{"report_id":"152b5547-9718-4e7e-b23c-0935815dfdf9","version":6,"status":"done","tags":[],"date":"2026-03-14T21:04:23Z","url":{"schema":"https","addr":"trumprewards.live/","fqdn":"trumprewards.live","domain":"trumprewards.live","tld":"live"},"ip":{"addr":"172.67.206.56","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"claim-trump.live/","fqdn":"claim-trump.live","domain":"claim-trump.live","tld":"live"},"title":"Crypto \u0026 Business Conference | GetTrumpMemes","dom":{"size":68415,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1896)","md5":"864bd1d61a20cf8a9ded545f272d2bbe","sha1":"c01eab5e34dd9e7691bf3eda68817b4c0f6b753c","sha256":"bdaaa341815c62853dbdac780d9e4796b503f7377772bc8dfdbf0891f4b66f62","sha512":"7bb6e11082fc27581de035a383dceb9af91b0ab74a5fa86abd023fde7ad8c35331d271ceee1150423c2a5df40b8fee8dc76e1cf3364686815e49e5996f342d65","ssdeep":"768:FlJabA/Rmij2fmKuqtRFT8wT0pFrvBR1Iwm/YsUf8jzAIjIHjI2jI2tjIejIcKjh:cl47FIJ/YsUf8jzAAqdxTi","tlshash":"fb63c72176e406e16a0646cca7f73f6b5e7ab4eb87028040f75c42e64f57cd2896738e","dom_hash":"domhash2b99235ef08ededdc555a3f197599ee6","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"trumprewards.live/","fqdn":"trumprewards.live","domain":"trumprewards.live","tld":"live"},"ip":{"addr":"172.67.206.56","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-18T21:04:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"claim-trump.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"gettrumpmemes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"trumprewards.live","ip":{"addr":"172.67.206.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":73006,"sent_data":486,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"gettrumpmemes.com","ip":{"addr":"104.18.6.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-12-21","domain_rank":339259,"first_seen":"2025-01-18T19:05:07Z","last_seen":"2026-02-13T12:47:47.589249Z","alert_count":1,"request_count":1,"received_data":112484,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"claim-trump.live","ip":{"addr":"104.21.87.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-14T21:04:24.844155Z","last_seen":"2026-03-14T21:04:26.545101Z","alert_count":29,"request_count":29,"received_data":2835698,"sent_data":13464,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"claim-trump.live/","fqdn":"claim-trump.live","domain":"claim-trump.live","tld":"live"},"ip":{"addr":"104.21.87.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e8ddfa8c170edeb116b2423a40e1119c","sha1":"9be6318c631f21af660a0d09ba588de5dc81fb51","sha256":"6fde4a80c3640054ee7299b198baa5ce42550d8856f00d032f6d6173fb7b9546","sha512":"252a302abcba78b6c33fce29ba2a1174cdeda36956adb0c2828da01a1b1c0e504bbeb9bbcd50b98a165d45c06d2c8fd0fe00e87e6bb21e3bcacae837690ae40d","ssdeep":"","tlshash":"95c0222482f089f0813c24c7107d22552070286a0022608ae2aa8ec7584cfc84608d10","size":187,"data":"","first_seen":"2026-03-13T01:58:24.922226Z","last_seen":"2026-05-01T21:41:12.925464Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-trump.live/A3sLm15Y.php?s=%2Fipfs%2F7Gc6p9UQ5JqaOMMS_fY_pg0702b396044cd339a8cd438d2bd10030%3Ft%3D1773522241376","fqdn":"claim-trump.live","domain":"claim-trump.live","tld":"live"},"ip":{"addr":"104.21.87.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"28ffb129ff536f3e6efec380d8010258","sha1":"3433df0a31c032c28a8724c563a22b980b99c917","sha256":"6d1201dd9092a19927980bdbfb0035038017adeefe0b87dd8e80766fa5f20586","sha512":"7203f683d74436c5df6ef88231bf608056af88222daf5c516bfb5d0ccab263e29c2a98237566df932d230449dd0fe23955a298278ce37dcb89d0cabd1cf56c27","ssdeep":"6144:qh5gDT6Euno4xvlISDhTl0WHvfUp+v+9J87XGQOwOyyGpMy:qsTZunzvlzSWP8p0Q+Bz","tlshash":"add499c08b4c357364802aea15fb446fdfdc0de82e4be8536bd09ca5e379b8351e5998","size":634331,"data":"","first_seen":"2026-03-14T21:04:29.924858Z","last_seen":"2026-03-14T21:04:29.924858Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"claim-trump.live/l-3","fqdn":"claim-trump.live","domain":"claim-trump.live","tld":"live"},"ip":{"addr":"104.21.87.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-trump.live/","date":"2026-03-14T21:04:01.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-trump.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 19:42:23 GMT","end":"Wed, 10 Jun 2026 19:42:22 GMT"},"fingerprint":{"sha1":"9D:01:14:9A:DF:66:05:5F:32:11:A8:A5:B3:BE:46:CE:B3:3E:6F:01","sha256":"96:91:D6:74:7D:43:5A:30:E4:0C:92:13:77:D2:47:DD:DE:85:39:69:CD:20:4D:18:70:74:AA:AC:8D:65:4C:A7"}}},"request":{"raw":"GET /l-3 HTTP/1.1\r\nHost: claim-trump.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-trump.live/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 21:04:01 GMT\r\ncontent-length: 24628\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 20:17:18 GMT\r\netag: \"6034-64cd9706bef80\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xhjYzTW7wwMZv0W4LOSR9lvST2SQ6LvkbTOnIstMmFi0hzVCXvyUibldCHAxYdBTyNSmAcoCA9%2B51Fy%2FKULgv9eoE4AWci5JFOZeeB%2FqS9w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc63a79daa31243-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24628,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 24628, version 1.0","md5":"21dc1de2ad857813b23ff8b4f3116d41","sha1":"f3e6dc19f22011bb4f120276d7a09d93af6ebb76","sha256":"3da51e8108db25afd22ee660f292a1423a218d04e806616aded83b0feb43025d","sha512":"a4bb4283680da1b4b652ad6df40f8dd365e7ae5198b3a71b9c936fc5cbb0b302deb0cbf64959fcccea38e0b8275ef6ba024ac09ea77da230fe82d92861d3ce2e","ssdeep":"384:Fj1DmCpEodhpUHeSFq2FGzdlbsPMKHdPQ5o+D6cLmLwZFVwND22bRQfBJg7z:F5DmAHUHeQ6zbGPQ51iLgMD20Rwbkz","tlshash":"75b2e11fa8c6cdd5934f2422831b2cf6fb713a1fb9568a5a442bf41ae9b12dd015ec05","first_seen":"2025-06-21T12:07:35.694059Z","last_seen":"2026-03-26T14:42:39.041083Z","times_seen":25,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"claim-trump.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-trump.live/","fqdn":"claim-trump.live","domain":"claim-trump.live","tld":"live"},"ip":{"addr":"104.21.87.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-14T21:04:00.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-trump.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 19:42:23 GMT","end":"Wed, 10 Jun 2026 19:42:22 GMT"},"fingerprint":{"sha1":"9D:01:14:9A:DF:66:05:5F:32:11:A8:A5:B3:BE:46:CE:B3:3E:6F:01","sha256":"96:91:D6:74:7D:43:5A:30:E4:0C:92:13:77:D2:47:DD:DE:85:39:69:CD:20:4D:18:70:74:AA:AC:8D:65:4C:A7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claim-trump.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 21:04:01 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 12 Mar 2026 20:25:35 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K%2Fc9l1iArziix%2F%2Fxvi4KmmYmS6Z07mUqnZn1F%2FKfHIigy1PXS8FYNuunLVVGu1ejCRuhKGwzGkWZg58QWqRufucJw8d762RIhuKzui7TvlY%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9dc63a76c800b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72512,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1702)","md5":"8851ba4aff462afda4815270b69aeb6c","sha1":"8c6195040197f689e82d3ebf8f3485a795ad3170","sha256":"49f70b7fbcda35130f0515714d0940a8ba845b1a92cacea0543c402476c0db72","sha512":"ef1b288f63af62796c25045f22a83ffc65fc4c0e4f26d91e552ad6d4feb206670992d3f3230cf7d026b34ee9c7df221deb6ddd70420c1b39c91b8c4ff202e9c0","ssdeep":"768:MwlJabA/Rmij2fmKu0tb53iwT0pFrv4Iwk/msUxCBnwejIVjIIjIoVjIQjIe6jIW:Wlj478Iv/msUxCBnwO8Z1DQ","tlshash":"0963b62176e406e16a0b46cca7f73b5b1f7ab4eb8a028044f75c42d68f57c91c66738e","first_seen":"2026-03-14T21:04:29.884006Z","last_seen":"2026-03-14T21:09:52.309384Z","times_seen":4,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":105,"dns":72,"connect":9,"send":0,"wait":82,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"claim-trump.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-trump.live/normalize.css","fqdn":"claim-trump.live","domain":"claim-trump.live","tld":"live"},"ip":{"addr":"104.21.87.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-trump.live/","date":"2026-03-14T21:04:01.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-trump.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 19:42:23 GMT","end":"Wed, 10 Jun 2026 19:42:22 GMT"},"fingerprint":{"sha1":"9D:01:14:9A:DF:66:05:5F:32:11:A8:A5:B3:BE:46:CE:B3:3E:6F:01","sha256":"96:91:D6:74:7D:43:5A:30:E4:0C:92:13:77:D2:47:DD:DE:85:39:69:CD:20:4D:18:70:74:AA:AC:8D:65:4C:A7"}}},"request":{"raw":"GET /normalize.css HTTP/1.1\r\nHost: claim-trump.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-trump.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 21:04:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 12 Mar 2026 20:17:16 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"69b31f4c-1e5c\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4ycvEO8x0J%2BlR3h%2B91hBErfgOJjRhNHD3ZgJMCBa%2Fx3knCgxU7g553GxQCxmcOOa08zVsVC1t1DusdcKCxuOCEv0fmToJc4x1rMwA2Y1T4U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc63a78aa6f1243-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7772,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"afb4942e5838a7dc3b63d00ffcc87c9d","sha1":"f1a4ae2fbaa13ef9d9500648d5a16f7adaa88d30","sha256":"0d336a97efd52a4ef44ef3270e71eac24ba405d4450016f9d3e943256e9e58c8","sha512":"8b897ca084c9e5aba585a3c8036ca2b9e10243e262e93f0761635db00d1da2544803f8937163d278e94c4d6ff6b23031f87660b55a9000a72211bb27a3ebab7e","ssdeep":"96:MrWcFPpkRUwojaszRO5LVSrwnTgPjnRo5wUEKs2NE4P+49NaN71UB9:M/9pVjasdEvQnRo2UEKsSBP+W67w","tlshash":"82f1b59923a04b9252395df5f3a7938533481127832c7c6eb4d240fc8fc8b5553baf99","first_seen":"2023-04-05T04:08:19Z","last_seen":"2026-06-08T09:35:51.571324Z","times_seen":2697,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"claim-trump.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-trump.live/Leader-board-2_1Leader-board-2.webp","fqdn":"claim-trump.live","domain":"claim-trump.live","tld":"live"},"ip":{"addr":"104.21.87.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://claim-trump.live/","date":"2026-03-14T21:04:01.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-trump.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 19:42:23 GMT","end":"Wed, 10 Jun 2026 19:42:22 GMT"},"fingerprint":{"sha1":"9D:01:14:9A:DF:66:05:5F:32:11:A8:A5:B3:BE:46:CE:B3:3E:6F:01","sha256":"96:91:D6:74:7D:43:5A:30:E4:0C:92:13:77:D2:47:DD:DE:85:39:69:CD:20:4D:18:70:74:AA:AC:8D:65:4C:A7"}}},"request":{"raw":"GET /Leader-board-2_1Leader-board-2.webp HTTP/1.1\r\nHost: claim-trump.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-trump.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\ncontent-length: 33164\r\nlast-modified: Thu, 12 Mar 2026 20:17:16 GMT\r\npriority: u=4,i=?0\r\netag: \"69b31f4c-818c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i1lQV8IZLVGxNHdBopENP7AQNC%2BzMwzEwNqn1YtM5D0f9QN9JmkzRQI2PHb3O8HFG517zJy5kK%2BmKXVrUTt5bBnmzl6Z%2F1%2FFh3ogk%2Fff%2F8U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc63a78ba761243-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33164,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x800, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a2a98517e5f9e52e52c539ff79ee0b0d","sha1":"50a8a3cc9396894a82d9f10d1a47cb1ceb0bac9b","sha256":"82f70b4f613087a34b49ae70009bec220f1c9024a9c040e611419da089654615","sha512":"341ae6a70681d219106fe13553abdea27c1616164ed4bb659e16edf1d26572db2adabd622e0c38333dd3f9b3ad81efdcd200ef82a23f2961334375f082b953b0","ssdeep":"768:QHIQ1c5hDc97EFmZPEG8PBD56uSzGsWFgzuJmd6PtvBeIoKJ35:QHIQ1AApnPt0BDQuSrdcxoC","tlshash":"bbe2f14c6b75712c62d7212aedc53cbbf38adc049b35e2c717a330401798e7b1998b52","first_seen":"2026-03-14T21:04:29.887966Z","last_seen":"2026-03-14T21:09:52.306093Z","times_seen":4,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"claim-trump.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-trump.live/l-8","fqdn":"claim-trump.live","domain":"claim-trump.live","tld":"live"},"ip":{"addr":"104.21.87.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-trump.live/","date":"2026-03-14T21:04:01.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-trump.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 19:42:23 GMT","end":"Wed, 10 Jun 2026 19:42:22 GMT"},"fingerprint":{"sha1":"9D:01:14:9A:DF:66:05:5F:32:11:A8:A5:B3:BE:46:CE:B3:3E:6F:01","sha256":"96:91:D6:74:7D:43:5A:30:E4:0C:92:13:77:D2:47:DD:DE:85:39:69:CD:20:4D:18:70:74:AA:AC:8D:65:4C:A7"}}},"request":{"raw":"GET /l-8 HTTP/1.1\r\nHost: claim-trump.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-trump.live/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 21:04:01 GMT\r\ncontent-length: 24788\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 20:17:21 GMT\r\netag: \"60d4-64cd97099b640\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eEHn9mOy70nKeP7otBSmL5icr32MSVLiALlljMLeqgVcYsvqyJK%2F%2BoekNM%2BpemRi%2FqFU74NfCH5kBWnkcIWm6HkeHiP%2FIIaG56hcxiRsUeQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc63a79eaaa1243-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24788,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 24788, version 1.0","md5":"dfe3d879aa5f68107cf8177a99015c11","sha1":"cc733bc8ccbd1feb1a1aadcb05fc68c356af16a4","sha256":"f467192bdd5d00d20e0b391220ce4d1543f026d989d4df8db6f8321ca01645e7","sha512":"9fb21a6b80da8e3e55d83046fe76bd75a56af6956025c57a92a78df08bc3aeef5b2ce75d088ddcef6f28f5acf098d45a47512c452dae70c0d1346eae0960b495","ssdeep":"384:OjBI1D7XxVfrz5jDTCJ93ZIkHvx9bClHhbjRcTqLVBZkVO+ejHqSb89RKEPD47W+:zjm9dPx9bUBbsqLJKO+rSb97WDSn","tlshash":"25b2e0f84c2cfce6ca5b3dfc529b6d936fb80f5849b37d0231895804764f1ab5885455","first_seen":"2025-05-08T00:13:32.447025Z","last_seen":"2026-06-08T11:23:09.365062Z","times_seen":89,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"claim-trump.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-trump.live/icon_chevron_up.svg","fqdn":"claim-trump.live","domain":"claim-trump.live","tld":"live"},"ip":{"addr":"104.21.87.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://claim-trump.live/","date":"2026-03-14T21:04:01.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-trump.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 19:42:23 GMT","end":"Wed, 10 Jun 2026 19:42:22 GMT"},"fingerprint":{"sha1":"9D:01:14:9A:DF:66:05:5F:32:11:A8:A5:B3:BE:46:CE:B3:3E:6F:01","sha256":"96:91:D6:74:7D:43:5A:30:E4:0C:92:13:77:D2:47:DD:DE:85:39:69:CD:20:4D:18:70:74:AA:AC:8D:65:4C:A7"}}},"request":{"raw":"GET /icon_chevron_up.svg HTTP/1.1\r\nHost: claim-trump.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-trump.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 21:04:01 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z9A0L%2Ft9tfkbhpUbM7zKz5FCQjzofwSdktwMjDC6F22RQCLDVj9pMZOGnqf%2BAL27%2FdovTp9KkPOQ46wqEvYc2FyQLktG00fKt0Naq9c5r6E%3D\"}]}\r\nlast-modified: Thu, 12 Mar 2026 20:17:16 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69b31f4c-205\"\r\ncf-ray: 9dc63a7a0ab51243-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":517,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a1c20c3a544031bc27c8313dc8c1e07b","sha1":"fa3db64c5cbcc4ee836f48a92d2b08a84045fb10","sha256":"fab87f3a9d32e5595fc3d39a1fe3b2c0642e0bba92fb21c3de4d8d7035105fc0","sha512":"8992a4b99646e2de861f3abe739bd4783340677507322853e3205d47ef017ffe0f12a4912f07e702ed833f89a78b12a6115836a292b32e17175c29be2fd768b8","ssdeep":"","tlshash":"0ef050f361cb56e7158c87f4f73c18b9345711e41448c8d0a380a448f4e29cc6cd9e6b","first_seen":"2025-01-27T12:55:31.869994Z","last_seen":"2026-03-26T06:04:27.14238Z","times_seen":41,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"claim-trump.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-trump.live/api.min.css","fqdn":"claim-trump.live","domain":"claim-trump.live","tld":"live"},"ip":{"addr":"104.21.87.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-trump.live/","date":"2026-03-14T21:04:01.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-trump.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 19:42:23 GMT","end":"Wed, 10 Jun 2026 19:42:22 GMT"},"fingerprint":{"sha1":"9D:01:14:9A:DF:66:05:5F:32:11:A8:A5:B3:BE:46:CE:B3:3E:6F:01","sha256":"96:91:D6:74:7D:43:5A:30:E4:0C:92:13:77:D2:47:DD:DE:85:39:69:CD:20:4D:18:70:74:AA:AC:8D:65:4C:A7"}}},"request":{"raw":"GET /api.min.css HTTP/1.1\r\nHost: claim-trump.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-trump.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 21:04:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 12 Mar 2026 20:17:16 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"69b31f4c-2592\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JP1ld1%2FSU%2Fx7hq%2BJ5THXUPhFjC0WPOpCp9Fiw1zgkx90h1G%2FPlX8VjKUc4Iz7K8rzk2EsuxP%2Bjjg3a9SfuvYGjKnmp6tPAoBlIdb1bGsXyQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc63a78aa731243-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9618,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9574)","md5":"fb742994f3acc1302adaef48e67d05d4","sha1":"af4de1222ba103d77ffa7177ad4d2be904f29118","sha256":"dd529b9a0679e788e1d8bce7ec48dc7e466b00890a3dfa5c479156fcd24af344","sha512":"23a11c16cddfc5ce63bf688a928286e3c25eab78ac833c46238aea48be2d60e9ef7e3bc6e6b81ba517bf8e8705afdc655f56ca8c209003505cc5ae45f8fc6f19","ssdeep":"96:7OZxk3ZiB06lqPEe1Zhl46dN16mlK6HXbz2FeJ7sG0KepYLsOZA:KxXBYRki26fepqG","tlshash":"72129e8c4aa000464193c36bcac54e74877ec9a265761cdf3356688f4f8aadc93fe767","first_seen":"2026-03-14T21:04:29.893662Z","last_seen":"2026-05-04T08:53:29.395934Z","times_seen":6,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"claim-trump.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-trump.live/stars-stripes-3_1stars-stripes-3.webp","fqdn":"claim-trump.live","domain":"claim-trump.live","tld":"live"},"ip":{"addr":"104.21.87.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-trump.live/","date":"2026-03-14T21:04:01.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-trump.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 19:42:23 GMT","end":"Wed, 10 Jun 2026 19:42:22 GMT"},"fingerprint":{"sha1":"9D:01:14:9A:DF:66:05:5F:32:11:A8:A5:B3:BE:46:CE:B3:3E:6F:01","sha256":"96:91:D6:74:7D:43:5A:30:E4:0C:92:13:77:D2:47:DD:DE:85:39:69:CD:20:4D:18:70:74:AA:AC:8D:65:4C:A7"}}},"request":{"raw":"GET /stars-stripes-3_1stars-stripes-3.webp HTTP/1.1\r\nHost: claim-trump.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-trump.live/meme-conference.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\ncontent-length: 66946\r\nlast-modified: Thu, 12 Mar 2026 20:17:17 GMT\r\npriority: u=4,i=?0\r\netag: \"69b31f4d-10582\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NL6jN8YbB%2BDAPV1zY1Ch0S35fKl5qHyqVQBC6a7j11J3tT1s5X4oy27Nel5YYIr9H2AvjChiiKu0cwT1hxSAoxoMI78mJDYirxQ0QYvxQL0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc63a79ba9c1243-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66946,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a201afd345bfefbb0c8d7d67a291cc7d","sha1":"4bcf8ec905d022d8e63339d1d7a472cdb522dfbc","sha256":"496f3b3de83bb73299fc8ab7986ff40a169548cb0df4fba529a75687fae360eb","sha512":"d274b09bc5fa23da314fbd10702ef649138dbb649345912b0eb70a32b63a0e4f4dc16050b53f83ca820c22464e1a6d06c5f290cba479a44a87ae5f62ccf30be9","ssdeep":"1536:o1/6gDDAEAIalvAslew4mg1laC+5rsxt3:CXAEApt4fvaC+exl","tlshash":"9b63f042d5f1276583b78300b5835dd71e57dfe29b02e8d999850bae2cbec06e830e97","first_seen":"2025-01-27T12:55:31.858635Z","last_seen":"2026-03-26T06:04:27.129582Z","times_seen":37,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"claim-trump.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-trump.live/l","fqdn":"claim-trump.live","domain":"claim-trump.live","tld":"live"},"ip":{"addr":"104.21.87.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-trump.live/","date":"2026-03-14T21:04:01.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-trump.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 19:42:23 GMT","end":"Wed, 10 Jun 2026 19:42:22 GMT"},"fingerprint":{"sha1":"9D:01:14:9A:DF:66:05:5F:32:11:A8:A5:B3:BE:46:CE:B3:3E:6F:01","sha256":"96:91:D6:74:7D:43:5A:30:E4:0C:92:13:77:D2:47:DD:DE:85:39:69:CD:20:4D:18:70:74:AA:AC:8D:65:4C:A7"}}},"request":{"raw":"GET /l HTTP/1.1\r\nHost: claim-trump.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-trump.live/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 21:04:01 GMT\r\ncontent-length: 27768\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 20:17:17 GMT\r\netag: \"6c78-64cd9705cad40\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M0IKEEdHAoo52WusTLfYjKEXXnltAx81LTVzyq%2BFSJycd%2B4hStgOwmju8PITxBcmc7fYRKFdPXlIaVjmajJnGhEo5cSCZovvy0NKUgxnbdY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc63a79eaa91243-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27768,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 27768, version 1.0","md5":"6b3e74bc6141de8793815c263d28cfa9","sha1":"9fee2d7d7e97422f57a18a24a4d53b94328a97df","sha256":"7afa898520f08239599fadf4803ef67575f76d2bae47d99b33f0b0bfc4c2cb14","sha512":"bd8fc3bb7ceb34fb8d83bc202178a2232994d3bfc783f0994a6e2c66644d947b8f6df2da2b94efcf19343f9f2f00584c64d0c73dc027fea1dd3bb9c01821ca81","ssdeep":"768:eOrWwyI565JPIteanKCPynRx+9I6b5UXIt+so56Bys:eOrXyv5JAXKCPIReln5/","tlshash":"20c2e04edf781a518b572ca2a142495743711faf221857b4348a642ffbc3ae93b2d738","first_seen":"2024-12-11T15:01:14.527507Z","last_seen":"2026-03-14T21:09:52.308261Z","times_seen":15,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"claim-trump.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-trump.live/A3sLm15Y.php?s=%2Fjmpd%2F","fqdn":"claim-trump.live","domain":"claim-trump.live","tld":"live"},"ip":{"addr":"104.21.87.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-trump.live/","date":"2026-03-14T21:04:02.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-trump.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 19:42:23 GMT","end":"Wed, 10 Jun 2026 19:42:22 GMT"},"fingerprint":{"sha1":"9D:01:14:9A:DF:66:05:5F:32:11:A8:A5:B3:BE:46:CE:B3:3E:6F:01","sha256":"96:91:D6:74:7D:43:5A:30:E4:0C:92:13:77:D2:47:DD:DE:85:39:69:CD:20:4D:18:70:74:AA:AC:8D:65:4C:A7"}}},"request":{"raw":"POST /A3sLm15Y.php?s=%2Fjmpd%2F HTTP/1.1\r\nHost: claim-trump.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-trump.live/\r\ncontent-type: application/json\r\nContent-Length: 1412\r\nOrigin: https://claim-trump.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1412,"data":"{\"route\":\"n9POyFeFG1tUtiSU-z9JOx3n\",\"payload\":\"0hqM-6_N52QBBAPAAhAAEwDTAu4CJwCwAhsAAQACKwMAAO8nhn2XtsKCAW2SrqHyBzQ_ff20vGcCAADqFHcP9fT2M1Ent8txf0vB5crPRVTz1UsBeyy0iT5AEoRywrKrVTeNFXDIzDs-3hmKErfmPfiIIa-XOPZZP2b5mQfhzAGY_KhXAG3ECJtDP_SqOjsj_H8PxBCHUoN-le1i38n1rAHjRxQvV-zz1t1A9RoDJxXV9MaI-iyaT6BQXVLjbkb5e2W6E3xU0BGZB889CKhyhUZgw4srHegtUPVRbU0qXf9XcEA0lVqcrl1ooEaxwuWKQ508qzdKk8zvj0-DSbQfLzaqbGfESTvZoaZJZrLo1PMmbOfrU8qco38iMUFgGiOE8aq87cP10ng7gdnwvFIWy7P8_07AsUPoNXzvSzOlB_97HyKD4C59FTDNqtNuoOr3BWLXclKaMmVglQ2RRYVH-PQdp2ARPkwa_IdtByjMG5FqylUhsXHwswkE-oMJhW2oqa7KJ6jsZkioF5su0MqOBFHNyXQY4dK4HDh7ikMPbRfyHQrvnB7alMJv1qrkTZS2dwskJCvcX_h214Q_I2-5zSlOKQ2LU6QMbperqTKlylOHy2hAg9XyJdbdD09ToJNyLQW73ZhZnL2zaLNboQNrnpVL85Y5t0ET0h0Zy9_36J4BgcUIVweVxr7NHldx0xbmpWXAMHJMVAmgOXjc5HTKrjASLvyKlGyNdaT61GO7CRZhL0qR_N39KnvSwZIttn1m6dA0QGi2XUlt0xbihDjOJ8Tp2yywVksnYuU-ZRB_xr1AxYnEBYn_w8nvyilWAXCW1r8IpMPlvOCpM7j3sk2mpn4mASK34BQqdEw8H-zKPDG1E4f3H5YNlr7A1-SQZ9as0k7_0b5fhaGrI4GYbc6x_5NnNt7ubTyhqtId2iXvO5uzpvQdtmy8QBuYzIWV_1VP3D64JZ3AohC_vPQmO3QLa4On9mhajcHhU9ymta_G5HQ-hZoiBhtdxD8Z6d_VTQxDyx-NP9isMDKoJMyWPfeuSCTFZRpnIA_OIHP-xmcnIP0LhV3NjkzlMwRgkn0ctUi0fARdNmCZ5bGGZ1ugrAuYkSkWdBqfHby622A28yZsisK16nwkPiLL2OOagEvXPjtu-OaTMx8mw1vXevibhgpYRN7ocRMW0e4Yo-GYD7oQ\",\"challenge\":\"eyJpZCI6Im80TFRNeUVPM1Z2VzlHODBkdWlETlEiLCJub25jZSI6NTMzLCJoYXNoIjoiMDAzOWI3MGZkMDg2YmI5NGJiOTEwYzhmZjdmZTU1ZDA1YWVjMWFiOTZmZjc5NjIxZWJlODdkZDdkMmI0YzZmZSJ9\"}"}},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 21:04:03 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FgYM4karw7AIUMXjlEaNuLTDQukk8CPEqQy5U6AJaNhrrxZQBvdpJXNIMdPRWUXhIZfJAAvOq%2BH20VHDH5TBZ2OJPQpnCedyE0LGqTcjzro%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc63a829be21243-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":776,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":776,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"claim-trump.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-trump.live/css.css","fqdn":"claim-trump.live","domain":"claim-trump.live","tld":"live"},"ip":{"addr":"104.21.87.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-trump.live/","date":"2026-03-14T21:04:01.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-trump.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 19:42:23 GMT","end":"Wed, 10 Jun 2026 19:42:22 GMT"},"fingerprint":{"sha1":"9D:01:14:9A:DF:66:05:5F:32:11:A8:A5:B3:BE:46:CE:B3:3E:6F:01","sha256":"96:91:D6:74:7D:43:5A:30:E4:0C:92:13:77:D2:47:DD:DE:85:39:69:CD:20:4D:18:70:74:AA:AC:8D:65:4C:A7"}}},"request":{"raw":"GET /css.css HTTP/1.1\r\nHost: claim-trump.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-trump.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 21:04:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 12 Mar 2026 20:17:16 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"69b31f4c-1882e\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SPda8coxcnxsS%2BRsY4sMbhXxp%2BXy14wKMagoMffTB%2BA0%2BeGSnQQP9%2FsBXLc1Ds6YSNIwbG4f2K7wYh%2BWAz4IWV4nhqFUf1vzaiPHg8%2BPthA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc63a78aa721243-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":100398,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1572)","md5":"c407c9e63aea22829f0a8778c12edb3a","sha1":"d6a91d066bb1f777aa088125889f1130dc966cd2","sha256":"7b8b596d28c0fa39d50fd8b97dac9e6c5081524448cae8c8ba571e691580279f","sha512":"1db1afd4484322405c9ed98405751c492f563d461e847715abcbe1fe8934c92af80b425f5a356c3b14b85134afdfb4ad8128a0b59ca2018a91b401cd489ef00f","ssdeep":"384:cp+k3u3633kRh6k0Ipknn0kq2Dk9dGkQU1kzjAkWSfhPb3oDmJcnqtcQx6mgLO4Z:WeaBPbNm5fuR0aFT6FgAHS1p80w","tlshash":"08a3ed50042b6040a3872ce233cf3e32de8ef284b045d9346ffd5a5aed9ada562b575d","first_seen":"2026-03-14T21:04:29.902545Z","last_seen":"2026-03-14T21:09:52.310859Z","times_seen":4,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"claim-trump.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-trump.live/coin-background.webp","fqdn":"claim-trump.live","domain":"claim-trump.live","tld":"live"},"ip":{"addr":"104.21.87.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-trump.live/","date":"2026-03-14T21:04:01.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-trump.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 19:42:23 GMT","end":"Wed, 10 Jun 2026 19:42:22 GMT"},"fingerprint":{"sha1":"9D:01:14:9A:DF:66:05:5F:32:11:A8:A5:B3:BE:46:CE:B3:3E:6F:01","sha256":"96:91:D6:74:7D:43:5A:30:E4:0C:92:13:77:D2:47:DD:DE:85:39:69:CD:20:4D:18:70:74:AA:AC:8D:65:4C:A7"}}},"request":{"raw":"GET /coin-background.webp HTTP/1.1\r\nHost: claim-trump.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-trump.live/meme-conference.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\ncontent-length: 346854\r\nlast-modified: Thu, 12 Mar 2026 20:17:17 GMT\r\npriority: u=4,i=?0\r\netag: \"69b31f4d-54ae6\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CHMW6GylcPsxpkDpY5m1kmM3ksUI6jfR3mTRs3egB05wBM3PO4JTxvOOQCTf0T4oHAj8yP6eCyvfp6JwMQXvDmYNRegEved8wR%2BO%2F8d%2Fm5Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc63a79ca9d1243-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":346854,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2a386e784f0d78358b91e8599ffc20c1","sha1":"a605276602ef8b99c81bb3cb6c1a0e2912e6d297","sha256":"d7a31e23cecd060852430cf814fe715b6346a68f3428ec214242118d3adfe55d","sha512":"13a948443396b9fb70af8cd3b1ceb984a7eca0f29e5fac58491bd7d48a4df3c01898bed1c2b4f67510f4de4db3635f679038679929d993cd9c8737681977f863","ssdeep":"6144:l2MxkwUA6BdVjSn715Q+HY2ySAlDEsU284S0ghH+lEbPdDCIWjsj1r2awaQok4z:lcRVOnPDHlySAlgsUCS0WH+exWIDj1rl","tlshash":"bc7423da71c016d7f33adeb9118eac049521bceca6c2803d8c08b9a557d94fb874b56f","first_seen":"2026-03-14T21:04:29.905617Z","last_seen":"2026-03-14T21:09:52.304864Z","times_seen":4,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":125,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"claim-trump.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-trump.live/l-6","fqdn":"claim-trump.live","domain":"claim-trump.live","tld":"live"},"ip":{"addr":"104.21.87.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-trump.live/","date":"2026-03-14T21:04:01.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-trump.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 19:42:23 GMT","end":"Wed, 10 Jun 2026 19:42:22 GMT"},"fingerprint":{"sha1":"9D:01:14:9A:DF:66:05:5F:32:11:A8:A5:B3:BE:46:CE:B3:3E:6F:01","sha256":"96:91:D6:74:7D:43:5A:30:E4:0C:92:13:77:D2:47:DD:DE:85:39:69:CD:20:4D:18:70:74:AA:AC:8D:65:4C:A7"}}},"request":{"raw":"GET /l-6 HTTP/1.1\r\nHost: claim-trump.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-trump.live/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 21:04:01 GMT\r\ncontent-length: 26256\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 20:17:19 GMT\r\netag: \"6690-64cd9707b31c0\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lkyyrzQukZc%2FITNu%2BP05datBRaRW6B7EHRrbMHyM%2B9f3QwFCyIjp1J7vAtozKvXZwhkyihSLzQpHmz%2BtZHCLH%2FmvrT90tActTXg6YnH1mGQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc63a79daa61243-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26256,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 26256, version 1.0","md5":"cc6963839f6d92961f486c1b97c0c85e","sha1":"fe73236ff201cf1c71c887a6d119389998a0fb2e","sha256":"ccd0c71131c140171cad11b1bf46970fd571ccefbe18595202182ea9433c68ce","sha512":"c18cae0bae4164769e224a851e854c5cac4ab47621ad9ca242453bc81e6ae0f070c4c3d7578c23b38b2b73b708f5904de27496b7f8508f3dd22c949e49d05e08","ssdeep":"768:u+wvzUlbi8ONI1UdQ/etUyN4VBM6yP+P0H20E:Z5i8cI1YciUQ4VCnPkopE","tlshash":"3dc2e11f36706598c1d29dcf09dc23a62c96754ae3bfa13f3c744852ee83d596101b8e","first_seen":"2025-04-10T05:51:58.329826Z","last_seen":"2026-04-26T17:59:49.661686Z","times_seen":37,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"claim-trump.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-trump.live/l-4","fqdn":"claim-trump.live","domain":"claim-trump.live","tld":"live"},"ip":{"addr":"104.21.87.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-trump.live/","date":"2026-03-14T21:04:01.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-trump.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 19:42:23 GMT","end":"Wed, 10 Jun 2026 19:42:22 GMT"},"fingerprint":{"sha1":"9D:01:14:9A:DF:66:05:5F:32:11:A8:A5:B3:BE:46:CE:B3:3E:6F:01","sha256":"96:91:D6:74:7D:43:5A:30:E4:0C:92:13:77:D2:47:DD:DE:85:39:69:CD:20:4D:18:70:74:AA:AC:8D:65:4C:A7"}}},"request":{"raw":"GET /l-4 HTTP/1.1\r\nHost: claim-trump.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-trump.live/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 21:04:01 GMT\r\ncontent-length: 27920\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 20:17:19 GMT\r\netag: \"6d10-64cd9707b31c0\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OpCPqFt5Yz9723z9SQEBaRT5S720NOKj9dVtmZ2RbRwTgBR0rHSqlg8fqSCO2EoOTYKidhTavycVHbzV9EYDCDPqzsvSadcIR6M9XdCQ2F8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc63a79eaad1243-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27920,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 27920, version 1.0","md5":"0bd52ea247f20df55c56f387de1a3271","sha1":"180848a72adf1181ffa8c91ef67d89d9aae79ae0","sha256":"b20a15e5dd51955b848dc4a2417b4a10763ccc029c807685611838812615d85d","sha512":"e81cd56cfc3f4b964d9d58b702d86496d2336d4c3c2f03b18a3635bcca100e78bef98c4b97a02a7e425ba0694dab0dd22bc8439ef14b08737d39474643582bfb","ssdeep":"384:Z0J3NJNq7t8ImfoCPCqjcVMl5+G5cwf5p5QxYf8lJ9JEJizYKyQ6pE1:cwt8jfDCqjF5+GCwf5zijJz9gE1","tlshash":"04c2e10be49ad4eb99d31345197b33c9ae50d33d69bd063140cc610af7b7821a3669fd","first_seen":"2024-12-06T21:50:33.187479Z","last_seen":"2026-06-04T14:47:33.65624Z","times_seen":60,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"claim-trump.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trumprewards.live/","fqdn":"trumprewards.live","domain":"trumprewards.live","tld":"live"},"ip":{"addr":"172.67.206.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-14T21:04:00.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trumprewards.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 19:42:14 GMT","end":"Wed, 10 Jun 2026 19:42:13 GMT"},"fingerprint":{"sha1":"DE:C8:43:8A:5F:B7:A3:FE:8D:C8:E0:9B:33:E4:5B:0A:92:79:8F:60","sha256":"29:AF:A4:6E:29:CA:79:98:F6:06:ED:5A:92:23:84:36:79:D3:50:A6:86:E8:18:22:51:BD:8A:00:2B:33:CB:1E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trumprewards.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 14 Mar 2026 21:04:00 GMT\r\ncontent-length: 0\r\nlocation: https://claim-trump.live/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zDIRUhmmH6JXWNxJm7nGkbOvZqkkbQUd4eqJjEevw2V4c%2BJqNKr20F1qHJ6N1Sg%2BqqaU2C2YYP1Tk7jY2KtfR5WuGlUhUJb%2FJitH3T%2ByNQfo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9dc63a7608c31243-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72512,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":96,"dns":67,"connect":9,"send":0,"wait":11,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-trump.live/iStock-2156293682.jpg","fqdn":"claim-trump.live","domain":"claim-trump.live","tld":"live"},"ip":{"addr":"104.21.87.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-trump.live/","date":"2026-03-14T21:04:01.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-trump.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 19:42:23 GMT","end":"Wed, 10 Jun 2026 19:42:22 GMT"},"fingerprint":{"sha1":"9D:01:14:9A:DF:66:05:5F:32:11:A8:A5:B3:BE:46:CE:B3:3E:6F:01","sha256":"96:91:D6:74:7D:43:5A:30:E4:0C:92:13:77:D2:47:DD:DE:85:39:69:CD:20:4D:18:70:74:AA:AC:8D:65:4C:A7"}}},"request":{"raw":"GET /iStock-2156293682.jpg HTTP/1.1\r\nHost: claim-trump.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-trump.live/meme-conference.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 21:04:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 12 Mar 2026 20:17:17 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"69b31f4d-27bae\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bujK%2Bk8DaprAzKxfdxFDGFoGON6Am7kTDQ7VyX183T1BJ374tUBkC1NiBkNyE0eVdGSxUVLtiiDUoYzP8yjB9AqWy6YmCwbqSFxONWGH3Fg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc63a79ca9e1243-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162734,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1366x768, components 3","md5":"f662436bdc7a61613720ce41e3ef79d5","sha1":"507215cb26c2a565a54ca681c821c89856145506","sha256":"58952e42d7bad27ae16baf5fdb71a0155b5de3aaca844434ce1af3c3a7309e3f","sha512":"1d370e465ff04eb95f7e2c5fca88d5aba33b63110cdd0f7be0dec40d3b3db1535179b9cde6317305518de19e0205a82bcb4696777f387f0876a88c85b8470a96","ssdeep":"3072:EP+ZhjtfQlAneA6VIwqhsO7oI/XxOpEBgEH0d4rDTMWdtr/XkyhwH5:EesAneA6awqhsyvklNd4XTpdVky+Z","tlshash":"7bf3124d6a4320cb0a48dc6fbcde6d00a6079cd9acf41b25ee4bfc4fd441b364e28996","first_seen":"2025-01-27T12:55:31.863678Z","last_seen":"2026-03-26T06:04:27.14457Z","times_seen":37,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"claim-trump.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-trump.live/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"claim-trump.live","domain":"claim-trump.live","tld":"live"},"ip":{"addr":"104.21.87.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-trump.live/","date":"2026-03-14T21:04:01.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-trump.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 19:42:23 GMT","end":"Wed, 10 Jun 2026 19:42:22 GMT"},"fingerprint":{"sha1":"9D:01:14:9A:DF:66:05:5F:32:11:A8:A5:B3:BE:46:CE:B3:3E:6F:01","sha256":"96:91:D6:74:7D:43:5A:30:E4:0C:92:13:77:D2:47:DD:DE:85:39:69:CD:20:4D:18:70:74:AA:AC:8D:65:4C:A7"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: claim-trump.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-trump.live/css.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 21:04:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48532\r\nlast-modified: Thu, 12 Mar 2026 20:17:17 GMT\r\npriority: u=4,i=?0\r\netag: \"69b31f4d-bd94\"\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TsS7OnbQcREIKqFJojbV4SVIfjpZPoAjkVAUtsJavQTJXalW%2Fy8LJ4gIRXtYRKwl8PmiBjmmmqKvxPbXyPZS6gnMrFrRu7vzdBH0%2BBDdcPg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc63a79eaab1243-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-08T18:39:08.398345Z","times_seen":206336,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"claim-trump.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-trump.live/l-9","fqdn":"claim-trump.live","domain":"claim-trump.live","tld":"live"},"ip":{"addr":"104.21.87.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-trump.live/","date":"2026-03-14T21:04:01.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-trump.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 19:42:23 GMT","end":"Wed, 10 Jun 2026 19:42:22 GMT"},"fingerprint":{"sha1":"9D:01:14:9A:DF:66:05:5F:32:11:A8:A5:B3:BE:46:CE:B3:3E:6F:01","sha256":"96:91:D6:74:7D:43:5A:30:E4:0C:92:13:77:D2:47:DD:DE:85:39:69:CD:20:4D:18:70:74:AA:AC:8D:65:4C:A7"}}},"request":{"raw":"GET /l-9 HTTP/1.1\r\nHost: claim-trump.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-trump.live/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 21:04:01 GMT\r\ncontent-length: 26880\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 20:17:22 GMT\r\netag: \"6900-64cd970a8f880\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h9nTsYwY%2FLrogry8Kvc0QAaMsl%2Fki3E8Takys6a0qld0FUbDTreKd12xzf8%2BxYybaty7vJxGvbSPuLMmTQrzC3toaoWbllR6aGVDQuNCSNk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc63a79eaae1243-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26880,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 26880, version 1.0","md5":"57226fd9b506f3cb6a311f4fe4f82aa1","sha1":"9551562ebee701f2b2d8362c64168311b15a4e36","sha256":"ec45bf18783c4335ad0454d887705c56ce10b5e7c7ca5bce1fc1ce9ec2ef20cf","sha512":"04207fa60b17a364792b1455803d8f9b88f6c998d345815f187b5428657029773988fd6b725b6f5f086473baf5af59ccc783b6dda28903876046f6d26286546a","ssdeep":"384:vI2PAK+7ycdvlAt5S57ZbmihQPO++86mGiUTiIxgQK7/8HbeUqagpsJWxuT2bGiI:vIEL+2QUSsEN4V0Hb2sGGrvJ6WD0zY","tlshash":"c2c2e1df9c3eab45f64baaa45c18480d7c95fada93f58215137acd33fdf30848a44185","first_seen":"2025-03-21T01:35:34.764416Z","last_seen":"2026-06-08T11:23:09.407908Z","times_seen":25,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"claim-trump.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gettrumpmemes.com/images/webclip.png","fqdn":"gettrumpmemes.com","domain":"gettrumpmemes.com","tld":"com"},"ip":{"addr":"104.18.6.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-trump.live/","date":"2026-03-14T21:04:01.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gettrumpmemes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 00:15:45 GMT","end":"Sat, 09 May 2026 01:15:43 GMT"},"fingerprint":{"sha1":"E0:5B:50:F9:C5:3C:C3:2E:5F:68:A4:CF:51:FA:A0:36:A7:87:C4:CA","sha256":"DC:83:99:12:17:D2:BF:06:01:2C:C5:12:10:C5:75:0B:09:24:58:6B:D8:1E:03:C0:AC:5C:B9:C7:56:B8:4A:D7"}}},"request":{"raw":"GET /images/webclip.png HTTP/1.1\r\nHost: gettrumpmemes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-trump.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 21:04:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 111544\r\ncf-ray: 9dc63a7bfcd22efa-OSL\r\naccept-ranges: bytes\r\netag: \"1b3b8-64cdc273ba3c0\"\r\nlast-modified: Thu, 12 Mar 2026 23:31:35 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=GGu31qYe%2BFEwPPfSp9743r6DHXRnolV3%2BW%2FZLJEcWVU%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1773364845\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=GGu31qYe%2BFEwPPfSp9743r6DHXRnolV3%2BW%2FZLJEcWVU%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1773364845\"\r\nvia: 2.0 heroku-router\r\nexpires: Sun, 15 Mar 2026 01:04:02 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111544,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"ed9222a34ac2d5447de2204202e8529a","sha1":"39e6afc6b224fd9889414ad07fdb1603250b77c6","sha256":"1112b2f016db063d78805af57181a0d4434ba5ae008f0a9e6cdc388dc6ebc4bb","sha512":"ea08735cf2c9624f54e89065da1d50eb443e18e7e87b4963953ce81c66b4b1ed2d0f91dbb88e61139629718a9c3fc323bca0d875aac0ddc06cf1deb328840ba7","ssdeep":"1536:tcMU9VJc9r4pZU7n6EPpEYL0/41W2S7pECpGLZjfBlXhtS9a7aCZVf1zkG9hm:xU9VJct4T4PeYtw2MfI9jfBlXh73hkum","tlshash":"bab302d623f5b00e619886ac0165cf73d4e88e6129f66669fce8e8d1e81fcb11861e5c","first_seen":"2025-01-27T12:55:31.900617Z","last_seen":"2026-05-02T13:34:17.231275Z","times_seen":33,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":15,"connect":1,"send":0,"wait":91,"receive":8,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"gettrumpmemes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-trump.live/DJT-Conference-Dinner.webp","fqdn":"claim-trump.live","domain":"claim-trump.live","tld":"live"},"ip":{"addr":"104.21.87.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://claim-trump.live/","date":"2026-03-14T21:04:01.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-trump.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 19:42:23 GMT","end":"Wed, 10 Jun 2026 19:42:22 GMT"},"fingerprint":{"sha1":"9D:01:14:9A:DF:66:05:5F:32:11:A8:A5:B3:BE:46:CE:B3:3E:6F:01","sha256":"96:91:D6:74:7D:43:5A:30:E4:0C:92:13:77:D2:47:DD:DE:85:39:69:CD:20:4D:18:70:74:AA:AC:8D:65:4C:A7"}}},"request":{"raw":"GET /DJT-Conference-Dinner.webp HTTP/1.1\r\nHost: claim-trump.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-trump.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\ncontent-length: 54330\r\nlast-modified: Thu, 12 Mar 2026 20:17:16 GMT\r\npriority: u=4,i=?0\r\netag: \"69b31f4c-d43a\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZFO9U8pNaPbLuQ5nYHCOBN7x8eaEo7cgiSZji3MHPK9QZqXhDgOg7k6a5iN80KMwe6LnHngrFvSuGhriydbqdWc2xBQ1ZNI8JUF4vYD7Z10%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc63a78aa751243-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54330,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x918, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8e061ddc2c0d31c7dae615bf2bc40509","sha1":"c3bd5158722e843ae52d7f24b0f0bacf180d5565","sha256":"cd71c3925abb396b86b31089f925416b90c30ec441884124a35050be6a9b54ff","sha512":"fc613d93af99fdc2eb366acd3dd854975bc8677d4ad0b564dc860de730d0a6a9fc4c7e08b2eac7718757f675c14b621f69b7829923f1af6da0a575a03aa7521a","ssdeep":"768:5b92rPMKhcaqXKfzeUXXuqbdJzGhi0I0gWJdMqK83r1m2Gv:5R2Qtac0eUuqbdJHET3mL","tlshash":"5a33023376a5cc82a283dc8ce0de6f0bc4b40ad5fe37197bd96a61ded95c487119e818","first_seen":"2026-03-14T21:04:29.91704Z","last_seen":"2026-03-14T21:09:52.31347Z","times_seen":4,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"claim-trump.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-trump.live/Grain_Latest.png","fqdn":"claim-trump.live","domain":"claim-trump.live","tld":"live"},"ip":{"addr":"104.21.87.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-trump.live/","date":"2026-03-14T21:04:01.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-trump.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 19:42:23 GMT","end":"Wed, 10 Jun 2026 19:42:22 GMT"},"fingerprint":{"sha1":"9D:01:14:9A:DF:66:05:5F:32:11:A8:A5:B3:BE:46:CE:B3:3E:6F:01","sha256":"96:91:D6:74:7D:43:5A:30:E4:0C:92:13:77:D2:47:DD:DE:85:39:69:CD:20:4D:18:70:74:AA:AC:8D:65:4C:A7"}}},"request":{"raw":"GET /Grain_Latest.png HTTP/1.1\r\nHost: claim-trump.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-trump.live/meme-conference.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 21:04:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Mar 2026 20:17:17 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"69b31f4d-11693\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xqUAJJf8cQ9ju%2F%2Frw%2B0UXqB3sZVMzh52cs8ntZUAN80MD%2FGUngHU1pys2CLd3kIENNu8FUoSghULtUPcZSz%2FMqXv13OCRgE5AGKbymvLlsI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc63a79ba9b1243-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71315,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 4-bit colormap, non-interlaced","md5":"22a2fd16c6f531c26f76651567c0f963","sha1":"e65f881ad291e49b1fc89c1e9d0cef2407825262","sha256":"1c5983ac6b7c04c089d3d3bf8f6dad23b669b7810a906906a895026896058391","sha512":"dfa2c4ee9272455d57e0934e4196c7fd611ba836b9ba7002999c7eea4bc76e7ed8cf5ee14b5ad61170322a9899e97dd9c7d4f87086f032f6e1e779c8fe79f435","ssdeep":"1536:H/amGRf9dUris5QzgnAlaedtgVAUmzeLYT8Ds0rnFABU:fyf9LsugnAljfT8YiFABU","tlshash":"af6312bc9bca12685647ebad5b9330298f0871371ee77372a83985c31fb412d884d8d5","first_seen":"2023-12-05T15:44:26Z","last_seen":"2026-03-26T06:04:27.136105Z","times_seen":45,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"claim-trump.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-trump.live/mar-a-lago-3-bkg.webp","fqdn":"claim-trump.live","domain":"claim-trump.live","tld":"live"},"ip":{"addr":"104.21.87.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-trump.live/","date":"2026-03-14T21:04:01.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-trump.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 19:42:23 GMT","end":"Wed, 10 Jun 2026 19:42:22 GMT"},"fingerprint":{"sha1":"9D:01:14:9A:DF:66:05:5F:32:11:A8:A5:B3:BE:46:CE:B3:3E:6F:01","sha256":"96:91:D6:74:7D:43:5A:30:E4:0C:92:13:77:D2:47:DD:DE:85:39:69:CD:20:4D:18:70:74:AA:AC:8D:65:4C:A7"}}},"request":{"raw":"GET /mar-a-lago-3-bkg.webp HTTP/1.1\r\nHost: claim-trump.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-trump.live/meme-conference.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\ncontent-length: 426822\r\nlast-modified: Thu, 12 Mar 2026 20:17:17 GMT\r\npriority: u=4,i=?0\r\netag: \"69b31f4d-68346\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xUtHJguyJIvmsRJit3%2FWKgP%2Fl%2BiOdqkCmt9BiYRTZLyPkKv%2Forr9l6ZpQN%2Bo6artoK4WaY5LiIciXFaXm4iNXc1%2FGFkBTJg6n0S%2Bl4Edsf8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc63a79caa21243-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":426822,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1253, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8c6c05aad029d1153577698d9a9c49d1","sha1":"03735224d0d8a61721764ee95e8b11c922f7fdfe","sha256":"1d10097c4fc01388da9d995b8d03f0f672915cae037b3f94f7e9408831dfeea0","sha512":"3b786f5746eb93864b714897186940d20508173bf162205a01e695b92762e5d4902655f2ff0be8ef3e2ca32ea1101e905e1ef418e0c1f11c40c4b5674a536f68","ssdeep":"12288:/WZXlBo57OqIR+owGMWyu1Ib4yk1CUdUyhBab9IncD:/WrA7RrlvuOb4dCU6yLap","tlshash":"3a9423a454ebdcf8cc610e76886444fcdfa642b899493caf5d1bd9f26321cc32d7a498","first_seen":"2026-03-14T21:04:29.919824Z","last_seen":"2026-03-14T21:09:52.314597Z","times_seen":4,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":132,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"claim-trump.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-trump.live/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"claim-trump.live","domain":"claim-trump.live","tld":"live"},"ip":{"addr":"104.21.87.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-trump.live/","date":"2026-03-14T21:04:01.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-trump.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 19:42:23 GMT","end":"Wed, 10 Jun 2026 19:42:22 GMT"},"fingerprint":{"sha1":"9D:01:14:9A:DF:66:05:5F:32:11:A8:A5:B3:BE:46:CE:B3:3E:6F:01","sha256":"96:91:D6:74:7D:43:5A:30:E4:0C:92:13:77:D2:47:DD:DE:85:39:69:CD:20:4D:18:70:74:AA:AC:8D:65:4C:A7"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: claim-trump.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-trump.live/css.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 21:04:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48532\r\nlast-modified: Thu, 12 Mar 2026 20:17:17 GMT\r\npriority: u=4,i=?0\r\netag: \"69b31f4d-bd94\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wsny2DJQBEaMVamR9IR28T%2FIIyzSEAA6lzYRJvfSdEhcaIgyuxmYaDqhF%2B8Bq%2BOcY2%2BbZxRKFIi7ayq69ffZZLR75wnvrYbSzOHEJI5bF%2B0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc63a79daa51243-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-08T18:39:08.398345Z","times_seen":206336,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"claim-trump.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-trump.live/favicon.png","fqdn":"claim-trump.live","domain":"claim-trump.live","tld":"live"},"ip":{"addr":"104.21.87.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-trump.live/","date":"2026-03-14T21:04:01.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-trump.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 19:42:23 GMT","end":"Wed, 10 Jun 2026 19:42:22 GMT"},"fingerprint":{"sha1":"9D:01:14:9A:DF:66:05:5F:32:11:A8:A5:B3:BE:46:CE:B3:3E:6F:01","sha256":"96:91:D6:74:7D:43:5A:30:E4:0C:92:13:77:D2:47:DD:DE:85:39:69:CD:20:4D:18:70:74:AA:AC:8D:65:4C:A7"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: claim-trump.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-trump.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 21:04:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Mar 2026 20:17:16 GMT\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\netag: W/\"69b31f4c-16da\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AYgnf59DqfS44eTDExGEmStRYDxYdWCJ%2BkctvIBRgy2N%2FyX3dnZeOVKhXBF04Xg7PLVUZ4zeqTNSBYMmsylLTFvflWqahfPCSCsfkXqHvDQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc63a7bcadb1243-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5850,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"7bb47473ab236adae5e694447b334452","sha1":"6670d1129499b0c024b840e18c77eaea39386afa","sha256":"247a6fb8bc50f38c5529a327ba803c6a42eb1e9d620227e97e16b7f956d0d52b","sha512":"d9c47be0ef4baccf8a6023e5e2404959134b76e9e11ca91f716f1f1c0874b92f91306e384bbc00bdfb11e164d84e8790ea20ffcc85249a41b519576b984c298a","ssdeep":"96:FllcHitlIxv9vk7C1+I4wWHLihk/xZSOsWRIHJIQnae6Aspw43z38cAR3F:+IIHUCD4wa3SOsW8FnEpw4jWF","tlshash":"f9c17dc89468450b00070798ad4bac95c5b7674452601e2dbdfed33fe318d9578b2abb","first_seen":"2025-01-27T12:55:31.898719Z","last_seen":"2026-05-02T13:34:17.2304Z","times_seen":36,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"claim-trump.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-trump.live/mar-a-lago-5.webp","fqdn":"claim-trump.live","domain":"claim-trump.live","tld":"live"},"ip":{"addr":"104.21.87.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://claim-trump.live/","date":"2026-03-14T21:04:01.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-trump.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 19:42:23 GMT","end":"Wed, 10 Jun 2026 19:42:22 GMT"},"fingerprint":{"sha1":"9D:01:14:9A:DF:66:05:5F:32:11:A8:A5:B3:BE:46:CE:B3:3E:6F:01","sha256":"96:91:D6:74:7D:43:5A:30:E4:0C:92:13:77:D2:47:DD:DE:85:39:69:CD:20:4D:18:70:74:AA:AC:8D:65:4C:A7"}}},"request":{"raw":"GET /mar-a-lago-5.webp HTTP/1.1\r\nHost: claim-trump.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-trump.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\ncontent-length: 103746\r\nlast-modified: Thu, 12 Mar 2026 20:17:16 GMT\r\npriority: u=4,i=?0\r\netag: \"69b31f4c-19542\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R9LhIXgWtYLmU7dJlKE8IL7hHsmLx2odEItTrHcs%2BSUXrG40%2BpQpJA3TuYpJwQkY7H6hTeOM5SbuyEedmbcptYNxFif8S7CzIdxKrAAywyM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc63a7a0ab61243-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103746,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 850x555, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6034d82b5b316e654b29da6ea1a8fcc9","sha1":"1efd75f6466bda4efd6760d3dab8b283cf2e476e","sha256":"66d0dd6b0666e4d57d3642601f47edaf671d5b117c7207719ff23cf4a9aba2f5","sha512":"f4c1bdf737007e621cd681cd737ba3e84f9b8ab7f2c68932f0e008bbd61cbdfa31773835d99356e4bd4821c88b9a499e975bb19a45a6e1bf2aab633686ac656e","ssdeep":"3072:6DOPa8yl7uXsOuvEpXAo3MclKdmdDH64oe:cJ867kVr33lrT64oe","tlshash":"b7a3020f58a0bbad71f4e5fc6db090cc6e1c7858519a2bfc448ae5048a99fdabb44d03","first_seen":"2026-03-14T21:04:29.922256Z","last_seen":"2026-03-14T21:09:52.31552Z","times_seen":4,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"claim-trump.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-trump.live/components.css","fqdn":"claim-trump.live","domain":"claim-trump.live","tld":"live"},"ip":{"addr":"104.21.87.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-trump.live/","date":"2026-03-14T21:04:01.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-trump.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 19:42:23 GMT","end":"Wed, 10 Jun 2026 19:42:22 GMT"},"fingerprint":{"sha1":"9D:01:14:9A:DF:66:05:5F:32:11:A8:A5:B3:BE:46:CE:B3:3E:6F:01","sha256":"96:91:D6:74:7D:43:5A:30:E4:0C:92:13:77:D2:47:DD:DE:85:39:69:CD:20:4D:18:70:74:AA:AC:8D:65:4C:A7"}}},"request":{"raw":"GET /components.css HTTP/1.1\r\nHost: claim-trump.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-trump.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 21:04:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 12 Mar 2026 20:17:16 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"69b31f4c-88be\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=csYA8Fzl%2BXwo0ihD8g7G9pmEZMxKmbsEYvoGxMSxfC%2BnSVvicqPzxCK26WruKMDqItSf3atYaCcBtB55lM1Z4yZY0UskPfZW6q2dtGLN8Uo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc63a78aa701243-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35006,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"5c47ba7c7b431e6c307126f70104cc69","sha1":"1ac8a1c81b75a65700a922fa2b4aef3e571f55ad","sha256":"c6e7e1ee0ab7df6ff79e52b36196841995c7d26d397aa12b2581649fa0d56f47","sha512":"130a6db22cc1c0da548bca757c34c909fa80c7e808ea999b1fb739fc26152673a2ca7deca338cb3995aa228d19db9cdc0defc3a17d400de3cce8e0d7b597eaf1","ssdeep":"768:qRQ/VHrFIfoF7GpFMDw82aWoS+lyKA+vdxxF3F5FiwFt24lLqClUZuaE7WkQtTVJ:qWtHr5KCPxljdRLqCqQekQR","tlshash":"c7f285859bf40630b817c1a56890a365772d4002b74ede28fae1741fdfce2c799b3b5a","first_seen":"2025-09-28T17:21:48.776354Z","last_seen":"2026-03-14T21:09:52.305539Z","times_seen":9,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"claim-trump.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-trump.live/A3sLm15Y.php?s=%2Fipfs%2F7Gc6p9UQ5JqaOMMS_fY_pg0702b396044cd339a8cd438d2bd10030%3Ft%3D1773522241376","fqdn":"claim-trump.live","domain":"claim-trump.live","tld":"live"},"ip":{"addr":"104.21.87.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-trump.live/","date":"2026-03-14T21:04:01.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-trump.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 19:42:23 GMT","end":"Wed, 10 Jun 2026 19:42:22 GMT"},"fingerprint":{"sha1":"9D:01:14:9A:DF:66:05:5F:32:11:A8:A5:B3:BE:46:CE:B3:3E:6F:01","sha256":"96:91:D6:74:7D:43:5A:30:E4:0C:92:13:77:D2:47:DD:DE:85:39:69:CD:20:4D:18:70:74:AA:AC:8D:65:4C:A7"}}},"request":{"raw":"GET /A3sLm15Y.php?s=%2Fipfs%2F7Gc6p9UQ5JqaOMMS_fY_pg0702b396044cd339a8cd438d2bd10030%3Ft%3D1773522241376 HTTP/1.1\r\nHost: claim-trump.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-trump.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 21:04:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ryCvZHLoA%2Fk2WH1G%2Ft4KnPS6uhV9ylX5p4r%2FwwTgRfU8vjmfKT7t3NUUJA5T%2FLQL5Lt2oGwFjZc5bzMie4xGJjwt9r53QEllFCZfRHGa13w%3D\"}]}\r\ncf-ray: 9dc63a78ca7c1243-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":634331,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"28ffb129ff536f3e6efec380d8010258","sha1":"3433df0a31c032c28a8724c563a22b980b99c917","sha256":"6d1201dd9092a19927980bdbfb0035038017adeefe0b87dd8e80766fa5f20586","sha512":"7203f683d74436c5df6ef88231bf608056af88222daf5c516bfb5d0ccab263e29c2a98237566df932d230449dd0fe23955a298278ce37dcb89d0cabd1cf56c27","ssdeep":"6144:qh5gDT6Euno4xvlISDhTl0WHvfUp+v+9J87XGQOwOyyGpMy:qsTZunzvlzSWP8p0Q+Bz","tlshash":"add499c08b4c357364802aea15fb446fdfdc0de82e4be8536bd09ca5e379b8351e5998","first_seen":"2026-03-14T21:04:29.924858Z","last_seen":"2026-03-14T21:04:29.924858Z","times_seen":1,"resource_available":true,"data":null}},"time_used":696,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":612,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"claim-trump.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-trump.live/stars-stripes-2_1stars-stripes-2.webp","fqdn":"claim-trump.live","domain":"claim-trump.live","tld":"live"},"ip":{"addr":"104.21.87.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-trump.live/","date":"2026-03-14T21:04:01.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-trump.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 19:42:23 GMT","end":"Wed, 10 Jun 2026 19:42:22 GMT"},"fingerprint":{"sha1":"9D:01:14:9A:DF:66:05:5F:32:11:A8:A5:B3:BE:46:CE:B3:3E:6F:01","sha256":"96:91:D6:74:7D:43:5A:30:E4:0C:92:13:77:D2:47:DD:DE:85:39:69:CD:20:4D:18:70:74:AA:AC:8D:65:4C:A7"}}},"request":{"raw":"GET /stars-stripes-2_1stars-stripes-2.webp HTTP/1.1\r\nHost: claim-trump.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-trump.live/meme-conference.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\ncontent-length: 40538\r\nlast-modified: Thu, 12 Mar 2026 20:17:17 GMT\r\npriority: u=4,i=?0\r\netag: \"69b31f4d-9e5a\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EbvaCHiCD0G2yvrzb9W44C07eOVvo%2FXuZKH0CTabT%2FTfufcJA1XpUE1aAEhoP0nwIKhCtS%2F0rcG5HYplTbDqzJ2uAe7J6Pg88azNRAEUn4I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc63a79caa11243-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40538,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2000x1125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d75f4481cba25d76d3725fa4f1a29b92","sha1":"dca2713fe15bcac2659dedc238033db67a5691e1","sha256":"4d2261785b0d347120fdad245cf2ef3372e4f26376b0e8ae60871daa3fd3b707","sha512":"3bd594eaf314190d0cc31b1cc15b4733221253dd264dd90e4d5f867201d1cc29bcffb9dd678d5375425ae5dbc7a6fce87865df5eb9fe4b9eb8b01a8fe5fba219","ssdeep":"768:CUnApRtbFNJS2xOd6p6jiinspizsylm9lCyrfwIFtpg8O98O9mB4E7:CUApRxFN2fjAizgEyrf17bBT7","tlshash":"400302c70226eee98b251bf3c4cb1fb98511e7a5725943dc249f23bbf0193081319a6e","first_seen":"2025-01-27T12:55:31.854725Z","last_seen":"2026-03-26T06:04:27.142982Z","times_seen":37,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"claim-trump.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-trump.live/intothe-rainbow-9.svg","fqdn":"claim-trump.live","domain":"claim-trump.live","tld":"live"},"ip":{"addr":"104.21.87.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-trump.live/","date":"2026-03-14T21:04:01.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-trump.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 19:42:23 GMT","end":"Wed, 10 Jun 2026 19:42:22 GMT"},"fingerprint":{"sha1":"9D:01:14:9A:DF:66:05:5F:32:11:A8:A5:B3:BE:46:CE:B3:3E:6F:01","sha256":"96:91:D6:74:7D:43:5A:30:E4:0C:92:13:77:D2:47:DD:DE:85:39:69:CD:20:4D:18:70:74:AA:AC:8D:65:4C:A7"}}},"request":{"raw":"GET /intothe-rainbow-9.svg HTTP/1.1\r\nHost: claim-trump.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-trump.live/meme-conference.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 21:04:01 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A8sb1RMFkpVKRzgKaPMQIoLDgeuuB%2BnI6AyPmhI8HwPlKZFKs42VkouhnpLWqM6%2BmS8WlLEcErkc30DzF2JrZJJL%2FUhN2wzuc1n%2BPrGkSgk%3D\"}]}\r\nlast-modified: Thu, 12 Mar 2026 20:17:17 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69b31f4d-697\"\r\ncf-ray: 9dc63a79caa01243-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1687,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e7c9505f5bdfe50488571bc74fac3b29","sha1":"3817712bbe0eba230459bab424d42ae18ebcda48","sha256":"eeeb7f2dcf7a4e8b56fb7f730ffd6880152b253fab71e565916589be6720d7fc","sha512":"cf4b94068cf9e48c6689c19ff32dd9f106c8e5bcc00aa330caa7794815feb5fd44beeb1f912c1a530489e0d1e052bc2c0d6c0070aa9bb04847fd0cf99244e1bc","ssdeep":"","tlshash":"4a317b2ad8e6412fe72a8476f84c4c2e2a65d2741b4284c4b09c5f0ff19894d043f32f","first_seen":"2025-03-06T13:25:43.525867Z","last_seen":"2026-03-26T06:04:27.132636Z","times_seen":36,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"claim-trump.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-trump.live/l-2","fqdn":"claim-trump.live","domain":"claim-trump.live","tld":"live"},"ip":{"addr":"104.21.87.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-trump.live/","date":"2026-03-14T21:04:01.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-trump.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 19:42:23 GMT","end":"Wed, 10 Jun 2026 19:42:22 GMT"},"fingerprint":{"sha1":"9D:01:14:9A:DF:66:05:5F:32:11:A8:A5:B3:BE:46:CE:B3:3E:6F:01","sha256":"96:91:D6:74:7D:43:5A:30:E4:0C:92:13:77:D2:47:DD:DE:85:39:69:CD:20:4D:18:70:74:AA:AC:8D:65:4C:A7"}}},"request":{"raw":"GET /l-2 HTTP/1.1\r\nHost: claim-trump.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-trump.live/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 21:04:01 GMT\r\ncontent-length: 25824\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 20:17:17 GMT\r\netag: \"64e0-64cd9705cad40\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yW47SbSyhEZZSdMHmKskylI4Qgdu0wiLglZnTmazwAWmZ1pcOVMuaeXpCPXShslN435QbLGPZvgFfHFvNF47M9qwOhiaAj5GI5k0lq3EJ54%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc63a79daa41243-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25824,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 25824, version 1.0","md5":"d017d5a86bb162b7e444b857a884ad58","sha1":"5a3e89f273a892ee20f2ccdef3f6f0025d5ed8d3","sha256":"adfdf3c3638f09d7a9e3abe920c66ff378dde1cbd83d9468b3cc8b3e46330d24","sha512":"5304b52987b34bd66f23be357329c591982cc91013fdeb2c727bafef742ef5dbb3dc3347058cb8ee070e0a6c8c1a43f817aa4600422910079a0956e0717ce8b2","ssdeep":"768:V0JCs+FvkbT4u1y5rXQqFZBeyEqfhgzT8U95hc:V0Qs+JkbTjCrQqI7qfhqTt9Tc","tlshash":"36c2e1d8bff11b60e32725303bd0d9b1ecdb7e62d698ab1b58f5f84913918390074866","first_seen":"2024-12-11T15:01:14.461951Z","last_seen":"2026-06-08T11:23:09.410104Z","times_seen":667,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"claim-trump.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-trump.live/meme-conference.css","fqdn":"claim-trump.live","domain":"claim-trump.live","tld":"live"},"ip":{"addr":"104.21.87.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-trump.live/","date":"2026-03-14T21:04:01.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-trump.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 19:42:23 GMT","end":"Wed, 10 Jun 2026 19:42:22 GMT"},"fingerprint":{"sha1":"9D:01:14:9A:DF:66:05:5F:32:11:A8:A5:B3:BE:46:CE:B3:3E:6F:01","sha256":"96:91:D6:74:7D:43:5A:30:E4:0C:92:13:77:D2:47:DD:DE:85:39:69:CD:20:4D:18:70:74:AA:AC:8D:65:4C:A7"}}},"request":{"raw":"GET /meme-conference.css HTTP/1.1\r\nHost: claim-trump.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-trump.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 21:04:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 12 Mar 2026 20:17:17 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"69b31f4d-58341\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gp8WQMjE6Wa%2BXvWp%2FudtVCHsclOiMwd7MnNBWZSjge4d5%2BS%2BNrhdbsQAq5G8Dfldyp1b9%2BAJL%2BK0%2Fb3zOk2LdTEGWzRl7mQvnJJpkHoGKqI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc63a78aa711243-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":361281,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (554)","md5":"5734e1ff0ee6e85f0ef0d987787c29b0","sha1":"63b5a5b1b9078f742ac3d7507642fc9de706d0c3","sha256":"372eed90dded983d2a76ce8cc37659555ccf4911599ee25b0e3f09318f7566dc","sha512":"f9c899e9093781c9c6a4948d99599cc51f7d583b3c6aa86c31176a50edddd12c5b8b6f62349a80c3468c4fa0ea50577117b47635e9460e83c9b642c64ff6169c","ssdeep":"3072:qArGTCESjAYXkkOhPel72hKf8v57OAXJ5rSYmzk+REIxqfS6VgNMv+SUItkjtER8:qA9BvK4qcAZ5e0VOmkjtERYm6j","tlshash":"fc74870037b9a484792b58f99aeab780731ed442cd4ecef93ae620e8df441d9357275c","first_seen":"2026-03-14T21:04:29.929594Z","last_seen":"2026-03-14T21:09:52.301421Z","times_seen":4,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"claim-trump.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}