{"report_id":"fd7318aa-7273-40df-908b-c0f8b76462d7","version":0,"status":"done","tags":[],"date":"2026-09-25T05:46:35Z","url":{"schema":"http","addr":"claimed.cash/","fqdn":"claimed.cash","domain":"claimed.cash","tld":"cash"},"ip":{"addr":"170.75.160.175","port":0,"asn":174,"as":"Cogent Communications, LLC","country":"Canada","country_code":"CA"},"final":{"url":{"schema":"https","addr":"claimed.cash/","fqdn":"claimed.cash","domain":"claimed.cash","tld":"cash"},"title":"Airdrop Access — Official Campaign Bridge","dom":{"size":27686,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"07546e5ea1b33c7f200ed88ee69b6055","sha1":"881d198e021d09f9b2fd94a2c622f581a70d737e","sha256":"0224e19aaa87e0b286dab28c77504314332ac2ae6e6a7efffdb51065f8bf6d9d","sha512":"a9fe60cc50f93012cab4faa61ca6636f0746714353420ad737a6d9d7238c43840d8b952e941ac66b15a2ec5871d34a90224b841ba44c7fb87017288fd612bcb9","ssdeep":"384:FxveKhn7J48VZb7JpV92ZMABM+vCqJYKESCbb0DbX7:77PV92ZzM+vCqJXCkDD7","tlshash":"c6c2107121f0153a609382caeb657b3f6fa5e643d54e010576ae4be80fe7ccaec27158","dom_hash":"domhash54c5bf200766be5e39917f2293446eff","first_seen":"2026-09-25T05:46:39.658039Z","last_seen":"2026-09-25T05:50:01.490955Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"claimed.cash/","fqdn":"claimed.cash","domain":"claimed.cash","tld":"cash"},"ip":{"addr":"170.75.160.175","port":0,"asn":174,"as":"Cogent Communications, LLC","country":"Canada","country_code":"CA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-30T05:46:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"claimed.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"claimed.cash","ip":{"addr":"170.75.160.175","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-25T05:46:35.562774Z","last_seen":"2026-09-25T05:46:35.562774Z","alert_count":5,"request_count":5,"received_data":110737,"sent_data":2363,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"claimed.cash/","fqdn":"claimed.cash","domain":"claimed.cash","tld":"cash"},"ip":{"addr":"170.75.160.175","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"b9199928b2c93da3ae232f942ba47198","sha1":"c6f9752ce9d6e8494508860b4057cef02a8730e8","sha256":"4b9ca171bef12dd304828165309ad03a1e9143374f3bf4b521a3e207ca4f3eff","sha512":"4376861dcf5d03c75977d0fca29bfbeab9f75667885d139a855f20cb3ebd9cd124817db642150606ec47d691df06d9440d359faa81cc1125f1354d444a4262c5","ssdeep":"","tlshash":"ee01ac7e9897a29700fb229d3b8b05057228400372c4e9673e2c43409f6cc6a51b7f6e","size":678,"data":"","first_seen":"2026-09-25T05:46:39.668269Z","last_seen":"2026-09-25T05:50:01.495544Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimed.cash/","fqdn":"claimed.cash","domain":"claimed.cash","tld":"cash"},"ip":{"addr":"170.75.160.175","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"92c8df39fb5a44deabd21511c6b77581","sha1":"f5577d9d861c0b6531cf9b6bad9847b195b46352","sha256":"d84fbc6ea87a84663b36b34a5133641b309a13bd59f5b31846dc89c537972a5b","sha512":"88037bd9bf93682c03487c4a455fad74bb80ec3ff231f6b12a3b35ce30ee6cd58d52ec6de78e3a61c283d74522a905b5ac21fdb487c54c8749e6e7fe9d8ebe74","ssdeep":"","tlshash":"dbd095f8d0f04478058e3c4c3134e3c13d70dc6c5282988286fdc5cb1e6cf844954950","size":261,"data":"","first_seen":"2026-09-25T05:46:39.669418Z","last_seen":"2026-09-25T05:50:01.496318Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimed.cash/js/site.js?v=20260918-2","fqdn":"claimed.cash","domain":"claimed.cash","tld":"cash"},"ip":{"addr":"170.75.160.175","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"46caca15732e3222958ec0dbb321ae60","sha1":"4b7617c2088735befc180aa478339ef6d7df70fa","sha256":"5ebb7dd1bd18411304eff562ff8b56671affafca602c0a9e19fc565fd059e489","sha512":"140436b502ed9e5ff5b35723c1106e57c8549a540b888f491db9e62cd2d88a2e57d28ac049f51c89100049289f571aee9265163f350aefef907da16030027692","ssdeep":"384:zw0Tbkya5yM23t8owtO318kwxn3zEEIdOcVz/S:k0Ton5ZG8rE8DjEFdJ/S","tlshash":"6082626e3012242641b373b6ce57810dfb62165b60858349bebcc2c42f719a6e1b3edd","size":17712,"data":"","first_seen":"2026-09-25T05:46:39.663576Z","last_seen":"2026-09-25T05:50:01.494754Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"claimed.cash/css/glass.css?v=20260918-2","fqdn":"claimed.cash","domain":"claimed.cash","tld":"cash"},"ip":{"addr":"170.75.160.175","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claimed.cash/","date":"2026-09-25T05:46:04.971Z","timestamp":1790315164971,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimed.cash","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 23:30:09 GMT","end":"Tue, 15 Dec 2026 23:30:08 GMT"},"fingerprint":{"sha1":"33:31:6F:90:2D:A2:A8:52:10:7A:E6:2D:04:6E:0D:21:E2:2B:37:FF","sha256":"E0:A3:DB:8C:12:D3:DF:4E:A4:9C:CC:0B:A7:C0:10:97:27:FB:AB:C3:83:77:57:8E:64:2B:45:14:AB:D0:ED:2C"}}},"request":{"raw":"GET /css/glass.css?v=20260918-2 HTTP/1.1\r\nHost: claimed.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claimed.cash/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 25 Sep 2026 05:46:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 17 Sep 2026 23:29:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aac77c7-ecb9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60601,"size_decoded":11341,"mime_type":"text/css","magic":"ASCII text, with very long lines (323), with CRLF line terminators","md5":"11f53658dbac3ebba2f5b3c735375486","sha1":"0cc53f3b6bac008f57a06036430b89cf175c83cb","sha256":"7348c7483c8e8eceed6febfbcb7209ebc05fd7373713b32d1ba2803fbdfb16f2","sha512":"0af8f112026d520477c46dac52cc9b4f6eb18dbede8673d1398878c1fa4b4324fee233ec9b06a1ec33ed73bb458ca99d9dee86c1acecb9a4997e00b2c79b529b","ssdeep":"384:+gHJ/kufGtwks9zLgAUE/nKW3XLTH8SbE+XyTI:lqufGg9LgAUE/nKWnLTcSbhT","tlshash":"10434568c64653087177dbf4af916b1efb6541239b06036ebfd520596bc80aea231fcc","first_seen":"2026-09-25T05:46:39.661422Z","last_seen":"2026-09-25T05:50:01.49393Z","times_seen":2,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"claimed.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimed.cash/js/site.js?v=20260918-2","fqdn":"claimed.cash","domain":"claimed.cash","tld":"cash"},"ip":{"addr":"170.75.160.175","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claimed.cash/","date":"2026-09-25T05:46:04.973Z","timestamp":1790315164973,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimed.cash","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 23:30:09 GMT","end":"Tue, 15 Dec 2026 23:30:08 GMT"},"fingerprint":{"sha1":"33:31:6F:90:2D:A2:A8:52:10:7A:E6:2D:04:6E:0D:21:E2:2B:37:FF","sha256":"E0:A3:DB:8C:12:D3:DF:4E:A4:9C:CC:0B:A7:C0:10:97:27:FB:AB:C3:83:77:57:8E:64:2B:45:14:AB:D0:ED:2C"}}},"request":{"raw":"GET /js/site.js?v=20260918-2 HTTP/1.1\r\nHost: claimed.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claimed.cash/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 25 Sep 2026 05:46:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 17 Sep 2026 23:27:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aac7765-4530\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17712,"size_decoded":5105,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"46caca15732e3222958ec0dbb321ae60","sha1":"4b7617c2088735befc180aa478339ef6d7df70fa","sha256":"5ebb7dd1bd18411304eff562ff8b56671affafca602c0a9e19fc565fd059e489","sha512":"140436b502ed9e5ff5b35723c1106e57c8549a540b888f491db9e62cd2d88a2e57d28ac049f51c89100049289f571aee9265163f350aefef907da16030027692","ssdeep":"384:zw0Tbkya5yM23t8owtO318kwxn3zEEIdOcVz/S:k0Ton5ZG8rE8DjEFdJ/S","tlshash":"6082626e3012242641b373b6ce57810dfb62165b60858349bebcc2c42f719a6e1b3edd","first_seen":"2026-09-25T05:46:39.663576Z","last_seen":"2026-09-25T05:50:01.494754Z","times_seen":2,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"claimed.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimed.cash/favicon.ico","fqdn":"claimed.cash","domain":"claimed.cash","tld":"cash"},"ip":{"addr":"170.75.160.175","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claimed.cash/","date":"2026-09-25T05:46:05.130Z","timestamp":1790315165130,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimed.cash","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 23:30:09 GMT","end":"Tue, 15 Dec 2026 23:30:08 GMT"},"fingerprint":{"sha1":"33:31:6F:90:2D:A2:A8:52:10:7A:E6:2D:04:6E:0D:21:E2:2B:37:FF","sha256":"E0:A3:DB:8C:12:D3:DF:4E:A4:9C:CC:0B:A7:C0:10:97:27:FB:AB:C3:83:77:57:8E:64:2B:45:14:AB:D0:ED:2C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: claimed.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claimed.cash/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Fri, 25 Sep 2026 05:46:05 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 17 Sep 2026 00:12:22 GMT\r\netag: W/\"b52-65ba2a34e3b29\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2898,"size_decoded":1633,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-09-25T08:44:23.842099Z","times_seen":7913,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"claimed.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimed.cash/notify-visit.php","fqdn":"claimed.cash","domain":"claimed.cash","tld":"cash"},"ip":{"addr":"170.75.160.175","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://claimed.cash/","date":"2026-09-25T05:46:05.132Z","timestamp":1790315165132,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimed.cash","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 23:30:09 GMT","end":"Tue, 15 Dec 2026 23:30:08 GMT"},"fingerprint":{"sha1":"33:31:6F:90:2D:A2:A8:52:10:7A:E6:2D:04:6E:0D:21:E2:2B:37:FF","sha256":"E0:A3:DB:8C:12:D3:DF:4E:A4:9C:CC:0B:A7:C0:10:97:27:FB:AB:C3:83:77:57:8E:64:2B:45:14:AB:D0:ED:2C"}}},"request":{"raw":"POST /notify-visit.php HTTP/1.1\r\nHost: claimed.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 0\r\nOrigin: https://claimed.cash\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://claimed.cash/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 25 Sep 2026 05:46:06 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18,"size_decoded":265,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9a92fd0b09f3a73777d551bcb9bd7a84","sha1":"a18ca072c9a29630c3dfe5aabd2c6b3425d77fd0","sha256":"0c47cc3393ab2fab5352d878f28a4f4e90af4471074e98d47bbf4518a639c5e6","sha512":"4afcfac263a19acf2816e2679350e281ce9b2b1c05f561aa3f88cf99951e16e0d2df8bf427385094f94da8e7a63fdf1cee772c4d85b4f092bb16206f68c1ea63","ssdeep":"","tlshash":"15700003800000a2c000328002b82e2020800022c000000a800c20088a30000308380a","first_seen":"2024-06-06T22:48:02Z","last_seen":"2026-09-25T05:50:01.492539Z","times_seen":23,"resource_available":true,"data":null}},"time_used":926,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":926,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"claimed.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimed.cash/","fqdn":"claimed.cash","domain":"claimed.cash","tld":"cash"},"ip":{"addr":"170.75.160.175","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-25T05:46:04.168Z","timestamp":1790315164168,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimed.cash","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 23:30:09 GMT","end":"Tue, 15 Dec 2026 23:30:08 GMT"},"fingerprint":{"sha1":"33:31:6F:90:2D:A2:A8:52:10:7A:E6:2D:04:6E:0D:21:E2:2B:37:FF","sha256":"E0:A3:DB:8C:12:D3:DF:4E:A4:9C:CC:0B:A7:C0:10:97:27:FB:AB:C3:83:77:57:8E:64:2B:45:14:AB:D0:ED:2C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claimed.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 25 Sep 2026 05:46:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 5617\r\nlast-modified: Thu, 17 Sep 2026 23:27:26 GMT\r\netag: \"6d0c-65bb620676577-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27916,"size_decoded":5960,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"0ba6ceec4546732e2ad05146ec524387","sha1":"62b6c03546814d54aca9dfea8b68f53bf2095ff8","sha256":"2ba19bc9c677755504865feaeb1c30615d3b0b1b3a8a6e266736777a9152ec69","sha512":"8ffbeaa7aefb93cd4047e9514324805b66dac98b291317dfead2b84b9c87c0bed5a68bf5ed05cb701360516ba218d97409dbdb789e5a68c18796d1054f5aeb53","ssdeep":"384:cC0D1Zv4mn954Gruv1vGlReWfQplSndu/M0d:q1p4mn95Xuv1vGHeyniMa","tlshash":"dec2fe3151c1143a60b3828acb247b7efea69383c64e410176ae67ab1ff7c89ec27554","first_seen":"2026-09-25T05:46:39.666966Z","last_seen":"2026-09-25T05:50:01.493208Z","times_seen":2,"resource_available":true,"data":null}},"time_used":616,"timings":{"blocked":-1,"dns":278,"connect":107,"send":0,"wait":114,"receive":0,"ssl":117},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"claimed.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}