147cf","sha1":"ad445f28d4fa2c3399c92cd66d1131ef312317e6","sha256":"f20817b1a93f6d01713e09dcca02f3ab561f6eae62b61556492e559d22945177","sha512":"cfa52d165239aafa361842ddc30ba67d465748e5d64baaaefc208d01667c6ec69c0f9dc942a0fd402a1f817d7f4c7a8a974c5eab2a5e348ca5f5bb1fa8f92fb4","ssdeep":"","tlshash":"032124df4310fc3cc4530031c730dc10d5311004304071300507cd34470c404c54c741","first_seen":"2026-06-27T10:15:41.495569Z","last_seen":"2026-06-27T10:15:41.495569Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/unnamed(1).png","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.601Z","timestamp":1782555296601,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/unnamed(1).png HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c1Vb0hs24xeiD%2Bv8%2B07DN2oGjMPQCica6G9zpy7n7OWYPxfIObUo31JN3tVp5p%2BEA3xuUOqygz1sH17v0jDRfTn%2BU3KerJZGyn2aD6DADtfn9vEPj1rfrHZsTAXGkD5q2rw4XFM%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-87c0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 34752\r\ncf-ray: a123b00bccb256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34752,"size_decoded":35683,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"3329754d3e2f47a8b4117a4891b74bf0","sha1":"f59632815a228d30adbcf40dae387921f8296e42","sha256":"6a310238d310ebdee1c6730834384fc3f5ae979e039fae9ff896f009bb1eb3a0","sha512":"afd47df7a41bb1a7379ad94c597118146a60105ba29e2f4ee7f1b2cea4af47f79b95fa96d86396eac3f25d232e399ae373086ebbccfb8ab35c7a97e4cc2a5694","ssdeep":"768:/PwSsfZNIz3S83fiu5QjpvglmD/t8nJORcy7EjS+Ou3vG:/PZsfd8aFjB24cyKOb","tlshash":"c5f2d03d078de22a1f59a7a058ad8e5e9ec9836274203bf24f5e94715926d32780bcdc","first_seen":"2023-06-14T12:59:15Z","last_seen":"2026-06-27T10:15:41.498775Z","times_seen":198,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/10903.png","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.603Z","timestamp":1782555296603,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/10903.png HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z4s3O0N0dwrpK9R9ZDwJSGzeUQtpufl0iTZ7Awysb0F5XMCcNBJ9mSxlfse2eGMtNHNGl7q57IO791%2F64cYOd0gsyp8vsZVddh%2FDMtJsJxCXAzuMagj%2BF8GLQuJi%2FwYkhqn%2FFIw%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-37ca\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 14282\r\ncf-ray: a123b00bccb356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14282,"size_decoded":15215,"mime_type":"image/png","magic":"PNG image data, 293 x 293, 8-bit/color RGBA, non-interlaced","md5":"016a7610a0d4edf5ba7ff030792337c3","sha1":"b0ef1892c6d0ee386bcf2fa29ba3be87b9bb5654","sha256":"957d5ccbd9a107a270b3df1de91d189d0183dac96644beb645957c1a1b1514a7","sha512":"c918ac4a4f0f17d2be2cc6b724da9ded0f5027af8871772917635c0c5c963188b1a8a5b917d205c1be2c1f75f850d18f7f0bd835e0f93489bf74e53f00cc4341","ssdeep":"384:vJQlmDFtUalTb+UIAN+hWVlw5itAqpjBexwRVv1k:viiFtUalTb+oN+hWVS5i1LMSVNk","tlshash":"3752a0433d0b3b99004e46d515174b27d5f0d24aab9cb1b6d3a9b4609d2fd428ebb83f","first_seen":"2023-06-14T12:59:15Z","last_seen":"2026-06-27T10:15:41.499698Z","times_seen":239,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/unnamed(3).png","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.667Z","timestamp":1782555296667,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/unnamed(3).png HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VHQBZLT%2FNIWg%2FFwtJKLcZTs50dPVeGaXesgmOhDFqK2OTIQhb80ByZbn1MGvze%2BFTzoth1NZKHMgV3gXJvYOJVzTSGM3Qonk7H7cTsqN%2BUWDv5URY%2Fwmqe5cq5XwF0mPCwKUg7k%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-896d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 35181\r\ncf-ray: a123b00c2cbd56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35181,"size_decoded":36114,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"32d4593117fac669840f9b5c2edbe24b","sha1":"62656882b7367e4ae6f8e35d471069c39e705122","sha256":"cf7076e0a00be8e1088ae084d7e350e511be204938eab8b4282a66ad422355f1","sha512":"d70b4fc71a31c45c92abb9e702c24207f0f0d58921da11ca363625b88c52dcb0778d8881281f6b8ef6abeab19c1df993948bb69faabe7f3ff3cf6de4bf112c08","ssdeep":"768:D+L4Iw25Q/6VkHDHbf+IY8LRuD9r16Ew2TCDvDV4H28x0qKJozYKKKKKKKKKKKKY:D+L4I5HALo8Lm9a2TCvVY28x/KJo/","tlshash":"78f2d050c28bc3b0d9614e7698cebcf61c436891ab5a620fb6e20bb7144a7c59dc53f6","first_seen":"2023-06-14T12:59:15Z","last_seen":"2026-06-27T10:15:41.500572Z","times_seen":215,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/512x512bb(1).jpg","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.668Z","timestamp":1782555296668,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/512x512bb(1).jpg HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LnhvwGn6%2Fd6QFVoEMTMKnfsMywFYNzfAW3rtbwh7uhIlPOc8MtbLKib4E%2FPXU2DLR8tnSE3bmiadKRxyDoLN26wrDqEl8hg6QbNH2LtU%2FqqqWpYZ4gA11vLADXRt1F3qV3e82pY%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-31e4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12772\r\ncf-ray: a123b00c3cbe56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12772,"size_decoded":13702,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 512x512, components 3","md5":"25b70f06d656a97e28682a5b3846a255","sha1":"1e4dc39672f69ea4362215e437db6fa7418d79de","sha256":"aacac419a5c37b67a79777e2fef441c358cb61966b3d1e94ee7d6732519bce5f","sha512":"6f3399eaa1a9f9eff0123795db2036023898146fa203f522ccbef2d1e8f6212ffe11508ba47058a33b7c061140d47a8baf38e9fcb5b4e78b3b81ee0738d1dad2","ssdeep":"192:KOoShcC9WxVqBYlkHB+NtVb0Q+hZO7bF77IoLC2qVwTk:KOLia/qtOBhZO7Z32zVmk","tlshash":"2342941749198e83e524c3e57f472a8c6f8a3b5dea4279ff44620eda7f21a621d0c05e","first_seen":"2023-12-22T03:55:57Z","last_seen":"2026-06-27T10:15:41.501407Z","times_seen":130,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/wow.min.js.download","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:57.318Z","timestamp":1782555297318,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/wow.min.js.download HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:57 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GgNUd4Eh2Y%2FJQd4NhvO%2B4M8GnY7X%2BVPnbukVNPEm%2BR49Fa3sbrzHv98twUSLRvZ1q7nseW7vWUUGfVEqWis9ZHp952WgXlBR1NJ515s6lI7WkSK1LqQQVq%2BcW4NrR6JNNnneGvE%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-20e2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-length: 8418\r\ncf-ray: a123b0103cfd56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T13:34:35.299461Z","times_seen":16762706,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/cosmos.png","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.500Z","timestamp":1782555296500,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/cosmos.png HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X3CKO7RDcoCTbWfUxQfKmAyNoGAO%2FEZclz7aMbV%2B%2BPKnAA2EXUAKjm37nQ%2BSVL6L4H0GKESK%2FH0k8xdis4v7ykpJpXbmZ2sBbu9QJIsc6qxHqwzMq7nHAZtuCDMkPlkQCL6Cu3E%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-3470\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13424\r\ncf-ray: a123b00b2c8856c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13424,"size_decoded":14357,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"ebc521597cec2f97db04277c065f142e","sha1":"6db814ba369a593485c96e24cc9ddc6261cca169","sha256":"c5e65bece6a92bc7e05ef68540a48a0417b29290234a7ba7fcfaa63bcd10b270","sha512":"a42d9039de11fa442a7366f647a3afe6d0cbf69ff15b3fd88d8c37da8b063bd252a6b624fe2d108ee2460299df6505d1545cd616068d157e733dbf3949670893","ssdeep":"192:JMWq+VLt71P5FGriOXcTR6FobBYXLdI46MFLTqbH2jcxL4XcuIh49w4hodPCq4i:iuKiD6FAYXLKrMkb0+4M5K9wOodPCqz","tlshash":"22529ee8ea15cf33cc1c529ee5a00df66365192575425cb7c7f22c6f8d0faa40d92e1a","first_seen":"2023-06-14T12:59:15Z","last_seen":"2026-06-27T10:15:41.5023Z","times_seen":389,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/lg","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.517Z","timestamp":1782555296517,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/lg HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PhYqOP64j%2Fk%2B7g5FaQrgLkF8vdglg4XLCBu33qOBm29A1DghPRsxUOKc%2FV3AAW%2F67SF0iZzaSiQ92kXNc80%2B9hXQgCNey9sX90l3TbYyAZRBFVCKMst4pyoo4TMoal9OKY%2FmrEk%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-7f6f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 32623\r\ncf-ray: a123b00b3c8f56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32623,"size_decoded":33553,"mime_type":"application/octet-stream","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"3b46c3ab19d923f2635002032220d5f5","sha1":"3e36cda9f4133454702a51b26ce3b98eb05bc28b","sha256":"0b31044b56d09abdc3c116c16dcfde3afb661c35cc49778dfb1f4dc5ec3ee1fc","sha512":"f12cf6a881f3fc56d22693e709e4930b1b6c566dcf8a2bc50b891873df19fa30a65fb13376810b3a1bde68a268698473f9ccf8311e8ea73433bb333768cee494","ssdeep":"768:AJcNUR8Pl7e/xYG05aJxovoLWcrTeXINU7X/:o/R6o/xYG2acvoFTemUb","tlshash":"7ce2e1b4aa71b2e814a247efd4f19cd945e0fe0612e757767ee2330034015fc6c4a669","first_seen":"2023-05-14T18:27:19Z","last_seen":"2026-06-27T10:15:41.506967Z","times_seen":133,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-spacepay.xyz/app_files/saved_resource.html","date":"2026-06-27T10:14:57.657Z","timestamp":1782555297657,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=EgcvHG9Dg1XRTLbQxTMb26Rjr_3BMYdje8EaEfTqRYM-1782555297-1.2.1.1-J0RseQnqiZ1bH9iRqWL_JB55V1AbTJSvO1gpC9vB9CxFhWPY5rfIRjaBRb6Aj4EA_OE361NJOK.UWxPkq17mHjlf7CxKgjP0oEcUVOUUrNDB5d2iIEVaOXc2GUuQ5fnRocVF1wBHaokdX6fwl2Xmqe.gxUyiyGRp5rxm0.XH_YdB4xNksQLeepBouAFrI.u_W8qgF1FGN.FVkh0JtoephVOzrbWnNsdUKOvexGD8rpwYtUZbuoMzHsCT2_ezMHmx1vGk6JOAnyQdXyWO8T1V_rLHvtQoo1n7Gk0K4zaPF_nnZxqUt1GwOcXZjo3FQ395esPENUiRVPO9RSlpsjJ5DkHVFoiVGY1EqYDwm.FAvPfB8EN9m0VWecIxAIdS6.lxbuComGbgDWMmjxqka2VYGgnpxfm8x2Kfp.QfJOF0oWmmNTaNoAzColPVMkTAmeXy\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/25e6c66701a0/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\ndate: Sat, 27 Jun 2026 10:14:57 GMT\r\nserver: cloudflare\r\ncf-ray: a123b0125d1456c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T13:34:35.299461Z","times_seen":16762706,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/favicon.ico","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:57.665Z","timestamp":1782555297665,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=EgcvHG9Dg1XRTLbQxTMb26Rjr_3BMYdje8EaEfTqRYM-1782555297-1.2.1.1-J0RseQnqiZ1bH9iRqWL_JB55V1AbTJSvO1gpC9vB9CxFhWPY5rfIRjaBRb6Aj4EA_OE361NJOK.UWxPkq17mHjlf7CxKgjP0oEcUVOUUrNDB5d2iIEVaOXc2GUuQ5fnRocVF1wBHaokdX6fwl2Xmqe.gxUyiyGRp5rxm0.XH_YdB4xNksQLeepBouAFrI.u_W8qgF1FGN.FVkh0JtoephVOzrbWnNsdUKOvexGD8rpwYtUZbuoMzHsCT2_ezMHmx1vGk6JOAnyQdXyWO8T1V_rLHvtQoo1n7Gk0K4zaPF_nnZxqUt1GwOcXZjo3FQ395esPENUiRVPO9RSlpsjJ5DkHVFoiVGY1EqYDwm.FAvPfB8EN9m0VWecIxAIdS6.lxbuComGbgDWMmjxqka2VYGgnpxfm8x2Kfp.QfJOF0oWmmNTaNoAzColPVMkTAmeXy\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:57 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3e6vExohJo9dDRkk0zowzv%2F1N07qCfgq47vBtriFT3zS1I%2BlWTxVTNi4zlc6GqSUMgZ3xihGzxCbbSCJUb0ugG2GZaBYmFzSU4mXCzl%2B5U99EIYYI88GhKUYv6OI%2FWTM3F2zYvY%3D\"}]}\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=6,i=?0\r\nage: 135\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a0e1ecc-2978\"\r\ncf-ray: a123b0126d1556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10616,"size_decoded":11532,"mime_type":"image/x-icon","magic":"PNG image data, 124 x 124, 8-bit/color RGBA, non-interlaced","md5":"db0438e6ac8a10ac0f5264cd2230c700","sha1":"c4f83ef388a9b8e4fa611e821d8cfd49f4d88e67","sha256":"880a85763b856b2c5d8b67a71f4736594241d8dfefd1b9ac5d6a0fd2f1ad157a","sha512":"159b23a914c5cfe8a4b992f619ff303a636fad228d89ed865e09f8ac59a23f2c41a204f15cec1c5ebae255dfa2ca205d23bdfa820b88b695cd32f379e19fc7b5","ssdeep":"192:kbgBWBk+gfnLKKm41nKgEzxk1bhMq8h+SyDKq6RYGoQhbtt/cZ6tDY9Ytjr:kbgMBqjVmEnKzxkpz8+SRDbthM6twYt3","tlshash":"b022bff632b08d85b57386c3fd7c5b40a93b44dc592a620628cfeb35ea3daa120570d2","first_seen":"2025-07-13T00:11:08.187079Z","last_seen":"2026-06-27T10:15:41.366Z","times_seen":9,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/wow.min.js.download","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.543Z","timestamp":1782555296543,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/wow.min.js.download HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2uHxzXZGZZbSZZi8zLfd1LMz6MDF9ficcwPpwH9zXyduWqcirC0uGN7gdFxOsVPiNWQHjPkdrAWSOaLs8F2QyA%2BhWatgF6YUBFMBIufwImoOVvP7UfhT96Vb2jNW6Z3U61R%2FM98%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-20e2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-length: 8418\r\ncf-ray: a123b00b6c9656c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T13:34:35.299461Z","times_seen":16762706,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/20459438007b75f4f4acb98bf29aa3b800550309646d375da5fd4aac6c2a2c66.jpeg","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.556Z","timestamp":1782555296556,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/20459438007b75f4f4acb98bf29aa3b800550309646d375da5fd4aac6c2a2c66.jpeg HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Brc7vJAr9T2JmjG52%2FXSnqWHhufOIZOW%2BAsWUYh8JBiLVJ5LJW15J%2FfVEnBapHDIMXFOIQ4FRMjyEkli3EhGXVq0PGtBJh1%2Fzh8TOFwaelkBwx7unM91ja%2Fgn9r4yGxLaAJDTds%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-f32\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3890\r\ncf-ray: a123b00b7c9a56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3890,"size_decoded":4824,"mime_type":"image/jpeg","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"7bf1a4313a2407ced044b0087f35e581","sha1":"93f5345ee3c9269d8834bb9b5edec693cd3f3dcc","sha256":"7afc976ac69fea3370a94217bc80c3597e18e2707d8691ec11d9c13489956cb3","sha512":"7f311b8b4a36bf7a9cc1a4b2295eec206b530940ca89cd8acdc4ca85ce6ea0b29543f12dc6b0c4a5e6b28b4ac5c7e4682ae0d8916468574ba141384ee97e7c45","ssdeep":"","tlshash":"ff8163663ac19f3688feb7518e9b1b9512811c2d012ffb10b741a62336535e904f879e","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-06-27T10:15:41.508134Z","times_seen":133,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/aave-aave-logo.png","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.557Z","timestamp":1782555296557,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/aave-aave-logo.png HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ulgoAM3TirTodnZD9IM5OuVkOKlnqftROh7Kam%2BsFS3M1ywMi%2FhsLisbraZ2%2Fc%2BB1PV1841BxSbJRVc%2BPHfUiK33ik9HbA4RoRB%2FXKHt%2BIm7gcIByvBp3VbqQjzav3uywAjzZeo%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-36482\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 222338\r\ncf-ray: a123b00b8c9c56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":222338,"size_decoded":223277,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"64f49fbd11ccc415df38baae1aca3fb7","sha1":"6c7cc5ef85ff37b0c2b6b12cde2f3ce393308023","sha256":"0eceff0513f650e657389f560a3fd485070f6a52a0ee513c503d682ef9d37b14","sha512":"74ae3ad38b1370575d6db5c32c1927754366650711a34c788ae530f07e652cc6e33867f86fb888c89d6131f5c65fe0a9018327c4b428e7e2cb99bd18ddaa3788","ssdeep":"6144:goiKzdCKWP5En3BecmP8gCjcc9nTNFOgbCxJjxkD:goiKzMPktmP8PXTzOKCxJj2","tlshash":"0e24cfad7b21de04f2506876b1e63d2b4fbe7a5dc654028c8df09ab42f76005f17a81b","first_seen":"2023-06-14T12:59:15Z","last_seen":"2026-06-27T10:15:41.509183Z","times_seen":715,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/walletpage.css","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.272Z","timestamp":1782555296272,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/walletpage.css HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: W/\"6a0e1ecc-f95\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NplSRawqJSC3PGJTCr98t6qtEkOup2nl%2B7Z0qRIYLVavv%2FXmxpsHo5sHJgJ9IW0yEDpoidJHN%2Fbbmlt14I5TlwhyHxyrR9fCBfB0C9tBfwIKXOM75Cgev3X%2FWUmXKxdAkYXc4jQ%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a123b009bc5e56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3989,"size_decoded":2114,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"630a8c4e2040a271f49b216daf045aa5","sha1":"efd2ce0e1370790b7b60184a730ebc6f3df150e4","sha256":"7f27584b0c891c2340eae90868b94b543d1a9d149bc9c6e9407d127320f57b98","sha512":"3cd63eb1415513f08ee9d3ec7b11cf883d4103ed1547b65a58db75276adfc060ab6bbf11e9120789f46f5744ecb68fa9a3811ba35f7a518ef9d97e9c2c783695","ssdeep":"","tlshash":"f881f0a7e910a44123790a74bf7379bafaae41d34a0181797f9ce605cff01962650f8c","first_seen":"2023-06-19T02:12:36Z","last_seen":"2026-06-27T10:15:41.510185Z","times_seen":190,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-27T10:14:49.299Z","timestamp":1782555289299,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 10:14:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 86\r\npriority: u=6,i\r\nserver: cloudflare\r\ncf-ray: a123afde8a8032fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86,"size_decoded":305,"mime_type":"image/png","magic":"PNG image data, 2 x 2, 8-bit grayscale, non-interlaced","md5":"6f56b42a36357c43e029d49d4c671b61","sha1":"4f964f217e818790fdc0eb9764364f2cb64fea83","sha256":"5475a45561ef5b0753181d6e48db97c591ed0de3dcc7164d73c47d77ee30abc7","sha512":"391beb7d81219136377a161e23f5253bb74ee4aa54a6f6af3c8a5d6376969599f428ed20f3e34184ffffa5bd45bf11fdf6784a3492f58ffb294cf6ea8fac49e5","ssdeep":"","tlshash":"b4a012c67680ad76c14e0232c1500121f8331186015242300043d8110411e048298942","first_seen":"2026-06-24T12:10:09.43741Z","last_seen":"2026-06-27T13:49:08.009759Z","times_seen":46,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/19ad8334f0f034f4176a95722b5746b539b47b37ce17a5abde4755956d05d44c.jpeg","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.734Z","timestamp":1782555296734,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/19ad8334f0f034f4176a95722b5746b539b47b37ce17a5abde4755956d05d44c.jpeg HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9nDbckjO%2BzPJYemiTAH0hjRjwIIwJ%2FWbnumSlLxi1kVaazaLQPM6i5%2FQmWry8N%2B7WLUmuaeeGRyEzcCfAzf%2BBf9MoXYHImAEki5AN2sD09qaBTJVDEdZx6M2Fi9EKpnJa%2Fl59V4%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-1138\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4408\r\ncf-ray: a123b00c9cd656c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4408,"size_decoded":5343,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"0af9182a920bd450df67e926b0a15728","sha1":"618ed5f233546f6ed9b453f1857fd65027d09c78","sha256":"12f4214cce0e4bc0131e10a03cb1724fcf5b8e738ec277c394bd06761b81380a","sha512":"484d637bd909c75cb4eb7bcdcf0316c6f69fe6f910f3fe72d0b56d73d435a140e1cc72752e0f22b16364561b6de59ab7330008c1ce6b68c43a970691bbb138cf","ssdeep":"96:emOn2yL5/5qdRyd6v5RMGmvUthiGriiHTq9m3FinhcD:0nV/kdQ6zMB1GzHKkQo","tlshash":"04917df37e89814fc616017c4bf0874f2a979ad76fe8fbddac926c101db818155a1790","first_seen":"2023-05-31T13:32:46Z","last_seen":"2026-06-27T10:15:41.512062Z","times_seen":182,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/bestwallet.jpg","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.378Z","timestamp":1782555296378,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/bestwallet.jpg HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Po9wyS0DnowGVlphCH84Z8IceGk4MjCgStybrd4iy8iZpbHrOslBcaXk%2BlR0EXG%2BlcRhcfp0X9iDePKc0k4a%2BjG4MoP0gfJtoxUhfRJdidBxk7TZ700OUVmRRxflAaP6pyFNhQA%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-5c6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 1478\r\ncf-ray: a123b00a6c7556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1478,"size_decoded":2406,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 92x92, components 3","md5":"d868bb8de5a18bcafb04a6278c5297f3","sha1":"988eae3f2355d389d796b7055badee3080951711","sha256":"9f3546fcd77e11290230fe185429f0e1eb63ca18b0884f809a0c2b0999f5589b","sha512":"88a7c5fed4e42c4e1b29dbac4219832fa4d94a8f9c5924dab362fe10bdfeef0052a20174d227cc9c7fc106710130c7c62acb358bdceb8fab4d275becab9ee3b1","ssdeep":"","tlshash":"c731d871db59d889fb799d3e59e791905700ee8110ace6881228ccf8fbd1018cd516c3","first_seen":"2024-07-30T11:46:58Z","last_seen":"2026-06-27T10:15:41.513988Z","times_seen":146,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/unnamed(5).png","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.690Z","timestamp":1782555296690,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/unnamed(5).png HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bNfZAO0RjYyhA7ohRSVEFcLm35OV%2Bl4S5Z1YB2M8y7jJTAJOgXBONeUd4atjKVaLsXSOkCRqAt6mcV3dy1t5xScz7PG0YpazkI%2FAQ71ztxx9jZUDxeEc0TpjhQBP3fbv8pSwVAs%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-8972\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 35186\r\ncf-ray: a123b00c5cc256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35186,"size_decoded":36113,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"2a5a9029eca64b05cd4927a5c2ede986","sha1":"091ff6225e53b55ea60b0441fec5b74c28310530","sha256":"646416e4002429b988adbfb67416cf8e2cf4da3122192343151072ef22a77780","sha512":"1ffd03015fa7918b9ef663a6fc2a70d5d5ae34a2b6f0d5e7a1528248b18d51e1bc0703eb2a59464f61878a20e1bb7cadfc6a3e71575bf2be262a6e329066ed6c","ssdeep":"768:MsPSo7Hec2wInY89YM1gCvHroSRsIXamlQzKMsY5mvK:M6S/ZGMprdRemyeMV8vK","tlshash":"42f2e1739857f032f572f82d1a421e687b31a988847c6f984c6479a9773fdec3c92614","first_seen":"2023-06-14T12:59:15Z","last_seen":"2026-06-27T10:15:41.515973Z","times_seen":217,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/ledger_logo.png","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.418Z","timestamp":1782555296418,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/ledger_logo.png HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wSdGomIXCPde76mrN46xLqO0b0m%2Bd0DvVYvopHNYy1PMscWh0OfB%2BMkIjcHTAMYExoRjHbHSJrklExpAwiY0FAqrUUjfvboG5qg1j1iWftCcaZbhT90LB1tmT3Jo0W6ltV%2BtbAc%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-1882\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6274\r\ncf-ray: a123b00aac8056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6274,"size_decoded":7202,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"f18dfd8e3e333eda0e797558b2ef17c5","sha1":"eecc008965e9ac07f0b022a30b00faede0d3e308","sha256":"84bc8d5109b23fd6ffa62b7a9f49a54b813cba9101782fb6d485b3e298e0c9b9","sha512":"45bf6bb8524b3cf018a5d256132300258c0b58634497482330a5dad536af76b1763da2737dea92726a9c26536271c43490eea0502ece44a54ab13ca58801ef2d","ssdeep":"96:E1S+lQzw0ZeKKIKKK2tEDA+OTKAciJteZGGGm3X13X4lKs5G:QSzE0gKKIKKKqEDAP3JkGxm3X13IlJE","tlshash":"26d1d462966cb0cee2eaadf1e43e4006d96891f166735f07d0d70b0dbb8c620df6a205","first_seen":"2023-06-14T12:59:15Z","last_seen":"2026-06-27T10:15:41.516886Z","times_seen":93,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/2076494389:1782554419:aqsgTKPbj4P8TXe3XoLsNnT-ZxXoeNTiCZDR09NLquA/a123afdd5ee432fa/hLyNPvioN7YiQj.W_iDqR_ZqzEWTuAYeV6tcsBmVI6Y-1782555289-1.2.1.1-kozcgQCQOYR8U3YeZWAltyy0Mxo.sBOEHIdD2O43rxivv83OgniytaLCgNoDqLYF","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-27T10:14:49.629Z","timestamp":1782555289629,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/2076494389:1782554419:aqsgTKPbj4P8TXe3XoLsNnT-ZxXoeNTiCZDR09NLquA/a123afdd5ee432fa/hLyNPvioN7YiQj.W_iDqR_ZqzEWTuAYeV6tcsBmVI6Y-1782555289-1.2.1.1-kozcgQCQOYR8U3YeZWAltyy0Mxo.sBOEHIdD2O43rxivv83OgniytaLCgNoDqLYF HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\ncf-chl: hLyNPvioN7YiQj.W_iDqR_ZqzEWTuAYeV6tcsBmVI6Y-1782555289-1.2.1.1-kozcgQCQOYR8U3YeZWAltyy0Mxo.sBOEHIdD2O43rxivv83OgniytaLCgNoDqLYF\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 4695\r\nOrigin: https://challenges.cloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 10:14:49 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: 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$8+34jQ7g3bPQwHX2tzWCoA==\r\ntiming-allow-origin: https://challenges.cloudflare.com\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a123afe03f8932fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":383816,"size_decoded":289680,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a96d09b13b4ef79b6679afe520ec9ec7","sha1":"32818fab6714eda8674d196c626508b284212557","sha256":"68606e272f55b96e279b3ab0e5373ff2b090f035efbfbcb654ff3ee4e5a56fb5","sha512":"e0ebf635d2dc0cbae8b1934ecf1f9ac7c733807b5c2a2c664024556bb3d0b1ba38c9d1ecf7698747f46a9e7865bc6bad11566195fcc6e64dbfab409ab4b733ae","ssdeep":"6144:fVlX1sWo4oWs+jgzbh8MXjTv8vIEdNVNCnXb/DijOweXqAugdMfl:fvX1sX4oWscWHsNVgL/D8UqWd+l","tlshash":"d18423a26a216f4fcf9a522d87f1d9121ca26dd70012f4e4b9f83e8f810dd99167493f","first_seen":"2026-06-27T10:15:41.517894Z","last_seen":"2026-06-27T10:15:41.517894Z","times_seen":1,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":109,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/main.css","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.278Z","timestamp":1782555296278,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/main.css HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: W/\"6a0e1ecc-42e5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u83xm5GC2YtUt8HVfYesplTs9XIe1mPIAOI2bVVPWKArV16plT9oM914ZuL2Uf%2BItcgKcXVGfa6mzuaCKojBtfTHUC0aU8Kwrs6Vd8MYqzBLbSukDEIlFMfqG06PKeeFK1HF4to%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a123b009cc6156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17125,"size_decoded":4814,"mime_type":"text/css","magic":"ASCII text","md5":"7c9507587de46c8c7a9a40d2f8291b33","sha1":"c1a738f0633b4e6633ebebba6fd2d9ec223584cf","sha256":"39ba049d03abe5def80830ba38d0f2b432dd7374cac67ffd3c800d9bcc551164","sha512":"379a48252abeebe398601f5d46a281db26e18fab6b4fd4b3199afce3104a54b9bc045a42c395f0067d49571e34ebf68b57856e3a1a652ca679f81bf429387325","ssdeep":"384:z7vWAfAlUnBgZ64MWES2rJMwZJa3BbkwnUlDDaDZDeJD8inLiTpK4c8V:3vWop83R6H+Je5rnLiTH","tlshash":"b87232961aa31805b51bc8a8bf7a6f4453649413d20fc9b47f8db14ccfc92a465f2b8d","first_seen":"2023-06-14T12:59:15Z","last_seen":"2026-06-27T10:15:41.52012Z","times_seen":309,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@popperjs/core@2.10.2/dist/umd/popper.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.533Z","timestamp":1782555296533,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/@popperjs/core@2.10.2/dist/umd/popper.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://claim-spacepay.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 6838\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 2.10.2\r\nx-jsd-version-type: version\r\netag: W/\"496b-DsfKR3i6PMtNGxaICUcgg0++ntM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230047-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 6157403\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OuooSrhKrF37sSa2RMTu%2FTkc%2FDvM5cZ8Ir%2BT0Ht8bUdJd4FKCMEjKiUuI9ASbnSKnJ8Nq5KVMpzCgBrxQem3B%2BMwodVvKjBNfUrxBVWMQCqB5EAoZ8NZgO5K3q5ayciw5UQ%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a123b00b5aabb28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18795,"size_decoded":7955,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (18706)","md5":"541aecc95a7faeef0fc27558070f3647","sha1":"0ec7ca4778ba3ccb4d1b1688094720834fbe9ed3","sha256":"f395875eb5d58c5128c434812cd0a53d438b11536f7fd1577077d8a5c612e1fd","sha512":"9e7ce4236bb60f2e87327ccc22487b08f775297e38e73dfc5c8bb88c6d631b0ef1e6d48bdd5063138e1d6388a1314d628c0415f77d123ccd7670216b075f2c57","ssdeep":"384:PTL+5nmEpLFrCtACZiKkbMAVfb2Bxam1HjsL+MSV1Nn1aixt094nOhpgHfHMh++E:ymEe+CZiTbRVcQyMC1Nn1zt094nOhpgr","tlshash":"a782b5cd3594f0a1167b52bac07f550f73379561228ea100b244d6da2c78ebba26bc3f","first_seen":"2023-03-07T01:23:52Z","last_seen":"2026-06-27T10:15:41.52233Z","times_seen":3394,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0.jpeg","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.385Z","timestamp":1782555296385,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0.jpeg HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XS0cqczYUbfUaHW4iyNF%2B%2F7KlYXBR6Lr1%2F%2BftpUdDjlYOW8RFROmg5eECjIl8GgHssYCjTXRJHf%2BJswvupDbhVZPcO93cHkJXHigOYM%2Fk9luU1OyWDEwHprFjTBUgMaijxdn%2F%2BM%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-19e9\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6633\r\ncf-ray: a123b00a7c7756c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6633,"size_decoded":7572,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"f15670e2fa664790560becb05302a51c","sha1":"836d223713db4da5ef9ac8b6caec385f06353e89","sha256":"521f3ca5ed42fce36af921fb2764ad5c75760b434563d11d960270a8bef55c6f","sha512":"8c075bcce1435d37d89a091faa4e1633f6c5d2fff6161e5ce530d71b10a837473ee04a2f39d0414c7d59c0b9f72d8df8fc5d2cfffb30244c3eb91c72ad7f994e","ssdeep":"96:KdRNpQK9Icf5SJRiL8ylpJq1eRuGTQhlLCFuP+QzIwPMFMbEIp:Kd3pQK9IchSJYL8ylLqQ/TCOgPCo","tlshash":"dbd18db43f431800c9e6fa705d6750672d9ba78894da689fe16d16af362ca11be3c831","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-06-27T10:15:41.523285Z","times_seen":713,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/unnamed.png","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.552Z","timestamp":1782555296552,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/unnamed.png HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=43cSMGdSATt%2Bv%2FkcREJIwat9OISe5fyQlfZRYjEAHQLynzEFAR9XKqgW2KVhPbA5zEB5r7D74rnrnoi9%2FkU5Ly12FxezSI%2FHdYxYrVk%2B%2FX35WbnzkVaOey6abUagQMTdfnO5HqU%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-33eb5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 212661\r\ncf-ray: a123b00b7c9856c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":212661,"size_decoded":213598,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"366b192cdcaed2f6e8573dac3f675b36","sha1":"4fee7a0d9736cfa1976ef40bb6acc8fbfeae75dc","sha256":"74ae8736520f4575cdb649f658f7dbf7731d0055017f52f0e93833e12d2169c8","sha512":"5dbed69850e9174eae8c3c8679e5bcc30097ddb9450cc5311da4aebacbe17aa5c0488941bc76aeaa9e481e8fdb9d0eba1f44dad7037f144023c55f445a544832","ssdeep":"3072:WD9kuKf/5IaNz7Ou3T1iDRKc8qOOLrt5BrRDrwMkhXMdhfpaUoFKuyzNTJueWlKi:WDyJ+YXOGTQNCMLf3khX0A7EN0eWlSQ","tlshash":"842413f1d883050ae0d95201f05e3a42909e47e6b5ef6bdb563bde605900b8fa31b5fb","first_seen":"2023-06-14T12:59:15Z","last_seen":"2026-06-27T10:15:41.524569Z","times_seen":261,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/cdn-cgi/challenge-platform/h/b/jsd/oneshot/25e6c66701a0/0.925643528967081:1782554421:RK0w8m4voOAyjsVpkywKVodH0j8mUoLxHpvuh05_C_Y/a123b010ad0156c0","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claim-spacepay.xyz/app_files/saved_resource.html","date":"2026-06-27T10:14:57.790Z","timestamp":1782555297790,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/25e6c66701a0/0.925643528967081:1782554421:RK0w8m4voOAyjsVpkywKVodH0j8mUoLxHpvuh05_C_Y/a123b010ad0156c0 HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 13287\r\nOrigin: https://claim-spacepay.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app_files/saved_resource.html\r\nCookie: cf_clearance=EgcvHG9Dg1XRTLbQxTMb26Rjr_3BMYdje8EaEfTqRYM-1782555297-1.2.1.1-J0RseQnqiZ1bH9iRqWL_JB55V1AbTJSvO1gpC9vB9CxFhWPY5rfIRjaBRb6Aj4EA_OE361NJOK.UWxPkq17mHjlf7CxKgjP0oEcUVOUUrNDB5d2iIEVaOXc2GUuQ5fnRocVF1wBHaokdX6fwl2Xmqe.gxUyiyGRp5rxm0.XH_YdB4xNksQLeepBouAFrI.u_W8qgF1FGN.FVkh0JtoephVOzrbWnNsdUKOvexGD8rpwYtUZbuoMzHsCT2_ezMHmx1vGk6JOAnyQdXyWO8T1V_rLHvtQoo1n7Gk0K4zaPF_nnZxqUt1GwOcXZjo3FQ395esPENUiRVPO9RSlpsjJ5DkHVFoiVGY1EqYDwm.FAvPfB8EN9m0VWecIxAIdS6.lxbuComGbgDWMmjxqka2VYGgnpxfm8x2Kfp.QfJOF0oWmmNTaNoAzColPVMkTAmeXy\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: yT+5K00DjxcYqsPeNrU8euC5SG8hlkGv3qyBOb72uPyNEgUI8qw+bmTh6tGt6eWcbpCnspzzVxgz9gNgHrDHt29j/L09zJfcq1PO6zdhCz3i0OimlT7JQk5WNOfGj/VX2mO/v00NuuDd6/ErMsXTTcTHLmfrHQ8sTTKNo1O54BuvX8obvDXiP1uhmeER3qWrrvsTuxUarhurtrQmlzxyytkQs4OYk9QzwCx3Vc6f/zGQpIt93uT9+Y8FMaiLNsJSpWEy9GScIRr3OQSHGj7A4A==$gzhYiIP/ITruE0V2XSU2sw==\r\nset-cookie: cf_clearance=c3UUtxBwDAyuxL247__sxK0gIbESoYXK2HSf.NAvhOs-1782555297-1.2.1.1-HDC3TlJCuPN_kBe5TURQliIqB6zU0vLWMh2e7s8H0MxhfI1vFzLFQaiw.oTo1STAZPGoKSyOgbY8rWTId21fXpDuBtvEhrB3LaaTYocy41uUee7EPKJrQkNpbi56cb82QBYX34_YeOMG73GZF3FP_X.UdnSGfd7PP99FIvdVtBQWbAtOpA1PAJYQbfe.4KpMFsfbpFo3fUZk2G9DnZVdEBy9DnWJUOwsQyGSOQdLu82KNKOY4oVo9AulwnJuh.ol6azO0hYX7Ioa1Vhca.f40JmKT4dhJ2M5U9N.hpckClp92r7aKtDVijTW2yIEYn3bpIY32FvGP0il7C8nqSl5nCDudgeZiISddIyJOuKbjSB0kmWfcoqJlsJGD21PBGv9PT.auScXzmSrOGD0EcoBDdBbnigmuCjEQxGMEq7RFulAvpXZziygCRZSDHHEcREW; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=claim-spacepay.xyz; Expires=Sun, 27 Jun 2027 10:14:57 GMT\r\ntiming-allow-origin: https://claim-spacepay.xyz\r\ndate: Sat, 27 Jun 2026 10:14:57 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a123b0133d1c56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":15758,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T13:34:35.299461Z","times_seen":16762706,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/28189800","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.575Z","timestamp":1782555296575,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/28189800 HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FX8AKkcAVB3%2BPcetRaJkcFSAsjkqvnYV%2BOAqOt62XgPn6hhhwA245kzyzl6BTggJ68SheXaBg6ZLtvMN46tIhA2HUky85XfsPEXnomZHNFDiBB3USvTTqG9RCys5sdBB2xN22yk%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-898c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 35212\r\ncf-ray: a123b00b9ca356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35212,"size_decoded":36136,"mime_type":"application/octet-stream","magic":"PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced","md5":"d2de32f623a3beefbdb39d8ec577160b","sha1":"9dc28a14227bbd26e974f83a011367d19a62c77d","sha256":"c7d02addcc383128f53a067c56fad8ed4e271e8426d8c1dd5c99a43602b84337","sha512":"3a236d81d07d022b8bc5e460a384a845279a84911badaa1b50a7e81e8e76fbba0582d0d76f8ce825847d4be76d92e80d69bfb8511869c19bf14ba14625f25c82","ssdeep":"768:sd7WJayBp1jbDjuFn39tVKDo4hIpTxXqBCXhIHD+gRiy6JB/O:sQJBBTbDj439XKDo4h0JqByhIHqgp6jm","tlshash":"2df2f1cbcbbef49467203edf0a5321fc619c71e1a37a71e0cd9b541f617652148ca0aa","first_seen":"2023-06-14T12:59:15Z","last_seen":"2026-06-27T10:15:41.536689Z","times_seen":125,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/LOGO-KEYRING-PRO.png","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.730Z","timestamp":1782555296730,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/LOGO-KEYRING-PRO.png HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZZcQ5rxLLLp7Vxn7rnR0KDFzh9odjd3FxyA%2BTnkl95gxjB8%2Ft73xNi7wSmN%2FDH3FB4p8MCxeJfkEUFx2GdbTjLPd2Ry0CztqluAHsjKI%2By8DSjw9S8T8Ulmv9Hb0u86OSbOur64%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-9293\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 37523\r\ncf-ray: a123b00c9cd556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37523,"size_decoded":38454,"mime_type":"image/png","magic":"PNG image data, 1145 x 1417, 8-bit colormap, non-interlaced","md5":"1e72c1e5a9697cca8b0ef1b245f6572b","sha1":"31f910828f194aefdfa2946d105b449082a8bd84","sha256":"8db01cd595409fe6bfd931bae5e62e4cdc940074bbad692f64a711c23031e8e3","sha512":"8369b8f3edfb42852a06f25809d73bb097a1503d6f94924aac26e7642ee0d12ee600198c0eb5e4821c7ec5b1b12700bdf99ddbb726b4db06cfb2b0703423aa62","ssdeep":"768:h8yS4RwSWkkSUHFLJL/9SZf5Ruo/RgMtODtgEU7KmWuwqvbS1rU:h8N4RGkkPLZFSnRuou2EaKTuw0bcU","tlshash":"15f2f104b3ef5658d649ced725105fa2e518662234c212abfafd8bb037dc7986011bde","first_seen":"2023-07-01T14:47:36Z","last_seen":"2026-06-27T10:15:41.54206Z","times_seen":410,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:57.264Z","timestamp":1782555297264,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://claim-spacepay.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Jun 2026 02:57:02 GMT\r\nexpires: Fri, 25 Jun 2027 02:57:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 199075\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7884,"size_decoded":8696,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-06-27T13:37:43.84934Z","times_seen":364860,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":35,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/index.html","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:57.409Z","timestamp":1782555297409,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /index.html HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claim-spacepay.xyz/app.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:57 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nage: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=06%2BTLqKfiXnlibqLn0V3t5KxS73Cpz4dBAwGMe2c6QFhqlwyMC74vbX2oWHbOnz%2B3aDl2C1AYO%2BFB2gEoEwXEHVHBbGw8PU81%2BXBI9tDHEPwQuqYbik5c2SnCGQ%2F5olyhmQsO7c%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a123b010cd0556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":132436,"size_decoded":34614,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (33525)","md5":"18a7aa20b75bc0f6a0eb3632fcf9b75b","sha1":"d3955364f327ffdcafdee5deb37d78d9389d5d96","sha256":"f126158c3194a2eeadd0230f331f12ef3a981e0f7fafe79e99379f8602ea5190","sha512":"0009ada0da7bc39b7978616ec95ef7434cf6051beb0a1795b875960a66abea91ebee08cc432301c9341c2d0bb0631f8d95c1558d9373f0d2e04d42a8c5069610","ssdeep":"1536:3KaQFlytNbABXo905HqSo3HsSxGkauJ/8oc3kkH4qXoksDbkvzoCRx/cOu3zuDO2:QBXouFC3nxGkQ3FQksDbqQg","tlshash":"61d3e6315828522c336348afabc66a1f3215a05ed226f6df75ee54d8cf8b5b60373e50","first_seen":"2026-06-27T10:15:41.550138Z","last_seen":"2026-06-27T10:15:41.550138Z","times_seen":1,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/bootstrap.min(1).css","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.276Z","timestamp":1782555296276,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/bootstrap.min(1).css HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: W/\"6a0e1ecc-27681\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7yYDGOnEHnwpOESvkkywHOsKLyEwrks11ubxy%2BxdekJ4BKq%2FSRD6xjqZGa9HnIPoLzCrkw9PUj%2BlJq6cpdM2KitLV4rbCN7qmg0LFZnHR3hGzN5XKpdJ9b3HgfIqnvbvunP8IuQ%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a123b009bc6056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":161409,"size_decoded":30196,"mime_type":"text/css","magic":"ASCII text, with very long lines (65326)","md5":"d432e4222814b62dd30c9513dcc29440","sha1":"2cac4afc120983921411296bd4e8fd8a94ba237e","sha256":"4ffcc598ee6cff4692c1cea272cd8a2f195f6dec32473e94370d6cdcfa5fe601","sha512":"3f9320327d6304dd356ac060534cfad10938431897a3cebec2515a84aaec41fdfb73d72ba39d7b5b35523cf575b432b3864bb6889d855602faef01b4dd21a734","ssdeep":"1536:iC7AIJkTR+rMqFVD2DEBi8yNcuSElAz/uJpq3SYiLENM6HN26R:d7XXGLq3SYiLENM6HN26R","tlshash":"8cf353a6f5a0312de4a7c61964d0bafd152f8245d7224bfbf8273b6447892c70a73e4c","first_seen":"2023-04-05T05:11:52Z","last_seen":"2026-06-27T13:11:08.876113Z","times_seen":13260,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/Solflarewallet.jpg","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.392Z","timestamp":1782555296392,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/Solflarewallet.jpg HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WrhYaTA8qqqTUei%2BcrHV%2BzhnT8lBUG7daw89FFnuVUkov3Migz7gu6VyShLlno9CHD%2FHUWOT%2BDCf6LOyw0HV69KKL%2F27Xh%2BfgcEqaxlFImKzDjjR8MShcHQ11VpvGdrV0faqBoA%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-1abc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6844\r\ncf-ray: a123b00a7c7956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6844,"size_decoded":7779,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"504711ed044b3e58714126d138d5043d","sha1":"4aa5f3eb43b78503d917ba4216eebc1980e886c6","sha256":"cdd3adf1cb5ad0e635a92e5e39f308a23c6d82f60d18b677948b1d4023ff45fc","sha512":"35e5562004152284433202ac6ff43b384aa3738e410c443dd798f57cdcf49ac6f8eaf811ca9838021416aa664852f91aad0965083c44c3f580440d2cbe7f566b","ssdeep":"96:VMvC7m5SvqruScR+f4ou72QWfVgE43OQE3z0TErl1fphIybsHSboxY+W0a:evCa2ScKu76fCOQyoErLfY9ybo1a","tlshash":"0ce190a47f8a8150d6c0d534b33ec332290f74793456d999963a0745be69cc8ff099af","first_seen":"2024-07-30T11:46:58Z","last_seen":"2026-06-27T10:15:41.553422Z","times_seen":126,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/Xverse.jpg","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.400Z","timestamp":1782555296400,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/Xverse.jpg HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mFkJiubhx8nf61QzDW49JNAtjlkk2QlbZ%2BF1XR9923j1nIQxHnvLMzVnwGSA84VHRpAZVv0sD7%2BDiYch3a0sSe%2FDTvIMEqsbV1A718QD760kH9weSP5MSwIK0zz9xS16xUXlHZI%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-ac8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2760\r\ncf-ray: a123b00a8c7c56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2760,"size_decoded":3688,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"0ff277fbd5cf63541801b05e2e1807b3","sha1":"ccfa7d53714dd4e482edc98664d816b80834b9fc","sha256":"fc3998a537226c91a72ae386079b50fbfcfd135633bf030916efc894278b5e75","sha512":"f014f80f4676a785d1f965f18259f5e6bf9984fb213f4c423e39652b1112c6fb3f1082f2ae24e42d8b69de866719088a04ad798a42663a033a66ab7176074eab","ssdeep":"","tlshash":"5e51f68e9186e163c678443d907e1795cfafd720a4ab42cb54067b0c0bc22c28a76a32","first_seen":"2024-07-30T11:46:58Z","last_seen":"2026-06-27T10:15:41.563068Z","times_seen":106,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/images","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.697Z","timestamp":1782555296697,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/images HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=53yaBkG5wYqly7fXFvXFigimEBK6kv9euiQ3iZuArFr33XuqkpVS8PZS49ZpqyI3UBn7K9hZPUt2qzu5myluTLlsvN8tBhec0rWrB9y7ebk6vOCYrXNBXOvgcf5MVLvGrSVM%2FfM%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-140c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5132\r\ncf-ray: a123b00c5cc356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5132,"size_decoded":6051,"mime_type":"application/octet-stream","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"aadb0f09b96352820a9b1e3c5913f06d","sha1":"7ca6bc62d0f29e423dc52a920b16c4d4566c39ec","sha256":"10b428a7626f17703c6fa15ed8fc933ab68e7443427cd7e58c15c879363c9699","sha512":"e4868b8788a6ad029802f165387b5adbe19a927b2bf0e09b284a4a5293586cb3cbe4c393d2f4397810318a16d94b087861179c4d69df346892aa6d978a8a1d6d","ssdeep":"96:795XmkSFslNSlM8yn8mV/E8vQZSXSRefGVB/FeYphps5xOGH06wf7LbhAJ:72v+lNa3CQMfQB/FeYphpWH6DLK","tlshash":"91b16f575d5ca5429015970a79879a8efc302dc03af06c6ccbc45957fd1e35dd8ceb81","first_seen":"2023-06-14T12:59:15Z","last_seen":"2026-06-27T10:15:41.56419Z","times_seen":145,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@400;500;700;800;900\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.987Z","timestamp":1782555296987,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css2?family=Poppins:wght@400;500;700;800;900\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 27 Jun 2026 10:14:57 GMT\r\ndate: Sat, 27 Jun 2026 10:14:57 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5663,"size_decoded":1231,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d7ec20a3ed8bbb1d70d75447a839015e","sha1":"38f10373f10915712a3dfd4d175cd8db2960541a","sha256":"cd2e7d2d41cc33d10b114b60a2436d66e9456d3675e47887db48de97e0a79b81","sha512":"1500a792796d23e8f27381d7ec62c69492161ff92c81010c9ea217d0b499f9354e6a88d80d21b84aaf45dce7505db83af5913f6602dcd24fd179e5f00870d962","ssdeep":"96:SOLnOLCJc+ukOLuN3Og3OgvJc+ukOgON3OCvOCnJc+ukOC2N3Ow65Ow6JJc+ukOP:3CKSe1rVMzzbtwpOgoaBk","tlshash":"94c19dd2087be41467831cc212ce7d36ee0e9244b450e574abfe0c9cada7c69537272d","first_seen":"2025-09-19T05:16:07.374763Z","last_seen":"2026-06-27T10:15:41.565129Z","times_seen":87,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":65,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:57.416Z","timestamp":1782555297416,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/25e6c66701a0/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\ndate: Sat, 27 Jun 2026 10:14:57 GMT\r\nserver: cloudflare\r\ncf-ray: a123b010dd0856c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T13:34:35.299461Z","times_seen":16762706,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.536Z","timestamp":1782555296536,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/bootstrap@5.1.3/dist/js/bootstrap.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://claim-spacepay.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 17077\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.1.3\r\nx-jsd-version-type: version\r\netag: W/\"e753-GQgMO4F5hTNqq14c5pJcmYA/Lv0\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230145-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 3902903\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O1%2Fmhst3N9%2Fz4Y%2BlOfEGseSmhDX9rM9%2Fo6BxhDC%2FwccZdXLbYNq4JtvhDFPPdgJOS329cmqV2gLGPo1wZvZt4XqI2Ybon6gMGKcxYyjzBD0obcGr2V2X3LZMh2koE%2BJJGKc%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a123b00b5abdb28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59219,"size_decoded":18198,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (58940)","md5":"259e416ef6833be43801b8b68a93b008","sha1":"19080c3b817985336aab5e1ce6925c99803f2efd","sha256":"70c3d690bdc5ce3b9a1527c46044989a3176e610882fa99f4523e75bc395bcce","sha512":"3af0603fd03624182245a77f98cdfa9a4cd749768913d04420436754499e65d213bf04f4f719f12ed4f8b709026bc9bf96831b3c7b2f3e5d13f25446541c2395","ssdeep":"768:pZTlSOLQenVa+Shd413pjWxkRfFdAZTVUzRWQHWxBVm7MT09XAPtThvBEwU8TtL4:p5fkVf5Lw9eEZeqlr","tlshash":"a943c44a3358b8330ade44a79072474bf7255994b147806cb9bc6cde1b3dc8672b7bb8","first_seen":"2023-03-07T01:23:52Z","last_seen":"2026-06-27T11:34:49.552722Z","times_seen":5815,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a123afd88aaf56c0","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:48.697Z","timestamp":1782555288697,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a123afd88aaf56c0 HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claim-spacepay.xyz/app.html?__cf_chl_rt_tk=VjF5GAVFWBp0yt3S1DQSwuxpx_86nOzRub7WVTDtAfI-1782555288-1.0.1.1-ghIYTc3weTGXiCvbEW3zcjPzKJr7vkzNs6NvwhGGTV0\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncontent-encoding: zstd\r\ndate: Sat, 27 Jun 2026 10:14:48 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a123afda5abd56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":221656,"size_decoded":79441,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"49b48f13a3ae32c5816298eebc677b51","sha1":"46862d6f21d1d42d714779958cad5f2cc16d2ab3","sha256":"f18d64c4d0a19f132a98c7010762553b8d59979ab0902fdbfb8a7d11305381b7","sha512":"4438135bb3d8f491521bb6f35e723f13e62949e135aac496f136235b96686aff94461d8be26b07af524d0d188bd95a71803ebecaf5ba1741ed51ea250549bae1","ssdeep":"3072:ylutvbnM0GkV9FlDid3BGlzjOllzjiIxkwliof9YOtmk6vjcMC2Yere0cejR:ylutvbnM0JV9FjlzSllzTmsJUq0f","tlshash":"1524eacdb481b71f56d7a1b9042bb2aa762e0d80401b34ecd61267f07ca1739a1fad9d","first_seen":"2026-06-27T10:15:41.567263Z","last_seen":"2026-06-27T10:15:41.567263Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/a123afdd5ee432fa/1782555289635/6f3429ba6415d72c29caeb59d41a7ceaf954eecbabbb239f98ab40556959849d/dusIitu64_QQ9oV","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-27T10:14:50.016Z","timestamp":1782555290016,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/pat/a123afdd5ee432fa/1782555289635/6f3429ba6415d72c29caeb59d41a7ceaf954eecbabbb239f98ab40556959849d/dusIitu64_QQ9oV HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/7ax12/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 \r\ndate: Sat, 27 Jun 2026 10:14:50 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 1\r\nwww-authenticate: PrivateToken challenge=\"AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gbzQpumQV1ywpyutZ1Bp86vlU7suruyOfmKtAVWlZhJ0AGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEA1tg-9HBfi3f7eEwQ-7KZwCqsjn7PCiorceunX8H5F6GqrW-H_44b1FzK3C74BKiBIpowbV275sL_EoonuJH9_LMlt2gbTh_MvS4t2b-EdUUTFlrZb1bQ2SnwArjbmrJxKH1Zm56iCiFcIR5HDoUXpSbdtHpcvcHYwItUTigwr6rMR60YoscTnprFOez8Kgk_HNzBosO62rlrgy_qe77CEQi6_5mCI3FBJXzOmJVGgNXNxyHgVnwmPTN4Hx9_WXgkPSJMasOZ1gldmgvFXcs-IndpbH0ZsooD2wPEXy8fDZcHuE3jKVQPBXat_PWJyAEM6TIZRxUjUaocWoANElGS0wIDAQAB\", max-age=20, PrivateToken challenge=\"AAIAHXNhdC5wYXQtaXNzdWVyLmNsb3VkZmxhcmUuY29tIG80KbpkFdcsKcrrWdQafOr5VO7Lq7sjn5irQFVpWYSdABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAsM0Q9MnygIFl0gZx3w9LhhcDl_7YDbmNzAMUL7Xnp9GXdfWl2k5SxpfB-K_QfmiV_H7Cj8P94IMqoWL8MDExqPL01M2yoCDweJGMNAm8hGbJvLjBAr9mXOZEx9Xd_a1oM6VTL7hmfywqDKr7NjnZtoftBNM7aAcQ3oFunMqwu32HSeDNBFCR6cLq3N_eldve-E2AWzdWXrQfBQ-vNheECU-_SCUvXG_5xxdQ2AO6mpnRaaSuo-pxQhD2t-T8yKziV-ecPidkSrDvocgKAILEibz6aNYuH7U8kF5zXOjI4xRH1FqVs43TY5dwNvmfYjI-w8NNqKpoa4azpJqv3m2DVwIDAQAB\", max-age=20, PrivateToken challenge=\"AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIG80KbpkFdcsKcrrWdQafOr5VO7Lq7sjn5irQFVpWYSdABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAsxviSI6sjMo3EYekYTf-dIPsJKZ5cD3xsEmHYx664Sbocwxx4OVFCyBfqccoQRmEX0XWSEj0hYyxpSGEz2i9yhmVRSjkqknoFfuOjUc0KcblcHhVGtTIWERy01RB1YmfcngH9Znt-Z--XyaRArOXumCFBV41ZLC7--LANYHBuhSz34fCGCIFKJsbk8ggBIemExpY3f1t2OZNs4mYLHE-7DhMSYP3Yd171ZcDGvSvtW59KNqQwgCwNcjSY6crHCr8mc-vyzSJFS62lUdla7lPGnm51ne0hJTiFcfY2rDXKUBERMhEYaNuHy1itCEsHOinnQKV89W6SPZmavtQU2h-QwIDAQAB\", max-age=20\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: a123afe29f0f32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":2171,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"ff44570aca8241914870afbc310cdb85","sha1":"58668e7669fd564d99db5d581fcdb6a5618440b5","sha256":"6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5","sha512":"3c266c0035de59eab2a0dd31b3dcb4a9dd157b310289e5db9ab4f8c2fddb7433466d48f25da7ad735a1cb8f2935aa612ad1f62f0efcece3933ba9979082e2304","ssdeep":"","tlshash":"c700000000000003c00000300000003000000000000000000003000000000000000000","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T13:34:39.418119Z","times_seen":469706,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/terra.png","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.495Z","timestamp":1782555296495,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/terra.png HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BLANF585lMtkC8NERNe0hNNErndL0n%2B00TWEP3A7oiC4OOzbIDypOLlssVjIx98qmdS3dwd4PpV890NbKM0tRYAfhHBHz9MgLNdqxBBMkmHu3RgwR7VdVjH2mZHdeU%2B7hglR8hU%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-5506\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 21766\r\ncf-ray: a123b00b1c8656c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21766,"size_decoded":22693,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"18e1d6b350f0766d8072f04ce14abf04","sha1":"bdab847e865f011f6cb1219cdf9d2457e4c92c20","sha256":"8ab16a824e330e0af490f0fa258b2342335916907fe03746740dc5698662be68","sha512":"bd07182783079cb760135262eec3e130b413687dbb7c54feb9eecc590af951206c05f0e462c855f6b0102a3921d228a4c6e08dd5a008be83d9202aeb1c9c4ebc","ssdeep":"384:rOW602FDLuJ54LgOj7X6LqqWAoDgy76vy5oDJCIIB9bvx+vPXs/9VCVWmws:aNFDL3Lj7Km7Dd44IIXd39k9X","tlshash":"d0a2d18212e19f54ccc49d7a646b8902a4ebb506006cdf778b10f25e2fb623eed951e7","first_seen":"2023-06-14T12:59:15Z","last_seen":"2026-06-27T10:15:41.573689Z","times_seen":412,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/1ae92b26df02f0abca6304df07debccd18262fdf5fe82daa81593582dac9a369.jpeg","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.505Z","timestamp":1782555296505,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/1ae92b26df02f0abca6304df07debccd18262fdf5fe82daa81593582dac9a369.jpeg HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1d4XpBgUHVlzn7jw4qOUAgKd%2FBdeacZxW7a5oJD3mfQYGlnNYZlmW0bRtHqmpz%2BnB1tima1FQxQZu50gfs1nqU0F7d5faY%2F0tqY%2FiRwn%2BlRja%2FZaPFrwQrvqzAGfte3coPC9yCY%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-4bae\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 19374\r\ncf-ray: a123b00b2c8a56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19374,"size_decoded":20310,"mime_type":"image/jpeg","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"b19247373f69d87f3887a1709aa8b9db","sha1":"e329c8676d160afdb15a130d5aeee8524ea70fa6","sha256":"2cd471488083fc028da234c7ac6f94a5bd1238370eacc7a521b3b512f121dacf","sha512":"8d9b9705f80b9e1a31b683fdbd68e1100aab7995d92ad481e58f6abe1348f4a7f886129a36010928179a6acc6229a144fcae475d38e025fd574d4687cdaf5c33","ssdeep":"384:x3DiU+PpPjke+wOjCYjBZpk1gb53wynGVaDzscUXm:x3Dt+PpPjk8OjFtZu1g9RGVaF","tlshash":"0b92c0714ce4ec3b48df44d6d826b4adf09b0d7cc62b6e3a135dd988b4463b94a11f4a","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-06-27T10:15:41.574645Z","times_seen":137,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/6323b69954bc41ff9409f033_public.png","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.652Z","timestamp":1782555296652,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/6323b69954bc41ff9409f033_public.png HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8BbxqajoaqppRXTmkg76FD30EMLkIBefQOIrX%2FGM6TyVznXC5%2B22Q2m3w6bpacbhaoZ7RG4AzYZd66ujZVIZQB1KVV48Nx3lHxJ3zSDlD2juIZ%2FOUtmTKOfzLL020hhCVw%2FE75A%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-a647\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 42567\r\ncf-ray: a123b00c1cb956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42567,"size_decoded":43498,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"1d5de39a860ebf72efa365251342e084","sha1":"9c34396ff5e6d96b05c115d93c5984eed55b8f11","sha256":"ec13488c98f41e6c0351ce60634b8389cc73296ab3f4393fc95de0e62b239946","sha512":"380427f96c0fb9300f1ea7a47f4c2e9dfdc3d01588d0fd76449750e1bf1ecb1907f405090e71453e2c61fae299264af7984c32b75e890f092fd90b3dcda91588","ssdeep":"768:hxH2zEMh2CVnCbkw2/VL7H3XB20Gfjq03NPehdCiq8X8djaT2S6Cwyu7kA+Sw:7H24MhQkH/VL7nBfz03NPehj8ESwuYww","tlshash":"0513f1cc200addc62347602737c91d5aa076792c9c77e788add585aa31327ec7d154bb","first_seen":"2023-09-04T03:42:18Z","last_seen":"2026-06-27T10:15:41.575515Z","times_seen":180,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/unnamed(8).png","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.713Z","timestamp":1782555296713,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/unnamed(8).png HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9uFrSx7l2T6jXB1xWL4hDDOmeydDLw7S9AnwHIzRJjB69sMRiGVP31ikM%2FBob5lpg6yMx8GB5qGBou%2BQAGrRKoH3vXiG3aGXuWtY8Pw7%2B9fis6OGf69LhRguPDniNLiOp7RsJdE%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-11dcd\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 73165\r\ncf-ray: a123b00c7ccb56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73165,"size_decoded":74095,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"14986ea28a861b0433a5004e9f41cb59","sha1":"60cd0e1002f49a7a4f30cd14de1348a2f933033e","sha256":"44497fa7c1981ddbf21855fc258f6b38f46a8662b60464d2a3c397121ed3dc3b","sha512":"6ebbf9a0f763de25a441ee992a31ad0843f80895cd6397834860e509d950988a0c75f1e5e9d02285f23e456f97c3109b9acf9f8e84f7696352781bd750319275","ssdeep":"1536:5duDVe9FBmcvn+LajC4jRbUC3CtY0Sbgim+zr3xrp2owP5Fzum:5UA9FBYx+GCbbxzrBrgowXn","tlshash":"b063027aa8a061e9ec5db4ff6b01fdfd32c1002d3d4397d6d8af8d02462984a96584bd","first_seen":"2023-06-14T12:59:15Z","last_seen":"2026-06-27T10:15:41.576307Z","times_seen":225,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/images(1)","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.718Z","timestamp":1782555296718,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/images(1) HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CcP4Wn2Itxn4q3N21V8%2BfmssWmjOXxpdX0gKl%2BIYKjoragEnOPkkbg0aJRuAADDiA1ELCngzNUye%2FFsWyDfgnj8N4b3cHhJQrk0DZFgThQdOHc%2Bqv7BGuLviFbU0A%2Bw1YN3mQIg%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\netag: \"6a0e1ecc-1568\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5480\r\ncf-ray: a123b00c7ccd56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5480,"size_decoded":6407,"mime_type":"application/octet-stream","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"75d7cb49b267b785b6a6696b617b0ce6","sha1":"8d01fb7fbd6240c65e75038194f20c3fcdaf70fa","sha256":"06a57796161b89b33b96a55bc530ca3bc1a2db49f91ff66b6a7f70af079342b9","sha512":"d5259f0480d6f1e3925a053c834820e7d3923751856df509a4a0cda156fe101af69ea22ddf8bd01eea770c36827fd6e6676b8c177f19cb5fdf45400ff320c625","ssdeep":"96:NVYrg5OfQpWNNK3xEfkIM89l3Pm5y50CvJpqIQJMs+zQUTNLofGgfMaDqhhgNYki:NWrbJNAmbM89pPF0CvqJhFfMatNYxczo","tlshash":"76b16c9e2ea192876a3ba735f533cc59c59843c62f80c60abd217e6acc7805c3c32919","first_seen":"2023-06-14T12:59:15Z","last_seen":"2026-06-27T10:15:41.579978Z","times_seen":126,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/index.html","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:57.407Z","timestamp":1782555297407,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /index.html HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claim-spacepay.xyz/app.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:57 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nage: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=phQQl0LvsJN0jerTDGhbw2xc6rJ60smezLPdadznaV17vcBEOgp23ZIEbCp1YhLCA9q3K2ByoKwPL18jXchZ9BpIZdDB2gMdSufa%2F%2Bwp1iw6N%2B4HkAdkPNsikGaFir9bfLgAc3g%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a123b010cd0456c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":132436,"size_decoded":34610,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (33525)","md5":"296c5d2e943dfb12cb87c04570c84a26","sha1":"77556939a8b3cd25aff0fccf8a445eb92a18f7d2","sha256":"0fbd04798b87a5763fff57af33359fbe325c303619b91f1dbbec91abc41dc715","sha512":"e4915c89b6667d3a40e14bf292251dd7b2ad613c733cc6453615f52e6a2d16e114adf47ae982e3acfe39e1844e984f0f454f5ff55be0af41f4dfa5def3e22c6c","ssdeep":"1536:3KaQFlytNbABXo905HqSo3HsSxGkauJ/8oc3kkH4qXoksDbkvzoCWx/cOu3zuDO2:QBXouFC3nxGkQ3FQksDb9Qg","tlshash":"0ad3e6315828522c336348afabc66a1f3215a05ed226f6df75ee54d8cf8b5b60373e50","first_seen":"2026-06-27T10:15:41.581097Z","last_seen":"2026-06-27T10:15:41.581097Z","times_seen":1,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-spacepay.xyz/app_files/alert-error-svgrepo-com.svg","fqdn":"claim-spacepay.xyz","domain":"claim-spacepay.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-spacepay.xyz/app.html","date":"2026-06-27T10:14:56.333Z","timestamp":1782555296333,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-spacepay.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 19:46:55 GMT","end":"Tue, 18 Aug 2026 19:46:54 GMT"},"fingerprint":{"sha1":"00:6A:AB:F0:BE:E2:4C:D4:B1:93:28:5D:94:A1:A9:E2:1E:FF:2C:73","sha256":"50:63:B4:25:A2:3F:6B:48:26:BE:4D:62:E3:C5:77:8E:E8:63:28:E6:76:C0:53:8B:31:AC:42:8D:07:88:43:BD"}}},"request":{"raw":"GET /app_files/alert-error-svgrepo-com.svg HTTP/1.1\r\nHost: claim-spacepay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claim-spacepay.xyz/app.html\r\nCookie: cf_clearance=e_jlbhIRFQ.4N3.jmESWAmsg1vn_nsvWluPjeblLlko-1782555295-1.2.1.1-Zs5CDb6Id7Uuz6uRUf0pIbwZ74mSFmDrqKWXbgEv3gYf1MWxTPcOsdHvQHpzUDKsq.3485iLMy9W9jfE.ragATAMyhX8wmc7EcJNezTHrTdWKQu18037QnrXKJSOZSTh.UQxBI42KCBQiQjlrzvhWuZ_T435zQ9Oq5o4_oFvvYgmVWP1EewfUA40vYusqwPdMs5BVVk0H0igoehw12TPp1It2knXX1mVc9tplyC89hEgPBehmvehkNjrabl98pc76gjvtIqE3sjKGitCvIkALtpNcUtN0MQjjGktLcVWoVWTqVty9x0fFFyhUGJwl2QgZCT.vftclCU1eXSTcPAk1EVHcQBqkyJXVhlQqx9nw1BDzawgi0lQ6zGwwhu6RgTIN_z2YmZEVrfHHBT27lJBx0eLfvzTIxFdqGolYNuyFAS8PZspBMKRpoLAqRB5yCH.t84.Ietvime59fg73MjCCr2U16.0e.XZYanwr1ZqIVQPnyoWQd_WubMwG8pFeLts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 10:14:56 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5K2CO%2Bqjjmwo732LdnTEP4CN%2BFWkCJODRAskSVQ2RtBTe0NpdnUOtD8QdxX6%2Fa8O9zwsTsmKkH5hHVYlmRIjJdwCkIyKrjgMMthZoJRfNILsUohSPMthTSM2oujie4NpW4WSEbE%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 20 May 2026 20:51:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=5,i\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a0e1ecc-2d5\"\r\ncf-ray: a123b00a1c6756c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":725,"size_decoded":1286,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"82878b358cc8318e73f95a00ae2b8f76","sha1":"0a9c09af3011c4d1ed2d522a28d1960573d94e49","sha256":"75f004f90e8579245e0603b71a3151ef12542d21a72a9179675803d26dfaeddb","sha512":"4140e3ae7ef2c9d1aa55bad567ec75185acb2ca2dd3218d486dd4db3ed99ae8c318b42567b14018ef5bac703cd7a1f1cad68542bdf04d924f382b96eeda4c29b","ssdeep":"","tlshash":"c301948663488c3db1274b19e755b275213732635646a120cc7285746709acf9ebfed4","first_seen":"2026-06-27T10:15:41.583078Z","last_seen":"2026-06-27T10:15:41.583078Z","times_seen":1,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"claim-spacepay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}