{"report_id":"d2f0c8a7-4711-4341-b00d-b54c0f1a33d4","version":6,"status":"done","tags":[],"date":"2026-01-08T18:12:22Z","url":{"schema":"http","addr":"claim-steer.finance","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"104.21.43.60","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"claim-steer.finance/","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"title":"Home - Steer Protocol","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T14:02:13.833701Z","times_seen":17818578,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"claim-steer.finance","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"104.21.43.60","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-12T18:12:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"claim-steer.finance","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-08T18:12:24.890225Z","last_seen":"2026-01-08T18:12:24.890225Z","alert_count":64,"request_count":64,"received_data":14590542,"sent_data":31373,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.prod.website-files.com","ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-01-23","domain_rank":20159,"first_seen":"2023-11-01T22:05:38Z","last_seen":"2026-01-05T03:47:56.659548Z","alert_count":0,"request_count":1,"received_data":16825,"sent_data":502,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"claim-steer.finance/","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5ae8e4e430092a1d976dad63a1530251","sha1":"4326c03f400cd2d6bc8f9e547f113d6fcb54b4c2","sha256":"cfa2c36f076329ba57b60aa2db59a5f9e436113789444ed6f3b244d52b00d31a","sha512":"cd35b5365dee95c675e880a0ece98467a2a5c6f36c3653a902fa7ff7166a0a97991614b7ded37072885da86ab73309adc5561cc49ae6b786490d8c3539b65a9b","ssdeep":"768:GFOkrsc+wgqgEf/5QXUHAfH9rqX7P0j6NM34ySaciqcdcrzcx8+vYvjzXj9zjceN:8gqgSgv5qXM3nS94btZcZ","tlshash":"317364d5990bd4e58d4221ded437ec05e46809a3cdacf1a3b92ceec2745df22c84b63a","size":73712,"data":"","first_seen":"2026-01-08T18:12:32.419449Z","last_seen":"2026-01-08T18:12:32.419449Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/format-7.27.13.min.js","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"491834d3f9caa47327ebc9e910d3e358","sha1":"b6bb5ba41355e2182cd6d7b46f5c4facf3b0e142","sha256":"c165139532d0234c3418c6bca1094f763473ae043f66c20823d9bf77b739d087","sha512":"9ab72e28b28de446cf787e99e947edf44f94d4176fbaa01d37b30fe7ae4cda0db61833e22c6c031287527c675e803344879e0b51acf88fd5a2b57f8b40f3be1a","ssdeep":"768:d1KkrgcUEgOgErL5sXB4gDXQ02SuTYxpNI03dKsciscdc/Xct+H+vivjtXjzxZcc:lgOgcIgbSuT4I03dK54zvSD","tlshash":"6f7331d6594bd0d68d1211ddd437ec18e06809a3cdadf193ba2ceec6b45df22884b63b","size":76573,"data":"","first_seen":"2026-01-08T18:12:32.373963Z","last_seen":"2026-01-08T18:12:32.373963Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/index_1.html","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e9e5733f9f812f0571bbd907b3f6f8e1","sha1":"af8f53dd5f9ccd286aeb88c43e107f53b43a2efe","sha256":"f13a5bb61a798a8290ed65f940b34a447df027d25df7c556110938b67d2065c1","sha512":"c0362656b1e48c29fb0b8df973932aa04a11580b49afbf06c995586657a0ace9957ce0836771cceb326244d68dad51a37e7a8432287cd609ee1075dfc2f5d497","ssdeep":"","tlshash":"b111a2e4ba87d509c21611662417cc69fefc0ee04c8a689af106ff9195e7e11c5eef4c","size":1000,"data":"","first_seen":"2026-01-08T18:12:32.421125Z","last_seen":"2026-01-08T18:12:32.421125Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/format-7.27.13.min.js","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"491834d3f9caa47327ebc9e910d3e358","sha1":"b6bb5ba41355e2182cd6d7b46f5c4facf3b0e142","sha256":"c165139532d0234c3418c6bca1094f763473ae043f66c20823d9bf77b739d087","sha512":"9ab72e28b28de446cf787e99e947edf44f94d4176fbaa01d37b30fe7ae4cda0db61833e22c6c031287527c675e803344879e0b51acf88fd5a2b57f8b40f3be1a","ssdeep":"768:d1KkrgcUEgOgErL5sXB4gDXQ02SuTYxpNI03dKsciscdc/Xct+H+vivjtXjzxZcc:lgOgcIgbSuT4I03dK54zvSD","tlshash":"6f7331d6594bd0d68d1211ddd437ec18e06809a3cdadf193ba2ceec6b45df22884b63b","size":76573,"data":"","first_seen":"2026-01-08T18:12:32.373963Z","last_seen":"2026-01-08T18:12:32.373963Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/index_1.html","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5ae8e4e430092a1d976dad63a1530251","sha1":"4326c03f400cd2d6bc8f9e547f113d6fcb54b4c2","sha256":"cfa2c36f076329ba57b60aa2db59a5f9e436113789444ed6f3b244d52b00d31a","sha512":"cd35b5365dee95c675e880a0ece98467a2a5c6f36c3653a902fa7ff7166a0a97991614b7ded37072885da86ab73309adc5561cc49ae6b786490d8c3539b65a9b","ssdeep":"768:GFOkrsc+wgqgEf/5QXUHAfH9rqX7P0j6NM34ySaciqcdcrzcx8+vYvjzXj9zjceN:8gqgSgv5qXM3nS94btZcZ","tlshash":"317364d5990bd4e58d4221ded437ec05e46809a3cdacf1a3b92ceec2745df22c84b63a","size":73712,"data":"","first_seen":"2026-01-08T18:12:32.419449Z","last_seen":"2026-01-08T18:12:32.419449Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/format-7.27.13.min.js","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9dbff552e2ad0f8f73a30f43167c1283","sha1":"34447269cb00c51d208d5cbeeb66fd5db296f6d2","sha256":"73b64d4c5ef292aaba1c0d31c519f481c5366fb1a64ec099afb566a6a72ea403","sha512":"34d4378eff619218176d77013e21c117d584eeb55f453841e193e91b34428e9d76c9e1835c2292203dfcceb3f40056e553f71fc1e2febca76d745df8f7e2cc36","ssdeep":"","tlshash":"7f118ce4ba87d605c21510662417dc69feec0ee04c8a64aaf116ffd194ebf1184def4c","size":1000,"data":"","first_seen":"2026-01-08T18:12:32.428861Z","last_seen":"2026-01-08T18:12:32.428861Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/49dc503c-d7d2-4793-9fa7-be0a4fd9c744","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e21c7073dd3f60811af1a791d551817","sha1":"077553740f37d68445d1ae0c7e68d14fea65789d","sha256":"3af13eb81f4adfdcca76f9f1ed24f1441a147b6319c9a0993076431dfe5b2391","sha512":"7f7c28429efa881ae4dff484c5d207d2687c1715a36f2bb6c80738e600032919e818878bff24de21fdc3f5a72dc6f03a540a9f82d216fe7485c35f40012cb96d","ssdeep":"","tlshash":"ee11ef00f670e8b612ef58d100313807f2545869f16d84a477bdecb320b18de6bab235","size":1000,"data":"","first_seen":"2025-03-11T06:37:48.554747Z","last_seen":"2026-04-30T18:33:03.078686Z","times_seen":681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"claim-steer.finance/secureproxy?e=jscdn/getFile","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-steer.finance/","date":"2026-01-08T18:11:54.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-steer.finance/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://claim-steer.finance\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"u5oq0btp6rr5ut6rcxbi\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:54 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self', frame-ancestors http: https:\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4V5WpalruAlziLTARbd6JwYM2HYxRifcGdXpgH8AixvQISVgT5p1nX2xtT8B6bW6j5fFqx5BUDXgFJnB6XeUNg%2Fr3dTBkokgfDALWM7HRzhbSA%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9bada8fa0bcdb51e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4142443,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"18942170db19f5063058284dedb49e28","sha1":"efbb30baf22af733be81ae13f813cbf6db3f1f04","sha256":"4973a33a464017dbcb6188e0a53ee8132a1cc259b4f4554b08802c03c2f694f6","sha512":"c842e7d7b34d624d018fb1968147ed94a71896bd5cfb96cbbd561b99bdc8634e0e6e94e5807bc43f76939aaa3377ba4ee91500491a759bc98a417a3a5a3cdea8","ssdeep":"24576:1IKU8VpZbrD8RCID+CRfKJVPh/pV7OdD3oRFI:1IKppdM9Drkr/pRm0FI","tlshash":"da2523d090a1b1c377189935d1f94f9c69ea50046eaa41bf3c6dec80349a7fad6c87e3","first_seen":"2026-01-08T18:12:32.352534Z","last_seen":"2026-01-08T18:12:32.352534Z","times_seen":1,"resource_available":false,"data":null}},"time_used":769,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":286,"receive":483,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/67f9744c6203a0237729f965_Arbitrum-Logo-PNG.webp","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/index_1.html","date":"2026-01-08T18:11:55.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /67f9744c6203a0237729f965_Arbitrum-Logo-PNG.webp HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:55 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\netag: W/\"695ce527-1782\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 200216\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ftO6Q7tSpIf6xdh0029KuSg79C7%2BRbQTd2gs72D1EJFUYa5ryj5qoWCADE1RodlGwTRnvljk7yBYdYIeld%2FLLJMrv1Dcjl6vqKYu9FP5xU%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bada8fd8f11b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6018,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7ff25083692a26b89f5007348aa48c46","sha1":"01f8945f576f85a9383fa53fd2690a610b872318","sha256":"539e476efc3b6adb126e54489ee1658650871d07932accfc0f384bbbe1767874","sha512":"8568cfb2f3d2f3cb8bf4534987bdecea2afe85f0b2fbc55be48c4b338dec18f07b9128b81a63ab5d07140ea98978e7fa0577ff07d7e040a5374ad7c30897d3d2","ssdeep":"96:9wBRDG4a9UTYuIz6DnPyhzTAN6Tv970JKsHQ9KMICbGtBjhEJElQaqm7GXpeaIlF:qG4a9UTYuIzAnPyhYsTWcsHQ9sWBb4BD","tlshash":"85c18dbcad4dd8ff8d388d4f00489190f30abd42025c8193136b6ffa234d22a532b55d","first_seen":"2026-01-08T18:12:32.353624Z","last_seen":"2026-04-11T17:52:09.045728Z","times_seen":6,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/67f97349e0c5b84b309370f8_logo.svg","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/index_1.html","date":"2026-01-08T18:11:55.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /67f97349e0c5b84b309370f8_logo.svg HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:55 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 200217\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mOujibAN1u9Kcp5XiXfH8R0L%2BZwR5%2Fdp5yN8vhPs86JHoDZKN7p2v0%2F%2ByBsfkgOwCXNV04U6NUIqrvvgl0BXaouE8nJ31bD%2FIivIt%2BVfv%2BjS\"}]}\r\netag: W/\"695ce527-1619\"\r\ncontent-encoding: br\r\ncf-ray: 9bada90009a3b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5657,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"10881c00def5e023f8b41c86738a6ffb","sha1":"437d3a87376894c7f1a26afb5e31027d554c10bf","sha256":"d021c2f29ca1531d4fad44200b8056734065d0837dd5cbf389e6676082b5f854","sha512":"a184b4205944ae0c1061812aac9c2c88c2a6c0517e5767423713e0001ec3973f474bf6cfb878e94f1b58b1c203d84b288f5d1e06e679a92cd72e9268e08f7f7d","ssdeep":"96:zpRXLK/k6gJKTcGwScw41zzfpS8Adg5kuZRdwINSmcO5HQK:C/uJKTMvYC5kuZRdT1cOOK","tlshash":"9fc19625cfbe4abcd58d03581c7817149b386cab717458b8feed95a08f05d18ea24bce","first_seen":"2026-01-08T18:12:32.368093Z","last_seen":"2026-04-11T17:52:09.070796Z","times_seen":6,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/steer-protocol-secret.webflow.shared.ee9f478f7.min.css","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-steer.finance/index_1.html","date":"2026-01-08T18:11:55.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /steer-protocol-secret.webflow.shared.ee9f478f7.min.css HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/index_1.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:55 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\netag: W/\"695ce527-21181\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 200217\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=87D1D0iFqKWKRSqB%2Bf9TsxyEAeJwEU0ElcbxSfp1TtHH4JXZBAHuxYLSehHHmn8I6s9kLa4imVH2j5c8OwN8G44uiGrxS6VQcBLU3V%2FO0v6z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bada8ff28b9b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":135553,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65524), with no line terminators","md5":"85098603f22d9b4f3cc4cfc8239946fc","sha1":"4285eeff3f643af7ad7ea85be7b55ef398379dc7","sha256":"2f688e90ed46b056fec1f2f5573b5f5e60260de1f6b79d2527018a8da7e99bf9","sha512":"e4412ff1ba71d01e94f59e2a286ded98e0a71b28f24882764f415f63d66e2e232e507868d85d3d18c96cee42b45f12be854e393e6a0c7be610db6a0473e2e2e3","ssdeep":"1536:KXoCWdzT4xkQIi7lIiE3hcfpobobVgDdgDdxJLR+aoWJTyp96+dxewzrYp6ISeBU:023E0XX","tlshash":"4dd3b92b6e58318c747b84a6dae1b7cca111504bd61247eef943e52acac62c33b37d5c","first_seen":"2026-01-08T18:12:32.369882Z","last_seen":"2026-03-28T00:37:00.810282Z","times_seen":5,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/format-7.27.13.min.js","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-steer.finance/","date":"2026-01-08T18:11:54.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /format-7.27.13.min.js HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:54 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:14 GMT\r\netag: W/\"695ce526-12b1d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 200215\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Ddv2myEDmVD8Qq9UdDySCnIA%2B2X3OYXbzsuZIlcwIbt%2B0cMkRWauWM48T83tIzy4e4cM0wEnavuh%2FtTwCPe7Ws7ojnyDfchxqzbnGUXIDcF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bada8f7c999b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76573,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"491834d3f9caa47327ebc9e910d3e358","sha1":"b6bb5ba41355e2182cd6d7b46f5c4facf3b0e142","sha256":"c165139532d0234c3418c6bca1094f763473ae043f66c20823d9bf77b739d087","sha512":"9ab72e28b28de446cf787e99e947edf44f94d4176fbaa01d37b30fe7ae4cda0db61833e22c6c031287527c675e803344879e0b51acf88fd5a2b57f8b40f3be1a","ssdeep":"768:d1KkrgcUEgOgErL5sXB4gDXQ02SuTYxpNI03dKsciscdc/Xct+H+vivjtXjzxZcc:lgOgcIgbSuT4I03dK54zvSD","tlshash":"6f7331d6594bd0d68d1211ddd437ec18e06809a3cdadf193ba2ceec6b45df22884b63b","first_seen":"2026-01-08T18:12:32.373963Z","last_seen":"2026-01-08T18:12:32.373963Z","times_seen":1,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/67f963888b5f992fd7d3d01a_ant-design_x-outlined.svg","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/","date":"2026-01-08T18:11:54.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /67f963888b5f992fd7d3d01a_ant-design_x-outlined.svg HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:54 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 200215\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=63IX%2FJD3WV67mnctKMAhPFjcQmAoF0VDU9u81waPxYSIF712mkM1UZJ0UzJxe%2FzJXYMnAPoNjYNS2t4uhAi0sut6MgFf9OD70mQd%2FLfHwPXc\"}]}\r\netag: W/\"695ce527-1b0\"\r\ncontent-encoding: br\r\ncf-ray: 9bada8f7d9b2b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":432,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ef8d1cdcbb40147ea09804f228d9edde","sha1":"8258d92d487445f65134f1c93543fa49e9aca0d2","sha256":"48b4feb3d1db8422712916523764f745a4bcb652020377273f4a8e4e33bc5d61","sha512":"5ed6f5cd0089cda00953d6804ef2b1f5c665c30badfef8dbbe4533f4a0206fb8061669bbde05a9b6a8ccb4aa82386fe4cc021f085cae0fc136c5862b6f690004","ssdeep":"","tlshash":"dbe055fbb089aac06e0b8636e23c109261a738843659873984902e18e914569581e9e8","first_seen":"2026-01-08T18:12:32.377794Z","last_seen":"2026-04-11T17:52:09.071545Z","times_seen":11,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/67f9abac728283f9c36ec9e5_SteerLogo_S.png","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/index_1.html","date":"2026-01-08T18:11:55.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /67f9abac728283f9c36ec9e5_SteerLogo_S.png HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 6337\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\netag: \"695ce527-18c1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 200216\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ek7kkAa%2FHtGAuKhQGpZ8frjQJdoQ84jBpryHLbWQqxSnSt99noxf4G191qIG3iI8qa%2B6%2B52%2BeD7ttljP7GiXSeoBRBXEJcyMfUDYUdwH8BgE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bada8fd7effb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6337,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 383 x 517, 8-bit/color RGBA, non-interlaced","md5":"482ca0d392d7a992cdf96ac4e5e45533","sha1":"816fed5a1d35c7037c374698034f2018cb2c3815","sha256":"442c65c1ba0dea5d486206c0919240c60ec9f17b73686feea924c379c7e328f2","sha512":"daf60977bdfc2ae30620af56c708fb2d12856eda75e6e4adf900f6c731014638570387dbfff97360e7a33205f3ad850ed34a987f8792a72e071da265acd3a1bf","ssdeep":"192:Bfu/IfLqI2zBwAq3IqBYRvHnX9kg5Xw7rT5/7h7JtKGdOc:dKIeDBeIrNh5XMf5zlJtKMn","tlshash":"70d19d46051b408049564c6d871eeefd6d8ea2efc8bac911c66c8f2f8d82572577ad13","first_seen":"2026-01-08T18:12:32.378701Z","last_seen":"2026-04-11T17:52:09.069871Z","times_seen":6,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/67f963888b5f992fd7d3d07c_cy-vb.svg","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/index_1.html","date":"2026-01-08T18:11:55.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /67f963888b5f992fd7d3d07c_cy-vb.svg HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:55 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 200216\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M8A520h5jRCTHYVXKcPPt%2BadsTwfX%2BZEK7hHzPRUltrbCUw7kkodY%2BUI5icBS1LUlxscGgOifjKj37s3eUs83S%2Fg2aYnohrh697xzqgipQtE\"}]}\r\netag: W/\"695ce527-1f4\"\r\ncontent-encoding: br\r\ncf-ray: 9bada8fdcf67b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":500,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3c4c2d1e2f9afadcf15f22cd494b39de","sha1":"e57a4186b1e22ed38b054de358be10b97cd4c130","sha256":"d8949ccec65f1f1ffc44607832709d211c058c489ce55f481a29653c9cb45f3c","sha512":"229080c15e7a627c8b1dc092eb8738e522020ede288f879028585ffa132ce7eb68343776425c23365b608ee5d4c3bc75844c9579a06f3648fa9ba57fe894ac24","ssdeep":"","tlshash":"a1f0592ae71cec37e109c088d4c0d56401b901d365c592b1d2c2ff1fb6245c3391a6a4","first_seen":"2026-01-08T18:12:32.379822Z","last_seen":"2026-04-11T17:52:08.982344Z","times_seen":6,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/index_1.html","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://claim-steer.finance/","date":"2026-01-08T18:11:54.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:54 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TQCpEBGG3QE%2BqgSxpGHLB%2FVallnaehZupRHXCxN4kiVY04DccvYrQ719Zh2g%2FUW7SBfI5XGD7eTCzdIOri4r1Q9prhyA93whvNt2xr%2FjBJoC\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9bada8f96b3ab51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78254,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5917)","md5":"f3716b235052bff288be7f169349c3df","sha1":"a73a295fb2af40233097f82edd8dba699134cfe1","sha256":"9075d0aaa83ab3213811b9e6dc07cf1ee4941db0f50ed1fa606491bc5d974a0f","sha512":"8d2711f5b006bf962f319e5d4eebb9d413bcc18c39867b5d75f67308ebd731193b0d9a752f666adb16a42e95e1b38740599ee450a72c6a88cb53829465628f93","ssdeep":"1536:Leqkh5gi+ugVWaAeFyiVNPA/TgtBbazr268:CD55eVWaAeF5VNYMtxp","tlshash":"6e73c6dfa9e31044690390bd1fa727e63736c003e20add697edd6258df852c89ee2749","first_seen":"2026-01-08T18:12:32.380728Z","last_seen":"2026-01-08T18:12:32.380728Z","times_seen":1,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":269,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/67f963888b5f992fd7d3d0b5_linkedin%20(1).svg","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/index_1.html","date":"2026-01-08T18:11:55.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /67f963888b5f992fd7d3d0b5_linkedin%20(1).svg HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:55 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 200216\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2o5Mymib5g30HN8jF5AZRF1qQH%2BDBW4RZyfo0e%2F4oiFss1Iaw5HUAQNkjdJsAjKdJftjaMGEwkvDnH6KYa4tYTOGDeysxauqB69vgyBXOEMH\"}]}\r\netag: W/\"695ce527-74c\"\r\ncontent-encoding: br\r\ncf-ray: 9bada8fe1fa3b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1868,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"250e2c4843371b81ead7d3291fcd961d","sha1":"dcf2bb8da2a510347dccf0667035da2275bd81c0","sha256":"786f4675cff61fb9fb353c1450c6dce07217247e146ad7a39712fdb2c142f58f","sha512":"42322fe51730a3dad23d5d14ee15887f3510a4db46cb68b2137101ad1882b5be150fd5d515b05ec8f4bbfa932dc2d66dbea1d8281b8590d479c2fafc03138ded","ssdeep":"","tlshash":"a93143daebccd7b054c683f0c22390b3e6df26755302d79081b59f75f9060ad9485984","first_seen":"2026-01-08T18:12:32.381771Z","last_seen":"2026-04-11T17:52:09.001864Z","times_seen":6,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/adsct.gif","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/index_1.html","date":"2026-01-08T18:11:55.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /adsct.gif HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:55 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\netag: \"695ce527-2b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qJ5Gcdk0hOmAQVcySkw3%2FLPDn6PDS7VXAhisFbLAGnRha42JpyNmEf1M00ww2MzxTd6JGQazZ8i983EZVxCu6OM%2FZKBEx5CJvHpXz7f7pjEm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bada8fe1fa5b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"377d257f2d2e294916143c069141c1c5","sha1":"b7cae69682cf31dd670b65088db8395acda6ed3e","sha256":"ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957","sha512":"01211111688dc2007519ff56603fbe345d057337b911c829aaee97b8d02e7d885e7a2c2d51730f54a04aebc1821897c8041f15e216f1c973ed313087fa91a3fb","ssdeep":"","tlshash":"4e900403d3c0c001c151d0300d0cc7441344f0305554030f70fc575ddc3d1550c170c0","first_seen":"2023-04-05T06:54:04Z","last_seen":"2026-08-08T16:20:10.183296Z","times_seen":1391,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/67f9744c6203a0237729f965_Arbitrum-Logo-PNG.webp","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/","date":"2026-01-08T18:11:54.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /67f9744c6203a0237729f965_Arbitrum-Logo-PNG.webp HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:54 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\netag: W/\"695ce527-1782\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 200215\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BzpV%2BufN40JvSVYwe%2F7x8%2FREvwm04BPpfn%2FG6qy%2BEWzMG0jUlj5jhL5NVwbE182XUo0kwa4xctMdFhEYLc%2B4w200CRna9upoJFhRA0kRD3FP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bada8f7c99fb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6018,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7ff25083692a26b89f5007348aa48c46","sha1":"01f8945f576f85a9383fa53fd2690a610b872318","sha256":"539e476efc3b6adb126e54489ee1658650871d07932accfc0f384bbbe1767874","sha512":"8568cfb2f3d2f3cb8bf4534987bdecea2afe85f0b2fbc55be48c4b338dec18f07b9128b81a63ab5d07140ea98978e7fa0577ff07d7e040a5374ad7c30897d3d2","ssdeep":"96:9wBRDG4a9UTYuIz6DnPyhzTAN6Tv970JKsHQ9KMICbGtBjhEJElQaqm7GXpeaIlF:qG4a9UTYuIzAnPyhYsTWcsHQ9sWBb4BD","tlshash":"85c18dbcad4dd8ff8d388d4f00489190f30abd42025c8193136b6ffa234d22a532b55d","first_seen":"2026-01-08T18:12:32.353624Z","last_seen":"2026-04-11T17:52:09.045728Z","times_seen":6,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/adsct-3.gif","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/","date":"2026-01-08T18:11:54.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /adsct-3.gif HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:54 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\netag: \"695ce527-2b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 200215\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S0osYN3B93V7L2xioHpOB19QoEbqDgG9F%2FPBMfiWTdoVc7JrmFx2BjgBQ2wNFgAFVUf4o8UEnz%2FPrPpHgsFOdQIxY2u3kibM2WiuC3iB%2BEtn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bada8f7e9c5b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"377d257f2d2e294916143c069141c1c5","sha1":"b7cae69682cf31dd670b65088db8395acda6ed3e","sha256":"ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957","sha512":"01211111688dc2007519ff56603fbe345d057337b911c829aaee97b8d02e7d885e7a2c2d51730f54a04aebc1821897c8041f15e216f1c973ed313087fa91a3fb","ssdeep":"","tlshash":"4e900403d3c0c001c151d0300d0cc7441344f0305554030f70fc575ddc3d1550c170c0","first_seen":"2023-04-05T06:54:04Z","last_seen":"2026-08-08T16:20:10.183296Z","times_seen":1391,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/67f97349e0c5b84b309370f8_logo.svg","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/index_1.html","date":"2026-01-08T18:11:55.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /67f97349e0c5b84b309370f8_logo.svg HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:55 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 200216\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7NqNuA9QJ9tgWXIZEyiydF8f0%2FiWM7DIuYR5tqwS1nQsDBhl%2FlvNW3nWcWKey2aq2RuPs7rJLQbAbY%2B7Xgee86aMm0dd3JbMdMXq2l%2BevTi4\"}]}\r\netag: W/\"695ce527-1619\"\r\ncontent-encoding: br\r\ncf-ray: 9bada8fd8f1db51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5657,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"10881c00def5e023f8b41c86738a6ffb","sha1":"437d3a87376894c7f1a26afb5e31027d554c10bf","sha256":"d021c2f29ca1531d4fad44200b8056734065d0837dd5cbf389e6676082b5f854","sha512":"a184b4205944ae0c1061812aac9c2c88c2a6c0517e5767423713e0001ec3973f474bf6cfb878e94f1b58b1c203d84b288f5d1e06e679a92cd72e9268e08f7f7d","ssdeep":"96:zpRXLK/k6gJKTcGwScw41zzfpS8Adg5kuZRdwINSmcO5HQK:C/uJKTMvYC5kuZRdT1cOOK","tlshash":"9fc19625cfbe4abcd58d03581c7817149b386cab717458b8feed95a08f05d18ea24bce","first_seen":"2026-01-08T18:12:32.368093Z","last_seen":"2026-04-11T17:52:09.070796Z","times_seen":6,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/adsct-2.gif","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/index_1.html","date":"2026-01-08T18:11:55.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /adsct-2.gif HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:55 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\netag: \"695ce527-2b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 200217\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6V%2FVqJ6wxlhVJ0NTHMoZpjlJpZ0SX2ZQt%2BcXsenDycVFXaLj7V3X1VZoA0w9UtFYTJrftkXwNMTIMCBMVaaCKEFSZGZbQVbDBcGP0j2CAWUK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bada90059deb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"377d257f2d2e294916143c069141c1c5","sha1":"b7cae69682cf31dd670b65088db8395acda6ed3e","sha256":"ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957","sha512":"01211111688dc2007519ff56603fbe345d057337b911c829aaee97b8d02e7d885e7a2c2d51730f54a04aebc1821897c8041f15e216f1c973ed313087fa91a3fb","ssdeep":"","tlshash":"4e900403d3c0c001c151d0300d0cc7441344f0305554030f70fc575ddc3d1550c170c0","first_seen":"2023-04-05T06:54:04Z","last_seen":"2026-08-08T16:20:10.183296Z","times_seen":1391,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/67f963888b5f992fd7d3d07c_cy-vb.svg","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/","date":"2026-01-08T18:11:54.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /67f963888b5f992fd7d3d07c_cy-vb.svg HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:54 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 200215\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fpvx%2F45XUJMbMOvOafhslleWDcNsu7wC2vbeq17w64ilmWS%2FuH18m1KvcLU43JXVDTv7KZHhkpUWQ1GIhbAn0y3c8WHpH6jxoIXB%2B6uh69ri\"}]}\r\netag: W/\"695ce527-1f4\"\r\ncontent-encoding: br\r\ncf-ray: 9bada8f7d9acb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":500,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3c4c2d1e2f9afadcf15f22cd494b39de","sha1":"e57a4186b1e22ed38b054de358be10b97cd4c130","sha256":"d8949ccec65f1f1ffc44607832709d211c058c489ce55f481a29653c9cb45f3c","sha512":"229080c15e7a627c8b1dc092eb8738e522020ede288f879028585ffa132ce7eb68343776425c23365b608ee5d4c3bc75844c9579a06f3648fa9ba57fe894ac24","ssdeep":"","tlshash":"a1f0592ae71cec37e109c088d4c0d56401b901d365c592b1d2c2ff1fb6245c3391a6a4","first_seen":"2026-01-08T18:12:32.379822Z","last_seen":"2026-04-11T17:52:08.982344Z","times_seen":6,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/secureproxy?e=jscdn/getFile","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-steer.finance/index_1.html","date":"2026-01-08T18:11:55.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-steer.finance/index_1.html\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://claim-steer.finance\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"u5oq0btp6rr5ut6rcxbi\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:55 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self', frame-ancestors http: https:\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F%2FVpW5yqfo8cAe5CpQSgnOQYfD%2F16YhjnS%2FrNzEV2bw9u%2B2YuwNoznTZl9H3%2B2Yr3WyXOgBdcditTzo4ODvdqMWNfYfkYbbTEqP9m3LWQDWwdw%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9bada8fed86db51e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4142443,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"18942170db19f5063058284dedb49e28","sha1":"efbb30baf22af733be81ae13f813cbf6db3f1f04","sha256":"4973a33a464017dbcb6188e0a53ee8132a1cc259b4f4554b08802c03c2f694f6","sha512":"c842e7d7b34d624d018fb1968147ed94a71896bd5cfb96cbbd561b99bdc8634e0e6e94e5807bc43f76939aaa3377ba4ee91500491a759bc98a417a3a5a3cdea8","ssdeep":"24576:1IKU8VpZbrD8RCID+CRfKJVPh/pV7OdD3oRFI:1IKppdM9Drkr/pRm0FI","tlshash":"da2523d090a1b1c377189935d1f94f9c69ea50046eaa41bf3c6dec80349a7fad6c87e3","first_seen":"2026-01-08T18:12:32.352534Z","last_seen":"2026-01-08T18:12:32.352534Z","times_seen":1,"resource_available":false,"data":null}},"time_used":635,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":498,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/67f9744c6203a0237729f965_Arbitrum-Logo-PNG.webp","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/index_1.html","date":"2026-01-08T18:11:55.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /67f9744c6203a0237729f965_Arbitrum-Logo-PNG.webp HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:55 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\netag: W/\"695ce527-1782\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 200217\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ABBXMMppYgyVwNrvty9Eh6ppswLYIOoUlbTSmWSObmRf%2B%2B%2FBo%2FPPHrp64lTBjyid87c%2BTcN1qyPt7Galh1%2BmMC%2B%2BjN1TuxXavFogqYpBRh8O\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bada8fff993b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6018,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7ff25083692a26b89f5007348aa48c46","sha1":"01f8945f576f85a9383fa53fd2690a610b872318","sha256":"539e476efc3b6adb126e54489ee1658650871d07932accfc0f384bbbe1767874","sha512":"8568cfb2f3d2f3cb8bf4534987bdecea2afe85f0b2fbc55be48c4b338dec18f07b9128b81a63ab5d07140ea98978e7fa0577ff07d7e040a5374ad7c30897d3d2","ssdeep":"96:9wBRDG4a9UTYuIz6DnPyhzTAN6Tv970JKsHQ9KMICbGtBjhEJElQaqm7GXpeaIlF:qG4a9UTYuIzAnPyhYsTWcsHQ9sWBb4BD","tlshash":"85c18dbcad4dd8ff8d388d4f00489190f30abd42025c8193136b6ffa234d22a532b55d","first_seen":"2026-01-08T18:12:32.353624Z","last_seen":"2026-04-11T17:52:09.045728Z","times_seen":6,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/adsct.gif","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/","date":"2026-01-08T18:11:54.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /adsct.gif HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:54 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\netag: \"695ce527-2b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=05oK8xWD%2BwxMBgfZfhGWxPH3ddJ98j0XuD4ZyM%2FqtljQQ55CTd%2BL2geI9p%2B9Sy%2BLPrD%2BzspT21XIt88RBLLSduqN1a2k3bCSlpl4mwxrLdvK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bada8f7e9c6b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"377d257f2d2e294916143c069141c1c5","sha1":"b7cae69682cf31dd670b65088db8395acda6ed3e","sha256":"ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957","sha512":"01211111688dc2007519ff56603fbe345d057337b911c829aaee97b8d02e7d885e7a2c2d51730f54a04aebc1821897c8041f15e216f1c973ed313087fa91a3fb","ssdeep":"","tlshash":"4e900403d3c0c001c151d0300d0cc7441344f0305554030f70fc575ddc3d1550c170c0","first_seen":"2023-04-05T06:54:04Z","last_seen":"2026-08-08T16:20:10.183296Z","times_seen":1391,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/67f963888b5f992fd7d3d035_InterTight-Regular.ttf","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-steer.finance/","date":"2026-01-08T18:11:54.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /67f963888b5f992fd7d3d035_InterTight-Regular.ttf HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/steer-protocol-secret.webflow.shared.ee9f478f7.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:54 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 305472\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\netag: \"695ce527-4a940\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 200215\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9hsqT4ji61AcSvpOCl%2F0T0XY4eaBfXLBltRAhKiwGvFIG1wpbEG1CnQPljv9goiWR9rOSH0TyPJIoEAK5bNTNsv3siUFBk8IfAIQ3G9BL%2FUq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bada8f99b6ab51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":305472,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 43 names, Microsoft, language 0x409","md5":"6c7bcaa885b5c58fe97d7f025e26bd30","sha1":"63ceeac81a3a036211fba29046e606752fe7ea8e","sha256":"ad32032ad2a594814093fa733792952aecd4aeaa7671b6dd3e640ba6408a6885","sha512":"c11731b42d64a6b9b67256097f02da3d6e80132a38ff5aa8fa312afc6f6810066e45aadf103a8c38d74b1a955c62070774903b224bc0a5b07b24790b265f3d6b","ssdeep":"6144:dwrSPfNz5Pfpzmu/yizDodScvYqya8e/S:W44MJods9aXS","tlshash":"b9545b17e373832dd6152979daa2c75073716ca17847f31ba06a3e85d8e70b80ec4af9","first_seen":"2024-12-18T18:27:09.353574Z","last_seen":"2026-08-09T22:32:30.979176Z","times_seen":302,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/67f963888b5f992fd7d3d030_InterTight-SemiBold.ttf","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-steer.finance/","date":"2026-01-08T18:11:54.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /67f963888b5f992fd7d3d030_InterTight-SemiBold.ttf HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/steer-protocol-secret.webflow.shared.ee9f478f7.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:54 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 309396\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\netag: \"695ce527-4b894\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J7TbfTMJEDfsA2fbgOr34IKv24%2FYkURepDxVbqyuq%2FqLoKgRA9eN6z%2FNOZLv3A1o%2FcsynxfSEgE2LzU2lMPJsg7sGXRh%2FkVMvaIkR3spZ4Iy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bada8f9bb93b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":309396,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 45 names, Microsoft, language 0x409","md5":"701cf433d42ef71e28080e88d58354e1","sha1":"77db62dbddcf448fa1b633e6da3b76480f3ca559","sha256":"b0d896af93d0e5bde66b17439995417ad487e3fc5109ada095b4408924ebf4c9","sha512":"fd493381ff7505f2a7f0bb2ae27772d2b8d8117f547ede30b2b4a52717ac8b3899c74f5d020bf1f9084b2ab051ab6c335ebe830d515af8a3f4865c7045fd56f2","ssdeep":"6144:TrSPfNz5PfpLA/H1J12xO/q+dRF09s5CT4FIGmdhY8kEBYP1:T4R+V3FjdYs8CT3bP1","tlshash":"8d646b17e336875dda1139799ba1c35073716ca2791bf21f706a3e81d8ab1f80dc4ae8","first_seen":"2025-04-02T12:35:51.591244Z","last_seen":"2026-08-01T15:58:14.770673Z","times_seen":83,"resource_available":false,"data":null}},"time_used":576,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":314,"receive":260,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/67f9740d87961e6e90745e50_image-removebg-preview%20(20).webp","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/","date":"2026-01-08T18:11:54.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /67f9740d87961e6e90745e50_image-removebg-preview%20(20).webp HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:54 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\netag: W/\"695ce527-1f90\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 200215\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C2GHA3L2SsSW%2BZIsbb97GhtQAldxw284ZbGWbRBfqD%2BLpGQvs0BIz4Mwjt03Qq9Pmv7Td6MF5QxRhOOTz%2FS2Nev1r5TjwDnKPY1VeBy5H6R3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bada8f7d9abb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8080,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"160247f4af074515fa11b76fb70586a5","sha1":"1eedbb9243bca8b7902f0a2b23406c6d49060b76","sha256":"6eba58531a0874cb5e004248ddffa576c5224c61f1a659134e4e0f3e99a53d54","sha512":"cd7770603f5f853ced75fa50f49b8c6725d9722125532ca88c15517fb93a54adf0b0c70da4e43de0201fee1114d3345dca0431314311ccc41be7b0e462193625","ssdeep":"192:1ENRZ0JbY+K7rl5mXyNdgnYIA6eZVJNz:aNRZ0h7K7rlsX6QYVv","tlshash":"0cf1b08036bc5b0756aea8f9412a746d09fe0d40ff6a325f4a201d8450d7754ef7786b","first_seen":"2026-01-08T18:12:32.395769Z","last_seen":"2026-04-11T17:52:09.048801Z","times_seen":6,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/67f963888b5f992fd7d3d0b5_linkedin%20(1).svg","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/","date":"2026-01-08T18:11:54.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /67f963888b5f992fd7d3d0b5_linkedin%20(1).svg HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:54 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 200215\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4IGhbMch4ap7zwXpWFCYA0Wmh6qrazYpOtxf8fAHTG1QpSQfp6ZO7O8txUILpWSIPzZUnmbw6yKMfK8gXphXernB861MpytFvFsp5SGX0u6I\"}]}\r\netag: W/\"695ce527-74c\"\r\ncontent-encoding: br\r\ncf-ray: 9bada8f7e9c4b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1868,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"250e2c4843371b81ead7d3291fcd961d","sha1":"dcf2bb8da2a510347dccf0667035da2275bd81c0","sha256":"786f4675cff61fb9fb353c1450c6dce07217247e146ad7a39712fdb2c142f58f","sha512":"42322fe51730a3dad23d5d14ee15887f3510a4db46cb68b2137101ad1882b5be150fd5d515b05ec8f4bbfa932dc2d66dbea1d8281b8590d479c2fafc03138ded","ssdeep":"","tlshash":"a93143daebccd7b054c683f0c22390b3e6df26755302d79081b59f75f9060ad9485984","first_seen":"2026-01-08T18:12:32.381771Z","last_seen":"2026-04-11T17:52:09.001864Z","times_seen":6,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/67f963888b5f992fd7d3d019_cy-border.svg","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/","date":"2026-01-08T18:11:54.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /67f963888b5f992fd7d3d019_cy-border.svg HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/steer-protocol-secret.webflow.shared.ee9f478f7.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:54 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 200215\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OtggBH%2FvHyAavPp30DmQ6DuME%2BDUtmg55idua1CE1IDdMcX2isSp6AThCCtA4dbqw9%2FsGkUHi5ZnJN3XFFtlu9a66h4GvCugjLLbiA0PGwir\"}]}\r\netag: W/\"695ce527-1d2\"\r\ncontent-encoding: br\r\ncf-ray: 9bada8f98b5bb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":466,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"119ffba85c88f7ff3e7b028a4baba894","sha1":"9e4afd90e7b6c961dc26ba3575a5df8f3eddbef4","sha256":"997bc5d5be3bfc7fbedaf0d25f68568adec688d3194ad6cfe9348f5e421a6a66","sha512":"ec7830fd0ca92b42dadfe87cfa22d7df9b04d5b4e39e3e3101b86cb124adcf5d285d6de15b6f2b53571f5a924d0ad678902170d25385f09252d235eed2a829e2","ssdeep":"","tlshash":"65f02e3ab71c9c7bd614c45cd954c41511e943e3a4c5c16181d3bf6f31298c33c1a2f5","first_seen":"2026-01-08T18:12:32.397439Z","last_seen":"2026-04-11T17:52:08.995211Z","times_seen":6,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/682da22c74443b922e4fcf68_8565c6a0ac70766cd0c3435e63abc8bb_ChatGPT%20Image%20May%2021,%202025,%2003_20_34%20PM.png","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/index_1.html","date":"2026-01-08T18:11:55.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /682da22c74443b922e4fcf68_8565c6a0ac70766cd0c3435e63abc8bb_ChatGPT%20Image%20May%2021,%202025,%2003_20_34%20PM.png HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 16711\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\netag: \"695ce527-4147\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 200216\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xVVzHZYCWJjTOUjoiRT%2FtTuswfhaFHddIoKjjouqR%2F5ypluEjdC33GQghf8yyL6bh8VBcO6WL72vPq9OB%2FWR9bd8zDSV9TpxF5%2B427oN0JuD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bada8fe1fa0b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16711,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit colormap, non-interlaced","md5":"46343788609e1a0c86ef3e4c29d9f5fb","sha1":"1f9b6f0e4d6849926eaa5f966d7256aa59e54f27","sha256":"d8f5409604c975f1293cc188c5aaa215259c7fbbdf6bda722b45522ff8125980","sha512":"a0c432c195a5549a10c5b49d0dc9c2290642eb89895ddd8c3e52858ea0ca334d419bbf27b414d29d1e01565d70d2a10399e451ca0840091185cb8d4a92371718","ssdeep":"384:4CTWq+8q8pOkT7Z+PQl4zVJlsFy8CnNZ8XBOJZA:4CTWq3OknMIlejl3qxIA","tlshash":"cd72d0dd44466944f41876722f8d5468eab808434647e8f6bb57382286afcc75ffc07b","first_seen":"2026-01-08T18:12:32.398953Z","last_seen":"2026-04-11T17:52:08.961906Z","times_seen":6,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/adsct.gif","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/index_1.html","date":"2026-01-08T18:11:55.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /adsct.gif HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:55 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\netag: \"695ce527-2b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 1\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T7FWLcUin%2Fdc00wBcf0K%2FoE1LTMkCDVvUnzqmptlAu%2BtRCD8e2TjXu3v%2BAEvk4fABSYDfUAmK3RJwnIPUeA55si%2BEVRWu%2F4CIVXiVQej8Bp8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bada90059dcb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"377d257f2d2e294916143c069141c1c5","sha1":"b7cae69682cf31dd670b65088db8395acda6ed3e","sha256":"ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957","sha512":"01211111688dc2007519ff56603fbe345d057337b911c829aaee97b8d02e7d885e7a2c2d51730f54a04aebc1821897c8041f15e216f1c973ed313087fa91a3fb","ssdeep":"","tlshash":"4e900403d3c0c001c151d0300d0cc7441344f0305554030f70fc575ddc3d1550c170c0","first_seen":"2023-04-05T06:54:04Z","last_seen":"2026-08-08T16:20:10.183296Z","times_seen":1391,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/67f97349e0c5b84b309370f8_logo.svg","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/","date":"2026-01-08T18:11:54.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /67f97349e0c5b84b309370f8_logo.svg HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:54 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 200215\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hqNId7wxsOe8oO4kj2Ctn7twawryxQnkO%2FJEZMT6iA7Gs%2BY2QczLxlVKwPJb4geUlUdFNkPON%2F%2BybxpZC9sc1nR%2FRYZu4SvqZw56cDbyDHfL\"}]}\r\netag: W/\"695ce527-1619\"\r\ncontent-encoding: br\r\ncf-ray: 9bada8f7d9a4b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5657,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"10881c00def5e023f8b41c86738a6ffb","sha1":"437d3a87376894c7f1a26afb5e31027d554c10bf","sha256":"d021c2f29ca1531d4fad44200b8056734065d0837dd5cbf389e6676082b5f854","sha512":"a184b4205944ae0c1061812aac9c2c88c2a6c0517e5767423713e0001ec3973f474bf6cfb878e94f1b58b1c203d84b288f5d1e06e679a92cd72e9268e08f7f7d","ssdeep":"96:zpRXLK/k6gJKTcGwScw41zzfpS8Adg5kuZRdwINSmcO5HQK:C/uJKTMvYC5kuZRdT1cOOK","tlshash":"9fc19625cfbe4abcd58d03581c7817149b386cab717458b8feed95a08f05d18ea24bce","first_seen":"2026-01-08T18:12:32.368093Z","last_seen":"2026-04-11T17:52:09.070796Z","times_seen":6,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/6830990d30dda31e148e501c_icon-32.png","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/","date":"2026-01-08T18:11:54.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /6830990d30dda31e148e501c_icon-32.png HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 1374\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\netag: \"695ce527-55e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 200215\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wVvY0IyY%2B9DToRwqoujR5bB8KfG9OrJEo5auE%2FHuqUwEvJjJB%2BCz%2B6e5gAsx21YpRFB7A0FbBRSVwZ6TTc34QsyimAUoYWY9maD4wwveSIyK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bada8fc4df8b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1374,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"9cfe087c797c9a843f8d64bea27fa0ca","sha1":"39abfde2967a15a469bdaf4c606796dbf829be52","sha256":"25a23207bd5e3e25172ea07018f839409eb2ccf4b81d513b6cbe8280e9d0e58c","sha512":"55758863134c97467864ee03510b3744eaeb34f1def199b8446c951e24c150879feab40ee546fc814921c37b1cf3b9b0932bcb95f212e5d277b567c25d9b3084","ssdeep":"","tlshash":"33212b5586f90bbfc2126248c33649c57fa543f269e6c842a3ee0717db39c2884c93ed","first_seen":"2026-01-08T18:12:32.401089Z","last_seen":"2026-04-11T17:52:09.07504Z","times_seen":6,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/67f973e39f603b980e14c5c7_logo.svg","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/index_1.html","date":"2026-01-08T18:11:55.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /67f973e39f603b980e14c5c7_logo.svg HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:55 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 200216\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uEzZb57GQK%2BUPeKfyJzC0blKtELy%2FWMnedajQAHsb92XcNDPgoJeLp83AbjU8tuQjM2QDAbOiIZAAbTiVfcaSnxkOevwAsPwv6kx0XyEYQxm\"}]}\r\netag: W/\"695ce527-11e8\"\r\ncontent-encoding: br\r\ncf-ray: 9bada8fd8f21b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4584,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f22c26c5ec5b43a5deebac2cf50a0f5d","sha1":"bc935aa4afeaf1b432f41a561830e1ca6a6c84f2","sha256":"6a0c27fc0cc43122d69b187a816e3a7df2d8aa42b121edb536fdc64b6c78df99","sha512":"34558fed0352e2563601a13df47b7ec3af21e50a5379279fd06eaf2803f9bbbddbe26536f0b49cd3b3b160ac5bc3bb06b0c3a101f30a3bf1e75fa5f8156b2fed","ssdeep":"96:5clO2w4YX6tKCw7W0zT4Hm23dgnM5WLcEiRW9FOwWCI:x2xDK9W0zMG236MsLiW+wWCI","tlshash":"259195d74330e6ad88cecdadff115994302ea4bebaf5c6d1826edf0d586a8c1e904d50","first_seen":"2026-01-08T18:12:32.405984Z","last_seen":"2026-04-11T17:52:09.057342Z","times_seen":6,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/adsct-2.gif","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/index_1.html","date":"2026-01-08T18:11:55.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /adsct-2.gif HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:55 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\netag: \"695ce527-2b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 200216\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eOk14tQaeO1lmsCKGwORip9PZ%2FnKzLq9n1OP2nKBlPUbyXHEpjNUZmA%2BunvM%2FbUnM6%2BQmSSEP7%2Fjy73tHyDnvNythPwnfWMWFHR5mzVyc3LE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bada8fe1fa6b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"377d257f2d2e294916143c069141c1c5","sha1":"b7cae69682cf31dd670b65088db8395acda6ed3e","sha256":"ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957","sha512":"01211111688dc2007519ff56603fbe345d057337b911c829aaee97b8d02e7d885e7a2c2d51730f54a04aebc1821897c8041f15e216f1c973ed313087fa91a3fb","ssdeep":"","tlshash":"4e900403d3c0c001c151d0300d0cc7441344f0305554030f70fc575ddc3d1550c170c0","first_seen":"2023-04-05T06:54:04Z","last_seen":"2026-08-08T16:20:10.183296Z","times_seen":1391,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/67f963888b5f992fd7d3d01a_ant-design_x-outlined.svg","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/index_1.html","date":"2026-01-08T18:11:55.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /67f963888b5f992fd7d3d01a_ant-design_x-outlined.svg HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:55 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 200217\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zWOOn8k9G4wb2zegc86rIkO%2F8YyKUwqPsY5DKSO%2F8Qlb6qQtd%2BwAqr2O83PAytEawZyUQ7obvUdCefjYpuW0bTpHYIyfM5vtCjrpjlRdWDen\"}]}\r\netag: W/\"695ce527-1b0\"\r\ncontent-encoding: br\r\ncf-ray: 9bada90039cbb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":432,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ef8d1cdcbb40147ea09804f228d9edde","sha1":"8258d92d487445f65134f1c93543fa49e9aca0d2","sha256":"48b4feb3d1db8422712916523764f745a4bcb652020377273f4a8e4e33bc5d61","sha512":"5ed6f5cd0089cda00953d6804ef2b1f5c665c30badfef8dbbe4533f4a0206fb8061669bbde05a9b6a8ccb4aa82386fe4cc021f085cae0fc136c5862b6f690004","ssdeep":"","tlshash":"dbe055fbb089aac06e0b8636e23c109261a738843659873984902e18e914569581e9e8","first_seen":"2026-01-08T18:12:32.377794Z","last_seen":"2026-04-11T17:52:09.071545Z","times_seen":11,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/adsct-1.gif","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/index_1.html","date":"2026-01-08T18:11:55.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /adsct-1.gif HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:55 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\netag: \"695ce527-2b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 200217\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LdQYK9QmoXhFJ3HSuYsUC2jVdyVGl7w27asx%2BUI0PG%2FXYh%2FWmceGoka0auM21zkagHj6gi%2FVwXPSFDL00DEPmf2d6sy12%2FMZcZjqWKhtrt03\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bada90059e1b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"377d257f2d2e294916143c069141c1c5","sha1":"b7cae69682cf31dd670b65088db8395acda6ed3e","sha256":"ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957","sha512":"01211111688dc2007519ff56603fbe345d057337b911c829aaee97b8d02e7d885e7a2c2d51730f54a04aebc1821897c8041f15e216f1c973ed313087fa91a3fb","ssdeep":"","tlshash":"4e900403d3c0c001c151d0300d0cc7441344f0305554030f70fc575ddc3d1550c170c0","first_seen":"2023-04-05T06:54:04Z","last_seen":"2026-08-08T16:20:10.183296Z","times_seen":1391,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/67f964f374b97feec8d2003c_SteerLogoFullWhiteOptimized.webp","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/","date":"2026-01-08T18:11:54.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /67f964f374b97feec8d2003c_SteerLogoFullWhiteOptimized.webp HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:54 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\netag: W/\"695ce527-aeea\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 200215\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F7%2B3Bv571XNqd3BgzF4EmKWGBO7teg9Gf1fZmWATT65RBpZDudflbY0wg8AhlQmWiGWKu4vefJPEUnR9IMQgEjTd1%2FGjuK4xssTvxK4%2ByvW%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bada8f7c99db51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44778,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a513aedfb60dbf83be47f912e5d084f5","sha1":"34f750f2b27be61e6eec39a936af33ef0a005e6c","sha256":"6a540d15b0539982571f641e2208cde579867877d54278ce42be0e0b89b8f736","sha512":"7cc9c90a2930968e28edffc3dc385ecf817477fe4beebfa52fa3297c9d416592779aa642fd86c4d7063b1c69c38901526b0e184f37e66528290de57de19baf65","ssdeep":"768:ug+2pmDRqvkmNHsweRgY3/hScNqCEAQfM9HpaPOmOLjL:bkRuHHg/ZPEAQfM9Hpamm0jL","tlshash":"2a13bf95349298fffa5f3daf527c040249523ed0097039da1bac74a0aa73d603af49de","first_seen":"2026-01-08T18:12:32.407862Z","last_seen":"2026-04-11T17:52:08.987581Z","times_seen":6,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/67f964f374b97feec8d2003c_SteerLogoFullWhiteOptimized.webp","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/index_1.html","date":"2026-01-08T18:11:55.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /67f964f374b97feec8d2003c_SteerLogoFullWhiteOptimized.webp HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:55 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\netag: W/\"695ce527-aeea\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 200216\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k9V07UDb2D2uNBQ%2Bkdq5VF9hMZaC1JX9YsuGMWcQv7k97OdpjA4tcCXBiOJo7OLp9qnT5SgoopBiOj4htwJcnaV%2FRYud9ZyN7gT4mhFF%2BQgo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bada8fd7f09b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44778,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a513aedfb60dbf83be47f912e5d084f5","sha1":"34f750f2b27be61e6eec39a936af33ef0a005e6c","sha256":"6a540d15b0539982571f641e2208cde579867877d54278ce42be0e0b89b8f736","sha512":"7cc9c90a2930968e28edffc3dc385ecf817477fe4beebfa52fa3297c9d416592779aa642fd86c4d7063b1c69c38901526b0e184f37e66528290de57de19baf65","ssdeep":"768:ug+2pmDRqvkmNHsweRgY3/hScNqCEAQfM9HpaPOmOLjL:bkRuHHg/ZPEAQfM9Hpamm0jL","tlshash":"2a13bf95349298fffa5f3daf527c040249523ed0097039da1bac74a0aa73d603af49de","first_seen":"2026-01-08T18:12:32.407862Z","last_seen":"2026-04-11T17:52:08.987581Z","times_seen":6,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/67f964f374b97feec8d2003c_SteerLogoFullWhiteOptimized.webp","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/index_1.html","date":"2026-01-08T18:11:55.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /67f964f374b97feec8d2003c_SteerLogoFullWhiteOptimized.webp HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:55 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\netag: W/\"695ce527-aeea\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 200217\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S3Y708UnOVSlCN4qKBiSguky5aJg755FXE5e7hJy3kqymMbXgTS8a%2BOCiPxoIq6cBdb6QOHNP%2FTcwPYDxfOQIITkk0tjVZ%2FIVHj5BReUsCFn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bada8ffe991b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44778,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a513aedfb60dbf83be47f912e5d084f5","sha1":"34f750f2b27be61e6eec39a936af33ef0a005e6c","sha256":"6a540d15b0539982571f641e2208cde579867877d54278ce42be0e0b89b8f736","sha512":"7cc9c90a2930968e28edffc3dc385ecf817477fe4beebfa52fa3297c9d416592779aa642fd86c4d7063b1c69c38901526b0e184f37e66528290de57de19baf65","ssdeep":"768:ug+2pmDRqvkmNHsweRgY3/hScNqCEAQfM9HpaPOmOLjL:bkRuHHg/ZPEAQfM9Hpamm0jL","tlshash":"2a13bf95349298fffa5f3daf527c040249523ed0097039da1bac74a0aa73d603af49de","first_seen":"2026-01-08T18:12:32.407862Z","last_seen":"2026-04-11T17:52:08.987581Z","times_seen":6,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/67f973e39f603b980e14c5c7_logo.svg","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/index_1.html","date":"2026-01-08T18:11:55.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /67f973e39f603b980e14c5c7_logo.svg HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:55 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 200217\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1zR9Z3vTKRGijbM5%2ByTmBjSl69VWw%2BWpyllfzvQiLS7d9e0MfaVhrPRy3zEsiKBnEx9H%2FcNwFAN0TMBqWKevIxHBjVTXC3HCiXY4xVR%2BDIUm\"}]}\r\netag: W/\"695ce527-11e8\"\r\ncontent-encoding: br\r\ncf-ray: 9bada90009a6b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4584,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f22c26c5ec5b43a5deebac2cf50a0f5d","sha1":"bc935aa4afeaf1b432f41a561830e1ca6a6c84f2","sha256":"6a0c27fc0cc43122d69b187a816e3a7df2d8aa42b121edb536fdc64b6c78df99","sha512":"34558fed0352e2563601a13df47b7ec3af21e50a5379279fd06eaf2803f9bbbddbe26536f0b49cd3b3b160ac5bc3bb06b0c3a101f30a3bf1e75fa5f8156b2fed","ssdeep":"96:5clO2w4YX6tKCw7W0zT4Hm23dgnM5WLcEiRW9FOwWCI:x2xDK9W0zMG236MsLiW+wWCI","tlshash":"259195d74330e6ad88cecdadff115994302ea4bebaf5c6d1826edf0d586a8c1e904d50","first_seen":"2026-01-08T18:12:32.405984Z","last_seen":"2026-04-11T17:52:09.057342Z","times_seen":6,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/682da22c74443b922e4fcf68_8565c6a0ac70766cd0c3435e63abc8bb_ChatGPT%20Image%20May%2021,%202025,%2003_20_34%20PM.png","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/","date":"2026-01-08T18:11:54.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /682da22c74443b922e4fcf68_8565c6a0ac70766cd0c3435e63abc8bb_ChatGPT%20Image%20May%2021,%202025,%2003_20_34%20PM.png HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 16711\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\netag: \"695ce527-4147\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 200215\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jfmpFAjxg%2FaaZmQgZuSN2sQZfoHuNjGmlcDPg3WsV%2Bh587DWDnlMYdsl4%2F%2FrtJyEVlepjYtIpuPpFcWMbstZF7%2BnGzV2SeyBlaNVap2AYmT2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bada8f7d9b0b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16711,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit colormap, non-interlaced","md5":"46343788609e1a0c86ef3e4c29d9f5fb","sha1":"1f9b6f0e4d6849926eaa5f966d7256aa59e54f27","sha256":"d8f5409604c975f1293cc188c5aaa215259c7fbbdf6bda722b45522ff8125980","sha512":"a0c432c195a5549a10c5b49d0dc9c2290642eb89895ddd8c3e52858ea0ca334d419bbf27b414d29d1e01565d70d2a10399e451ca0840091185cb8d4a92371718","ssdeep":"384:4CTWq+8q8pOkT7Z+PQl4zVJlsFy8CnNZ8XBOJZA:4CTWq3OknMIlejl3qxIA","tlshash":"cd72d0dd44466944f41876722f8d5468eab808434647e8f6bb57382286afcc75ffc07b","first_seen":"2026-01-08T18:12:32.398953Z","last_seen":"2026-04-11T17:52:08.961906Z","times_seen":6,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/67f963878b5f992fd7d3cf9c/68309911e690e95c8e959b53_icon-256.png","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/","date":"2026-01-08T18:11:54.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 22:38:30 GMT","end":"Sun, 08 Mar 2026 23:38:26 GMT"},"fingerprint":{"sha1":"E1:F9:29:6C:56:57:15:B2:B3:5A:24:3E:50:03:94:B8:56:24:45:58","sha256":"D3:5A:81:E7:72:42:57:B7:FA:3C:C6:F7:CA:F5:06:4D:4C:20:11:11:40:37:24:F1:12:2C:AC:A4:5F:03:68:0B"}}},"request":{"raw":"GET /67f963878b5f992fd7d3cf9c/68309911e690e95c8e959b53_icon-256.png HTTP/1.1\r\nHost: cdn.prod.website-files.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 16157\r\ncf-ray: 9bada8fc6cb3120a-OSL\r\nx-amz-id-2: ODm50mH6NyFBans0b5DZBg/PfohQTbBwd+b7oBg19BdJ/yZ8E4LQmOBeOXWaBFNpKuBXV/nDIXc=\r\nx-amz-request-id: X35Y2XS6GH40QDM4\r\nlast-modified: Fri, 23 May 2025 15:49:38 GMT\r\netag: \"ed3315c98b0a9b22e9ab074fab3fc179\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000, must-revalidate\r\nx-amz-version-id: OeHKIqEqJRHqlcK3_LjZE3id7GoNS6DS\r\naccept-ranges: bytes\r\nage: 466440\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16157,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"ed3315c98b0a9b22e9ab074fab3fc179","sha1":"569dfc70e7fbc9ed8a672287f831f62af40d9e7d","sha256":"a001850f78924f401c76f933c2e757a8f36a7c1484dd8dc9d6d3e2ebd6c86e34","sha512":"4e12ac84c7e3e76237f21bc5bcaa3aa6438d26f9fb12930cf588f05eeeadb949955f3688da57b51cd065668d9d72d1083ae0289116413d33d056cede3f928a4b","ssdeep":"384:0awoK6nrx6/rJFEmrH51J4Uw/jbBDfoBHM5Yv8:oMd6/rTEwH5MUIjbOBHMs8","tlshash":"1972c08f59ea284ec5915e280b0b2e123c519398481d9afcbd946a795e3338df5bb8c1","first_seen":"2026-01-08T18:12:32.409824Z","last_seen":"2026-04-11T17:52:09.018876Z","times_seen":6,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":13,"receive":1,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/67f9740d87961e6e90745e50_image-removebg-preview%20(20).webp","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/index_1.html","date":"2026-01-08T18:11:55.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /67f9740d87961e6e90745e50_image-removebg-preview%20(20).webp HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:55 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\netag: W/\"695ce527-1f90\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 200216\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wX6t1E58GRf8CmbwHDSNgPRws%2BFZ9Ea7DyYlVIUeHfLwHzmEOhXoHlakaGStoHx%2Fjl7IX%2BueFectnLqxkoJ158DAIhwhbR8rVBRGF6yfEgco\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bada8fdcf5cb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8080,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"160247f4af074515fa11b76fb70586a5","sha1":"1eedbb9243bca8b7902f0a2b23406c6d49060b76","sha256":"6eba58531a0874cb5e004248ddffa576c5224c61f1a659134e4e0f3e99a53d54","sha512":"cd7770603f5f853ced75fa50f49b8c6725d9722125532ca88c15517fb93a54adf0b0c70da4e43de0201fee1114d3345dca0431314311ccc41be7b0e462193625","ssdeep":"192:1ENRZ0JbY+K7rl5mXyNdgnYIA6eZVJNz:aNRZ0h7K7rlsX6QYVv","tlshash":"0cf1b08036bc5b0756aea8f9412a746d09fe0d40ff6a325f4a201d8450d7754ef7786b","first_seen":"2026-01-08T18:12:32.395769Z","last_seen":"2026-04-11T17:52:09.048801Z","times_seen":6,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/67f9732dd2635e99baf2b603_image-removebg-preview%20(19).webp","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/index_1.html","date":"2026-01-08T18:11:55.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /67f9732dd2635e99baf2b603_image-removebg-preview%20(19).webp HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:55 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\netag: W/\"695ce527-fee\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 200217\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CYnbrUhYn2YZToiE0E9BNLVWUenMkU9SivhEvjVtvNba5if6yMRDV0jQ0%2FQ9Eug2RJyHPh%2BEKhklhEzqo9uOEWEzfmOvhFSaUlXH4D4lq5LF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bada90009a1b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4078,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"06e4e04334502c7353a28bc8484a51e1","sha1":"f7ab9a68e7559d0f16bd6085d8ca5984d959f075","sha256":"fc4116573b0c3d0f9991424b109810a766fb6993db6bfd23b3ac1e17dddb2637","sha512":"375a7e58f2e77d5c6cba817526ab59c7ac078e5329280d8d59fbc0360d7f3df454bac8406a32650d0cf7d5c9174afa702c676027bea6ad714e362489ea9f2ca4","ssdeep":"","tlshash":"6d818ef3a1bd872ac0581b7224145c26b761fd8036e7d17c5bea1236a02b2fbc355c9b","first_seen":"2026-01-08T18:12:32.412492Z","last_seen":"2026-04-11T17:52:08.945342Z","times_seen":6,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/67f9740d87961e6e90745e50_image-removebg-preview%20(20).webp","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/index_1.html","date":"2026-01-08T18:11:55.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /67f9740d87961e6e90745e50_image-removebg-preview%20(20).webp HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:55 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\netag: W/\"695ce527-1f90\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 200217\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y%2BSpDLRrRvWb2xo4XeLApRWInKD1wjt%2BQ8nTmLcGlXCxulEz%2BmneUykgtNr3w2YqDb5NJaf%2B%2B0Hfd20r4%2FnggHD%2FWm8yPjemQIHPFy834YvA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bada90019acb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8080,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"160247f4af074515fa11b76fb70586a5","sha1":"1eedbb9243bca8b7902f0a2b23406c6d49060b76","sha256":"6eba58531a0874cb5e004248ddffa576c5224c61f1a659134e4e0f3e99a53d54","sha512":"cd7770603f5f853ced75fa50f49b8c6725d9722125532ca88c15517fb93a54adf0b0c70da4e43de0201fee1114d3345dca0431314311ccc41be7b0e462193625","ssdeep":"192:1ENRZ0JbY+K7rl5mXyNdgnYIA6eZVJNz:aNRZ0h7K7rlsX6QYVv","tlshash":"0cf1b08036bc5b0756aea8f9412a746d09fe0d40ff6a325f4a201d8450d7754ef7786b","first_seen":"2026-01-08T18:12:32.395769Z","last_seen":"2026-04-11T17:52:09.048801Z","times_seen":6,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/67f9abac728283f9c36ec9e5_SteerLogo_S.png","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/index_1.html","date":"2026-01-08T18:11:55.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /67f9abac728283f9c36ec9e5_SteerLogo_S.png HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 6337\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\netag: \"695ce527-18c1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 200217\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wiRTKoO0yBn%2FXeNMnPMAF6i2dvwbcr0HZ1TIv2NbDs2LMiGfsJLKxtOtnRGZzU5uA2yeb3CMDyO4p6AiStCW5jS1Ii%2BQoyMFaH5SyUu0Zrye\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bada8ffe990b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6337,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 383 x 517, 8-bit/color RGBA, non-interlaced","md5":"482ca0d392d7a992cdf96ac4e5e45533","sha1":"816fed5a1d35c7037c374698034f2018cb2c3815","sha256":"442c65c1ba0dea5d486206c0919240c60ec9f17b73686feea924c379c7e328f2","sha512":"daf60977bdfc2ae30620af56c708fb2d12856eda75e6e4adf900f6c731014638570387dbfff97360e7a33205f3ad850ed34a987f8792a72e071da265acd3a1bf","ssdeep":"192:Bfu/IfLqI2zBwAq3IqBYRvHnX9kg5Xw7rT5/7h7JtKGdOc:dKIeDBeIrNh5XMf5zlJtKMn","tlshash":"70d19d46051b408049564c6d871eeefd6d8ea2efc8bac911c66c8f2f8d82572577ad13","first_seen":"2026-01-08T18:12:32.378701Z","last_seen":"2026-04-11T17:52:09.069871Z","times_seen":6,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/682da22c74443b922e4fcf68_8565c6a0ac70766cd0c3435e63abc8bb_ChatGPT%20Image%20May%2021,%202025,%2003_20_34%20PM.png","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/index_1.html","date":"2026-01-08T18:11:55.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /682da22c74443b922e4fcf68_8565c6a0ac70766cd0c3435e63abc8bb_ChatGPT%20Image%20May%2021,%202025,%2003_20_34%20PM.png HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 16711\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\netag: \"695ce527-4147\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 200217\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CGlCbTQiHzF1gX4w10StQdj8%2B%2FWAoSNa3SOUclJwpAy7WO7tcXgaKE18MTK%2BGLshqDl9CKLS5GBpky%2F9kve4N%2BvdOv3S6Q0Nq6YXawBnU3KC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bada90039cab51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16711,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit colormap, non-interlaced","md5":"46343788609e1a0c86ef3e4c29d9f5fb","sha1":"1f9b6f0e4d6849926eaa5f966d7256aa59e54f27","sha256":"d8f5409604c975f1293cc188c5aaa215259c7fbbdf6bda722b45522ff8125980","sha512":"a0c432c195a5549a10c5b49d0dc9c2290642eb89895ddd8c3e52858ea0ca334d419bbf27b414d29d1e01565d70d2a10399e451ca0840091185cb8d4a92371718","ssdeep":"384:4CTWq+8q8pOkT7Z+PQl4zVJlsFy8CnNZ8XBOJZA:4CTWq3OknMIlejl3qxIA","tlshash":"cd72d0dd44466944f41876722f8d5468eab808434647e8f6bb57382286afcc75ffc07b","first_seen":"2026-01-08T18:12:32.398953Z","last_seen":"2026-04-11T17:52:08.961906Z","times_seen":6,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/67f963888b5f992fd7d3d0b5_linkedin%20(1).svg","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/index_1.html","date":"2026-01-08T18:11:55.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /67f963888b5f992fd7d3d0b5_linkedin%20(1).svg HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:55 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 200217\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F4KXPvXVi%2FqEu2RkJKcIyOWisAjNZhgg%2BIkDzsE21ov0Y8DZX2z57CcRpFJC8o%2BE3POfCAKNa3pBlQEnjXsIMO1m2HiuP5ir7pYWAgI2b91z\"}]}\r\netag: W/\"695ce527-74c\"\r\ncontent-encoding: br\r\ncf-ray: 9bada90049ccb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1868,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"250e2c4843371b81ead7d3291fcd961d","sha1":"dcf2bb8da2a510347dccf0667035da2275bd81c0","sha256":"786f4675cff61fb9fb353c1450c6dce07217247e146ad7a39712fdb2c142f58f","sha512":"42322fe51730a3dad23d5d14ee15887f3510a4db46cb68b2137101ad1882b5be150fd5d515b05ec8f4bbfa932dc2d66dbea1d8281b8590d479c2fafc03138ded","ssdeep":"","tlshash":"a93143daebccd7b054c683f0c22390b3e6df26755302d79081b59f75f9060ad9485984","first_seen":"2026-01-08T18:12:32.381771Z","last_seen":"2026-04-11T17:52:09.001864Z","times_seen":6,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/adsct-3.gif","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/index_1.html","date":"2026-01-08T18:11:55.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /adsct-3.gif HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:55 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\netag: \"695ce527-2b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 200216\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3zlxSXVjxy2Cy5SPXvF0fg7%2F4DJOqCLTDpMCq%2FMfVwAP3bZbRNn%2FK4ivNIn43lCuUbnb%2F6RkruYHPD1cfecKh3HWumBeSEKWINSRk%2BW6WHim\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bada8fe1fa4b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"377d257f2d2e294916143c069141c1c5","sha1":"b7cae69682cf31dd670b65088db8395acda6ed3e","sha256":"ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957","sha512":"01211111688dc2007519ff56603fbe345d057337b911c829aaee97b8d02e7d885e7a2c2d51730f54a04aebc1821897c8041f15e216f1c973ed313087fa91a3fb","ssdeep":"","tlshash":"4e900403d3c0c001c151d0300d0cc7441344f0305554030f70fc575ddc3d1550c170c0","first_seen":"2023-04-05T06:54:04Z","last_seen":"2026-08-08T16:20:10.183296Z","times_seen":1391,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/67f963888b5f992fd7d3d07c_cy-vb.svg","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/index_1.html","date":"2026-01-08T18:11:55.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /67f963888b5f992fd7d3d07c_cy-vb.svg HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:55 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 200217\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=snWsyxiVBpI7rkTU2peqWLpcFFeUVX2l4GFK829ghD17d7eyD%2FnnpdHv5mnySWVf%2F%2Ba0boWBhr6elAzl%2FkmcdwqazeC%2BiuiMJfu2yFip2wOz\"}]}\r\netag: W/\"695ce527-1f4\"\r\ncontent-encoding: br\r\ncf-ray: 9bada90039c4b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":500,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3c4c2d1e2f9afadcf15f22cd494b39de","sha1":"e57a4186b1e22ed38b054de358be10b97cd4c130","sha256":"d8949ccec65f1f1ffc44607832709d211c058c489ce55f481a29653c9cb45f3c","sha512":"229080c15e7a627c8b1dc092eb8738e522020ede288f879028585ffa132ce7eb68343776425c23365b608ee5d4c3bc75844c9579a06f3648fa9ba57fe894ac24","ssdeep":"","tlshash":"a1f0592ae71cec37e109c088d4c0d56401b901d365c592b1d2c2ff1fb6245c3391a6a4","first_seen":"2026-01-08T18:12:32.379822Z","last_seen":"2026-04-11T17:52:08.982344Z","times_seen":6,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/secureproxy?e=jscdn/getFile","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-steer.finance/index_1.html","date":"2026-01-08T18:11:55.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-steer.finance/index_1.html\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://claim-steer.finance\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"u5oq0btp6rr5ut6rcxbi\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:55 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self', frame-ancestors http: https:\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iYP52CarnGVxHd2M0z1MWKDlNlWcO7T1i5eoXXX1dyOYMV9JoSfFoMhPomhxAUECkQYw%2F7izfnjRzYwSgHsJgJ3mDdJhK9W%2B1WSrVorbZ7H00A%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9bada900ba3db51e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4142443,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"18942170db19f5063058284dedb49e28","sha1":"efbb30baf22af733be81ae13f813cbf6db3f1f04","sha256":"4973a33a464017dbcb6188e0a53ee8132a1cc259b4f4554b08802c03c2f694f6","sha512":"c842e7d7b34d624d018fb1968147ed94a71896bd5cfb96cbbd561b99bdc8634e0e6e94e5807bc43f76939aaa3377ba4ee91500491a759bc98a417a3a5a3cdea8","ssdeep":"24576:1IKU8VpZbrD8RCID+CRfKJVPh/pV7OdD3oRFI:1IKppdM9Drkr/pRm0FI","tlshash":"da2523d090a1b1c377189935d1f94f9c69ea50046eaa41bf3c6dec80349a7fad6c87e3","first_seen":"2026-01-08T18:12:32.352534Z","last_seen":"2026-01-08T18:12:32.352534Z","times_seen":1,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":261,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/steer-protocol-secret.webflow.shared.ee9f478f7.min.css","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-steer.finance/","date":"2026-01-08T18:11:54.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /steer-protocol-secret.webflow.shared.ee9f478f7.min.css HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:54 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\netag: W/\"695ce527-21181\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 200215\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vC62ff11GGCe9tpxkGuSGRPBbiBSV9YlaJ5GJy%2BGmIQaejouYxyv6%2F654oCsQ5zHYS79F9wjmKopZG2tI%2FSPhSzsiqv5XPLJ5r4Va5%2Fp7JXi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bada8f7c997b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":135553,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65524), with no line terminators","md5":"85098603f22d9b4f3cc4cfc8239946fc","sha1":"4285eeff3f643af7ad7ea85be7b55ef398379dc7","sha256":"2f688e90ed46b056fec1f2f5573b5f5e60260de1f6b79d2527018a8da7e99bf9","sha512":"e4412ff1ba71d01e94f59e2a286ded98e0a71b28f24882764f415f63d66e2e232e507868d85d3d18c96cee42b45f12be854e393e6a0c7be610db6a0473e2e2e3","ssdeep":"1536:KXoCWdzT4xkQIi7lIiE3hcfpobobVgDdgDdxJLR+aoWJTyp96+dxewzrYp6ISeBU:023E0XX","tlshash":"4dd3b92b6e58318c747b84a6dae1b7cca111504bd61247eef943e52acac62c33b37d5c","first_seen":"2026-01-08T18:12:32.369882Z","last_seen":"2026-03-28T00:37:00.810282Z","times_seen":5,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/67f9732dd2635e99baf2b603_image-removebg-preview%20(19).webp","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/","date":"2026-01-08T18:11:54.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /67f9732dd2635e99baf2b603_image-removebg-preview%20(19).webp HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:54 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\netag: W/\"695ce527-fee\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 200215\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3%2FSdKsI2a53c3p8ZZ38slAYMCBq8Dx4b5Xwt8m5qGgOJ7awXaR80akznhLKDTlZq91CtiU6jpwdhD3ixgDPBximwYCMT08nmeuwbOleg8Nlg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bada8f7c9a2b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4078,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"06e4e04334502c7353a28bc8484a51e1","sha1":"f7ab9a68e7559d0f16bd6085d8ca5984d959f075","sha256":"fc4116573b0c3d0f9991424b109810a766fb6993db6bfd23b3ac1e17dddb2637","sha512":"375a7e58f2e77d5c6cba817526ab59c7ac078e5329280d8d59fbc0360d7f3df454bac8406a32650d0cf7d5c9174afa702c676027bea6ad714e362489ea9f2ca4","ssdeep":"","tlshash":"6d818ef3a1bd872ac0581b7224145c26b761fd8036e7d17c5bea1236a02b2fbc355c9b","first_seen":"2026-01-08T18:12:32.412492Z","last_seen":"2026-04-11T17:52:08.945342Z","times_seen":6,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/adsct-2.gif","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/","date":"2026-01-08T18:11:54.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /adsct-2.gif HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:54 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\netag: \"695ce527-2b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 200215\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=krIkqKMY9%2BEub1yVev9n4zeGqu%2BGwDBY1tUp2CnXCg1ItCtGhghXeNATEywJQEVhGQhggn1OI3Byi5H68tRmA7vUcYs5ZLX%2B5OiJiSNyR0sF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bada8f7e9c8b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"377d257f2d2e294916143c069141c1c5","sha1":"b7cae69682cf31dd670b65088db8395acda6ed3e","sha256":"ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957","sha512":"01211111688dc2007519ff56603fbe345d057337b911c829aaee97b8d02e7d885e7a2c2d51730f54a04aebc1821897c8041f15e216f1c973ed313087fa91a3fb","ssdeep":"","tlshash":"4e900403d3c0c001c151d0300d0cc7441344f0305554030f70fc575ddc3d1550c170c0","first_seen":"2023-04-05T06:54:04Z","last_seen":"2026-08-08T16:20:10.183296Z","times_seen":1391,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/steer-protocol-secret.webflow.shared.ee9f478f7.min.css","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-steer.finance/index_1.html","date":"2026-01-08T18:11:54.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /steer-protocol-secret.webflow.shared.ee9f478f7.min.css HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/index_1.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:54 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\netag: W/\"695ce527-21181\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 200216\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aBO6oN6o2FYGrLcC%2BhFQY5y2vuYZ07QRUcA8XTuiaWg6jxGG5UDvyJQ6UbdEMdVqoyNExILm5Itmo9RuWrS6OShBS%2FFS6w4ENZyDfDLt%2BQX4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bada8fc5e09b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":135553,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65524), with no line terminators","md5":"85098603f22d9b4f3cc4cfc8239946fc","sha1":"4285eeff3f643af7ad7ea85be7b55ef398379dc7","sha256":"2f688e90ed46b056fec1f2f5573b5f5e60260de1f6b79d2527018a8da7e99bf9","sha512":"e4412ff1ba71d01e94f59e2a286ded98e0a71b28f24882764f415f63d66e2e232e507868d85d3d18c96cee42b45f12be854e393e6a0c7be610db6a0473e2e2e3","ssdeep":"1536:KXoCWdzT4xkQIi7lIiE3hcfpobobVgDdgDdxJLR+aoWJTyp96+dxewzrYp6ISeBU:023E0XX","tlshash":"4dd3b92b6e58318c747b84a6dae1b7cca111504bd61247eef943e52acac62c33b37d5c","first_seen":"2026-01-08T18:12:32.369882Z","last_seen":"2026-03-28T00:37:00.810282Z","times_seen":5,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/67f9abac728283f9c36ec9e5_SteerLogo_S.png","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/","date":"2026-01-08T18:11:54.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /67f9abac728283f9c36ec9e5_SteerLogo_S.png HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 6337\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\netag: \"695ce527-18c1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 200216\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ipBzftMro31v3Zulr9QrVvKNOfNrJLmbuCvaxLl1dXJ%2Bu24C3GHk3LlUL70wXEFFI%2F%2Fv7FBcc0G68P06IyVts3DOmTcH1Niu3G3hFtHF88tG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bada8f7c99ab51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6337,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 383 x 517, 8-bit/color RGBA, non-interlaced","md5":"482ca0d392d7a992cdf96ac4e5e45533","sha1":"816fed5a1d35c7037c374698034f2018cb2c3815","sha256":"442c65c1ba0dea5d486206c0919240c60ec9f17b73686feea924c379c7e328f2","sha512":"daf60977bdfc2ae30620af56c708fb2d12856eda75e6e4adf900f6c731014638570387dbfff97360e7a33205f3ad850ed34a987f8792a72e071da265acd3a1bf","ssdeep":"192:Bfu/IfLqI2zBwAq3IqBYRvHnX9kg5Xw7rT5/7h7JtKGdOc:dKIeDBeIrNh5XMf5zlJtKMn","tlshash":"70d19d46051b408049564c6d871eeefd6d8ea2efc8bac911c66c8f2f8d82572577ad13","first_seen":"2026-01-08T18:12:32.378701Z","last_seen":"2026-04-11T17:52:09.069871Z","times_seen":6,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/67f973e39f603b980e14c5c7_logo.svg","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/","date":"2026-01-08T18:11:54.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /67f973e39f603b980e14c5c7_logo.svg HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:54 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 200215\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e0zDnf3BD49x8Wrs8c8V2TrR95GHNODzRrDSh8dpozs2HT3PfUdGSH79gme26Y2P9UZHW%2BBKcBNJG4P44ux8HXZDQk6Ra%2F7um7w9vuW0pWWz\"}]}\r\netag: W/\"695ce527-11e8\"\r\ncontent-encoding: br\r\ncf-ray: 9bada8f7d9a7b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4584,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f22c26c5ec5b43a5deebac2cf50a0f5d","sha1":"bc935aa4afeaf1b432f41a561830e1ca6a6c84f2","sha256":"6a0c27fc0cc43122d69b187a816e3a7df2d8aa42b121edb536fdc64b6c78df99","sha512":"34558fed0352e2563601a13df47b7ec3af21e50a5379279fd06eaf2803f9bbbddbe26536f0b49cd3b3b160ac5bc3bb06b0c3a101f30a3bf1e75fa5f8156b2fed","ssdeep":"96:5clO2w4YX6tKCw7W0zT4Hm23dgnM5WLcEiRW9FOwWCI:x2xDK9W0zMG236MsLiW+wWCI","tlshash":"259195d74330e6ad88cecdadff115994302ea4bebaf5c6d1826edf0d586a8c1e904d50","first_seen":"2026-01-08T18:12:32.405984Z","last_seen":"2026-04-11T17:52:09.057342Z","times_seen":6,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/adsct-1.gif","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/","date":"2026-01-08T18:11:54.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /adsct-1.gif HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:54 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\netag: \"695ce527-2b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 200215\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jC4CF%2BIvIv%2FLE5zfhvaktGx4ttxFvd0ApB0UQAnl%2BzHp1yZwShPiotZFz3I0OSsC2ZlCf4kg3Sm6x8dTXmppN98G005zcCksA54eOvoCFXcl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bada8f7e9cab51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"377d257f2d2e294916143c069141c1c5","sha1":"b7cae69682cf31dd670b65088db8395acda6ed3e","sha256":"ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957","sha512":"01211111688dc2007519ff56603fbe345d057337b911c829aaee97b8d02e7d885e7a2c2d51730f54a04aebc1821897c8041f15e216f1c973ed313087fa91a3fb","ssdeep":"","tlshash":"4e900403d3c0c001c151d0300d0cc7441344f0305554030f70fc575ddc3d1550c170c0","first_seen":"2023-04-05T06:54:04Z","last_seen":"2026-08-08T16:20:10.183296Z","times_seen":1391,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/format-7.27.13.min.js","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-steer.finance/index_1.html","date":"2026-01-08T18:11:54.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /format-7.27.13.min.js HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/index_1.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:54 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:14 GMT\r\netag: W/\"695ce526-12b1d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 200216\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ga22QA1ZYkdTkzl9XzM0FJr8uZxtbIKEzQYvOv%2FGTofKZCHiuylZXKHm7%2FQdewP7BKZt7vZx27WZMn4pLooljql1tXGGJI19jfT%2Bb4RjxBTx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bada8fc5e0bb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76573,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"491834d3f9caa47327ebc9e910d3e358","sha1":"b6bb5ba41355e2182cd6d7b46f5c4facf3b0e142","sha256":"c165139532d0234c3418c6bca1094f763473ae043f66c20823d9bf77b739d087","sha512":"9ab72e28b28de446cf787e99e947edf44f94d4176fbaa01d37b30fe7ae4cda0db61833e22c6c031287527c675e803344879e0b51acf88fd5a2b57f8b40f3be1a","ssdeep":"768:d1KkrgcUEgOgErL5sXB4gDXQ02SuTYxpNI03dKsciscdc/Xct+H+vivjtXjzxZcc:lgOgcIgbSuT4I03dK54zvSD","tlshash":"6f7331d6594bd0d68d1211ddd437ec18e06809a3cdadf193ba2ceec6b45df22884b63b","first_seen":"2026-01-08T18:12:32.373963Z","last_seen":"2026-01-08T18:12:32.373963Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/adsct-3.gif","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/index_1.html","date":"2026-01-08T18:11:55.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /adsct-3.gif HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:55 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\netag: \"695ce527-2b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 200217\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=opUk6%2BbMyNQ0Wuu6IRlqShiUUi8lE6AINNV4Jl2wdm5liKjFpN%2B0yQMPeZxgcAosJA48dl1FfmAemfumUN9TLkHS8Cr%2FZZrLmbboR96ai4b%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bada90049d4b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"377d257f2d2e294916143c069141c1c5","sha1":"b7cae69682cf31dd670b65088db8395acda6ed3e","sha256":"ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957","sha512":"01211111688dc2007519ff56603fbe345d057337b911c829aaee97b8d02e7d885e7a2c2d51730f54a04aebc1821897c8041f15e216f1c973ed313087fa91a3fb","ssdeep":"","tlshash":"4e900403d3c0c001c151d0300d0cc7441344f0305554030f70fc575ddc3d1550c170c0","first_seen":"2023-04-05T06:54:04Z","last_seen":"2026-08-08T16:20:10.183296Z","times_seen":1391,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/67f9732dd2635e99baf2b603_image-removebg-preview%20(19).webp","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/index_1.html","date":"2026-01-08T18:11:55.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /67f9732dd2635e99baf2b603_image-removebg-preview%20(19).webp HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:55 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\netag: W/\"695ce527-fee\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 200216\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sodwFtuiEbkPgDNn11HdNAU9oWihg24Yp%2F2BxD7PUDstmUPB4k4XdafVMaZ6Yoj0Q9djRKzRdiuhnHz%2BgwVXS4JabJPz%2BUmPP5bwtC%2FwehYk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bada8fd8f18b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4078,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"06e4e04334502c7353a28bc8484a51e1","sha1":"f7ab9a68e7559d0f16bd6085d8ca5984d959f075","sha256":"fc4116573b0c3d0f9991424b109810a766fb6993db6bfd23b3ac1e17dddb2637","sha512":"375a7e58f2e77d5c6cba817526ab59c7ac078e5329280d8d59fbc0360d7f3df454bac8406a32650d0cf7d5c9174afa702c676027bea6ad714e362489ea9f2ca4","ssdeep":"","tlshash":"6d818ef3a1bd872ac0581b7224145c26b761fd8036e7d17c5bea1236a02b2fbc355c9b","first_seen":"2026-01-08T18:12:32.412492Z","last_seen":"2026-04-11T17:52:08.945342Z","times_seen":6,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/67f963888b5f992fd7d3d01a_ant-design_x-outlined.svg","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/index_1.html","date":"2026-01-08T18:11:55.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /67f963888b5f992fd7d3d01a_ant-design_x-outlined.svg HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:55 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 200216\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jo9NhrsY8y1JI0X8rqru3v9AfO4unJ4q3DazEIjs6xpTgz9d0%2FtGeOhY3mqDwxOo5HuPEo6wS0rv4evizJ78Vqg9jG4UW7R%2FOTUSg8lwtrtA\"}]}\r\netag: W/\"695ce527-1b0\"\r\ncontent-encoding: br\r\ncf-ray: 9bada8fe1fa2b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":432,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ef8d1cdcbb40147ea09804f228d9edde","sha1":"8258d92d487445f65134f1c93543fa49e9aca0d2","sha256":"48b4feb3d1db8422712916523764f745a4bcb652020377273f4a8e4e33bc5d61","sha512":"5ed6f5cd0089cda00953d6804ef2b1f5c665c30badfef8dbbe4533f4a0206fb8061669bbde05a9b6a8ccb4aa82386fe4cc021f085cae0fc136c5862b6f690004","ssdeep":"","tlshash":"dbe055fbb089aac06e0b8636e23c109261a738843659873984902e18e914569581e9e8","first_seen":"2026-01-08T18:12:32.377794Z","last_seen":"2026-04-11T17:52:09.071545Z","times_seen":11,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/format-7.27.13.min.js","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-steer.finance/index_1.html","date":"2026-01-08T18:11:55.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /format-7.27.13.min.js HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/index_1.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:55 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:14 GMT\r\netag: W/\"695ce526-12b1d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 200217\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tlxc%2BRQi2yrmKyI9qDZTnOmNb5p4If2kS7d2qwrS6fi%2BuNga33l5xxlQGHrfgc8JFyuis3QvJ%2BMS6SOuc%2FJoup77ffhxa%2BOvYW3doQWe%2F%2BvD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bada8ff28bcb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76573,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"491834d3f9caa47327ebc9e910d3e358","sha1":"b6bb5ba41355e2182cd6d7b46f5c4facf3b0e142","sha256":"c165139532d0234c3418c6bca1094f763473ae043f66c20823d9bf77b739d087","sha512":"9ab72e28b28de446cf787e99e947edf44f94d4176fbaa01d37b30fe7ae4cda0db61833e22c6c031287527c675e803344879e0b51acf88fd5a2b57f8b40f3be1a","ssdeep":"768:d1KkrgcUEgOgErL5sXB4gDXQ02SuTYxpNI03dKsciscdc/Xct+H+vivjtXjzxZcc:lgOgcIgbSuT4I03dK54zvSD","tlshash":"6f7331d6594bd0d68d1211ddd437ec18e06809a3cdadf193ba2ceec6b45df22884b63b","first_seen":"2026-01-08T18:12:32.373963Z","last_seen":"2026-01-08T18:12:32.373963Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-08T18:11:53.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:53 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rywlLsj8y6FuZTQsiFwGtD3MYpt7l3mbxyBGm%2Fa3W%2B%2Fh%2BzZrl9gqfs8m6RSEOcQQo7L97z1aEvJ3Ri8mBtapfPtAqQ1V%2B4NGhHl9oh5UJ%2BPpoQI%3D\"}]}\r\nage: 200217\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bada8f63acf0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78254,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5917)","md5":"f3716b235052bff288be7f169349c3df","sha1":"a73a295fb2af40233097f82edd8dba699134cfe1","sha256":"9075d0aaa83ab3213811b9e6dc07cf1ee4941db0f50ed1fa606491bc5d974a0f","sha512":"8d2711f5b006bf962f319e5d4eebb9d413bcc18c39867b5d75f67308ebd731193b0d9a752f666adb16a42e95e1b38740599ee450a72c6a88cb53829465628f93","ssdeep":"1536:Leqkh5gi+ugVWaAeFyiVNPA/TgtBbazr268:CD55eVWaAeF5VNYMtxp","tlshash":"6e73c6dfa9e31044690390bd1fa727e63736c003e20add697edd6258df852c89ee2749","first_seen":"2026-01-08T18:12:32.380728Z","last_seen":"2026-01-08T18:12:32.380728Z","times_seen":1,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":215,"dns":186,"connect":1,"send":0,"wait":13,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/67f963888b5f992fd7d3d029_cy-h1-bg.svg","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/","date":"2026-01-08T18:11:54.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /67f963888b5f992fd7d3d029_cy-h1-bg.svg HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/steer-protocol-secret.webflow.shared.ee9f478f7.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:54 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 200216\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OJad9xV%2FK0OmxMeOnX8FaCLF%2Fg%2BMzw0cJyv3%2BoyWcQW8aQDCavFV4696DDHoWqsI2M7m8OPxeJzFJntKWmFhWACW2BpHITFTxTbnRjkADwH7\"}]}\r\netag: W/\"695ce527-2602\"\r\ncontent-encoding: br\r\ncf-ray: 9bada8f98b56b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9730,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2553b93b3ef37f0d83395acd95e72d60","sha1":"b4362c4384e9b1b953746e7c8f16667877fa9d27","sha256":"605e8cfd2ec7b09fddef006c984a966892f89adc25c996e4866a6d715db6624f","sha512":"57c8da7dfd6fb54c96eda843ba0de26ac3b80dab2f7866a46ad539db1cafe728b36e0106a1ea82b39ef2af0b0fc0d9ff3b25b4b040385db9a4708e4ca004ccac","ssdeep":"96:kXuMzAiWOfmSyHVul6qB8BUpcuaU6zpkYDbSE1cloUkIcWiLjgyFZkx9lu7uVqOX:k+VxLubKUwLDkJQO1T7QTv/47Zzl","tlshash":"be12ddb9275cf8a5ea40829cf91bb4e2a55b90f8cfc9472285051f2f3a04ed7b5372d4","first_seen":"2026-01-08T18:12:32.415367Z","last_seen":"2026-04-11T17:52:09.059699Z","times_seen":6,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/favicon.ico","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/","date":"2026-01-08T18:11:54.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T14:02:13.833701Z","times_seen":17818578,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/index_1.html","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://claim-steer.finance/index_1.html","date":"2026-01-08T18:11:55.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/index_1.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:55 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WZGn9GGT4FheC2cmuP8gLiXyLc6Mu5uSb%2BlKwQaxH%2FsXY7hYFC%2FgGgiz7ENUId23ic%2Fd1p49p5eiweUvgjA0eMblBUx01n4Oi7LjIHIVDNaB\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9bada8fdcf65b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78254,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5917)","md5":"f3716b235052bff288be7f169349c3df","sha1":"a73a295fb2af40233097f82edd8dba699134cfe1","sha256":"9075d0aaa83ab3213811b9e6dc07cf1ee4941db0f50ed1fa606491bc5d974a0f","sha512":"8d2711f5b006bf962f319e5d4eebb9d413bcc18c39867b5d75f67308ebd731193b0d9a752f666adb16a42e95e1b38740599ee450a72c6a88cb53829465628f93","ssdeep":"1536:Leqkh5gi+ugVWaAeFyiVNPA/TgtBbazr268:CD55eVWaAeF5VNYMtxp","tlshash":"6e73c6dfa9e31044690390bd1fa727e63736c003e20add697edd6258df852c89ee2749","first_seen":"2026-01-08T18:12:32.380728Z","last_seen":"2026-01-08T18:12:32.380728Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/adsct-1.gif","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-steer.finance/index_1.html","date":"2026-01-08T18:11:55.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /adsct-1.gif HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:55 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\netag: \"695ce527-2b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 200216\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yDiC%2BaG6ANEEWiDUeFtpXgyxc2VmV0eHBle2gZFYlHdRD8Ll7Iuj8t4uoj8VxNZtfKmYeX8uJmm9T5Jc4pk8yAwqBAJset2csWDmgLWgX9t7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bada8fe1fa7b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"377d257f2d2e294916143c069141c1c5","sha1":"b7cae69682cf31dd670b65088db8395acda6ed3e","sha256":"ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957","sha512":"01211111688dc2007519ff56603fbe345d057337b911c829aaee97b8d02e7d885e7a2c2d51730f54a04aebc1821897c8041f15e216f1c973ed313087fa91a3fb","ssdeep":"","tlshash":"4e900403d3c0c001c151d0300d0cc7441344f0305554030f70fc575ddc3d1550c170c0","first_seen":"2023-04-05T06:54:04Z","last_seen":"2026-08-08T16:20:10.183296Z","times_seen":1391,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-steer.finance/67f963888b5f992fd7d3d07e_InterTight-Medium.ttf","fqdn":"claim-steer.finance","domain":"claim-steer.finance","tld":"finance"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-steer.finance/","date":"2026-01-08T18:11:54.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-steer.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:19:49 GMT","end":"Mon, 06 Apr 2026 05:17:07 GMT"},"fingerprint":{"sha1":"02:BD:F1:A5:FA:B4:F5:E9:21:64:33:FB:95:BD:90:CA:88:C8:DA:D4","sha256":"F0:55:DB:46:F6:76:EA:D3:46:E4:DA:FE:C6:51:A2:40:15:7B:1F:E7:4C:37:30:36:AB:32:98:A1:41:C8:04:7A"}}},"request":{"raw":"GET /67f963888b5f992fd7d3d07e_InterTight-Medium.ttf HTTP/1.1\r\nHost: claim-steer.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-steer.finance/steer-protocol-secret.webflow.shared.ee9f478f7.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 18:11:54 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 308660\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 10:34:15 GMT\r\netag: \"695ce527-4b5b4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 200215\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m8AjmkxECGE6bYiN2PiZctA%2BvyyeIRrX1H0ijooietjKtjq%2FV%2BppLfeQXOGrQ%2FlwMQG5a%2Bw9vjx1KUKf%2Bk1M8joOxLacxcurcIZES27%2FsVOU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bada8f98b5fb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":308660,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 45 names, Microsoft, language 0x409","md5":"b4ab32bca9dae366fa7193b1b7bb1b4c","sha1":"07cf5cdb9b660146a0935a5cc166ec2a0717a151","sha256":"fdad824e8ae91097dde263d3aeed6f6c2e9054d076965babf938620a9f2bbaf5","sha512":"73c5fa04238919ebf77bd8c984e606ea5a7fc4511a2041574205e0f343d430051854bc24aa8da115474b474c7570834ec1f91c6140cb99c1522c1cf3f61d475a","ssdeep":"6144:+/prSPfNz5Pfpaw/K6Lnbt/Cyew34jawQJGTk:+/p4jrn6nqGTk","tlshash":"6b646d27e337972dd61579749aa1c36473756ca27a0be31b706a3e81c8d70b80dc1af8","first_seen":"2025-01-29T20:53:19.450988Z","last_seen":"2026-08-09T22:32:30.888374Z","times_seen":157,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"claim-steer.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}