{"report_id":"f9f49459-1f1d-47ca-b817-c4a2ff6c07e7","version":0,"status":"done","tags":[],"date":"2026-08-07T08:45:04Z","url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.214","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"title":"Just a moment...","dom":{"size":27287,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (27287), with no line terminators","md5":"a6c2f1187ee768c6a0a82e51f7ab6366","sha1":"a4505e886c1f6c3751034be044f4ca3e227d9ba9","sha256":"e50c7116153441315f3bee6ed5239ca6c9c942b80585b765789094c1955f19b8","sha512":"19f92c497e8be23cb29aaaf7d9389d9cfabc13de7759519fb24c509f36f987d081fa757f2ca513f621125a95e6936f74f71a4dd7fce4f628676c869a0f1939fe","ssdeep":"384:0xZFqv3hCCTzVr4Bsyr6LlsJE8rEIk6dBNRIdKVNIKiBcOxcUXiQ1ll:mw/QYV0Jn7k6dTRIdKVNIlBHxcrMll","tlshash":"ecc20b31bf28003b3a17c6ddb2c6f68aa0348d8666155376f4a77228cb855952df37cb","dom_hash":"domhashd21ed53de489af89342f4aa67e9b33ef","first_seen":"2026-08-07T08:45:21.459404Z","last_seen":"2026-08-07T08:45:21.459404Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.214","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-11T08:45:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashcat-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cashcat-claim.xyz","ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-05","domain_rank":0,"first_seen":"2026-08-07T08:43:33.309489Z","last_seen":"2026-08-07T08:43:33.309489Z","alert_count":30,"request_count":30,"received_data":1833210,"sent_data":18876,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2026-08-02T23:35:25.210839Z","alert_count":0,"request_count":3,"received_data":249003,"sent_data":1560,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4ac4883884c5bd3f1272a7424d3c06d5","sha1":"977e572ed602323b0b5157df29049e9d004a04ba","sha256":"1e29e302963973e8c5efb102d3e824abd7e2af3c640de76802545fb4ec23cc15","sha512":"c772ac992df05e94463baf438dc7905699bbd53e90d33f69eec3be9c42c6c3cfa32723105da8076abc03ec7eee459133dc7a175b469b764a57ef19a78f908044","ssdeep":"3:N/BKL1XpXSZV:eL1A","tlshash":"d35504c057c031700410c440d555541d51751500101f0401715f04d417303015070545","size":1337359,"data":"","first_seen":"2026-08-07T08:45:21.479223Z","last_seen":"2026-08-07T08:45:21.479223Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=494ffaae481e717c","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"822bee91fc699727d7d3cad863e54162","sha1":"02517e106772d90d43bfe6d4e2853bd4c47666ea","sha256":"31faeccc679de2885f89435e0fe40633910452590c5331cf4937948e553c4a86","sha512":"e51cdcea7ff8bb40888300262abfd8895cc073a282920bcdb38a125b1e0ae5421a386e4f5f0bbd01127b92200ba78f6c8ddfaf9afe52413a7003140eb5a67cdd","ssdeep":"6144:1Smv66duximChZlZLGiDvLRU2kUcq6C6k09ft:1FfPLTD/0ke","tlshash":"6a24e789b496744b2302e4b8107b70cf75ed4c8860381a7de13399987f62b7f55eb9b8","size":226211,"data":"","first_seen":"2026-08-07T08:45:21.476872Z","last_seen":"2026-08-07T08:45:21.476872Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/?__cf_chl_rt_tk=opNrjUX6yL_kLEFuoBVnOb78qaH6yLRA8t_Y0Ix9GOb-1786092278-1.0.1.1-pOizX6n4kzQAUopZYMjx_yKKbrX44LzkxKcMd8xvNB2","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-20T05:30:09.101262Z","times_seen":817677,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2592f9b1a11cfa9f6926cef2c975fcb4","sha1":"678532f20f5cc9749cd7d693d5384f6b79c97d03","sha256":"c72336c5363756378e0c8bd26f97cf55843e9b7034685e501ae06631d9ce6386","sha512":"609defa1d11f834d75386f422f272e9610244d098c735c8d132f424ebec0b1ad214b3708135b43b34acfbdff633cbbfe6a280ef095de10148f39eab9c575cdf3","ssdeep":"3:N/BKL1XpXSzQ:eL1L","tlshash":"8c5504c057c131700510c440d155541d51550500101d0411715d44d417301114070544","size":1337359,"data":"","first_seen":"2026-08-07T08:45:21.481407Z","last_seen":"2026-08-07T08:45:21.481407Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8fd44ae583d26e7987c5a4f6cc0c9a0a","sha1":"8bafc8791a64411776e49feb55f9eb76dab6a508","sha256":"5dd2a1a18a7d21fc1024707961b23386e7639f06f02bc4d872459bf4fa9069ad","sha512":"8b8e3adfe2ccbc46011da8c8d61084f99c19cfea71a4e3c620572c8899a3666bc9dbb111bcb762a3bef883230153b72c401574e64e9f8f855f1637d8a02ffdd8","ssdeep":"3:N/BKL1XpXdE:eL1TE","tlshash":"0f5504c05f5030741410c4c0d155541d5115050010154401715f14d437301045070544","size":1337359,"data":"","first_seen":"2026-08-07T08:45:21.482736Z","last_seen":"2026-08-07T08:45:21.482736Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c14b7cb5ae945a5fb7d39e65d488c2e3","sha1":"ea38f4549d8d0a6a876b8e3e8faa4d1771e9adb2","sha256":"bc7916df7c8b241a99603352da1a1ff91086c66cd97760a8ba300359c270225f","sha512":"4dd3ad2b7e58e22a99deb0ea38c28e992f0ed64a83fdc4f2d8cc4209881317a41ff5675d05d90fad509fd290fc4f47a02a3c88847cae77da36965ce926ae6f01","ssdeep":"3:N/BKL1XpXce:eL1T","tlshash":"275504c4575034f04c10c400d755541d5115050110550411715d04d417301415570544","size":1337359,"data":"","first_seen":"2026-08-07T08:45:21.484222Z","last_seen":"2026-08-07T08:45:21.484222Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1cde760b85f6dd5334345bd7773555f8","sha1":"0d87ccc5be2a73ac5d9e00b61a37fb1754c8f286","sha256":"1d7c2965e1ddf86b70cf8427acf0f243c70d7e585db553ef3a11262d39be58ec","sha512":"1fa37b701400a170d09a365de2064b0fd9c37173f462975c404d437bbca86220d90b947bf382fd15d1e5a9ee097998759505be9410c8706a844880688149f746","ssdeep":"3:N/BKL1XpXcbn:eL1K","tlshash":"415504c4575034701410c404d355541d5115054010550401715d0cd417311005470544","size":1337359,"data":"","first_seen":"2026-08-07T08:45:21.485828Z","last_seen":"2026-08-07T08:45:21.485828Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4c01d3e6ba454121bd3428785ec0db3d","sha1":"b980b7712bd4b81c005c84fc0b9a4aca48b1c137","sha256":"62103504e404fd88631d503e4d97492b22c0b25776d41d56e0f192b941e0e39d","sha512":"aebdf4289412d31d4a702c97f59ccf398ba2ab24174b46e00b4ebfbfb422fc17067154f6865d0dbfd502c088f107c1c3bb5a85e7234de43836be6aa4638b5592","ssdeep":"3:N/BKL1XpXcbGn:eL1GG","tlshash":"2a5504c4574430741530c400d3d5741d511705003057040171dd04d417301004470544","size":1337359,"data":"","first_seen":"2026-08-07T08:45:21.487593Z","last_seen":"2026-08-07T08:45:21.487593Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b58204db740aa3758c51dc588692b00c","sha1":"5c8e4c01bdb371a37f611adfd357f073f8d191a5","sha256":"4551c1c7d4d9702aa8202dbfc9eb0f990866e21e39f20ff9108e9b47ee056385","sha512":"f9846ed458038cb074ed72417d59dded03e9b0d34b91f8b1d1d7364022937f10d2c27118027db169002ea11a65d8bca1c342bf5f3f17ff177bb1e28ab79afd64","ssdeep":"","tlshash":"27c04c883a95a015c64625355c6b4286e639de6448581053a052514abaa0b61439af5b","size":136,"data":"","first_seen":"2026-07-30T17:14:24.306825Z","last_seen":"2026-08-10T15:18:41.735622Z","times_seen":9652,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fbe226ad2f944b04ff6183d269891480","sha1":"ef18ce7279a3b6e9bad99d7ce716ac4e0592b077","sha256":"f771a9ecfc14a1388bd35b3822027ed765b0d51b9ccc190ca45992fa8bf29e50","sha512":"fb7e185fe8fa571c7e51b3ee7d0a32516c912c0985566f10e5b66c6912f88c95cb9dfe43f2f7ee1d6e732f1875829c2be28df9e27dade8c57dbe5838e7f9ceab","ssdeep":"3:N/BKL1XpXSnU:eL1OU","tlshash":"905504c057c030700410c400d575547d535505011015040371dd04d4173010140f5544","size":1337359,"data":"","first_seen":"2026-08-07T08:45:21.490072Z","last_seen":"2026-08-07T08:45:21.490072Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"77d41913d297d650b3c89bf124062c35","sha1":"196836e1d723a06913020d8e401d14fa0daae3a7","sha256":"c6fe44ee7358f22259eeaa8288cf436306686384ff151dbc75f6e3fd06608b6a","sha512":"f6e5a9b0a3af3db34ab468c2022b1416a90c7aeb4c04a565aca7fe2c4064c5f3ae35b44a954fa3365c318e1a66e4a9d3e439b4206c339bc729652c7f82cf07a4","ssdeep":"3:N/BKL1XpXSHX:eL1+X","tlshash":"505504c457c031700410c400d1555c1d515d050010150401715f34d4173030140755c5","size":1337359,"data":"","first_seen":"2026-08-07T08:45:21.491546Z","last_seen":"2026-08-07T08:45:21.491546Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1aeeef60dc6045e45f53cb381199cabe","sha1":"72aeda729228a402d5125cc169975bab53a6f474","sha256":"cc47424aea26a6958a1f1e3dc9c492f8df83ea9ee2a08683b1a14b3e9ff40bcc","sha512":"4e54067f122d4ffd090fd76e7dc7cfa105663cb0e442c82e2fc89be212b404fccb7665001c7cd1110a4d2ec7c894328d8d7db337a17e1b6ed3bdb0597d967e63","ssdeep":"3:N/BKL1XpXdQSn:eL1TH","tlshash":"565504c0574030700410c400d5d7541d5115050014150c0175dd0dd457301044070544","size":1337359,"data":"","first_seen":"2026-08-07T08:45:21.493189Z","last_seen":"2026-08-07T08:45:21.493189Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d586a0259da774be554191e425d291ab","sha1":"9bd7a9c5a3ae89c6938cd5d6e7ef48dedc02e96c","sha256":"b0e8804b88c505e1b7dda382e6f0d35ea2039e03552137d8ca99fbd75623b8a2","sha512":"5c786b57124dbcd6cf44343e9ecc70e64e686c379b97a419a9afe2d62e36c02d01cd5760b6363e016aaa2e0795dd410692e996ac9ac3d1e6cf0600d712560da1","ssdeep":"3:N/BKL1XpXdd:eL1Td","tlshash":"445504c0574030710410c500d155541d5115054110150401715d15d4173010440f4544","size":1337359,"data":"","first_seen":"2026-08-07T08:45:21.494845Z","last_seen":"2026-08-07T08:45:21.494845Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"203464e15e5de5047a84b30e3162ed6b","sha1":"c456bfbcbbe81ed451c5dab5b5b504dacdb0be10","sha256":"edff59a4682069a3daf2a061cbc077501c46b81f3e51a546ef636d6cb45eac39","sha512":"1f31f656c7be306bb64fd44abcf543670be25405e2cf81e5751cabb10efba26c8b53c2357f256a31568a886c42cfbc329e8d55ddda8977cb4dd0abad0e1208f0","ssdeep":"3:N/BKL1XpXds:eL1Ts","tlshash":"b55504c0574070700414c400d155751d5115050011550403f1dd04d417301444070544","size":1337359,"data":"","first_seen":"2026-08-07T08:45:21.496512Z","last_seen":"2026-08-07T08:45:21.496512Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"916cf7fbe0041768f44776a3b0ae98a9","sha1":"122274b9a803f2508706b3a0ca9c6d671e3be3e3","sha256":"9967c6367db6fb1228234f8c1a1db08db41ce9f370e99cee68b554eeeec32f10","sha512":"135b263b3e6622dbef23541d045001d273ab38af4348a6923d77328a78e238de385f1611a48152a10800d1fb388febdc9daf922fc4ea3b2707cebdd145fa5b30","ssdeep":"3:N/BKL1XpXdt:eL1Tt","tlshash":"9c5504c0574434700410c400d555541d511505101115040171df05d4173010440705c5","size":1337359,"data":"","first_seen":"2026-08-07T08:45:21.498119Z","last_seen":"2026-08-07T08:45:21.498119Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7592188b183f40b568697d834bc9efd6","sha1":"ec3b64480cc6c2c724a5a026f9ba0f11078821a8","sha256":"a9938634f2a1a978e5cf9b5fda7862d91cc16c32040046b85d661fdf6187cb67","sha512":"ea907e79d8a3775334b635aa4c4382e63fbec29358dbf246e41e71efb6aa3f82180b940908606e1ef0c63708a9581f130ff6ea36219ccd8e1e147bb13cbad160","ssdeep":"3:N/BKL1XpXcFV:eL1OV","tlshash":"c85504c4575030700414c500d355541f51170700505d0411715d04d41730100c470754","size":1337359,"data":"","first_seen":"2026-08-07T08:45:21.499718Z","last_seen":"2026-08-07T08:45:21.499718Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d0427942979af95f297bf00416c65f60","sha1":"d1aa311cdd4846cc82b61ee1b447446aac2a34d2","sha256":"bfa59a1f35897c883e805716295b46fd08bb496872dff168862251aff47a6d94","sha512":"a4456c054d7f8e63b1288824831a3ce72a767713e6e2108593b712e0cc0105373754daa80d7509862197da24893cbd29657d717d7bd62d2209430c804455730f","ssdeep":"3:N/BKL1XpXSO:eL1R","tlshash":"cc5504c057c430700430c400d155541d51551d0010170401715d04d4173010150705cd","size":1337359,"data":"","first_seen":"2026-08-07T08:45:21.501407Z","last_seen":"2026-08-07T08:45:21.501407Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8715843ab818f5fc0aa24c1e0ebcdf22","sha1":"6a7a7e4b4e35fe7d8adcd7bae57f8111737b5a49","sha256":"867cacb7b1e7d60dee2cedd835de9ba1a27b62880ff0f22ca99f6b53007ce0aa","sha512":"bc2eaaf7ff6cd31d44d8eadfe1b3901d3bfe2bc95012c3a25fecfff5dcac418aac3d6af359600262dbc074047313326a2b8a424d4d52728aee5f5f5f4812f13f","ssdeep":"3:N/BKL1XpXSX:eL1s","tlshash":"a05504c0d7c030700410c400d155745d515505401015040171dd04d437301014170545","size":1337359,"data":"","first_seen":"2026-08-07T08:45:21.502961Z","last_seen":"2026-08-07T08:45:21.502961Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0aa9fc58db3d3bdf0ae1d82f5d411f64","sha1":"076ee1f788170e67c498899d569a13070d33c475","sha256":"4a9bf0a1c3c5190495018073f1568d8c736cbdcf6b03f7b7f6018eb54fcbd33b","sha512":"c91acb5113bbab9974ebfa97f4857c193752088b8665bf4568daccc46072c61a08d8198126b1669a6b68afa948b7a2536a2034ec5a720dd439566d76bcde174e","ssdeep":"3:N/BKL1XpXdPn:eL1TPn","tlshash":"565504c0574070700410cc00d3d5551d5157050110170415715d04d437303044070744","size":1337359,"data":"","first_seen":"2026-08-07T08:45:21.504782Z","last_seen":"2026-08-07T08:45:21.504782Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/1902980d.js","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c52e4008cf10a1102670397988bf9eb","sha1":"9c467faa0bf00a70313e10b0578aaaa7c10a2dea","sha256":"1902980dee9c34465d510fd6d38b9253783febc820f5e961d2551b967c751511","sha512":"616824ad8b6c06eb58f068b535347b166a5cb18429c2104f0fe949689018110df9cac9f49be9a44ef6ac25070f9b8739dff56beb5f8d1988fd278a1f574997f6","ssdeep":"3072:47kXxdtpjQFqAmt7yW0bXHzv9hvEPOa+vbD4Z39QC/sJlSBgGQqFcRByVix2Un80:FxdDuNxPvEP98DIcSGGQqF2BAiUpG","tlshash":"6b442cc177a1b4a362fc32f8d02f5626519bd8123818f5c7ea2dede944f5980837da39","size":270268,"data":"","first_seen":"2026-08-07T08:43:40.727992Z","last_seen":"2026-08-07T08:45:21.46475Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cd74771aec3379092f04c9fb11d6f3fc","sha1":"d56d2497af5d445c061fca673401166c861995bd","sha256":"3fc7c206f0fa3196f5257f3c5dea24716abe2305718aff4ee5de59d89e47c16c","sha512":"8408d90df9ffb27cfdeacaac25ceddfe362f19b0f7e7362bea0119660ebc5c77618c627082db7f3fcb8fe32ef6dee52b895948e378b0eb40544ae5b8824008f0","ssdeep":"3:N/BKL1XpXSRn:eL1K","tlshash":"d45504c057c030700410c400d155d51d515545001015040171dd44d417301014170544","size":1337359,"data":"","first_seen":"2026-08-07T08:45:21.506955Z","last_seen":"2026-08-07T08:45:21.506955Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"68d329c33a10125d7f675a555f9f8eda","sha1":"80a0a2a75899ed86afa7af2ec5e150a8c79fbd28","sha256":"6c06ac45e8cfdacc4f857bf0bd7f2056d0eb7976d553080b8d15e3380255364b","sha512":"380110772077e88e80f2324fe5fefbd0985c337d95afb7c1e0c6d5fe35e654e393ac09c87a304b0e3d82b2c39f436249dcdfcb87c2c7ad38ad58a2aa6944d8bd","ssdeep":"3:N/BKL1XpXdf:eL1Tf","tlshash":"cd5504c057c030704410c400f175541d5515050110350401717d04d517301444070d44","size":1337359,"data":"","first_seen":"2026-08-07T08:45:21.508707Z","last_seen":"2026-08-07T08:45:21.508707Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"823fe6951fd3f7b6b0a92b7599fa3623","sha1":"830091460637247bf48956074e52f2864f499c47","sha256":"bfb5cc417eea84fb920d33e5475c45d50422fe32a303fd18874bbf0c40a3c0d5","sha512":"683ce2d3bbfa129d84372cf976b37e81307e4a9fcc508e5a9868f89f8ff879095593d0a29ee082612a412da786dba50cebcba99264f809ceac1735a5b15a18e1","ssdeep":"3:N/BKL1XpXcLF:eL1SF","tlshash":"6c5504c4574031700414c401d3555c1d5115050010550441715d04d417311104470554","size":1337359,"data":"","first_seen":"2026-08-07T08:45:21.510345Z","last_seen":"2026-08-07T08:45:21.510345Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7a953bf9de782d9f2959d18def4ad11b","sha1":"508a48d0b0605c4c9c09dd2f1691ae4752a4e6a6","sha256":"0db39c177aaeb6d322d457c5ebfca936dfb439fb51201b29557b590f23d1db00","sha512":"be2946e26058e5ead3610e747f177c4833d54e7f18e50b2f418625dfdd1d80face0af5079afc41aaf4ae3a16fea952f8cbd1a58906044631236d43ef00ccd3c0","ssdeep":"3:N/BKL1XpXcAB:eL1P","tlshash":"be5504d4774030700410c400d355751d5115054010550401715d04d41f301004570544","size":1337359,"data":"","first_seen":"2026-08-07T08:45:21.511892Z","last_seen":"2026-08-07T08:45:21.511892Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5ef301dd257112c2ecfc1dc4589133ea","sha1":"31d1ea5d8623c4ab121a688722daf6c27fa6e845","sha256":"7a6d4dbe47aa65a26be72ad04e3a7fc4204de56710ae57a645074623adcc51db","sha512":"dafdd2de5bbc4ddb9ab72cbdc75fa4a3262ab18965f26846bf42b91e360e0fb96ac24c8f318203fa9f68c85f9a6c02e5a863614db84db6949a3069edd4c4b2a6","ssdeep":"3:N/BKL1XpXcFSRn:eL1sSR","tlshash":"6b5504c4774030f00430c400d355545d5115050010550401715d04d41730100c570544","size":1337359,"data":"","first_seen":"2026-08-07T08:45:21.514719Z","last_seen":"2026-08-07T08:45:21.514719Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"264069630484b52d5adc948fc3fbb7f7","sha1":"c78b128ab48bf15dc24cbb410704216a0e97ec0a","sha256":"041909fa302a1aba16c24a840ab44b9c7d8b0fd19f632a96688e80facffe9668","sha512":"c635a18c0396f7e58e3f801d66295be54ee6cfdc5148e189918bc5c0bf0a1545ac9f965c4a1cdd64472c1439673340827ca6eb01da620c516eb542302c84181f","ssdeep":"3:N/BKL1XpXSun:eL1R","tlshash":"685504c057c030700410cc00d1555d1d515d050070150407715d0cd437703014074544","size":1337359,"data":"","first_seen":"2026-08-07T08:45:21.517247Z","last_seen":"2026-08-07T08:45:21.517247Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9f92f12516cd11655d3dbb4ca21bebe5","sha1":"708b753489cf645f56a6ba4d409d3de8101585e9","sha256":"0f32cf933a5c558fdd06854ef94c76c1cdfe11c1b173cd388766f6f0240ad63f","sha512":"4602ade32c372e39fb2e54fa32364822a1b780cb24e4ac7f5b993708a501b3e6aba06e3a46cf52e55397dbac0b5ecfd334793959263cc4e79c03c4e991291679","ssdeep":"3:N/BKL1XpXSan:eL19","tlshash":"ce5504c0d7c170700410c400d15d751d51d5050010154443715d0cd53730101c070544","size":1337359,"data":"","first_seen":"2026-08-07T08:45:21.519744Z","last_seen":"2026-08-07T08:45:21.519744Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"673be1c604ed583542d90f13fa7551ba","sha1":"1d25cf35ec1e881b9a7d29bfc09b88a5700651b8","sha256":"0ff7c3fb8c23c6ef5cc7470649146cbacd20b1c1a19614f965ca2cd72ce0fb51","sha512":"5de99c39291af4884cc539d91379249a0e7ab8e519b7510d89d575cb32f4d6af3377ccc19af8f30453925b1f6601dce90f1bdb5695b82b594ec7b8f45a22dbb4","ssdeep":"3:N/BKL1XpXdu:eL1Tu","tlshash":"085504c0574034700410c400f155541d5515050011150401715d04d45f301444070545","size":1337359,"data":"","first_seen":"2026-08-07T08:45:21.522315Z","last_seen":"2026-08-07T08:45:21.522315Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"02dd318942f6375c5661b91aa7b1f8eb","sha1":"db9ae4a5ba3f9f7c7b804d54c081d19e47503ac5","sha256":"e0ca705c6edee646e2c12834d25e322b027eca0d0ec21cd203101828732a3141","sha512":"9c446e51305fa461b6e0778e44ad12b0528653fc3954c7816b7cb6cd54faad956c07049df6f94ee599bad261321b22060bed5f50bef43a9dacc5758ddfb3551d","ssdeep":"3:N/BKL1XpXdeX:eL1TI","tlshash":"ee5504c457c030700410c400d155551d51151500101d0c03715d04d417305044471544","size":1337359,"data":"","first_seen":"2026-08-07T08:45:21.524597Z","last_seen":"2026-08-07T08:45:21.524597Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b936c5ecc1c9ce1c86729e7a55682fe7","sha1":"279dbdc3f9dfaa11167dda74f4ac0c6662de4c66","sha256":"ad1bb3b978f39c50bbede893cab680f15f782d07a23b0c400c096f556d7aff18","sha512":"bbba64b8e4da6fbdf39f8dadb77975daca4dd633ed1a28dd8ed2a4f799537f36cb078c7d1db740bfa21fd2ffba15df60b9eb4106023c0a99847d985850ef2416","ssdeep":"3:N/BKL1XpXcNm:eL1Um","tlshash":"e15504c4574130704c10c401d355541d5115451010550401715d04d537301004470d44","size":1337359,"data":"","first_seen":"2026-08-07T08:45:21.527458Z","last_seen":"2026-08-07T08:45:21.527458Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"36a94da0e619edceafce6e553785f5c0","sha1":"392d68ddd100b457f2185dd40deff25e835649ce","sha256":"b4e1bf34ac9745beb57ee411e09ff33a5eba3958439149d9f8084fd85e5f94f1","sha512":"ae2c45fadc69b49a7d295beef394b3aac3cb2a7dd140c4d888343c94525305cbd0beebf9bbdbd1a3e0efce2c21c81b1f43e4ee81c9c9639c50b5500882ceca17","ssdeep":"3:N/BKL1XpXcRk:eL1Mk","tlshash":"555504c45f5030700410c401d355541d51150d0010770401755d1cd4173010044705cc","size":1337359,"data":"","first_seen":"2026-08-07T08:45:21.529884Z","last_seen":"2026-08-07T08:45:21.529884Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=2fd8ffdafe9b717c","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d130411fef3ba20520b4949b20f30d4","sha1":"7a83403b869e87e99a1df413f5a59c9627f646a0","sha256":"ec304f066b50be41f82d7af6b0d5493fdb102d73e55a8dbdde1c616d4f18cb19","sha512":"dd7ba86289edd308ca25493970822da64fa194062850efd57e597eac6a29c746fa972699f25f584cb80ac87ce7db7f7d8a17033fad77ab016f2f916ccc2dff79","ssdeep":"6144:YBsu+vlY/NOuQNL/LEw4kpI5Dy4LQBEQ7:akIXkpcHLQB5","tlshash":"6734f85874d7708f230694b810bb70cf72ad4c48a4381a7ce13785d97ba2b7f51eb9a9","size":231127,"data":"","first_seen":"2026-08-07T08:45:21.468574Z","last_seen":"2026-08-07T08:45:21.468574Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4182c04d85e479374746544136f87c3a","sha1":"da6305eba9361d949471403c82db5de9daf1d1ae","sha256":"f65c50c10de369a96989643d58110bf4184ec5ab10061958a9548539842fe998","sha512":"a08186543433d9863c2c123052041d7bc0a3555c82a1d5be0f208d7dd1485268ace0f2ab9f8ce8368ded1961c6a9c648c1f9384694de28b1f97ebdf7a8f5bcc4","ssdeep":"","tlshash":"05711cc7dac308e1cfec67858e57dba52374115145059495a7e1c48cd67be8fd21f0c9","size":3719,"data":"","first_seen":"2026-08-07T08:45:21.531639Z","last_seen":"2026-08-07T08:45:21.531639Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e1670906bc2644554b6ffe2216ee9b40","sha1":"61405ffdea38a24520dc6d13717bbb7dc364f381","sha256":"71f358a4e3b4a43915e35584be82c48cd186ca5a8957f56bdda90c370ccb92ad","sha512":"7b082c14798a858b8eacf43efe6b111ccd6eb005282a3f78efe1e61158c390bbd527bee8443580f184c82889de27bf7dd59730d3e6ef25e89758d88546701a39","ssdeep":"3:N/BKL1XpXd4:eL1T4","tlshash":"ab5504c057c030704410c400d15d541d51150500101f0401715d04d41730104407054c","size":1337359,"data":"","first_seen":"2026-08-07T08:45:21.533996Z","last_seen":"2026-08-07T08:45:21.533996Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"51d235e0606ffebcae962a42053b0511","sha1":"c0770dbd536c80117aad0bf5f4b496c6d37c132b","sha256":"9193859972675a6f008f56c909a0d0db9dc608e395794b84dfa1b2fcd71de56e","sha512":"9bed42c0e0747e55bde786f66d023671c6b940499054243e702d41759607c7ac98c1d874df5a92d6474c846310d330f3b021b884ce4d84981c928309df89904b","ssdeep":"","tlshash":"c271f9ccd79285a097ff1682099bfa24b37202570d147182b2e1da0da2bbd4bd62a1cd","size":3715,"data":"","first_seen":"2026-08-07T08:45:21.536199Z","last_seen":"2026-08-07T08:45:21.536199Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=0b408245a4bf717c","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b2c8572636d8393d2191040dd9494cf","sha1":"f03f12e2cba1b4b90f1962bae3909e8d2ca5764a","sha256":"ef6d3743a098367c797f35637eff43e70bbbc7aa7bcfdd3e1c452ad337dc5486","sha512":"6df2eb37fa90c60fc6eb9662eea1a676e97d6f60f9c5c3eb34a087284f607cd2315141427fdf02cecc01baec6449034d54061eec1949cd3751b3b98f85db65ba","ssdeep":"6144:dcd4WKvKUn3LPfVHbiW+veo1JOTWk++AK87g:dxrB2W3o1JOikru7g","tlshash":"5234d58eb8d2704f230794f8517b30cb727d4c4460281a3ce17795e9bb62b7b55eb9a8","size":230589,"data":"","first_seen":"2026-08-07T08:45:21.467046Z","last_seen":"2026-08-07T08:45:21.467046Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/?__cf_chl_rt_tk=kMNG1VCckBQrYJXHlkvJhmlsg9ylOhx_HM36R6tdCgl-1786092285-1.0.1.1-g5F-wctR5kM0Vk3cdMAvQGCxYkMEA2GyCJ70MqGxQ8u","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-20T05:30:09.101262Z","times_seen":817677,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7b2b2a5fa5551933581412fd882df207","sha1":"1b0bb22e51e95b5a4445c729b16fb345e170e620","sha256":"d70d6d48902bfb5e1a818d51fdd44867fd0303d5c4258b2d4cff00ebcb89f297","sha512":"48f65d4da5a2e8f0444712a83942a44cc7966206cb0ad0dafb8af48c5909e54ec093276081e03585a9d78493a7e2b8fa88144e8b3aec46a3a259477dd51075cc","ssdeep":"3:N/BKL1XpXd8V:eL1T8V","tlshash":"fd5504c0d74030700410c501d155771d5135050411550c03715d04fd37301044070544","size":1337359,"data":"","first_seen":"2026-08-07T08:45:21.53922Z","last_seen":"2026-08-07T08:45:21.53922Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/f70cb37711aa/api.js?onload=tVLDA6\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"71168031aad70d524c67842b94bf3c22","sha1":"5134fcc61d37eea95d0dfeea30a935e07e35bf37","sha256":"194a7f30e99f690ec77ccb996a31dff2045f877c3d051e0db8d322d7d2bba2a3","sha512":"0f037084eda0302935ebecfc028a6562e8777a1dd28609a7d09c9b0e2a365cbe1085584e98627e1c4191db1f4beb877a0b9495e91ee2c87fac4e42845b41a894","ssdeep":"1536:R6to/Nvf/8rAyTKQHCKt35HJFEe9fMm8seYOTkunPPl79:ktgEKQ19Ee9fpbOjPPl79","tlshash":"8b834cc8729a787213d6c1b4a03b6353b3297d35984c8850e527dd653a3de878273fba","size":82469,"data":"","first_seen":"2026-07-30T17:12:33.930797Z","last_seen":"2026-08-10T15:18:41.718885Z","times_seen":13232,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"031a9d4ae71ca4849ecaf8faa213b678","sha1":"79af357ce269d09704633cef0489f846d9fbf31f","sha256":"c2c7c240847ae5df33129ae06bab2d3801e13e064132ce3270609f8d161c6e03","sha512":"6d2cbc1238374d707c11bccbc196e71ac5184855a34b5ef96cde505ff47b8837f00e1cf443cd2c6d4d0da12be6ed70bff018113478f68470433b31f3c4c3799b","ssdeep":"3:N/BKL1XpXdGn:eL1TG","tlshash":"a85504c0574070700410c401d1555c1d5115450010150411715d04d41f3010c4070744","size":1337359,"data":"","first_seen":"2026-08-07T08:45:21.543101Z","last_seen":"2026-08-07T08:45:21.543101Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"95c01eb2ab932e997eeb579d0b14dd07","sha1":"5efc98a5fb6efa9494e78e5eda44afc954fbe03c","sha256":"2f37a1a28f97b9154ffaffd538a09ffe7217492de572ff5f4b57514dcef3fe6f","sha512":"96649294c431255d1d87ac7577d81440df6d4fb3c77be4d6bb489cacbe6eec479df8bce5e8eae2a888dcb42d23d0f60a953c3d135dc9c238185b74fdbd62d368","ssdeep":"3:N/BKL1XpXdwn:eL1Tw","tlshash":"685500c0eb8030b00820c800e2baa82ea22a0e00202b0802b2ae08e83b3030880b0ac8","size":1337359,"data":"","first_seen":"2026-08-07T08:45:21.545265Z","last_seen":"2026-08-07T08:45:21.545265Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ed88e3027a7fa253b12eaeffbd3dfefb","sha1":"860dee8b7502d96594c5c6c294d7171d33dfaf73","sha256":"b401282aff4e99fc73581ec91ff49e3b5dee3764813700aa7690a5baa13e035a","sha512":"f7b5bdc6fd01d696d270857df436a162c18525445f21f888c8272623c4669547f19400412e07ea3309e47f4a76c929cfd754833326a630d44b0e86a997be02de","ssdeep":"","tlshash":"7b71f7eb875249f553af16998a4fb74433a128928902532371e48d7c667bf4bc3ac08d","size":3727,"data":"","first_seen":"2026-08-07T08:45:21.547353Z","last_seen":"2026-08-07T08:45:21.547353Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/?__cf_chl_rt_tk=5uww_ADxrrJOsvE8jIWmK411tqoP31BWIiztci7XTyf-1786092273-1.0.1.1-rmjwUuZqFfy4Cbp9e16G4wCGPpXF6bB3ZdSIwKglCGZ","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-20T05:30:09.101262Z","times_seen":817677,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0ac7f7a3d122d13e87f3dbb9d35af8ae","sha1":"04b15fd876a949fb8da182938801742a59e7b8ce","sha256":"8262442d7a570a39f985a61a08c51b59aa70abbeac314ee4f7a5791cfb026bdf","sha512":"2690b573a7147f61eb12d9282bbb086b1f5ed8fab450fd9b9ce4a6b9f5555c8d4ee36e12e1f22b7076674440cfcf86c2f8bed30d3882563312e62f2877fa00b8","ssdeep":"3:N/BKL1XpXSH:eL1I","tlshash":"c95504c057c170700414c400d555d43d5155050010150401715d44f417301014070544","size":1337359,"data":"","first_seen":"2026-08-07T08:45:21.549028Z","last_seen":"2026-08-07T08:45:21.549028Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"13ad7b0773086ae46a9ba985b30192aa","sha1":"f6da375aae28f619546480eba56177a4fa4120d0","sha256":"b28d1dfc156d4fb5e2d9e34b9e498605fb0a80fea7c44fd0b0c3a0672c6003b6","sha512":"a928b9096dc9a50719e71a527c96670d90dae4bf2ef6cb69f859ef4ae8d838e2ad61b95f7b805ef3e55d4266f9c4866769ee70cf72a3b2a7770ec4d2e15b7153","ssdeep":"3:N/BKL1XpXd5n:eL1T5n","tlshash":"f45504c0574035700430c410d15dd41d5115050010350c01715d44d5173010440715c5","size":1337359,"data":"","first_seen":"2026-08-07T08:45:21.550558Z","last_seen":"2026-08-07T08:45:21.550558Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6bfe933f4831d8d3ff6d6f097a911a03","sha1":"7061b79e71445486185fd2fde22f8812eda58b71","sha256":"7697b9d92b501d7eab2025f96df8bbccca4beddd1053494a0315bdfd43eca8f5","sha512":"d4e8b1fe4a93de4690cff42d9f781c5fa849a7d9b922014052a43c8ac1d98eb3007b9aa70b09143db36076609963e98d3584b0776a16cb965c6717aa2aa46860","ssdeep":"3:N/BKL1XpXdYV:eL1T4","tlshash":"c65504c4574030700430c400d155541d5115050030150c07715f04d41f305044470545","size":1337359,"data":"","first_seen":"2026-08-07T08:45:21.553001Z","last_seen":"2026-08-07T08:45:21.553001Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"22b4d484a57f7167d9c0a2e435e7696f","sha1":"12f272af2f95f808e26b297abce4e44eb7ae068d","sha256":"0fb600e6fefd1362fc55471fc280d2e674786fd32483c5903c57b6f5fc5b591c","sha512":"636bb571b63ae8895979ec7faac98a34822bcf9fa4104a16c661ea80cc6ae7763c3fe6a563d8ab835f017de227cabc5aac39d34f1a9687551223ad5a3e8c9272","ssdeep":"3:N/BKL1XpXcyVn:eL1Hn","tlshash":"925504c4d7d030700d14c400d355541f5155050010550411715d04d4173050154f0744","size":1337359,"data":"","first_seen":"2026-08-07T08:45:21.555368Z","last_seen":"2026-08-07T08:45:21.555368Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"45bdb9e7dd6eb922fd7b45dc05484c77","sha1":"44277f61d0d297f3dda9286e29f1bd3aac70c1c3","sha256":"0390ae8cdda23fd1c32be58191f73fd9313280d0b98d3f61b9bc79669f34f72a","sha512":"7ce377e7f73d79a15918bcd3b9425f4752804cb62ebc93298b489629c5f895bc768fe9c4c0b6c3b82c7658b8c8f1ca9d0fcc15f6d394e1c12a2435953b38fd56","ssdeep":"3:N/BKL1XpXc1:eL1g","tlshash":"335504d4574030700410c400d355d41d5315051110550501715d04d4173010054fcf44","size":1337359,"data":"","first_seen":"2026-08-07T08:45:21.556848Z","last_seen":"2026-08-07T08:45:21.556848Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"cashcat-claim.xyz/favicon.ico","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://cashcat-claim.xyz/","date":"2026-08-07T08:44:46.154Z","timestamp":1786092286154,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cashcat-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://cashcat-claim.xyz/\r\nCookie: __v=1ad0648d-3789-479a-9876-f6af2c3b0df3; cf_chl_rc_ni=2\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Fri, 07 Aug 2026 08:44:46 GMT\r\nContent-Type: text/plain;charset=utf-8\r\nContent-Length: 9\r\nConnection: keep-alive\r\ncache-control: no-store\r\ncf-cache-status: BYPASS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B%2F%2BH3xaPvbK%2FW5%2FBdof8mlfX3Rj%2FQAQkfZOB79s5GwAuNSXaEM%2BG2N%2FMeVIta8itK1ZjXDxrjBo2fgbLD12X8OsIONeUv5AlRALeIbT2Yxfhu8sEmDP%2B7jcoeq16uzFnfyt%2Bbg%3D%3D\"}]}\r\nServer: cloudflare\r\nCF-RAY: a27500547a24723c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9,"size_decoded":625,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"9d1ead73e678fa2f51a70a933b0bf017","sha1":"d205cbd6783332a212c5ae92d73c77178c2d2f28","sha256":"0019dfc4b32d63c1392aa264aed2253c1e0c2fb09216f8e2cc269bbfb8bb49b5","sha512":"935b3d516e996f6d25948ba8a54c1b7f70f7f0e3f517e36481fdf0196c2c5cfc2841f86e891f3df9517746b7fb605db47cdded1b8ff78d9482ddaa621db43a34","ssdeep":"","tlshash":"a250000c0003c3cc0000003030c0000000000300300000300000c000000000000c000c","first_seen":"2023-03-08T03:03:03Z","last_seen":"2026-08-20T04:53:44.464484Z","times_seen":89413,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashcat-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-07T08:44:37.066Z","timestamp":1786092277066,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: cashcat-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __v=1ad0648d-3789-479a-9876-f6af2c3b0df3; cf_chl_rc_ni=1\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Fri, 07 Aug 2026 08:44:37 GMT\r\nContent-Type: text/html;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\ncf-cache-status: DYNAMIC\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z33G%2FkN54%2BXUcrsLklO8ILde97WtYfaXRWL1kgVoJZsizG3FbgFLAHxWkFlFfsBku6TSxyp1jRHSKw6YOMqr8%2B1hyANPTQUU6NUp12xgvbyAx9nifdWZxqhF6jfi4CHAckR7fg%3D%3D\"}]}\r\nContent-Encoding: gzip\r\nServer: cloudflare\r\nCF-RAY: a275001ba91f723c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6164,"size_decoded":4334,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (6164), with no line terminators","md5":"6a315092a4d6879c8e8dec6cd12c7688","sha1":"cef452229489875ec8fda8de9bbfeeb63abf9a20","sha256":"0b48f59bfef744a16bf2ecb2d61ccab64e0a3c1b6ce176b3114f4aada801cf26","sha512":"31fd505cc2b080060cf02e09e5c27c2359fbdc9f14a6feda3099a87090cb8ce0e1f9012d5f5d4edf6c61b186e468ce3b58b5efa6082a36afdce8f9f8e94c2d23","ssdeep":"96:P2y40toXZzIEb0EaW87Lx1ydi9w+lxH6PgbU1FGedSxYzYnRf24LrOZ8EgYzuehR:P2T0tkCBF1yshDcGeqmYp24G2EByzw","tlshash":"83d15bf39a71602763ba1ba162bb332c9320ba5da70055e8f6d0d67d83dcf0f8055289","first_seen":"2026-08-07T08:45:21.463375Z","last_seen":"2026-08-07T08:45:21.463375Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashcat-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/1902980d.js","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://cashcat-claim.xyz/","date":"2026-08-07T08:44:37.141Z","timestamp":1786092277141,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /1902980d.js HTTP/1.1\r\nHost: cashcat-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://cashcat-claim.xyz/\r\nCookie: __v=1ad0648d-3789-479a-9876-f6af2c3b0df3; cf_chl_rc_ni=1\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 07 Aug 2026 08:44:37 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=14400, s-maxage=60\r\nlast-modified: Fri, 07 Aug 2026 08:42:42 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nAge: 115\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D6iPem3ia%2FmZgdIENyf440dCK75zVsWdTmayDwFQqNYWJHcVXkL%2FP1ZTMF9sQceq0IK5WGc7ngp19I9Z3EiP0uClRX34hI5pb13o%2BsLrQmdCgTRYhwZDgoR3ieCO8g722tv1zw%3D%3D\"}]}\r\nServer: cloudflare\r\nCF-RAY: a275001c1acb723c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270268,"size_decoded":144973,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1c52e4008cf10a1102670397988bf9eb","sha1":"9c467faa0bf00a70313e10b0578aaaa7c10a2dea","sha256":"1902980dee9c34465d510fd6d38b9253783febc820f5e961d2551b967c751511","sha512":"616824ad8b6c06eb58f068b535347b166a5cb18429c2104f0fe949689018110df9cac9f49be9a44ef6ac25070f9b8739dff56beb5f8d1988fd278a1f574997f6","ssdeep":"3072:47kXxdtpjQFqAmt7yW0bXHzv9hvEPOa+vbD4Z39QC/sJlSBgGQqFcRByVix2Un80:FxdDuNxPvEP98DIcSGGQqF2BAiUpG","tlshash":"6b442cc177a1b4a362fc32f8d02f5626519bd8123818f5c7ea2dede944f5980837da39","first_seen":"2026-08-07T08:43:40.727992Z","last_seen":"2026-08-07T08:45:21.46475Z","times_seen":2,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashcat-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/cdn-cgi/challenge-platform/h/g/fo/3229494961:1786089914:g7HcKudOcVCU3yJ6mKOCrEKnA2dV0Kq-7BilLOLgKLM/2fd8ffdafe9b717c/BpJw2qpq35qTE7RSnpszEJC_ZetnpEhnE-bkWB1s9G--1786092273-1.2.1.1-ofrOqdwB0jfTbIF9aCvFWk0H55uZnBQVDkbuHHDutku1W7zjyoJY9oNDQKYMi1ad","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://cashcat-claim.xyz/","date":"2026-08-07T08:44:33.456Z","timestamp":1786092273456,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/fo/3229494961:1786089914:g7HcKudOcVCU3yJ6mKOCrEKnA2dV0Kq-7BilLOLgKLM/2fd8ffdafe9b717c/BpJw2qpq35qTE7RSnpszEJC_ZetnpEhnE-bkWB1s9G--1786092273-1.2.1.1-ofrOqdwB0jfTbIF9aCvFWk0H55uZnBQVDkbuHHDutku1W7zjyoJY9oNDQKYMi1ad HTTP/1.1\r\nHost: cashcat-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\ncf-chl: BpJw2qpq35qTE7RSnpszEJC_ZetnpEhnE-bkWB1s9G--1786092273-1.2.1.1-ofrOqdwB0jfTbIF9aCvFWk0H55uZnBQVDkbuHHDutku1W7zjyoJY9oNDQKYMi1ad\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2316\r\nOrigin: http://cashcat-claim.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://cashcat-claim.xyz/\r\nCookie: __v=1ad0648d-3789-479a-9876-f6af2c3b0df3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2316,"data":"DTrA9yPQJEkJcrh8H3UQW1YHBqL6+fpDDKUe55V2v8rUP8kS6pBYab6OFmzN1zZ5Jbj-$N3IpdkuTS5HRsXm0zQyTAE6spWc9bOLgZRSBhVAQj7tNaHpqWuNXORCzD6XbwkT3E0qupCUwETQa1ynZcsp3sQaRi$Xhog5RacjwFr1sGzMDU5v-KYxytSspWJFd$5lrlF37E8jJ21KFeeUZbG1PRTqCxNB+K2T+MZTHLWa$G$D6EKq-YCxkNsWvRlkJTmLOwysPYBa6ZkCv1d7$eaRJkb37lndmjwZO$dy$bNeJrkRPIJsrfEBKBBlr2mxUZ$Igeqbp$zE0ijrpJL9ruoZ1Zcbg-+7CqgfNBKp9t6dFVvy0Wk720oVLlJFWNVQGxMLSO8vs6ws$chGRnBwxaygxht+Mk3VQ002Vttet8P9d7qzArZYs-KqBBbUxqFkYU1rks+AUwfuirs8wGD502WtEXtFcG85tYdaGAwiNaRfCHB5TYA03VBBwL8Uai3YXuH$iIFVefh9BtJVl+d1GFhYEO$niDATkXpslUezVFJfyPejTvKVDF$lH9hsxD2zAhiRqvUmRnOATVvVbBCCe$Wvqq9wjCdz6LkUvJh0G7S78QkEJ-9kXCSbZqBUWZARp3YXzTLr9Xv1ud$xW3cjtDQTCm9AjseOCjiplTDP7EcyzlBmP2du6qVnaPqIcw0Pi$F7DPjzDkpsOXPOqi2PkXTHW0xFYppHAOy5B20m0ldSpQBkX3h-spZ0gheU0d60VXdt6jGgLzANr8IQAjlGbfibNwTxmgbdAyZAgibXgpf$lEapzjRrF-H1IYKwT5xugD0uIrM0O5bixoT9yRT6b8ea1pQlZMjhkCUD055LP1nyZhZd$6Rh9qQl5+3bE2SeW+uv5EXw0NMvo1voaNk862yWCf3IIqeL-ey9$zKt7Iwi+NfP8$HGqt0ipS3v$yHEgVdhe9JY1um1YJRI9Lad$LEaw07qlYkKOOx6pg$t$HryvERY2cTGHJEvuwfiPHYClVF$vbLYvaruO08cDuldXFMzcZ3CuM2UpcIyTcmwzwrFjSF9YIULW0p7CvbWHqTHrqVL27ImS0NUZp19XkyzvG-wbAkXeeboZeOPYBJ9KNTVNowZ2DyOAbeTkSo-T9-X5u-mLZsgprs3yoYzIpMjdoBAM$d2iUQmFHvTWCg+S8E8-OionRsFnmPFADAgNcHmvpECHj2uA6VIXMMq1Dg3+C2H16yRGuAT88da1OPoJNuk1UB7iBpAPZe6JsD90fTgqiOkWbmR9HXFpIHPd7xUPg1mNItbTGkK8WU3v-qjzW0OHMTc3Q2WteDOSFjUELIZQRpZf3H+xTnzB$Jej98H6ZVGbnHMu9N8ZnLTp+RD09HjoPBwmfPdS91SXeZGU7bjpn+ePLnZ78YBGEwVfodL3z07sxpRn2EeLQW2bD3tU6EmdlKIvjq13HjoWPGajnmif37qKmxI5kDqU1gmRx-3bS-PF8uTlayaoXhFAsCApAjeuyDvm2LcrcbhlTczUpCFmbjD0Hp1FubaRF+FkQoHnAdLbpuZPW0h+usK$EEdHZ023XJQJpgd1XYbNe-rqAw5qw6-GRgw5RR5dJlAPbYzyRWpcts7Se-g0XmsOAqfAfK9bR6hwsJ0oB6Xg8mAmckrV3e1uYXaU1SztMg6oV1qP3VmqXjHeZ6o6WMXPJ$VgLM2XpsFZ9xxoEueBB9a67nlFBB7cWoeHAwiC0iQ6bGKQ-fjaYubS-3jaQNK$cUrlbiXghEd+7RUWYnDcHzz--Wus-Vyn0NospBt3erIVi6HR-FCqAcOJNrXz$PrKOXfvDdQLgYBG8gNL3NO6HQVg8Gy$pt$$Rx3NjygdVe2ew0kCybeEXkQ9UUmWE7nDx1Dhz752UflIqYSRxva-J6b8iqHP9bPcrE0y7S8Jz3zOulh6ee6$iCGyKPYPkfMYoGvRVj6BcWktWxaFvuausE5lwPefqq2DfmK8Kw+SBOBnBPtEoBtpjFcVvDo88VUGtO$lhHGCa7kjSIwAb7egRxO1U1hZ2zGavcO5KeOOwPZFlhsoNzrH2WmmLO9fXmFX$BK$kF3NIQkMsoDPGdFYxOX19BFenSm3aO$$mIzFfFOBWC2XiJSEfewXM8jGTRewqGerTdBz$SvXRIhg1ljIfGdgJmXOLbaXRp6AFkejJeVoQ$JZZ3mD9Cx7ksOiEdIyr+rom9Wd9el1dPZnAGmrLLWeRNihCGwbNnt+C5DQEeVPnNld5-c9VhD7MG$m-$U9U95OjKkNA5eXf66XqAEv+hswK8na8iCQoUnjEej"}},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Fri, 07 Aug 2026 08:44:33 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\ntiming-allow-origin: http://cashcat-claim.xyz\r\nServer: cloudflare\r\nCF-RAY: a27500051f02723c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":3418,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T05:30:38.622725Z","times_seen":17985273,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashcat-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/f70cb37711aa/api.js?onload=tVLDA6\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://cashcat-claim.xyz/","date":"2026-08-07T08:44:38.749Z","timestamp":1786092278749,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /turnstile/v0/g/f70cb37711aa/api.js?onload=tVLDA6\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: http://cashcat-claim.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://cashcat-claim.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 07 Aug 2026 08:44:38 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-content-type-options: nosniff\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: http://cashcat-claim.xyz\r\npriority: u=3,i=?0\r\netag: W/\"f70cb37711aa-api\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a275002628e356b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82469,"size_decoded":27052,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"71168031aad70d524c67842b94bf3c22","sha1":"5134fcc61d37eea95d0dfeea30a935e07e35bf37","sha256":"194a7f30e99f690ec77ccb996a31dff2045f877c3d051e0db8d322d7d2bba2a3","sha512":"0f037084eda0302935ebecfc028a6562e8777a1dd28609a7d09c9b0e2a365cbe1085584e98627e1c4191db1f4beb877a0b9495e91ee2c87fac4e42845b41a894","ssdeep":"1536:R6to/Nvf/8rAyTKQHCKt35HJFEe9fMm8seYOTkunPPl79:ktgEKQ19Ee9fpbOjPPl79","tlshash":"8b834cc8729a787213d6c1b4a03b6353b3297d35984c8850e527dd653a3de878273fba","first_seen":"2026-07-30T17:12:33.930797Z","last_seen":"2026-08-10T15:18:41.718885Z","times_seen":13232,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/favicon.ico","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://cashcat-claim.xyz/","date":"2026-08-07T08:44:38.789Z","timestamp":1786092278789,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cashcat-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://cashcat-claim.xyz/\r\nCookie: __v=1ad0648d-3789-479a-9876-f6af2c3b0df3; cf_chl_rc_ni=1\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Fri, 07 Aug 2026 08:44:38 GMT\r\nContent-Type: text/plain;charset=utf-8\r\nContent-Length: 9\r\nConnection: keep-alive\r\ncache-control: no-store\r\ncf-cache-status: BYPASS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=24v6cdX9wGG25ZLFkwS2bX62jg0C2L8MRwyGi2FdkBxsupBmQ7%2FhjumN38tCcbCI5c6oXS3%2B9fP9LeEitU2%2BKl%2FwGsSiuhLkTb2zBfP9TrnUqJwRL51AebMltD4oBUDyLQjNMA%3D%3D\"}]}\r\nServer: cloudflare\r\nCF-RAY: a27500266e27723c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9,"size_decoded":613,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"9d1ead73e678fa2f51a70a933b0bf017","sha1":"d205cbd6783332a212c5ae92d73c77178c2d2f28","sha256":"0019dfc4b32d63c1392aa264aed2253c1e0c2fb09216f8e2cc269bbfb8bb49b5","sha512":"935b3d516e996f6d25948ba8a54c1b7f70f7f0e3f517e36481fdf0196c2c5cfc2841f86e891f3df9517746b7fb605db47cdded1b8ff78d9482ddaa621db43a34","ssdeep":"","tlshash":"a250000c0003c3cc0000003030c0000000000300300000300000c000000000000c000c","first_seen":"2023-03-08T03:03:03Z","last_seen":"2026-08-20T04:53:44.464484Z","times_seen":89413,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashcat-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/f70cb37711aa/api.js?onload=tVLDA6\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://cashcat-claim.xyz/","date":"2026-08-07T08:44:33.439Z","timestamp":1786092273439,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /turnstile/v0/g/f70cb37711aa/api.js?onload=tVLDA6\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: http://cashcat-claim.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://cashcat-claim.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 07 Aug 2026 08:44:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-content-type-options: nosniff\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: http://cashcat-claim.xyz\r\npriority: u=3,i=?0\r\netag: W/\"f70cb37711aa-api\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a27500050c5c56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82469,"size_decoded":27052,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"71168031aad70d524c67842b94bf3c22","sha1":"5134fcc61d37eea95d0dfeea30a935e07e35bf37","sha256":"194a7f30e99f690ec77ccb996a31dff2045f877c3d051e0db8d322d7d2bba2a3","sha512":"0f037084eda0302935ebecfc028a6562e8777a1dd28609a7d09c9b0e2a365cbe1085584e98627e1c4191db1f4beb877a0b9495e91ee2c87fac4e42845b41a894","ssdeep":"1536:R6to/Nvf/8rAyTKQHCKt35HJFEe9fMm8seYOTkunPPl79:ktgEKQ19Ee9fpbOjPPl79","tlshash":"8b834cc8729a787213d6c1b4a03b6353b3297d35984c8850e527dd653a3de878273fba","first_seen":"2026-07-30T17:12:33.930797Z","last_seen":"2026-08-10T15:18:41.718885Z","times_seen":13232,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":2,"connect":10,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/cdn-cgi/challenge-platform/h/g/fo/3229494961:1786089914:g7HcKudOcVCU3yJ6mKOCrEKnA2dV0Kq-7BilLOLgKLM/2fd8ffdafe9b717c/BpJw2qpq35qTE7RSnpszEJC_ZetnpEhnE-bkWB1s9G--1786092273-1.2.1.1-ofrOqdwB0jfTbIF9aCvFWk0H55uZnBQVDkbuHHDutku1W7zjyoJY9oNDQKYMi1ad","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://cashcat-claim.xyz/","date":"2026-08-07T08:44:33.740Z","timestamp":1786092273740,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/fo/3229494961:1786089914:g7HcKudOcVCU3yJ6mKOCrEKnA2dV0Kq-7BilLOLgKLM/2fd8ffdafe9b717c/BpJw2qpq35qTE7RSnpszEJC_ZetnpEhnE-bkWB1s9G--1786092273-1.2.1.1-ofrOqdwB0jfTbIF9aCvFWk0H55uZnBQVDkbuHHDutku1W7zjyoJY9oNDQKYMi1ad HTTP/1.1\r\nHost: cashcat-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\ncf-chl: BpJw2qpq35qTE7RSnpszEJC_ZetnpEhnE-bkWB1s9G--1786092273-1.2.1.1-ofrOqdwB0jfTbIF9aCvFWk0H55uZnBQVDkbuHHDutku1W7zjyoJY9oNDQKYMi1ad\r\ncf-chl-ra: 1\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2316\r\nOrigin: http://cashcat-claim.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://cashcat-claim.xyz/\r\nCookie: __v=1ad0648d-3789-479a-9876-f6af2c3b0df3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2316,"data":"DTrA9yPQJEkJcrh8H3UQW1YHBqL6+fpDDKUe55V2v8rUP8kS6pBYab6OFmzN1zZ5Jbj-$N3IpdkuTS5HRsXm0zQyTAE6spWc9bOLgZRSBhVAQj7tNaHpqWuNXORCzD6XbwkT3E0qupCUwETQa1ynZcsp3sQaRi$Xhog5RacjwFr1sGzMDU5v-KYxytSspWJFd$5lrlF37E8jJ21KFeeUZbG1PRTqCxNB+K2T+MZTHLWa$G$D6EKq-YCxkNsWvRlkJTmLOwysPYBa6ZkCv1d7$eaRJkb37lndmjwZO$dy$bNeJrkRPIJsrfEBKBBlr2mxUZ$Igeqbp$zE0ijrpJL9ruoZ1Zcbg-+7CqgfNBKp9t6dFVvy0Wk720oVLlJFWNVQGxMLSO8vs6ws$chGRnBwxaygxht+Mk3VQ002Vttet8P9d7qzArZYs-KqBBbUxqFkYU1rks+AUwfuirs8wGD502WtEXtFcG85tYdaGAwiNaRfCHB5TYA03VBBwL8Uai3YXuH$iIFVefh9BtJVl+d1GFhYEO$niDATkXpslUezVFJfyPejTvKVDF$lH9hsxD2zAhiRqvUmRnOATVvVbBCCe$Wvqq9wjCdz6LkUvJh0G7S78QkEJ-9kXCSbZqBUWZARp3YXzTLr9Xv1ud$xW3cjtDQTCm9AjseOCjiplTDP7EcyzlBmP2du6qVnaPqIcw0Pi$F7DPjzDkpsOXPOqi2PkXTHW0xFYppHAOy5B20m0ldSpQBkX3h-spZ0gheU0d60VXdt6jGgLzANr8IQAjlGbfibNwTxmgbdAyZAgibXgpf$lEapzjRrF-H1IYKwT5xugD0uIrM0O5bixoT9yRT6b8ea1pQlZMjhkCUD055LP1nyZhZd$6Rh9qQl5+3bE2SeW+uv5EXw0NMvo1voaNk862yWCf3IIqeL-ey9$zKt7Iwi+NfP8$HGqt0ipS3v$yHEgVdhe9JY1um1YJRI9Lad$LEaw07qlYkKOOx6pg$t$HryvERY2cTGHJEvuwfiPHYClVF$vbLYvaruO08cDuldXFMzcZ3CuM2UpcIyTcmwzwrFjSF9YIULW0p7CvbWHqTHrqVL27ImS0NUZp19XkyzvG-wbAkXeeboZeOPYBJ9KNTVNowZ2DyOAbeTkSo-T9-X5u-mLZsgprs3yoYzIpMjdoBAM$d2iUQmFHvTWCg+S8E8-OionRsFnmPFADAgNcHmvpECHj2uA6VIXMMq1Dg3+C2H16yRGuAT88da1OPoJNuk1UB7iBpAPZe6JsD90fTgqiOkWbmR9HXFpIHPd7xUPg1mNItbTGkK8WU3v-qjzW0OHMTc3Q2WteDOSFjUELIZQRpZf3H+xTnzB$Jej98H6ZVGbnHMu9N8ZnLTp+RD09HjoPBwmfPdS91SXeZGU7bjpn+ePLnZ78YBGEwVfodL3z07sxpRn2EeLQW2bD3tU6EmdlKIvjq13HjoWPGajnmif37qKmxI5kDqU1gmRx-3bS-PF8uTlayaoXhFAsCApAjeuyDvm2LcrcbhlTczUpCFmbjD0Hp1FubaRF+FkQoHnAdLbpuZPW0h+usK$EEdHZ023XJQJpgd1XYbNe-rqAw5qw6-GRgw5RR5dJlAPbYzyRWpcts7Se-g0XmsOAqfAfK9bR6hwsJ0oB6Xg8mAmckrV3e1uYXaU1SztMg6oV1qP3VmqXjHeZ6o6WMXPJ$VgLM2XpsFZ9xxoEueBB9a67nlFBB7cWoeHAwiC0iQ6bGKQ-fjaYubS-3jaQNK$cUrlbiXghEd+7RUWYnDcHzz--Wus-Vyn0NospBt3erIVi6HR-FCqAcOJNrXz$PrKOXfvDdQLgYBG8gNL3NO6HQVg8Gy$pt$$Rx3NjygdVe2ew0kCybeEXkQ9UUmWE7nDx1Dhz752UflIqYSRxva-J6b8iqHP9bPcrE0y7S8Jz3zOulh6ee6$iCGyKPYPkfMYoGvRVj6BcWktWxaFvuausE5lwPefqq2DfmK8Kw+SBOBnBPtEoBtpjFcVvDo88VUGtO$lhHGCa7kjSIwAb7egRxO1U1hZ2zGavcO5KeOOwPZFlhsoNzrH2WmmLO9fXmFX$BK$kF3NIQkMsoDPGdFYxOX19BFenSm3aO$$mIzFfFOBWC2XiJSEfewXM8jGTRewqGerTdBz$SvXRIhg1ljIfGdgJmXOLbaXRp6AFkejJeVoQ$JZZ3mD9Cx7ksOiEdIyr+rom9Wd9el1dPZnAGmrLLWeRNihCGwbNnt+C5DQEeVPnNld5-c9VhD7MG$m-$U9U95OjKkNA5eXf66XqAEv+hswK8na9VNAzlZwcfz"}},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Fri, 07 Aug 2026 08:44:33 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\ntiming-allow-origin: http://cashcat-claim.xyz\r\nServer: cloudflare\r\nCF-RAY: a2750006dd72723c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":3418,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T05:30:38.622725Z","times_seen":17985273,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashcat-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/cdn-cgi/challenge-platform/h/g/fo/3229494961:1786089914:g7HcKudOcVCU3yJ6mKOCrEKnA2dV0Kq-7BilLOLgKLM/494ffaae481e717c/FPwscx3SordnTFk-HnVvgkrzWWFy9T3qAD11sxoHc5e-1786092278-1.2.1.1-xNiUxHHL-ZcrULL8x-m833g9Mus8NZexUXlUgn19AylX3yaOQnzhjeqXz64N2Hnc","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://cashcat-claim.xyz/","date":"2026-08-07T08:44:39.763Z","timestamp":1786092279763,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/fo/3229494961:1786089914:g7HcKudOcVCU3yJ6mKOCrEKnA2dV0Kq-7BilLOLgKLM/494ffaae481e717c/FPwscx3SordnTFk-HnVvgkrzWWFy9T3qAD11sxoHc5e-1786092278-1.2.1.1-xNiUxHHL-ZcrULL8x-m833g9Mus8NZexUXlUgn19AylX3yaOQnzhjeqXz64N2Hnc HTTP/1.1\r\nHost: cashcat-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\ncf-chl: FPwscx3SordnTFk-HnVvgkrzWWFy9T3qAD11sxoHc5e-1786092278-1.2.1.1-xNiUxHHL-ZcrULL8x-m833g9Mus8NZexUXlUgn19AylX3yaOQnzhjeqXz64N2Hnc\r\ncf-chl-ra: 2\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2327\r\nOrigin: http://cashcat-claim.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://cashcat-claim.xyz/\r\nCookie: __v=1ad0648d-3789-479a-9876-f6af2c3b0df3; cf_chl_rc_ni=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2327,"data":"5hEJgClOD0Dv3KMsUpUPFIJTLl81WM8ewSw2rr6IveEomkugElRkF32pwKylcku6q6yIAo5ueM2ucn9CpLuqGND7Obwxny-zsrY-RP0fqdWMneIefVnGnmwGnnzt1mKy0eR35ZIRFvJNoFZFvIE9Ragw3YSUDOVSITEK$p0EMC0Fk9-WNQuj8+LeP9uxzulv2VphHOqHc1eLHWg7ZDucU7+$bwqkyUFSZB-d5$cWZag27el5Mn3W5kdiI2C60OfUYz1uGshWBqVeBQoLKLAQJXdyoGUgTw5pO1Xjds5HPjScbZuFRr2dH1nqgOHkOMBXn017mV0ZrEJelfcjxszRSrjP7yM$78l-PjwFmbB-0CliWHOqXP5HBKNXnIKerCzpDn7MLogRgsIX95bjuHEP$$ZJ3peXE9teHPmMOtw-1EtOI5KncSsTIOFkU2GkeVxdks$mXxvLhgdfgumQC0o2KygH$p-XoIxEa$5-e2OfPkR2RMZNIqOqLskH+0WPld+TsaMwun0JOY9l1Bj6RDyJMblUBS1AtGs1cxPnqAcYawCfikWNryJF-SwZQThGKQMbvAsJSApuw9mTgHFKGXGiWCH+WPf+GKdIWiCEyO0Ls2G-2oWYEg+bT+mUhio91ON9EiaFyVLH58k$B+WoYDec23mhTiY7KdP81W6oib1IrvHrpvn+9YnIi0J85YZS9O3AgBjOaOacuAxEiXzOImDKegvtqTGf0UoXgp+$MCo2zlnceBW91E-zHUDGWuXvNBFGKY2Z$3w+8d59P3tf37Q57egSD0a7IqFKGK6nljJeRFcT8MlceronOGzzuwKts6StCicXsdYE27PFtl1lV$w73rRxFgKseb3J3kS5VVpHQcYIQXpw3Ggi3ZLGi$Fdmx-EiweLsD-zM3MZkRNikrl99hJS8+DT00YHyWNkQ7cgsWzt1lDxLIsbZuavvm1KCBhIwJvn$7KWTqA+G0aS3-lXxpuTjUE72GyaVNwyLn7$0XqYz-Qcq2IbXBuj8+jMZ1BRHpxSp5V9xq6vyHu1VIqXqZSXYNxtaLNeIMJllytIRejCT8oL+QVSSMs8puO0XUoJF1Ioa+IpVrjmgmMNjTw3UZjSGWvhfpePlKSBT$TOsZYirgIW-bV1TbCsSbPTg+Ix0sKPWv+8dvOsnarJ8xWbqWr3LUegmgNuqgUT$fLCWA3mqgRFHC6Ev2UGISryXWCfCcFnmHCQmlyc27o37AKvkgI6JeZULDk$6NPb03LvX8oqsKrx3ayHYxDg68kNO7s0kDQ+yeIJ2OMRV+H1dzOoR5Hx+kG9tfJmV5A3wl7Dr0jrVLOJz33qO0A393H+n9$3Y2Gum8r2ZYcX01IaMSFxZ-pJGcsBl7PQig-bkdOnwyBm6PW+d1c0y5-xJ5pkIUvLwDc$zkdsuP17xNRxEBh89th2p-nGFZBQJ6z1SoPtC2pUsfJUg-hci1qBXUgUCA0Gnl$K+iNcfGUZo8duljQgKDNBa+qFftevZB02XX6epftfd6qLlAyBhtNe$gpPI96D10C1p51Dk7OLLQuugmCxMW1FvvI0BvTJ830Sj0FYZbIgJWNEoLT97AKByLDkxUILJbIS7mEU0ktiQbsQIWC7jvKMqhEMD1X1GDutixf3NQ1Aa1avU6mcstj9w2T1yn27oWz8ZRSLEkc-oL7Oogm1PrTR6PJgaXm0B$RnDzLtt$-FwOaYqY-p7-rkHyUcjS3dXmmLlIkoQN0p0MqZsOzyDw$Iq6VliRqeEfYAp$iCqZO9DplTbNIGqQM0wSyN+QP1xRanL2-SaT3Ngz8SRSWHHKROukk1Z2VUG-u0DSL1f$Fo-1Y6-v1ssf8105ZMHdFmOnZcyBYPOeF8zV8e$OoDL80bEmQBO201ja-LuHkfHPfQvh9hO5r9ZH7l1M6SmICu3Cscf9gj$6wVNa$Xx77JsH9nV5X7ae06YkkV-GUUncJF760YIL+oxrUxw3PjZzOA9xr3FeRmlX0DkG6SwNp3rCPt05aSwSyQUxKizDs5YAvEu1TwWGhbf1SU30WMZXUEdd7SiNRS+JIlEixs+rVZOrhRlmhgBYl$mfks+GTZZsbTAh9-wUPOSPJfyfu-EGsZ+EerLOcTYFWMuk-2V1-faEXq3dQ9bqgOzvaNXRbo+7NRa2HC13FljwBDp1MmrbOQT+Ek0u1+03q$PqQTM+qhph057BbqSs$VfIbVJdjUZDzLBKm9tVqMzg6OdzzTV1gGKIyAvIsI2cO9MMS7Oy2s18tE+paoYenDBUN+iaZ6WXejNMnc3WlCKTovlbG6Fb2FQ7x6$aRXMEylm9AoAOkTlnI"}},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Fri, 07 Aug 2026 08:44:39 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\ntiming-allow-origin: http://cashcat-claim.xyz\r\nServer: cloudflare\r\nCF-RAY: a275002c7aa5723c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":3445,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T05:30:38.622725Z","times_seen":17985273,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashcat-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=0b408245a4bf717c","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://cashcat-claim.xyz/","date":"2026-08-07T08:44:46.057Z","timestamp":1786092286057,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=0b408245a4bf717c HTTP/1.1\r\nHost: cashcat-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://cashcat-claim.xyz/?__cf_chl_rt_tk=kMNG1VCckBQrYJXHlkvJhmlsg9ylOhx_HM36R6tdCgl-1786092285-1.0.1.1-g5F-wctR5kM0Vk3cdMAvQGCxYkMEA2GyCJ70MqGxQ8u\r\nCookie: __v=1ad0648d-3789-479a-9876-f6af2c3b0df3; cf_chl_rc_ni=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 07 Aug 2026 08:44:46 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nContent-Encoding: gzip\r\nServer: cloudflare\r\nCF-RAY: a2750053d853723c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":230589,"size_decoded":81722,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (33786)","md5":"4b2c8572636d8393d2191040dd9494cf","sha1":"f03f12e2cba1b4b90f1962bae3909e8d2ca5764a","sha256":"ef6d3743a098367c797f35637eff43e70bbbc7aa7bcfdd3e1c452ad337dc5486","sha512":"6df2eb37fa90c60fc6eb9662eea1a676e97d6f60f9c5c3eb34a087284f607cd2315141427fdf02cecc01baec6449034d54061eec1949cd3751b3b98f85db65ba","ssdeep":"6144:dcd4WKvKUn3LPfVHbiW+veo1JOTWk++AK87g:dxrB2W3o1JOikru7g","tlshash":"5234d58eb8d2704f230794f8517b30cb727d4c4460281a3ce17795e9bb62b7b55eb9a8","first_seen":"2026-08-07T08:45:21.467046Z","last_seen":"2026-08-07T08:45:21.467046Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashcat-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/cdn-cgi/challenge-platform/h/g/fo/3229494961:1786089914:g7HcKudOcVCU3yJ6mKOCrEKnA2dV0Kq-7BilLOLgKLM/0b408245a4bf717c/fYZGoEkldHdp87_qUPgC3MWLiZtdI9x92jn6EaZ3TIH-1786092285-1.2.1.1-gJ9Uqn9cA33jp6TnOxSj4o5ia96-osWlLPc7MPU40dmiEmIPmMrQpT1CXMaM4x0T","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://cashcat-claim.xyz/","date":"2026-08-07T08:44:46.560Z","timestamp":1786092286560,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/fo/3229494961:1786089914:g7HcKudOcVCU3yJ6mKOCrEKnA2dV0Kq-7BilLOLgKLM/0b408245a4bf717c/fYZGoEkldHdp87_qUPgC3MWLiZtdI9x92jn6EaZ3TIH-1786092285-1.2.1.1-gJ9Uqn9cA33jp6TnOxSj4o5ia96-osWlLPc7MPU40dmiEmIPmMrQpT1CXMaM4x0T HTTP/1.1\r\nHost: cashcat-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\ncf-chl: fYZGoEkldHdp87_qUPgC3MWLiZtdI9x92jn6EaZ3TIH-1786092285-1.2.1.1-gJ9Uqn9cA33jp6TnOxSj4o5ia96-osWlLPc7MPU40dmiEmIPmMrQpT1CXMaM4x0T\r\ncf-chl-ra: 1\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2327\r\nOrigin: http://cashcat-claim.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://cashcat-claim.xyz/\r\nCookie: __v=1ad0648d-3789-479a-9876-f6af2c3b0df3; cf_chl_rc_ni=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2327,"data":"bvYvUDReHxw83RZ69oIZsrVe$T9yBqijyefUhBgahya1J0YSgmIiGCOZZBk2iu7pNuTuYhPNmUkuOrtOirQMPndDH7C8kL+lwH+1PLg5K-8jL+sL7qS7Jw-whC66tMBKHnLnu6jEKARCg-DCOjXY$t-sXXbfBtGrOUZBhJqqxNk266$$+G5El2Ux8-m8-5AWKXyObG7bnJ7muNZZ-2l5miIxP0e1VcH5$EP8XIPUoS9HYpevxzWx28$k-+l$6xpmA60UkbbObTFfvWLw6cAYIZljGCPKg1bvtqMs78z+7rKLs+UPzBis-dUkRK9iDF+fsFv8mAEa5z5OvX-GwrhWp5hcc+21jKUz9Bw+9sicR+Rt5Aaz2H6uum$VOPywtWGPGaxnY7V2mbsv0w1f36-RYTvitcEICQc$8W+LTxzjEBmPZqz0dxU8AyQg53YaAVPsOn+jYZysZGy$qqEMrSIymnVqlx73Xk0PoIEtPq3PIERKXgy+EXAk$NB9gZpzzW7oyiJKnNndpWGCkkSUi7i1hNOMo-LuqiFKW5ZI09ESpZGu7saZUUVu9t+pg9+cPboVhRVUVpVDrJrjqMlONiV1P-96mA89sjWQ$fA8-HYt3muLBplyOKCY6SS0n+Kq9gGbOhnR0Q723SFt9cJ0AYYVF9+SkPWxuwWAbLFbXQkfCQx+r$zvN0csV+uH2uqnPLgwdc7LjmmeqIFh7gqfmRzO0IExmzUQSpbv9Cxl8qKPuAzu3Y23WJ8dLU8iVyjHqBT6mW$qQ7HfJWABEH0HP-J0REeOs3pYbQcn7B8dEEsyW1V5jsMGLKWUCpHuX8vQkjJSlBwmd2Eeipj63LiqRVG8+zTjAjJhSb+gkVl8HPTnGyn5FhYscJm7uBC2ztVC9+gcRt+0o7eLxUpAR3I+uKaGP2qTKgw6RmYjOC6J8hoqbs+6ztaLSRFQg8q8QoqXfogT6V-wuJZfRwAWXwZZLNbG1okHjun3kFXR7WOmhuEYO6GXLSNlxtGkU8VScj7bIs3k-CHxt-HMZZTQNku$uQdGuSr6jjE1PLCNUwh$Iivco8klRrP3v8kYFGOtibEbkPzz9JRRu2O3lszFIwV9AKlodd7Xd2h1Wv5ay6RAKYDA+dyp8kmMPwlYhcep27C9qScGHDp9K-1q9xPAZsMwkZ1UYxSkoBkI$15bMnbsvEk0A3aTQoyvEOsiPjuL6kLySeJzvrY-sPodDx5Jia1MmPWhzOkJ907wrF1BDt3QwL+lN3SxbQWZN5Z-UJKD2OnH8mOwobSHNAwM1RWyz7nMuipVU6FbxFwzdq-mtrD5WGph$uPgC8nIRcb-PZ5TNdYIMGO+O63DvS-sbZcICn50irrZqXH7WtN-sQaipmXUNyiA+dlvKqJ302M-6mzglDAHaFR-8uPIwtooxmt2DfN2rn5BHwZJkiqSVpzDoGti8cYFn9t$cixGPiln39RNzMdXvDx+rnwq8lEC2Rg$cIs+Y5OzOGyrtW8NnPKw+MztMf1SjBjmEyD02Ps8ZeGEtcAK3SxJu6mGDWb0cqAGouZJL2Mrs9F$YiVHrN1kjyrHSVMG$rH$9aW3lKQZHqj7TeJWRJtXhclyvWnBtpCW$nBQKePXZPa8uLb9Vc3cWq78JO1GqXZS9VAUnUuzBHWhiSEvL3GAgYaEVy3caf03mofH6mtz77LoQJEAFV08QvhCtPRSMy1nJS1cZydUnaysoxdRpQZwL1STk1Cl8gAOfIQ9rp0Wg3wdCRdgCvmuo72HoMG6rRZZO3eKUOF-sQ-SkwP6HlaXSYL-NCfWs-o5oCZegYQnRf2$Y28z8lMWZAhPsg$xdKKlUjzlvMYURHyM-xSAjy5wKJa5lwA6P-tBTWvyvMDaZdUVj5HNZpUPxckIFAJ$Y3Tc7Fqubzp+jPK6RQaNxE2M9LgwPA+Pchhcpbyfh0NnFtqxDkbw1WJa6OUza19QC9Np0Mw9O-7rv-a1ioQpsvG-j79XuSJmMIDU9zi7eo1h5dBpr6uc1RTqq6bragTjCg9vg2OleRYm2eLFrzLCPKnPUq8QCV+fTlpGNapx2oWHwb8KZcZPwD2P9tBYJes1RyMbfDFIBQhUAS5DIU+wRRYXWaKMpNamv1mVi-anEhIHQ7I$PK7oovROVeiTgsxv0$-j8zzin8Wq7YipGDvAQJi0sQ8VWUebZmsbsGFKjC5ddu909zTczIbc6TxarL9DAeqOiJKR7g+iwWbS5IGmhFS2yooN$mu-K5RbSaqEbrJYP6h0ACKGBrFtIx-1wjAkQ$3uOIiaszKauT56Qmz5bOpd2qGT5P3dgO9WLoF+fLvK0Xs"}},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Fri, 07 Aug 2026 08:44:46 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\ntiming-allow-origin: http://cashcat-claim.xyz\r\nServer: cloudflare\r\nCF-RAY: a2750056fae4723c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":3445,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T05:30:38.622725Z","times_seen":17985273,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashcat-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=2fd8ffdafe9b717c","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://cashcat-claim.xyz/","date":"2026-08-07T08:44:33.172Z","timestamp":1786092273172,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=2fd8ffdafe9b717c HTTP/1.1\r\nHost: cashcat-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://cashcat-claim.xyz/?__cf_chl_rt_tk=5uww_ADxrrJOsvE8jIWmK411tqoP31BWIiztci7XTyf-1786092273-1.0.1.1-rmjwUuZqFfy4Cbp9e16G4wCGPpXF6bB3ZdSIwKglCGZ\r\nCookie: __v=1ad0648d-3789-479a-9876-f6af2c3b0df3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 07 Aug 2026 08:44:33 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nContent-Encoding: gzip\r\nServer: cloudflare\r\nCF-RAY: a275000348e4723c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231127,"size_decoded":86843,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (34712)","md5":"1d130411fef3ba20520b4949b20f30d4","sha1":"7a83403b869e87e99a1df413f5a59c9627f646a0","sha256":"ec304f066b50be41f82d7af6b0d5493fdb102d73e55a8dbdde1c616d4f18cb19","sha512":"dd7ba86289edd308ca25493970822da64fa194062850efd57e597eac6a29c746fa972699f25f584cb80ac87ce7db7f7d8a17033fad77ab016f2f916ccc2dff79","ssdeep":"6144:YBsu+vlY/NOuQNL/LEw4kpI5Dy4LQBEQ7:akIXkpcHLQB5","tlshash":"6734f85874d7708f230694b810bb70cf72ad4c48a4381a7ce13785d97ba2b7f51eb9a9","first_seen":"2026-08-07T08:45:21.468574Z","last_seen":"2026-08-07T08:45:21.468574Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashcat-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/favicon.ico","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://cashcat-claim.xyz/","date":"2026-08-07T08:44:33.198Z","timestamp":1786092273198,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cashcat-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://cashcat-claim.xyz/?__cf_chl_rt_tk=5uww_ADxrrJOsvE8jIWmK411tqoP31BWIiztci7XTyf-1786092273-1.0.1.1-rmjwUuZqFfy4Cbp9e16G4wCGPpXF6bB3ZdSIwKglCGZ\r\nCookie: __v=1ad0648d-3789-479a-9876-f6af2c3b0df3\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Fri, 07 Aug 2026 08:44:33 GMT\r\nContent-Type: text/plain;charset=utf-8\r\nContent-Length: 9\r\nConnection: keep-alive\r\ncache-control: no-store\r\ncf-cache-status: BYPASS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N0grZSCS5KhIzA5d73ZuWM5WLZB4O8FMGJwba5Mln0%2FbVaturL1a5xDkQv%2BRYnF8kRPkEX23zmrHoHE47%2Bz7%2BjcB%2FlUm5LGysm2rzUT94zxBnghA0lw2oScq7rFC6KFK7BKksA%3D%3D\"}]}\r\nServer: cloudflare\r\nCF-RAY: a2750003797c723c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9,"size_decoded":615,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"9d1ead73e678fa2f51a70a933b0bf017","sha1":"d205cbd6783332a212c5ae92d73c77178c2d2f28","sha256":"0019dfc4b32d63c1392aa264aed2253c1e0c2fb09216f8e2cc269bbfb8bb49b5","sha512":"935b3d516e996f6d25948ba8a54c1b7f70f7f0e3f517e36481fdf0196c2c5cfc2841f86e891f3df9517746b7fb605db47cdded1b8ff78d9482ddaa621db43a34","ssdeep":"","tlshash":"a250000c0003c3cc0000003030c0000000000300300000300000c000000000000c000c","first_seen":"2023-03-08T03:03:03Z","last_seen":"2026-08-20T04:53:44.464484Z","times_seen":89413,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashcat-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/favicon.ico","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://cashcat-claim.xyz/","date":"2026-08-07T08:44:33.460Z","timestamp":1786092273460,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cashcat-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://cashcat-claim.xyz/\r\nCookie: __v=1ad0648d-3789-479a-9876-f6af2c3b0df3\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Fri, 07 Aug 2026 08:44:33 GMT\r\nContent-Type: text/plain;charset=utf-8\r\nContent-Length: 9\r\nConnection: keep-alive\r\ncache-control: no-store\r\ncf-cache-status: BYPASS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6%2Fcxo0v%2F%2B1h0E%2Bv8G%2FOjH%2F%2BJFvhNweQS1pnUZr2p5yepbk3oszsR97rNw0YSPZZOG5JpalAqfKKoyePybiCCiBGYwvwtex796TFvxWZkRwI6ui9t1knJq%2B1WoG12et1GqWMI%2BA%3D%3D\"}]}\r\nServer: cloudflare\r\nCF-RAY: a27500051f0d723c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9,"size_decoded":623,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"9d1ead73e678fa2f51a70a933b0bf017","sha1":"d205cbd6783332a212c5ae92d73c77178c2d2f28","sha256":"0019dfc4b32d63c1392aa264aed2253c1e0c2fb09216f8e2cc269bbfb8bb49b5","sha512":"935b3d516e996f6d25948ba8a54c1b7f70f7f0e3f517e36481fdf0196c2c5cfc2841f86e891f3df9517746b7fb605db47cdded1b8ff78d9482ddaa621db43a34","ssdeep":"","tlshash":"a250000c0003c3cc0000003030c0000000000300300000300000c000000000000c000c","first_seen":"2023-03-08T03:03:03Z","last_seen":"2026-08-20T04:53:44.464484Z","times_seen":89413,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashcat-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/cdn-cgi/challenge-platform/h/g/fo/3229494961:1786089914:g7HcKudOcVCU3yJ6mKOCrEKnA2dV0Kq-7BilLOLgKLM/2fd8ffdafe9b717c/BpJw2qpq35qTE7RSnpszEJC_ZetnpEhnE-bkWB1s9G--1786092273-1.2.1.1-ofrOqdwB0jfTbIF9aCvFWk0H55uZnBQVDkbuHHDutku1W7zjyoJY9oNDQKYMi1ad","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://cashcat-claim.xyz/","date":"2026-08-07T08:44:34.253Z","timestamp":1786092274253,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/fo/3229494961:1786089914:g7HcKudOcVCU3yJ6mKOCrEKnA2dV0Kq-7BilLOLgKLM/2fd8ffdafe9b717c/BpJw2qpq35qTE7RSnpszEJC_ZetnpEhnE-bkWB1s9G--1786092273-1.2.1.1-ofrOqdwB0jfTbIF9aCvFWk0H55uZnBQVDkbuHHDutku1W7zjyoJY9oNDQKYMi1ad HTTP/1.1\r\nHost: cashcat-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\ncf-chl: BpJw2qpq35qTE7RSnpszEJC_ZetnpEhnE-bkWB1s9G--1786092273-1.2.1.1-ofrOqdwB0jfTbIF9aCvFWk0H55uZnBQVDkbuHHDutku1W7zjyoJY9oNDQKYMi1ad\r\ncf-chl-ra: 2\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2316\r\nOrigin: http://cashcat-claim.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://cashcat-claim.xyz/\r\nCookie: __v=1ad0648d-3789-479a-9876-f6af2c3b0df3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2316,"data":"DTrA9yPQJEkJcrh8H3UQW1YHBqL6+fpDDKUe55V2v8rUP8kS6pBYab6OFmzN1zZ5Jbj-$N3IpdkuTS5HRsXm0zQyTAE6spWc9bOLgZRSBhVAQj7tNaHpqWuNXORCzD6XbwkT3E0qupCUwETQa1ynZcsp3sQaRi$Xhog5RacjwFrUeqDbyFlpjBJWXgiIEwXiBLHVYjZq-QXu7v7kfaorYf65xg1krVGBrCu0kMm9yCPVcQ6hO2Rw7RVgQ+DbbtXtVYXmx7WVU6WgViro5Di5sliUBjmNVpwIiero9FCGltD$sgMerpqx$ZjrxnRY-rRtaFC5m05DuRNZZfRgDD$$qU5cJnNPNpmZyaCkeYaaYZ+OtqpksaLqEYIC+owJqdfZfU+Jx+dM8-IBPlrFSmnTzJ8wt3HOZBg9ESCRdAVUiSkIK5ifua+nqEW0HvIobJau0zia7v-eiV2m6KgARsJ0P3igo7Ol82RsQwgS$P-fYWumj5BgiWgKJe9dxxHvkDzQxYR$I0Q1KD1IHHPiqIdVMdSWxfwg9ltxRllvlfCFJWFsr5lO+568p7zrjTZYmfg7fkHSgdcb8yl3AV3mZruvvmPq9875KSZ0Xk-F-lbJ-$GobVrRE6xY2zJmOFJIgdPJc9fQr$baxDb9VU5yQI0cVxNhldxE6evHbaa9kiWCT00fW6yaMXOVX0a8jSkiZTQn8b5LS0EDVOuJrKbO3pYNrGKqivRBcLgeg20Ew-O+AcORg3AOPpPqKQh2aTW6RWwWHkkMppHmq6BLxOZ57iL2oBtnoyClkexugHH1BWEcEbxoVjQBHZ7Z9j8RwAoRJFkTmwmbkJs17OMN0iWu2jCivdhpHCSdWyBnLStZyzYZfAIVNGjosLa79tD3GPBbbE7sGwNpJ2wNsXWdpWcJA1fILhdYwl3CPyKU-tKok$OrRwnYmOoc8nQKCfbVeX6mSE8JSJTDyxS6jRwGkx+TPg0UqXvdqbY3V2agtABgN1$XOHZEZVHn9Gkt2D++Ye06QdLZgUHrmgrwbWYwtM6kzgpSzuUjrQLIH05yYVD-TH7ejBvQ2PRoWonn-IMz+KG+-dFll3-5jD1p+3LegZN2+BcBvpTAJ0dEBQjpCBQ2evYCA26w8mCg7D3PzJXgj18adpIZMg+gsErSyADQiGg3itX92rlEMltPA7CdpJ1sk6pH$HufpwAfWTbT8tfeb1wUJCHHvB3jLkWgddzbv$7TjPXHWRKK$iH8O7MZomAVHh$Sk+Z9++Kkv1jTdsSYKFBe2hkAhKZRatx2YyowNabqJdhKzxirplgbXBd0IMzab1tZcmVHhTCiLJEB-CiLWQEV+zq9l1ZTyvq16cWQNgDZL3ticMDiXfFOgo0XgL9UanzE6O$Hpy6mJvFi6tQo9TA1h$P$PJEPAOachdHbH$PH$Ogpb3XoDU$RGhG0QzAS-1NZkRXQ7Pcnh81J$xhXdy$6-Ogfc2gB+tUHBBq$hTkY3HFt9A5-MYueR2JpYUv1$iPZpMfLDuQKEC2NukPTqyifJvh7nnP5Rc-UkCj2amwgQD5HuZPPxblq$QgY1ZLFYa5Rc3b3uUrcthosxUzqLAv+MH0xtMXZ-QrJimGopYfYzmNQsXq$bn0fiJGCu39gb2IAny+ulNqKC+2IMXqQk$GjVYo--QHifFSyL-81qivT7rOQ7qn6zVLAeSkEaC7tWRWWxCuhzTliqJFYXSn2po5Me97-pz2GK5dT1fwyA-fRB91fJcgwG$z9Fk5YxWY7jDVG$V32pGuFFoomh3DIN0RMGAEyF2kvp36Mtwwux2+pZi-wEn$XCXELg6QqRGUOZZP3EtbUGwaQh2-JV+KFaYqyIM9mtZ2CJX1FzrRM5+bpPv0rlScMmS7y7aP6ZWRtvSRG-HT23Si+nmNKO79GcmYrWfToqfun09kq7prlIII2lL2fWK62nCn7wpkN6kGKmoKOgLTvx+cZcxRPwHpkDgsXwOdPwl2XPvakD+IhReIDQnpu8$muVivOe$pUASNbUig62YSNTvlPcd$9Ti+2sBVDweUsHM3adFzxtkwYnHt6YhzyKmpZw2$Q2FAXN9Hu0itWhyAB0$rBvBoBtgffjwIN7rtNiQ79T$Zj5GV3H-t6zIDRrmBIZXylgHfIcej+EOroPmr-JeZKVj5v1JRXkASPBZRpm6lDUG$ADrrUBUbbGOznpiQaUlATpP5-iN3W8OKpzENVFcQo85A5t+22xPx0Yreqj72rpm7AlXD1FZDFG-YAE33bXt2xnmSR7TR6WCm8fYqpe9M-qfiYBnJb9g5rkFSMEmuXkG6jygxg"}},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Fri, 07 Aug 2026 08:44:34 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\ntiming-allow-origin: http://cashcat-claim.xyz\r\nServer: cloudflare\r\nCF-RAY: a275000a09eb723c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":3418,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T05:30:38.622725Z","times_seen":17985273,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashcat-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/favicon.ico","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://cashcat-claim.xyz/","date":"2026-08-07T08:44:38.709Z","timestamp":1786092278709,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cashcat-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://cashcat-claim.xyz/?__cf_chl_rt_tk=opNrjUX6yL_kLEFuoBVnOb78qaH6yLRA8t_Y0Ix9GOb-1786092278-1.0.1.1-pOizX6n4kzQAUopZYMjx_yKKbrX44LzkxKcMd8xvNB2\r\nCookie: __v=1ad0648d-3789-479a-9876-f6af2c3b0df3; cf_chl_rc_ni=1\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Fri, 07 Aug 2026 08:44:38 GMT\r\nContent-Type: text/plain;charset=utf-8\r\nContent-Length: 9\r\nConnection: keep-alive\r\ncache-control: no-store\r\ncf-cache-status: BYPASS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6IuQGB9SDnvvHYYv5brXVj13Z8%2BVyVCigz%2BXS7oh4%2FlZjbQ%2FQ0bLyzJIN38SGnHFzx2MotQuh8a7bJZN39nRQk94Y%2BSposNbcEj9dud5rh%2FOLDtcVwHTtedkYL71TahAXyKWFQ%3D%3D\"}]}\r\nServer: cloudflare\r\nCF-RAY: a2750025ec58723c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9,"size_decoded":617,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"9d1ead73e678fa2f51a70a933b0bf017","sha1":"d205cbd6783332a212c5ae92d73c77178c2d2f28","sha256":"0019dfc4b32d63c1392aa264aed2253c1e0c2fb09216f8e2cc269bbfb8bb49b5","sha512":"935b3d516e996f6d25948ba8a54c1b7f70f7f0e3f517e36481fdf0196c2c5cfc2841f86e891f3df9517746b7fb605db47cdded1b8ff78d9482ddaa621db43a34","ssdeep":"","tlshash":"a250000c0003c3cc0000003030c0000000000300300000300000c000000000000c000c","first_seen":"2023-03-08T03:03:03Z","last_seen":"2026-08-20T04:53:44.464484Z","times_seen":89413,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashcat-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/1902980d.js","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://cashcat-claim.xyz/","date":"2026-08-07T08:44:44.617Z","timestamp":1786092284617,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /1902980d.js HTTP/1.1\r\nHost: cashcat-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://cashcat-claim.xyz/\r\nCookie: __v=1ad0648d-3789-479a-9876-f6af2c3b0df3; cf_chl_rc_ni=2\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 07 Aug 2026 08:44:44 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=14400, s-maxage=60\r\nlast-modified: Fri, 07 Aug 2026 08:42:42 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nAge: 122\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5a08g3tAgcBH7D0HiQNumw27VOVegMV7C8FFs2uzXmnCFAKuTOkkeOyVu%2F3S3o4aZpgv3jsKkkgXBIh5drWx%2B0Sm8reHXkDi2fq0o23QMLoHWgY0EUW31ES63uSS7UkG2QwTSA%3D%3D\"}]}\r\nServer: cloudflare\r\nCF-RAY: a275004ad93d723c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270268,"size_decoded":144971,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1c52e4008cf10a1102670397988bf9eb","sha1":"9c467faa0bf00a70313e10b0578aaaa7c10a2dea","sha256":"1902980dee9c34465d510fd6d38b9253783febc820f5e961d2551b967c751511","sha512":"616824ad8b6c06eb58f068b535347b166a5cb18429c2104f0fe949689018110df9cac9f49be9a44ef6ac25070f9b8739dff56beb5f8d1988fd278a1f574997f6","ssdeep":"3072:47kXxdtpjQFqAmt7yW0bXHzv9hvEPOa+vbD4Z39QC/sJlSBgGQqFcRByVix2Un80:FxdDuNxPvEP98DIcSGGQqF2BAiUpG","tlshash":"6b442cc177a1b4a362fc32f8d02f5626519bd8123818f5c7ea2dede944f5980837da39","first_seen":"2026-08-07T08:43:40.727992Z","last_seen":"2026-08-07T08:45:21.46475Z","times_seen":2,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashcat-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-07T08:44:45.971Z","timestamp":1786092285971,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: cashcat-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __v=1ad0648d-3789-479a-9876-f6af2c3b0df3; cf_chl_rc_ni=2; __p=QN7wiF0S0tSMjS84JFsiqx8bMN%2FWS2WjvJIHeUWXHETEhpXoD2nMXFw7qpdKD7cNPYr28MH9WFnz1kfg1KqRtlh%2FCG4sfUTEFwnZdWnnp0W%2BaQUJlplcDcIXepfDqA%2FY86TLvz%2BSbYE4MNiTdsTE3ST7wv59vznvbvwbH4KCKZjgmkO%2F0hlAzmiCZ5JNR1SV\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Fri, 07 Aug 2026 08:44:46 GMT\r\nContent-Type: text/html;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nset-cookie: __p=; Max-Age=0; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT\n__v=1ad0648d-3789-479a-9876-f6af2c3b0df3; Path=/; HttpOnly\r\ncf-cache-status: DYNAMIC\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wtu%2BB3BRbeQLJ9giRszBhk8GJeh1qmPdOVde9oXB0UdrkTfLYptj1qXIaaWPygNCvd2H4gHjGwFZpMxD52x4jKi5ss8BfvkMQZAqvA2Erdrj0XqF%2BwxyFILvFErAhFNxmiTMYg%3D%3D\"}]}\r\nContent-Encoding: gzip\r\nServer: cloudflare\r\nCF-RAY: a27500534e9c723c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6122,"size_decoded":4438,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (6122), with no line terminators","md5":"68c33839d3716455d90038a5e649e43f","sha1":"b56faa100a2c3177d477a72fdd1fc5092afa6f49","sha256":"7690af7bded0a1360c1e610057b12448aa1d066b0c6712f1052bb242503616fe","sha512":"a5ddf788d5744372f271f6727b92f60feec0c8ea2cf38145c78bfb4ff57a19f183debc91dc5c00a72f52dda405ffd6f30edc73c68c1333860de903e35f15226b","ssdeep":"96:PNyStoXZzIEb0EaW87uKn4BB3BvPU6g+oh5zAIhC8kvDW6DNXiQdYzueh8VCmw:PNHtkCBT4BxuzybJxXiQay/lw","tlshash":"6ec13ceaea72806297ba5f9210f7b36ce23163097b05a1c5e1a2c71d92def5f81151cc","first_seen":"2026-08-07T08:45:21.469751Z","last_seen":"2026-08-07T08:45:21.469751Z","times_seen":1,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashcat-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/cdn-cgi/challenge-platform/h/g/fo/3229494961:1786089914:g7HcKudOcVCU3yJ6mKOCrEKnA2dV0Kq-7BilLOLgKLM/0b408245a4bf717c/fYZGoEkldHdp87_qUPgC3MWLiZtdI9x92jn6EaZ3TIH-1786092285-1.2.1.1-gJ9Uqn9cA33jp6TnOxSj4o5ia96-osWlLPc7MPU40dmiEmIPmMrQpT1CXMaM4x0T","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://cashcat-claim.xyz/","date":"2026-08-07T08:44:46.268Z","timestamp":1786092286268,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/fo/3229494961:1786089914:g7HcKudOcVCU3yJ6mKOCrEKnA2dV0Kq-7BilLOLgKLM/0b408245a4bf717c/fYZGoEkldHdp87_qUPgC3MWLiZtdI9x92jn6EaZ3TIH-1786092285-1.2.1.1-gJ9Uqn9cA33jp6TnOxSj4o5ia96-osWlLPc7MPU40dmiEmIPmMrQpT1CXMaM4x0T HTTP/1.1\r\nHost: cashcat-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\ncf-chl: fYZGoEkldHdp87_qUPgC3MWLiZtdI9x92jn6EaZ3TIH-1786092285-1.2.1.1-gJ9Uqn9cA33jp6TnOxSj4o5ia96-osWlLPc7MPU40dmiEmIPmMrQpT1CXMaM4x0T\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2327\r\nOrigin: http://cashcat-claim.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://cashcat-claim.xyz/\r\nCookie: __v=1ad0648d-3789-479a-9876-f6af2c3b0df3; cf_chl_rc_ni=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2327,"data":"bvYvUDReHxw83RZ69oIZsrVe$T9yBqijyefUhBgahya1J0YSgmIiGCOZZBk2iu7pNuTuYhPNmUkuOrtOirQMPndDH7C8kL+lwH+1PLg5K-8jL+sL7qS7Jw-whC66tMBKHnLnu6jEKARCg-DCOjXY$t-sXXbfBtGrOUZBhJqqxNk266$$+G5El2Ux8-m8-5AWKXyObG7bnJ7muNZZ-2l5miIxP0e1VcH5$EP8XIPUoS9HYpevxzWx28$k-+l$6xpmA60UkbbObTFfvWLw6cAYIZljGCPKg1bvtqMs78z+7rKLs+UPzBis-dUkRK9iDF+fsFv8mAEa5z5OvX-GwrhWp5hcc+21jKUz9Bw+9sicR+Rt5Aaz2H6uum$VOPywtWGPGaxnY7V2mbsv0w1f36-RYTvitcEICQc$8W+LTxzjEBmPZqz0dxU8AyQg53YaAVPsOn+jYZysZGy$qqEMrSIymnVqlx73Xk0PoIEtPq3PIERKXgy+EXAk$NB9gZpzzW7oyiJKnNndpWGCkkSUi7i1hNOMo-LuqiFKW5ZI09ESpZGu7saZUUVu9t+pg9+cPboVhRVUVpVDrJrjqMlONiV1P-96mA89sjWQ$fA8-HYt3muLBplyOKCY6SS0n+Kq9gGbOhnR0Q723SFt9cJ0AYYVF9+SkPWxuwWAbLFbXQkfCQx+r$zvN0csV+uH2uqnPLgwdc7LjmmeqIFh7gqfmRzO0IExmzUQSpbv9Cxl8qKPuAzu3Y23WJ8dLU8iVyjHqBT6mW$qQ7HfJWABEH0HP-J0REeOs3pYbQcn7B8dEEsyW1V5jsMGLKWUCpHuX8vQkjJSlBwmd2Eeipj63LiqRVG8+zTjAjJhSb+gkVl8HPTnGyn5FhYscJm7uBC2ztVC9+gcRt+0o7eLxUpAR3I+uKaGP2qTKgw6RmYjOC6J8hoqbs+6ztaLSRFQg8q8QoqXfogT6V-wuJZfRwAWXwZZLNbG1okHjun3kFXR7WOmhuEYO6GXLSNlxtGkU8VScj7bIs3k-CHxt-HMZZTQNku$uQdGuSr6jjE1PLCNUwh$Iivco8klRrP3v8kYFGOtibEbkPzz9JRRu2O3lszFIwV9AKlodd7Xd2h1Wv5ay6RAKYDA+dyp8kmMPwlYhcep27C9qScGHDp9K-1q9xPAZsMwkZ1UYxSkoBkI$15bMnbsvEk0A3aTQoyvEOsiPjuL6kLySeJzvrY-sPodDx5Jia1MmPWhzOkJ907wrF1BDt3QwL+lN3SxbQWZN5Z-UJKD2OnH8mOwobSHNAwM1RWyz7nMuipVU6FbxFwzdq-mtrD5WGph$uPgC8nIRcb-PZ5TNdYIMGO+O63DvS-sbZcICn50irrZqXH7WtN-sQaipmXUNyiA+dlvKqJ302M-6mzglDAHaFR-8uPIwtooxmt2DfN2rn5BHwZJkiqSVpzDoGti8cYFn9t$cixGPiln39RNzMdXvDx+rnwq8lEC2Rg$cIs+Y5OzOGyrtW8NnPKw+MztMf1SjBjmEyD02Ps8ZeGEtcAK3SxJu6mGDWb0cqAGouZJL2Mrs9F$YiVHrN1kjyrHSVMG$rH$9aW3lKQZHqj7TeJWRJtXhclyvWnBtpCW$nBQKePXZPa8uLb9Vc3cWq78JO1GqXZS9VAUnUuzBHWhiSEvL3GAgYaEVy3caf03mofH6mtz77LoQJEAFV08QvhCtPRSMy1nJS1cZydUnaysoxdRpQZwL1STk1Cl8gAOfIQ9rp0Wg3wdCRdgCvmuo72HoMG6rRZZO3eKUOF-sQ-SkwP6HlaXSYL-NCfWs-o5oCZegYQnRf2$Y28z8lMWZAhPsg$xdKKlUjzlvMYURHyM-xSAjy5wKJa5lwA6P-tBTWvyvMDaZdUVj5HNZpUPxckIFAJ$Y3Tc7Fqubzp+jPK6RQaNxE2M9LgwPA+Pchhcpbyfh0NnFtqxDkbw1WJa6OUza19QC9Np0Mw9O-7rv-a1ioQpsvG-j79XuSJmMIDU9zi7eo1h5dBpr6uc1RTqq6bragTjCg9vg2OleRYm2eLFrzLCPKnPUq8QCV+fTlpGNapx2oWHwb8KZcZPwD2P9tBYJes1RyMbfDFIBQhUAS5DIU+wRRYXWaKMpNamv1mVi-anEhIHQ7I$PK7oovROVeiTgsxv0$-j8zzin8Wq7YipGDvAQJi0sQ8VWUebZmsbsGFKjC5ddu909zTczIbc6TxarL9DAeqOiJKR7g+iwWbS5IGmhFS2yooN$mu-K5RbSaqEbrJYP6h0ACKGBrFtIx-1wjAkQ$3uOIiaszKauT56Qmz5bOpd2qGT5P3dgO9W67zsgXhE18x"}},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Fri, 07 Aug 2026 08:44:46 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\ntiming-allow-origin: http://cashcat-claim.xyz\r\nServer: cloudflare\r\nCF-RAY: a27500552cb4723c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":3445,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T05:30:38.622725Z","times_seen":17985273,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashcat-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/1902980d.js","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://cashcat-claim.xyz/","date":"2026-08-07T08:44:31.475Z","timestamp":1786092271475,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /1902980d.js HTTP/1.1\r\nHost: cashcat-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://cashcat-claim.xyz/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 07 Aug 2026 08:44:31 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=14400, s-maxage=60\r\nlast-modified: Fri, 07 Aug 2026 08:42:42 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nAge: 109\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xZp8ukfhngN%2FmIUDZ98aVwcFJ9hRHFHRRlkec5OJcpsuBmWHs9PpAN5wtVYl6pnVyBx%2BYc155ek4fsGx4QQLwtORi8kw2RsOZriRZplWSjT22SSNi0u9iEK0eiMfsq2URe4qgg%3D%3D\"}]}\r\nServer: cloudflare\r\nCF-RAY: a274fff8bfb9723c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270268,"size_decoded":144971,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1c52e4008cf10a1102670397988bf9eb","sha1":"9c467faa0bf00a70313e10b0578aaaa7c10a2dea","sha256":"1902980dee9c34465d510fd6d38b9253783febc820f5e961d2551b967c751511","sha512":"616824ad8b6c06eb58f068b535347b166a5cb18429c2104f0fe949689018110df9cac9f49be9a44ef6ac25070f9b8739dff56beb5f8d1988fd278a1f574997f6","ssdeep":"3072:47kXxdtpjQFqAmt7yW0bXHzv9hvEPOa+vbD4Z39QC/sJlSBgGQqFcRByVix2Un80:FxdDuNxPvEP98DIcSGGQqF2BAiUpG","tlshash":"6b442cc177a1b4a362fc32f8d02f5626519bd8123818f5c7ea2dede944f5980837da39","first_seen":"2026-08-07T08:43:40.727992Z","last_seen":"2026-08-07T08:45:21.46475Z","times_seen":2,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashcat-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-07T08:44:38.591Z","timestamp":1786092278591,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: cashcat-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __v=1ad0648d-3789-479a-9876-f6af2c3b0df3; cf_chl_rc_ni=1; __p=458HClMDHC%2FZIH0MkemCcfv22FHEj%2BQmSYi254Ef39SjThPtjKO5auQVzJMbfGrqExvVXHZRBikgyR5LyKESfVvkFEB7ztJ%2FNyABQJsZxqzXViXL355gUf%2FeqO60KjrrXkFpQSi2rqqizNmd0ip9rSF%2F0ZKFkzuqyfFo7t7I6EWRiQu8noHuVxWpXuVgXLKA\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Fri, 07 Aug 2026 08:44:38 GMT\r\nContent-Type: text/html;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nset-cookie: __p=; Max-Age=0; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT\n__v=1ad0648d-3789-479a-9876-f6af2c3b0df3; Path=/; HttpOnly\r\ncf-cache-status: DYNAMIC\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PG6h4b18a20pUMWNYJhKknB1XvRSuSHGTmdX9ZM8alVx3dNi0XMRT%2B6cDVcU9P6tfXKZSklV6xg0iHie0iagYEsAFUEnEZbgd967Nh2tNBelbHBrRuli6K2eqUADxz8ba47ENg%3D%3D\"}]}\r\nContent-Encoding: gzip\r\nServer: cloudflare\r\nCF-RAY: a275002529a6723c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6126,"size_decoded":4439,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (6126), with no line terminators","md5":"1866e14157ad5690bd9b19a37c0ab170","sha1":"10de3043f983cd9fbdf7b46b95a529cd77405e85","sha256":"d300059f62e923728a45bc36995b47c7429fcaf2dedadb126709b61e4018559e","sha512":"a7fd6df8dec2b8538e2b02f55171b6ef060d72c80897ed3bebab0241d4b786d3516836cd6f1afae963e8f85209f66fcd7856fe49f6d7a622218d548425d2a441","ssdeep":"96:PNyCGtoXZzIEb0EaW87p5FWGAKqPNjSsOrZZw55Q+7IZgkS7pIcAjygheJUXYzum:PNZGtkCBp/WGA/PN03wDQ+8OkWIcAj0V","tlshash":"afc12ad3e9b204679bb56f8265b3f3ad5320b244a705c0d8d6a1868cc6def8fc11a1c8","first_seen":"2026-08-07T08:45:21.471086Z","last_seen":"2026-08-07T08:45:21.471086Z","times_seen":1,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashcat-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/cdn-cgi/challenge-platform/h/g/fo/3229494961:1786089914:g7HcKudOcVCU3yJ6mKOCrEKnA2dV0Kq-7BilLOLgKLM/494ffaae481e717c/FPwscx3SordnTFk-HnVvgkrzWWFy9T3qAD11sxoHc5e-1786092278-1.2.1.1-xNiUxHHL-ZcrULL8x-m833g9Mus8NZexUXlUgn19AylX3yaOQnzhjeqXz64N2Hnc","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://cashcat-claim.xyz/","date":"2026-08-07T08:44:38.905Z","timestamp":1786092278905,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/fo/3229494961:1786089914:g7HcKudOcVCU3yJ6mKOCrEKnA2dV0Kq-7BilLOLgKLM/494ffaae481e717c/FPwscx3SordnTFk-HnVvgkrzWWFy9T3qAD11sxoHc5e-1786092278-1.2.1.1-xNiUxHHL-ZcrULL8x-m833g9Mus8NZexUXlUgn19AylX3yaOQnzhjeqXz64N2Hnc HTTP/1.1\r\nHost: cashcat-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\ncf-chl: FPwscx3SordnTFk-HnVvgkrzWWFy9T3qAD11sxoHc5e-1786092278-1.2.1.1-xNiUxHHL-ZcrULL8x-m833g9Mus8NZexUXlUgn19AylX3yaOQnzhjeqXz64N2Hnc\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2327\r\nOrigin: http://cashcat-claim.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://cashcat-claim.xyz/\r\nCookie: __v=1ad0648d-3789-479a-9876-f6af2c3b0df3; cf_chl_rc_ni=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2327,"data":"5hEJgClOD0Dv3KMsUpUPFIJTLl81WM8ewSw2rr6IveEomkugElRkF32pwKylcku6q6yIAo5ueM2ucn9CpLuqGND7Obwxny-zsrY-RP0fqdWMneIefVnGnmwGnnzt1mKy0eR35ZIRFvJNoFZFvIE9Ragw3YSUDOVSITEK$p0EMC0HoeHQS6mv5Upei5TyPfRXNrN6qTHznArM7qGJcDUSOj5gXMbGYSioY9NBiYShz6As8mNq7pBGFHei5osbC3Vjl5HAXlLm-P$tHnxgLo0igD9GrhgpCUGWxftcFVkdTFsaIrePIW3lJSwfl75tL3Q6e8wWI1OhFrj6InB+IfB-bv+XjImZli5lAjmrSoMHK7DCMunc62JBhCX+5JwVZNwQrewZUZSUisnpjZ-VqHyVSY0G+V8UQK13QADBE-3Rphx$IqHPcR-81ECsK$3A3EgG2DCukMQk9ZIvman1zIWK+XAxonH8vaX5gezHgGh3F0AH-Q0RO+3Eu6+0hT+ro7tg-II5ikybLnPuf+Nzk637kc$kIVUIo3n0zKuH+MDSdv6+cJ2fYGXWTXYvTW$cQbbWu3lezdN3g5xlD8wilP5cgRqqntIzqlrtZuvSjauCkZ3biy1caXmy1pNF7oygrh-oGyotlGy9mD0wKU6+wdRb3vIikrfZMYhjemqeJAMv3o0iMpFRnvhTy9a1Bshr2L2EW7-5$Ay2oUceQ3z3viwK0zWtv-Qcj6yDoRlB0gY99VJUq3tFrfGYqDElUvxVCzpMdYrK22bL8kZtHgt-m+aGpEpddae+LbhJUslQbtK5cp-jIa+kpALk2BLmqd8pH6H5s5hlo1A8I7A+6dLAa7Ux5qlM0O2sJhBPhVIUFvZQqBJBZ3CfBtdK+IKl9oAp7F7SjnsoHf8ssjNGwZS0BLNWXs96-EtvbP0yYSyp7lv8mYV1Kut55Q8g2jn+pj93tH$ZW$vtsiv9jqiZejOnW5GFxAr0Oag6hF$7tDx9YNdNmPEhlLytymdxIEXN-zuGYaxDjYzdiCfsLpREhIpmZZC+Oy6K866-+O2OK71HV$Q-crLwopAeBsEbxhn7RPS136GjY5SYzWvXsD7vClNTCjUoyRBsl1UD3VDykCNB8UH2PQFWoMWM2Egec5sB8pQCgEWMk$anbUklhuJwhgG+x+t+d0-JwB5QuQXwcEEHUi6h0wc$gkqE1bhDrui$TpIM3OKSDQkyx$cx8xQhDmzOyPjUlKaLrq62TV-nozWdZ5r0vLnB93dVl9IJfDcDWQsvSIxmvr3G+ccsoxsfsGGNMYFmwU-GZVJSjjNVNoNJOsqpGkisnBpOpyj2aH0rQAH8K8aq23ZAzDxbBKhBEB9P-gXacBse5Qw96irOioaVqPWAh+$s7zrTznO8JRIGKZOzwS5k7Uiw$j80UlHhtG+gWJhww81mSKzivBygFkFT+lgOHzB5VyDPExYPU-BWWusED3Gi2mir55u6fkHCff$7aiW2dXCoX8NpwEAK6UTn5OTCHdHMiOuaCsc3HgMkp1uAh3oQ9AyAn6Pk+3hL6rM6DLx1nw00iGt9azoIMi+Gm2cJJ7UvrFc+OwyXoRVOmDeEFVKGZdwr1qVw7mHvm7dKQu1U7x02G+bm6yVN7btTKVHvLp$OV-8zs-E3bZpk18fzAUccridULPChtVHk23kv6zMPz5$gn5nVsIZLVNoJuWgbpuamoBQCsyNeyVbTzKoeUF8JP9Uxjch2KglJ-YrkYIUyPVaWfFNcpTiqmUG7-qmqx9iGpvhoPB5J1iMgG7YREWwQ$uzfdF7nrwil+JDgvIwhmSjlrUdtyGQ1Uz-RyoDV2HiR7j5lqXSantopHW2m2l8nN0Mc$iJrErpssbTqYb0BavkjZ0Iue52YO+-3zPnD7PsBxsdsL$7XuG8ymkUNlP51QIUS652ay6ditxW$GAq0I5G1V+vIGnRnn3NxxFIaUPUb-mPb05LVXz3xUlrGH+V1jkzDGvn1txC0s0Gu5lyLvwdgbkry$rw1gBUUoFS3waaxCNeToTwHmZsezqODLBAqDgoqmDabEMdrDnVv5VSe$cgeKY$thjMjSsndKDrk3ZbNDrasbessp0cnvYVt09B6$jOKEK3TenKDVRjidobEBdeFMVRTj3lPR9m-q2tWwCzVEu9I3C91lXRbE30Lyj9+QktP6DSdvCln3TXm+-UnSwebJGEJXHdzpjV-js+Z$XTqZi0KRPhyRV0InwqKmHJzKaVMzu2Rz2Zvgw9Wmo97ygchb1BHOvuJ0G8m6YKi2BY6IG$UxzrvkzavVsk6tIiwOHoti92pRmRO8CMk9PGgiD0"}},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Fri, 07 Aug 2026 08:44:38 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\ntiming-allow-origin: http://cashcat-claim.xyz\r\nServer: cloudflare\r\nCF-RAY: a27500272897723c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":3445,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T05:30:38.622725Z","times_seen":17985273,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashcat-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/1902980d.js","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://cashcat-claim.xyz/","date":"2026-08-07T08:44:55.984Z","timestamp":1786092295984,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /1902980d.js HTTP/1.1\r\nHost: cashcat-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://cashcat-claim.xyz/\r\nCookie: __v=1ad0648d-3789-479a-9876-f6af2c3b0df3; cf_chl_rc_ni=3\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 07 Aug 2026 08:44:55 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=14400, s-maxage=60\r\nlast-modified: Fri, 07 Aug 2026 08:42:42 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nAge: 133\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7aYNu8RqGu7c38BP%2FywWYCZQkqXTTi2bxoNiPvKgIgS%2FFOrEclJir%2FT3jUR7gqHt3tGj%2BdUp%2FxDwthmP5vmmPXRnxCi0jo0d55ZK9IxSoNTUnd20PtjUXP65Gx0yGa3z48Doww%3D%3D\"}]}\r\nServer: cloudflare\r\nCF-RAY: a2750091ec69723c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270268,"size_decoded":144977,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1c52e4008cf10a1102670397988bf9eb","sha1":"9c467faa0bf00a70313e10b0578aaaa7c10a2dea","sha256":"1902980dee9c34465d510fd6d38b9253783febc820f5e961d2551b967c751511","sha512":"616824ad8b6c06eb58f068b535347b166a5cb18429c2104f0fe949689018110df9cac9f49be9a44ef6ac25070f9b8739dff56beb5f8d1988fd278a1f574997f6","ssdeep":"3072:47kXxdtpjQFqAmt7yW0bXHzv9hvEPOa+vbD4Z39QC/sJlSBgGQqFcRByVix2Un80:FxdDuNxPvEP98DIcSGGQqF2BAiUpG","tlshash":"6b442cc177a1b4a362fc32f8d02f5626519bd8123818f5c7ea2dede944f5980837da39","first_seen":"2026-08-07T08:43:40.727992Z","last_seen":"2026-08-07T08:45:21.46475Z","times_seen":2,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashcat-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-07T08:44:31.009Z","timestamp":1786092271009,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashcat-claim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 12:40:54 GMT","end":"Tue, 03 Nov 2026 13:39:13 GMT"},"fingerprint":{"sha1":"88:D4:5D:DF:0C:AA:13:A6:D5:F0:E0:8D:94:F4:8F:D3:82:E3:09:88","sha256":"C0:95:95:E1:4F:6B:0D:C0:23:80:BD:79:1F:8E:A1:D5:04:A6:8A:4A:90:E2:16:0B:65:E3:D7:6F:38:82:C3:5E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cashcat-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 \r\ndate: Fri, 07 Aug 2026 08:44:31 GMT\r\ncontent-type: text/html;charset=utf-8\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qV5EvdYAT5bHG4gRqQppnM5pRFL1KLpknLkgMPZcXkQiLsNh%2FFmUCSehlE2%2BEILah2brTSF74rSJgqMPzp6OtufTQlUhAfbryxSL9SdkGyNiNTFlKNaGAQpde5N%2Fe3ZSO9IcyA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a274fff5ed3756c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6164,"size_decoded":4399,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (6164), with no line terminators","md5":"5d9050c4a48b1f7b182526503badc37a","sha1":"8196330208b608e2db89dd7bb111b5566b1f442c","sha256":"76e17dbd7c3915ea3cc7d2564e8e60e45f693e9b67b7aba8e19eb3654fd38456","sha512":"b10a62663d2b6b58e9a6a55edb96abb9d6fcafc8c55e70c6e59009bdf307742e9cb3b179aa83947ea801236b9d981feb2f003c2dead3fa6b037f19ecf4fd773d","ssdeep":"96:P2ystoXZzIEb0EaW87U6K2UPehg1MxhPAtdQNSgU06f1VZKs024L2HXT04pnYzup:P2ttkCBM2iGhiYS3ndVRvRT04Gyiw","tlshash":"17d15cd7c9b38039a3a9e7a155b7b3aca330f384b60201d4d499c5bcd6edf1f8165194","first_seen":"2026-08-07T08:45:21.472339Z","last_seen":"2026-08-07T08:45:21.472339Z","times_seen":1,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":131,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashcat-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-07T08:44:31.303Z","timestamp":1786092271303,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: cashcat-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Fri, 07 Aug 2026 08:44:31 GMT\r\nContent-Type: text/html;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\ncf-cache-status: DYNAMIC\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0zkKb9x6OSqmTlc2jxLz%2BDuYuZFBhrVEU9WK%2FTWMT%2FhxAdTc5vLenoKbM9T5fqemUzj56hJikwsjBnTu0CIjOCbr3osL9TakOLyvxfGyGYMYt20m%2F6ClcsixYtrtw4S7gb2gCQ%3D%3D\"}]}\r\nContent-Encoding: gzip\r\nServer: cloudflare\r\nCF-RAY: a274fff7ac2b723c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6164,"size_decoded":4333,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (6164), with no line terminators","md5":"cfc30dfbde6f8cbc45e9c48016c5f6a1","sha1":"b273383fcbaa26706bf4a06e78f4417d24781445","sha256":"1bd92d6270a94e118e7d2f61ab9cc1b7bb0b71f136654aa1797fbf969062b503","sha512":"584b9ace8ef60eedc991f896ae73d48ea8d9f0d64bfad188dbcba2952b0e68b4d2405b7fb4a8bae945b52e1a6fef8635026f9520e543c7d01b6d5f5f0033907d","ssdeep":"96:P2yktoXZzIEb0EaW87gYWLGHGV9V0967L9ft4N+LLnd/D/EhkaW7CKbfLrY5Yzu2:P2RtkCBhWSsV098WWd/DXl7TL8Oyogw","tlshash":"1dd14bf3ae76203763ea2b52647772189670f21eb70045e296a2c63d87ddf4b8164089","first_seen":"2026-08-07T08:45:21.473368Z","last_seen":"2026-08-07T08:45:21.473368Z","times_seen":1,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashcat-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-07T08:44:33.076Z","timestamp":1786092273076,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: cashcat-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __p=OmsUAbvWBJ%2BMfr1wlc8u001GOhW886p0qXOAonbf5EnkvIZWiy9%2BNPm6UogETRcK4XeOfHFawJ%2BUr86LkUFb3%2FJ1RbQBcZO0iNUMfPHSjb%2BZdIrvP1IgUmL2u4zHs5XBna2JVzxeesibPmOM8%2B3fA2VsoJuMcMj2SPr%2B7rnLUpbdOZfKcVIl2LZQdFrpVal2sg%3D%3D\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Fri, 07 Aug 2026 08:44:33 GMT\r\nContent-Type: text/html;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nset-cookie: __p=; Max-Age=0; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT\n__v=1ad0648d-3789-479a-9876-f6af2c3b0df3; Path=/; HttpOnly\r\ncf-cache-status: DYNAMIC\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LuXqmzkCgAPmgF9Of4T0OkjYzuafc5YR6Wo7Iplz5coq8uQbTlXdU2WsaDORJQuIoffhfHvw21vxklQBT%2FsiEsnjAEoSw0xXI0qFdIf736f%2Fk8M2Whb7jA8VxxvMpVX3nNfDGw%3D%3D\"}]}\r\nContent-Encoding: gzip\r\nServer: cloudflare\r\nCF-RAY: a2750002be92723c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6134,"size_decoded":4444,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (6134), with no line terminators","md5":"1b878a21c852e4f651466a9ae484153d","sha1":"9dee8102309401bc625821802db4de123ae5ba40","sha256":"b2eaf8b1421a2a3e702dda821c3dbf25863eaf51e3769b8435aea9ae5404eb1d","sha512":"17b63089cd63176af29dcc0e731078b9241ed601fae1ebb9987bc296e2f1c969b2a20c2ab41619c206b964d2a87d78c13aac52f8c8f2847e9ae9872389e62635","ssdeep":"96:PNyqtoXZzIEb0EaW87eX9Zpl1Id+JcjC7+lSKbhyr2Yzueh86mw:PN3tkCBqZpkdgce+lSK9M7yzw","tlshash":"dec15cf34a3140bb53bb1fa920aa735c5250b544fb024262f1e18e7c12eff4fc294188","first_seen":"2026-08-07T08:45:21.474525Z","last_seen":"2026-08-07T08:45:21.474525Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashcat-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/favicon.ico","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://cashcat-claim.xyz/","date":"2026-08-07T08:44:46.078Z","timestamp":1786092286078,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cashcat-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://cashcat-claim.xyz/?__cf_chl_rt_tk=kMNG1VCckBQrYJXHlkvJhmlsg9ylOhx_HM36R6tdCgl-1786092285-1.0.1.1-g5F-wctR5kM0Vk3cdMAvQGCxYkMEA2GyCJ70MqGxQ8u\r\nCookie: __v=1ad0648d-3789-479a-9876-f6af2c3b0df3; cf_chl_rc_ni=2\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Fri, 07 Aug 2026 08:44:46 GMT\r\nContent-Type: text/plain;charset=utf-8\r\nContent-Length: 9\r\nConnection: keep-alive\r\ncache-control: no-store\r\ncf-cache-status: BYPASS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SljQ3dkuk3IwCnb03ovxQOQoCp6pdkRzrr4c9DCPfjelkMNDG8fMUf7RNq%2B4NbHhNZG2TL2VU1TOyMoKMqzYaRGPLpeV%2Bi%2FA%2FgXHmYxbovTbz%2F%2BRbS%2BD6DRPXnnTslWysUXbxg%3D%3D\"}]}\r\nServer: cloudflare\r\nCF-RAY: a2750053f8b0723c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9,"size_decoded":619,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"9d1ead73e678fa2f51a70a933b0bf017","sha1":"d205cbd6783332a212c5ae92d73c77178c2d2f28","sha256":"0019dfc4b32d63c1392aa264aed2253c1e0c2fb09216f8e2cc269bbfb8bb49b5","sha512":"935b3d516e996f6d25948ba8a54c1b7f70f7f0e3f517e36481fdf0196c2c5cfc2841f86e891f3df9517746b7fb605db47cdded1b8ff78d9482ddaa621db43a34","ssdeep":"","tlshash":"a250000c0003c3cc0000003030c0000000000300300000300000c000000000000c000c","first_seen":"2023-03-08T03:03:03Z","last_seen":"2026-08-20T04:53:44.464484Z","times_seen":89413,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashcat-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-07T08:44:55.888Z","timestamp":1786092295888,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: cashcat-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __v=1ad0648d-3789-479a-9876-f6af2c3b0df3; cf_chl_rc_ni=3\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Fri, 07 Aug 2026 08:44:55 GMT\r\nContent-Type: text/html;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\ncf-cache-status: DYNAMIC\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MInLy5tTbK9aoUr%2BILv0uSu5Gn02nCPtjzWhNa%2BlzSXmOgo0kz%2B8bPECt7uv6dTtrCI0uH9RtHS%2B4gXh5RWA06%2FigXXFWr86RSWyn9a94DT5JUYQ8qo4a2LH89K4Ir%2FOjwMeIA%3D%3D\"}]}\r\nContent-Encoding: gzip\r\nServer: cloudflare\r\nCF-RAY: a27500914a3e723c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6168,"size_decoded":4342,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (6168), with no line terminators","md5":"b6b91a0dab9c9b16eabfc7471e9ea3aa","sha1":"3894f6096a5c7c553224550abe6baa119ec95b2e","sha256":"7fbcad1b40bbb565e5849b989e7502b879c8e44952c34580d25d8a8430ba2749","sha512":"7e60af229edf726068b4c87b04dc153f520b0b609261f4754ae37b5bfb067bf1c73405e6402c2ba687617993ffdbcebed2e7e06fceaaacf396ce600379fbda4a","ssdeep":"192:P2KtkCBtpANi6d668ENIJ4imYf9RGNSKyc6mw:EyplwT/K9ON7/w","tlshash":"d8d14ce69f30403753d5afe295b7f19c12717699b701a0d0e6e4889c43eef97c91a0c4","first_seen":"2026-08-07T08:45:21.475654Z","last_seen":"2026-08-07T08:45:21.475654Z","times_seen":1,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashcat-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=494ffaae481e717c","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://cashcat-claim.xyz/","date":"2026-08-07T08:44:38.686Z","timestamp":1786092278686,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=494ffaae481e717c HTTP/1.1\r\nHost: cashcat-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://cashcat-claim.xyz/?__cf_chl_rt_tk=opNrjUX6yL_kLEFuoBVnOb78qaH6yLRA8t_Y0Ix9GOb-1786092278-1.0.1.1-pOizX6n4kzQAUopZYMjx_yKKbrX44LzkxKcMd8xvNB2\r\nCookie: __v=1ad0648d-3789-479a-9876-f6af2c3b0df3; cf_chl_rc_ni=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 07 Aug 2026 08:44:38 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nContent-Encoding: gzip\r\nServer: cloudflare\r\nCF-RAY: a2750025cbe8723c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":226211,"size_decoded":79910,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (34156)","md5":"822bee91fc699727d7d3cad863e54162","sha1":"02517e106772d90d43bfe6d4e2853bd4c47666ea","sha256":"31faeccc679de2885f89435e0fe40633910452590c5331cf4937948e553c4a86","sha512":"e51cdcea7ff8bb40888300262abfd8895cc073a282920bcdb38a125b1e0ae5421a386e4f5f0bbd01127b92200ba78f6c8ddfaf9afe52413a7003140eb5a67cdd","ssdeep":"6144:1Smv66duximChZlZLGiDvLRU2kUcq6C6k09ft:1FfPLTD/0ke","tlshash":"6a24e789b496744b2302e4b8107b70cf75ed4c8860381a7de13399987f62b7f55eb9b8","first_seen":"2026-08-07T08:45:21.476872Z","last_seen":"2026-08-07T08:45:21.476872Z","times_seen":1,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashcat-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/cdn-cgi/challenge-platform/h/g/fo/3229494961:1786089914:g7HcKudOcVCU3yJ6mKOCrEKnA2dV0Kq-7BilLOLgKLM/494ffaae481e717c/FPwscx3SordnTFk-HnVvgkrzWWFy9T3qAD11sxoHc5e-1786092278-1.2.1.1-xNiUxHHL-ZcrULL8x-m833g9Mus8NZexUXlUgn19AylX3yaOQnzhjeqXz64N2Hnc","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://cashcat-claim.xyz/","date":"2026-08-07T08:44:39.197Z","timestamp":1786092279197,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/fo/3229494961:1786089914:g7HcKudOcVCU3yJ6mKOCrEKnA2dV0Kq-7BilLOLgKLM/494ffaae481e717c/FPwscx3SordnTFk-HnVvgkrzWWFy9T3qAD11sxoHc5e-1786092278-1.2.1.1-xNiUxHHL-ZcrULL8x-m833g9Mus8NZexUXlUgn19AylX3yaOQnzhjeqXz64N2Hnc HTTP/1.1\r\nHost: cashcat-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\ncf-chl: FPwscx3SordnTFk-HnVvgkrzWWFy9T3qAD11sxoHc5e-1786092278-1.2.1.1-xNiUxHHL-ZcrULL8x-m833g9Mus8NZexUXlUgn19AylX3yaOQnzhjeqXz64N2Hnc\r\ncf-chl-ra: 1\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2327\r\nOrigin: http://cashcat-claim.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://cashcat-claim.xyz/\r\nCookie: __v=1ad0648d-3789-479a-9876-f6af2c3b0df3; cf_chl_rc_ni=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2327,"data":"5hEJgClOD0Dv3KMsUpUPFIJTLl81WM8ewSw2rr6IveEomkugElRkF32pwKylcku6q6yIAo5ueM2ucn9CpLuqGND7Obwxny-zsrY-RP0fqdWMneIefVnGnmwGnnzt1mKy0eR35ZIRFvJNoFZFvIE9Ragw3YSUDOVSITEK$p0EMC0HoeHQS6mv5Upei5TyPfRXNrN6qTHznArM7qGJcDUSOj5gXMbGYSioY9NBiYShz6As8mNq7pBGFHei5osbC3Vjl5HAXlLm-P$tHnxgLo0igD9GrhgpCUGWxftcFVkdTFsaIrePIW3lJSwfl75tL3Q6e8wWI1OhFrj6InB+IfB-bv+XjImZli5lAjmrSoMHK7DCMunc62JBhCX+5JwVZNwQrewZUZSUisnpjZ-VqHyVSY0G+V8UQK13QADBE-3Rphx$IqHPcR-81ECsK$3A3EgG2DCukMQk9ZIvman1zIWK+XAxonH8vaX5gezHgGh3F0AH-Q0RO+3Eu6+0hT+ro7tg-II5ikybLnPuf+Nzk637kc$kIVUIo3n0zKuH+MDSdv6+cJ2fYGXWTXYvTW$cQbbWu3lezdN3g5xlD8wilP5cgRqqntIzqlrtZuvSjauCkZ3biy1caXmy1pNF7oygrh-oGyotlGy9mD0wKU6+wdRb3vIikrfZMYhjemqeJAMv3o0iMpFRnvhTy9a1Bshr2L2EW7-5$Ay2oUceQ3z3viwK0zWtv-Qcj6yDoRlB0gY99VJUq3tFrfGYqDElUvxVCzpMdYrK22bL8kZtHgt-m+aGpEpddae+LbhJUslQbtK5cp-jIa+kpALk2BLmqd8pH6H5s5hlo1A8I7A+6dLAa7Ux5qlM0O2sJhBPhVIUFvZQqBJBZ3CfBtdK+IKl9oAp7F7SjnsoHf8ssjNGwZS0BLNWXs96-EtvbP0yYSyp7lv8mYV1Kut55Q8g2jn+pj93tH$ZW$vtsiv9jqiZejOnW5GFxAr0Oag6hF$7tDx9YNdNmPEhlLytymdxIEXN-zuGYaxDjYzdiCfsLpREhIpmZZC+Oy6K866-+O2OK71HV$Q-crLwopAeBsEbxhn7RPS136GjY5SYzWvXsD7vClNTCjUoyRBsl1UD3VDykCNB8UH2PQFWoMWM2Egec5sB8pQCgEWMk$anbUklhuJwhgG+x+t+d0-JwB5QuQXwcEEHUi6h0wc$gkqE1bhDrui$TpIM3OKSDQkyx$cx8xQhDmzOyPjUlKaLrq62TV-nozWdZ5r0vLnB93dVl9IJfDcDWQsvSIxmvr3G+ccsoxsfsGGNMYFmwU-GZVJSjjNVNoNJOsqpGkisnBpOpyj2aH0rQAH8K8aq23ZAzDxbBKhBEB9P-gXacBse5Qw96irOioaVqPWAh+$s7zrTznO8JRIGKZOzwS5k7Uiw$j80UlHhtG+gWJhww81mSKzivBygFkFT+lgOHzB5VyDPExYPU-BWWusED3Gi2mir55u6fkHCff$7aiW2dXCoX8NpwEAK6UTn5OTCHdHMiOuaCsc3HgMkp1uAh3oQ9AyAn6Pk+3hL6rM6DLx1nw00iGt9azoIMi+Gm2cJJ7UvrFc+OwyXoRVOmDeEFVKGZdwr1qVw7mHvm7dKQu1U7x02G+bm6yVN7btTKVHvLp$OV-8zs-E3bZpk18fzAUccridULPChtVHk23kv6zMPz5$gn5nVsIZLVNoJuWgbpuamoBQCsyNeyVbTzKoeUF8JP9Uxjch2KglJ-YrkYIUyPVaWfFNcpTiqmUG7-qmqx9iGpvhoPB5J1iMgG7YREWwQ$uzfdF7nrwil+JDgvIwhmSjlrUdtyGQ1Uz-RyoDV2HiR7j5lqXSantopHW2m2l8nN0Mc$iJrErpssbTqYb0BavkjZ0Iue52YO+-3zPnD7PsBxsdsL$7XuG8ymkUNlP51QIUS652ay6ditxW$GAq0I5G1V+vIGnRnn3NxxFIaUPUb-mPb05LVXz3xUlrGH+V1jkzDGvn1txC0s0Gu5lyLvwdgbkry$rw1gBUUoFS3waaxCNeToTwHmZsezqODLBAqDgoqmDabEMdrDnVv5VSe$cgeKY$thjMjSsndKDrk3ZbNDrasbessp0cnvYVt09B6$jOKEK3TenKDVRjidobEBdeFMVRTj3lPR9m-q2tWwCzVEu9I3C91lXRbE30Lyj9+QktP6DSdvCln3TXm+-UnSwebJGEJXHdzpjV-js+Z$XTqZi0KRPhyRV0InwqKmHJzKaVMzu2Rz2Zvgw9Wmo97ygchb1BHOvuJ0G8m6YKi2BY6IG$UxzrvkzavVsk6tIiwO2$bKdIMN$5t8CMk9PGgiD0"}},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Fri, 07 Aug 2026 08:44:39 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\ntiming-allow-origin: http://cashcat-claim.xyz\r\nServer: cloudflare\r\nCF-RAY: a2750028fece723c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":3445,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T05:30:38.622725Z","times_seen":17985273,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashcat-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-07T08:44:44.538Z","timestamp":1786092284538,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: cashcat-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __v=1ad0648d-3789-479a-9876-f6af2c3b0df3; cf_chl_rc_ni=2\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Fri, 07 Aug 2026 08:44:44 GMT\r\nContent-Type: text/html;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\ncf-cache-status: DYNAMIC\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vaXImpBa2D8djAtaiFyxWai9GRfTN4hkJ5hAdtEI8EnWw5RzQZTwZ4ijULhJ4k0cD43zXvX3C6U4IiCi%2BTfvhlbEWFqaUAYzzG0MSETyzWYXXnKHsTZ5Tj9UVnCee9oYA8SusQ%3D%3D\"}]}\r\nContent-Encoding: gzip\r\nServer: cloudflare\r\nCF-RAY: a275004a5fb3723c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6151,"size_decoded":4319,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (6151), with no line terminators","md5":"fd25c0087c3618a36a04e0bf2e680324","sha1":"ede58381c9de06e77c07820926cea593846c08b0","sha256":"9c4f48057af3898fd174ef4b9df864b4b37c32221ecdae97ae6c88b3e78cb051","sha512":"3b99dd613b8b1a1ae1ca213b75608cf4682333ee7c718afbe508d589be1ecd9c08b2ed058bdd4e6473ecd56d8a26c0c3aa30d1fddf3f65e07ab6072d2e06c6fb","ssdeep":"96:P2yvtoXZzIEb0EaW87xJrkXyty3K2hEKAsCRyOcsHCbNGfX+N/sYzueh8Tnmw:P2utkCB3rkX0kKlK4UOMbNGA/VyVmw","tlshash":"75c13be3d634a027c7a52bd660bbf35c6221734aab058485e6dad62d46dff8fc134098","first_seen":"2026-08-07T08:45:21.477944Z","last_seen":"2026-08-07T08:45:21.477944Z","times_seen":1,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashcat-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/f70cb37711aa/api.js?onload=tVLDA6\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://cashcat-claim.xyz/","date":"2026-08-07T08:44:46.119Z","timestamp":1786092286119,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /turnstile/v0/g/f70cb37711aa/api.js?onload=tVLDA6\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: http://cashcat-claim.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://cashcat-claim.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 07 Aug 2026 08:44:46 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-content-type-options: nosniff\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: http://cashcat-claim.xyz\r\npriority: u=3,i=?0\r\netag: W/\"f70cb37711aa-api\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a27500543dd356b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82469,"size_decoded":26980,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"71168031aad70d524c67842b94bf3c22","sha1":"5134fcc61d37eea95d0dfeea30a935e07e35bf37","sha256":"194a7f30e99f690ec77ccb996a31dff2045f877c3d051e0db8d322d7d2bba2a3","sha512":"0f037084eda0302935ebecfc028a6562e8777a1dd28609a7d09c9b0e2a365cbe1085584e98627e1c4191db1f4beb877a0b9495e91ee2c87fac4e42845b41a894","ssdeep":"1536:R6to/Nvf/8rAyTKQHCKt35HJFEe9fMm8seYOTkunPPl79:ktgEKQ19Ee9fpbOjPPl79","tlshash":"8b834cc8729a787213d6c1b4a03b6353b3297d35984c8850e527dd653a3de878273fba","first_seen":"2026-07-30T17:12:33.930797Z","last_seen":"2026-08-10T15:18:41.718885Z","times_seen":13232,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cashcat-claim.xyz/cdn-cgi/challenge-platform/h/g/fo/3229494961:1786089914:g7HcKudOcVCU3yJ6mKOCrEKnA2dV0Kq-7BilLOLgKLM/0b408245a4bf717c/fYZGoEkldHdp87_qUPgC3MWLiZtdI9x92jn6EaZ3TIH-1786092285-1.2.1.1-gJ9Uqn9cA33jp6TnOxSj4o5ia96-osWlLPc7MPU40dmiEmIPmMrQpT1CXMaM4x0T","fqdn":"cashcat-claim.xyz","domain":"cashcat-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.51","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://cashcat-claim.xyz/","date":"2026-08-07T08:44:47.075Z","timestamp":1786092287075,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/fo/3229494961:1786089914:g7HcKudOcVCU3yJ6mKOCrEKnA2dV0Kq-7BilLOLgKLM/0b408245a4bf717c/fYZGoEkldHdp87_qUPgC3MWLiZtdI9x92jn6EaZ3TIH-1786092285-1.2.1.1-gJ9Uqn9cA33jp6TnOxSj4o5ia96-osWlLPc7MPU40dmiEmIPmMrQpT1CXMaM4x0T HTTP/1.1\r\nHost: cashcat-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\ncf-chl: fYZGoEkldHdp87_qUPgC3MWLiZtdI9x92jn6EaZ3TIH-1786092285-1.2.1.1-gJ9Uqn9cA33jp6TnOxSj4o5ia96-osWlLPc7MPU40dmiEmIPmMrQpT1CXMaM4x0T\r\ncf-chl-ra: 2\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2327\r\nOrigin: http://cashcat-claim.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://cashcat-claim.xyz/\r\nCookie: __v=1ad0648d-3789-479a-9876-f6af2c3b0df3; cf_chl_rc_ni=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2327,"data":"bvYvUDReHxw83RZ69oIZsrVe$T9yBqijyefUhBgahya1J0YSgmIiGCOZZBk2iu7pNuTuYhPNmUkuOrtOirQMPndDH7C8kL+lwH+1PLg5K-8jL+sL7qS7Jw-whC66tMBKHnLnu6jEKARCg-DCOjXY$t-sXXbfBtGrOUZBhJqqxNk266$$+G5El2Ux8-m8-5AWKXyObG7bnJ7muNZZ-2l5miIxP0e1VcH5$EP8XIPUoS9HYpevxzWx28$k-+l$6xpmA60UkbbObTFfvWLw6cAYIZljGCPKg1bvtqMs78z+7rKLs+UPzBis-dUkRK9iDF+fsFv8mAEa5z5OvX-GwrhWp5hcc+21jKUz9Bw+9sicR+Rt5Aaz2H6uum$VOPywtWGPGaxnY7V2mbsv0w1f36-RYTvitcEICQc$8W+LTxzjEBmPZqz0dxU8AyQg53YaAVPsOn+jYZysZGy$qqEMrSIymnVqlx73Xk0PoIEtPq3PIERKXgy+EXAk$NB9gZpzzW7oyiJKnNndpWGCkkSUi7i1hNOMo-LuqiFKW5ZI09ESpZGu7saZUUVu9t+pg9+cPboVhRVUVpVDrJrjqMlONiV1P-96mA89sjWQ$fA8-HYt3muLBplyOKCY6SS0n+Kq9gGbOhnR0Q723SFt9cJ0AYYVF9+SkPWxuwWAbLFbXQkfCQx+r$zvN0csV+uH2uqnPLgwdc7LjmmeqIFh7gqfmRzO0IExmzUQSpbv9Cxl8qKPuAzu3Y23WJ8dLU8iVyjHqBT6mW$qQ7HfJWABEH0HP-J0REeOs3pYbQcn7B8dEEsyW1V5jsMGLKWUCpHuX8vQkjJSlBwmd2Eeipj63LiqRVG8+zTjAjJhSb+gkVl8HPTnGyn5FhYscJm7uBC2ztVC9+gcRt+0o7eLxUpAR3I+uKaGP2qTKgw6RmYjOC6J8hoqbs+6ztaLSRFQg8q8QoqXfogT6V-wuJZfRwAWXwZZLNbG1okHjun3kFXR7WOmhuEYO6GXLSNlxtGkU8VScj7bIs3k-CHxt-HMZZTQNku$uQdGuSr6jjE1PLCNUwh$Iivco8klRrP3v8kYFGOtibEbkPzz9JRRu2O3lszFIwV9AKlodd7Xd2h1Wv5ay6RAKYDA+dyp8kmMPwlYhcep27C9qScGHDp9K-1q9xPAZsMwkZ1UYxSkoBkI$15bMnbsvEk0A3aTQoyvEOsiPjuL6kLySeJzvrY-sPodDx5Jia1MmPWhzOkJ907wrF1BDt3QwL+lN3SxbQWZN5Z-UJKD2OnH8mOwobSHNAwM1RWyz7nMuipVU6FbxFwzdq-mtrD5WGph$uPgC8nIRcb-PZ5TNdYIMGO+O63DvS-sbZcICn50irrZqXH7WtN-sQaipmXUNyiA+dlvKqJ302M-6mzglDAHaFR-8uPIwtooxmt2DfN2rn5BHwZJkiqSVpzDoGti8cYFn9t$cixGPiln39RNzMdXvDx+rnwq8lEC2Rg$cIs+Y5OzOGyrtW8NnPKw+MztMf1SjBjmEyD02Ps8ZeGEtcAK3SxJu6mGDWb0cqAGouZJL2Mrs9F$YiVHrN1kjyrHSVMG$rH$9aW3lKQZHqj7TeJWRJtXhclyvWnBtpCW$nBQKePXZPa8uLb9Vc3cWq78JO1GqXZS9VAUnUuzBHWhiSEvL3GAgYaEVy3caf03mofH6mtz77LoQJEAFV08QvhCtPRSMy1nJS1cZydUnaysoxdRpQZwL1STk1Cl8gAOfIQ9rp0Wg3wdCRdgCvmuo72HoMG6rRZZO3eKUOF-sQ-SkwP6HlaXSYL-NCfWs-o5oCZegYQnRf2$Y28z8lMWZAhPsg$xdKKlUjzlvMYURHyM-xSAjy5wKJa5lwA6P-tBTWvyvMDaZdUVj5HNZpUPxckIFAJ$Y3Tc7Fqubzp+jPK6RQaNxE2M9LgwPA+Pchhcpbyfh0NnFtqxDkbw1WJa6OUza19QC9Np0Mw9O-7rv-a1ioQpsvG-j79XuSJmMIDU9zi7eo1h5dBpr6uc1RTqq6bragTjCg9vg2OleRYm2eLFrzLCPKnPUq8QCV+fTlpGNapx2oWHwb8KZcZPwD2P9tBYJes1RyMbfDFIBQhUAS5DIU+wRRYXWaKMpNamv1mVi-anEhIHQ7I$PK7oovROVeiTgsxv0$-j8zzin8Wq7YipGDvAQJi0sQ8VWUebZmsbsGFKjC5ddu909zTczIbc6TxarL9DAeqOiJKR7g+iwWbS5IGmhFS2yooN$mu-K5RbSaqEbrJYP6h0ACKGBrFtIx-1wjAkQ$3uOIiaszKauT56Qmz5bOpd2qGT5P3dgO9Wzyd0ijLqiZg"}},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Fri, 07 Aug 2026 08:44:47 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\ntiming-allow-origin: http://cashcat-claim.xyz\r\nServer: cloudflare\r\nCF-RAY: a275005a3e1d723c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":3445,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T05:30:38.622725Z","times_seen":17985273,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashcat-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}