{"report_id":"e4e8cf45-139a-4eff-9c0d-06d80bb27080","version":6,"status":"done","tags":[],"date":"2026-03-25T17:17:59Z","url":{"schema":"https","addr":"claimworldlibertyfinancial.app/","fqdn":"claimworldlibertyfinancial.app","domain":"claimworldlibertyfinancial.app","tld":"app"},"ip":{"addr":"172.67.211.183","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"claimworldlibertyfinancial.app/","fqdn":"claimworldlibertyfinancial.app","domain":"claimworldlibertyfinancial.app","tld":"app"},"title":"World Liberty Financial - $WLFI Airdrop is Live.","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T04:37:12.552285Z","times_seen":17949544,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"claimworldlibertyfinancial.app/","fqdn":"claimworldlibertyfinancial.app","domain":"claimworldlibertyfinancial.app","tld":"app"},"ip":{"addr":"172.67.211.183","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-29T17:17:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"claimworldlibertyfinancial.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"claimworldlibertyfinancial.app","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":84,"request_count":21,"received_data":4571102,"sent_data":10281,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"claimworldlibertyfinancial.app/","fqdn":"claimworldlibertyfinancial.app","domain":"claimworldlibertyfinancial.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"49d6323bd24515eabcefa9cc9079466f","sha1":"9f60a52242a8a004bf5315efb8c03f111383106d","sha256":"e4304852096d2ff5491639df435812a1baab4e34214d08e7115b4c6cd1c639ff","sha512":"40c29da50b631295efb3c62809f201b8e3629152f52846a870b6a65eb9d40570547788bdb052c344887757a3ad087e8ebd81000a76c5ebc78a1f47e0a936010c","ssdeep":"","tlshash":"add0c95824b159a2009b783d498f084aba26a417b10c9ec5bddc96546fa2e7c44e0a48","size":253,"data":"","first_seen":"2024-09-19T22:32:07.349591Z","last_seen":"2026-03-26T00:42:49.84958Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimworldlibertyfinancial.app/js/utilwidget-5.1.9.min.js","fqdn":"claimworldlibertyfinancial.app","domain":"claimworldlibertyfinancial.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c779d67a76e5128424d8e935ce5201c","sha1":"bd54e36070f193ddb2eadc12a9f09bec07867488","sha256":"94cb0707bdeed02a29f6a126403426db620f8700c55c59ba2a3256a5c42b7a8e","sha512":"4c11866d4cf4f6ce9dd3535ece781630cda6ee9d4ad9e46902748b2f420ea9c684ad22eae34fbdb0358d72092e24713f3278d2d9c650c6a8086a7badf4be0ad6","ssdeep":"1536:fwT3GYTag1AxIFVEhHMTdEmh1z8ayI7W+Q0O665ZoBCVcXmhzg46AKj:fwTWYTag1A2F4sTdL7ogO5Zo4VcXmumY","tlshash":"f7342de5db9bd4ec8e9111cec073f845e4584963ceacb493aa2ddec17519f22808727b","size":237589,"data":"","first_seen":"2026-02-20T16:36:44.220065Z","last_seen":"2026-06-27T10:04:58.412497Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimworldlibertyfinancial.app/0761c5e6-e174-4e5e-8041-bcb020ec115a","fqdn":"claimworldlibertyfinancial.app","domain":"claimworldlibertyfinancial.app","tld":"app"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f11bcdc7b7757c117a8de0db3a4c25b8","sha1":"962e4d08a960106c829d0f9d492d7b891927adab","sha256":"b60b89c0c92cf57329c8590a2c5540cece4def64e4e7bf04f2d39b8ffa3b2748","sha512":"7461553dadb09db423bda8c47a58f8cdade82aa710a0f4415cde912e7a88cd4471ea86aa58a2e5097c90e2cb45ac410104019c56a04c35955e827f0bb0796040","ssdeep":"6144:vkWGL6BSn5NGCk3zi0mCw8wLPNU2HZjGfty3:cjkSnv1k20mCwFnHRGfty3","tlshash":"1044810609ac4f7986ec22e015f72cc401794e0ad9dc3cbfb9ada1579e25bd6e0c279d","size":259964,"data":"","first_seen":"2025-07-13T03:04:16.940864Z","last_seen":"2026-08-16T20:39:49.938915Z","times_seen":5114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimworldlibertyfinancial.app/","fqdn":"claimworldlibertyfinancial.app","domain":"claimworldlibertyfinancial.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"52b66c6d93f7670d4d341369448e1464","sha1":"2a3c5c71518ca1fc9a1bff2b3c279ab544a668d8","sha256":"f2226990c13bad2e98b4d14cd077c12c338a0bab06eec33b5d00c86455533c45","sha512":"1d27eb2b74e4a2aca82b4bd0a383785bcfc964866592d0e950f964202bd0c4d3b015b56e6a522666f53ad127f85734a951625dd867395c04696bda2ca5cca957","ssdeep":"192:+tkdES6CIf83e2SXC8uWS6Ct2bjroSI3brZUqKfzymDHvCd:+ff83qP3rw7","tlshash":"12d16d7e9ed20637586bf5bd8f9b7080292284675909ed203d4ce1029f8cd2597f6f94","size":6548,"data":"","first_seen":"2025-11-04T11:05:57.548472Z","last_seen":"2026-03-26T00:42:49.861949Z","times_seen":150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"claimworldlibertyfinancial.app/binance.9ad290e6.svg","fqdn":"claimworldlibertyfinancial.app","domain":"claimworldlibertyfinancial.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claimworldlibertyfinancial.app/","date":"2026-03-25T17:17:31.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimworldlibertyfinancial.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 06:27:35 GMT","end":"Sat, 20 Jun 2026 06:27:34 GMT"},"fingerprint":{"sha1":"DD:51:5D:0D:07:A1:13:74:69:32:09:30:7F:F4:1F:60:15:EA:27:C3","sha256":"77:AA:91:72:A0:34:DF:E2:CC:F8:C1:1D:E5:79:8D:BC:44:2A:99:DF:A2:30:AE:6D:FB:54:6D:2A:2F:A1:E3:E8"}}},"request":{"raw":"GET /binance.9ad290e6.svg HTTP/1.1\r\nHost: claimworldlibertyfinancial.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimworldlibertyfinancial.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 17:17:31 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 22 Mar 2026 07:23:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 42\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9SX56G7MEcVSZpfInSWXQ4hoMf8rwe%2FRoqCJgpyI45KMU3f2cSI3NkZlEE2RlN6eMr0eujPU5ripYX13d6gVXRR9Pes21VI%2FHaqHMB9VNVHK0oa9lmo0Wi5cTKCRy6eXOTjfRfMV%2BWUHCEDydIXyFhI%3D\"}]}\r\netag: W/\"69bf9909-1142\"\r\ncontent-encoding: br\r\ncf-ray: 9e1f91ccfd8a97c6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4418,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a8a3786a35eb1f7c3b7f39165b19e475","sha1":"f8756eec37946ea05a4a7067414788f537411e22","sha256":"5845751b9b0b208234ee1b1e58a2d19e5c50b5b6c8c9c364c9aa8f833b48aa61","sha512":"ff12a97f3881619fcd7ec0fba3e6370bc485826958f23cddc7a76d0d76b4134d40dbe48c329b5e8a708018946cb19530079d5a82174202fa8a003663d95d7a75","ssdeep":"96:ZB0Wo3ncjz49M9p4MHOu2FwIO3Auk+24v+qrQebN0oxLZHSL:ZBuru9p4MuNFHO38+24vDtxLZm","tlshash":"4d91b7e9ba9811e49805dbedc95f0079712f34fe3bd1cf8443887e496045c9a5e8cdca","first_seen":"2025-09-03T12:43:25.649778Z","last_seen":"2026-08-05T18:41:23.599591Z","times_seen":183,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"claimworldlibertyfinancial.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimworldlibertyfinancial.app/bitget.0d027854.svg","fqdn":"claimworldlibertyfinancial.app","domain":"claimworldlibertyfinancial.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claimworldlibertyfinancial.app/","date":"2026-03-25T17:17:31.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimworldlibertyfinancial.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 06:27:35 GMT","end":"Sat, 20 Jun 2026 06:27:34 GMT"},"fingerprint":{"sha1":"DD:51:5D:0D:07:A1:13:74:69:32:09:30:7F:F4:1F:60:15:EA:27:C3","sha256":"77:AA:91:72:A0:34:DF:E2:CC:F8:C1:1D:E5:79:8D:BC:44:2A:99:DF:A2:30:AE:6D:FB:54:6D:2A:2F:A1:E3:E8"}}},"request":{"raw":"GET /bitget.0d027854.svg HTTP/1.1\r\nHost: claimworldlibertyfinancial.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimworldlibertyfinancial.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 17:17:31 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 22 Mar 2026 07:23:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 42\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uV7IcOJ7BwgT4jUL84Rd86bVnswgWg9DSXLy1UwhrbgsIl4sn66zs7iX8N%2FKTPq6EKxmDokhoWnhvE8mfTh3R%2BX9kTw5NGyUZP3bzDxTZkfQVGGL3bTiR4fgKh%2Bp8L7nAbcEcC4Rhu2O%2B7b2tzxI71U%3D\"}]}\r\netag: W/\"69bf9909-13a1\"\r\ncontent-encoding: br\r\ncf-ray: 9e1f91ccfd8f97c6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5025,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6f974930ab9c40d070e877dc867d2278","sha1":"2afe0f0ccec04ec2dd0e426c20241b9248cfaf20","sha256":"cda5ebf85a4ed174cc6f4a5fc66d856ed53f50348b9e2a5feca8fd3bbfc2c32c","sha512":"e0e02443aa545ffcf476313db0a7fd483e567f97067a1498430d0ffa33e282f24eb42a00196140c7ac5bd9eef4caac98a949b985130763bf1b268da1fe81b95f","ssdeep":"96:B6a20JZKIvZZT/CT660bWxpMwD9eMu1YgzpeYTE+366liZYGlv:B60CIvZBS66FyA93Tu8YAaGR","tlshash":"01a186e5a3e4a1e8f443fbb4d6221179baab38bda359c544c360be91e54601c49dccd4","first_seen":"2025-09-03T12:43:25.595336Z","last_seen":"2026-08-05T18:41:23.619486Z","times_seen":182,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"claimworldlibertyfinancial.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimworldlibertyfinancial.app/3dc379dc9b5dec12-s.p.woff2","fqdn":"claimworldlibertyfinancial.app","domain":"claimworldlibertyfinancial.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claimworldlibertyfinancial.app/","date":"2026-03-25T17:17:31.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimworldlibertyfinancial.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 06:27:35 GMT","end":"Sat, 20 Jun 2026 06:27:34 GMT"},"fingerprint":{"sha1":"DD:51:5D:0D:07:A1:13:74:69:32:09:30:7F:F4:1F:60:15:EA:27:C3","sha256":"77:AA:91:72:A0:34:DF:E2:CC:F8:C1:1D:E5:79:8D:BC:44:2A:99:DF:A2:30:AE:6D:FB:54:6D:2A:2F:A1:E3:E8"}}},"request":{"raw":"GET /3dc379dc9b5dec12-s.p.woff2 HTTP/1.1\r\nHost: claimworldlibertyfinancial.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimworldlibertyfinancial.app/cab639640b991f62.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 17:17:31 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25240\r\nserver: cloudflare\r\nlast-modified: Sun, 22 Mar 2026 07:23:53 GMT\r\netag: \"69bf9909-6298\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RPh8LipBkYJgSAsc0WwgOf3DrfM%2FWkfvaLvw%2FViWMEhCdIMNC0eXKJsNUmC3Jlrk4xxNINWx0foB0UHPY3X11jdHP%2BXeqNETkALkOQZShbSTWkmX%2BqKy9Yx%2BmcrJwz8Syf2OZmFUyC9TcW4ywLZ8qaw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1f91cf7a6397c6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25240,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25240, version 1.0","md5":"f544d77b0e9b284f5c9f06c0905d9f41","sha1":"9067cf8d0729f9ddcf4cdf90649050594e793525","sha256":"3902474d3ece89c8580d5ef3325cf58753e6e45a86f9957b4dacc4fce2e7fde1","sha512":"69cc3131509240320065de23ea923fba0c9ffde8f108ffea894303458f44bfadcc0b172f2d936732470cf004a46cf65e02428c83f7fa34889fb8626cb1b4c89e","ssdeep":"384:OCvS/6gw97YTo7qbVbUdFqTn1XV2FDoDTShGjXHU9B64BwXaRVKzb:OD/6gw97YTo6ZSqTn5VQEcGjXYWXAQb","tlshash":"e6b2e16b37387de5db05c766e4d23ab34dc3655aa6a01977682fd418880808327bf3bd","first_seen":"2025-09-23T01:14:50.250739Z","last_seen":"2026-08-17T11:18:24.661727Z","times_seen":866,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"claimworldlibertyfinancial.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimworldlibertyfinancial.app/logo.1adc9ebd.svg","fqdn":"claimworldlibertyfinancial.app","domain":"claimworldlibertyfinancial.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://claimworldlibertyfinancial.app/","date":"2026-03-25T17:17:31.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimworldlibertyfinancial.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 06:27:35 GMT","end":"Sat, 20 Jun 2026 06:27:34 GMT"},"fingerprint":{"sha1":"DD:51:5D:0D:07:A1:13:74:69:32:09:30:7F:F4:1F:60:15:EA:27:C3","sha256":"77:AA:91:72:A0:34:DF:E2:CC:F8:C1:1D:E5:79:8D:BC:44:2A:99:DF:A2:30:AE:6D:FB:54:6D:2A:2F:A1:E3:E8"}}},"request":{"raw":"GET /logo.1adc9ebd.svg HTTP/1.1\r\nHost: claimworldlibertyfinancial.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimworldlibertyfinancial.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 17:17:32 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 22 Mar 2026 07:23:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DSOVoPwdOUImw4eGYtoZJKCZdJ%2FsYczhx9xjdk7fcAaZUvkxBBj22TGYjKRkxs%2BxO51H%2FBRToVdp2rmB0f0LQIzQW9P5KpEW%2FNJ3UVdqGIWEwK7VnNAMJ4W1h3%2F7tFk9UfCxfBv1T91UBapcXD%2F5uf4%3D\"}]}\r\netag: W/\"69bf9909-4162\"\r\ncontent-encoding: br\r\ncf-ray: 9e1f91d02b8a97c6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16738,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"698cc40c353930df1f33da1ed565f904","sha1":"902f4342a802dc5afbeed9270402adda2cd431c1","sha256":"a7812cbd42f25082447f77be0fca11977f24765a5495be25d0a69e32652f5dc3","sha512":"3d37fb25cf501839090f2e849eb8d7c466cf6e33c544aa95949a8402af24704941cb0ce75a5ebb01a4d3184d392495d82e0254bb2f87ca92380007513d5d9104","ssdeep":"384:pYeeroJa/4ctsqfr08azRkTt+iT9Nf1D86gWvSb:psovKdxuRoDN+","tlshash":"2372c6fe6bf961e0d041d3f1af15847a3c1f64ff2aa9cb41c298af58699049dac09cc1","first_seen":"2025-07-12T22:44:49.181833Z","last_seen":"2026-08-05T18:41:23.60718Z","times_seen":282,"resource_available":false,"data":null}},"time_used":1127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1110,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"claimworldlibertyfinancial.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimworldlibertyfinancial.app/ethereum.svg","fqdn":"claimworldlibertyfinancial.app","domain":"claimworldlibertyfinancial.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://claimworldlibertyfinancial.app/","date":"2026-03-25T17:17:31.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimworldlibertyfinancial.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 06:27:35 GMT","end":"Sat, 20 Jun 2026 06:27:34 GMT"},"fingerprint":{"sha1":"DD:51:5D:0D:07:A1:13:74:69:32:09:30:7F:F4:1F:60:15:EA:27:C3","sha256":"77:AA:91:72:A0:34:DF:E2:CC:F8:C1:1D:E5:79:8D:BC:44:2A:99:DF:A2:30:AE:6D:FB:54:6D:2A:2F:A1:E3:E8"}}},"request":{"raw":"GET /ethereum.svg HTTP/1.1\r\nHost: claimworldlibertyfinancial.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimworldlibertyfinancial.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 17:17:31 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 22 Mar 2026 07:23:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 41\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mjL7OupkIfwerL37fAkZilqb3VW5jzAZTjUP6EdzjCQmChVNFV4qGD5PPAoiLTlIxq%2F4eF8i%2F4Y4HyFnzNWE%2B5%2BRO7hF2N3Rrtk4QWP1%2B3y9zmQ0m1qs5OZbo8wsrq0YMRtx80Psv9CDLkid3PIrw2Q%3D\"}]}\r\netag: W/\"69bf9909-324\"\r\ncontent-encoding: br\r\ncf-ray: 9e1f91d02b9297c6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":804,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5397e57f5c45761edcc30f54aacb2fa4","sha1":"e7b902bf46637c0528bd4a439db9feb6479e7d83","sha256":"f2c2e85db0e0e2c2a9132aeb809f420ad05a0e0e51ea81007c9b69f17bf44ddf","sha512":"67cc9cc85cea31de7464f5421bbfa7df48cc6794ea3ef0b7bd5e9bbbc44251e83ed23afee652ec99b0c0de3d9587407978f94e79d63f984cd74128516cbcb01d","ssdeep":"","tlshash":"5e018ed83219c74be6180b5e035a7579549261f7bc589008f6852b8374ae5bb0d9cbc6","first_seen":"2025-09-03T12:43:25.661596Z","last_seen":"2026-08-05T18:41:23.618209Z","times_seen":175,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"claimworldlibertyfinancial.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimworldlibertyfinancial.app/js/utilwidget-5.1.9.min.js","fqdn":"claimworldlibertyfinancial.app","domain":"claimworldlibertyfinancial.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claimworldlibertyfinancial.app/","date":"2026-03-25T17:17:31.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimworldlibertyfinancial.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 06:27:35 GMT","end":"Sat, 20 Jun 2026 06:27:34 GMT"},"fingerprint":{"sha1":"DD:51:5D:0D:07:A1:13:74:69:32:09:30:7F:F4:1F:60:15:EA:27:C3","sha256":"77:AA:91:72:A0:34:DF:E2:CC:F8:C1:1D:E5:79:8D:BC:44:2A:99:DF:A2:30:AE:6D:FB:54:6D:2A:2F:A1:E3:E8"}}},"request":{"raw":"GET /js/utilwidget-5.1.9.min.js HTTP/1.1\r\nHost: claimworldlibertyfinancial.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimworldlibertyfinancial.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 17:17:31 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 22 Mar 2026 07:23:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 42\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SKL9tRTBiVubE2HAOoo1gIiGW3t6k7sGB8KWMoBuZVUWqAqiL%2B9WenFS8V6Lo65Kh0C%2FQP85Wh9ZiUjl5J7K73DSFx0LZOhS0xLuLMnwO9C0VTPW%2F%2FnNWiiAoitnv4cQhqMut4prr07zB0j%2B%2FWlb25A%3D\"}]}\r\netag: W/\"69bf9909-3a25b\"\r\ncontent-encoding: br\r\ncf-ray: 9e1f91ccfd7a97c6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":238171,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50656), with no line terminators","md5":"4c779d67a76e5128424d8e935ce5201c","sha1":"bd54e36070f193ddb2eadc12a9f09bec07867488","sha256":"94cb0707bdeed02a29f6a126403426db620f8700c55c59ba2a3256a5c42b7a8e","sha512":"4c11866d4cf4f6ce9dd3535ece781630cda6ee9d4ad9e46902748b2f420ea9c684ad22eae34fbdb0358d72092e24713f3278d2d9c650c6a8086a7badf4be0ad6","ssdeep":"1536:fwT3GYTag1AxIFVEhHMTdEmh1z8ayI7W+Q0O665ZoBCVcXmhzg46AKj:fwTWYTag1A2F4sTdL7ogO5Zo4VcXmumY","tlshash":"f7342de5db9bd4ec8e9111cec073f845e4584963ceacb493aa2ddec17519f22808727b","first_seen":"2026-02-20T16:36:44.220065Z","last_seen":"2026-06-27T10:04:58.412497Z","times_seen":38,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"claimworldlibertyfinancial.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimworldlibertyfinancial.app/bitgo.7183118b.svg","fqdn":"claimworldlibertyfinancial.app","domain":"claimworldlibertyfinancial.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claimworldlibertyfinancial.app/","date":"2026-03-25T17:17:31.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimworldlibertyfinancial.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 06:27:35 GMT","end":"Sat, 20 Jun 2026 06:27:34 GMT"},"fingerprint":{"sha1":"DD:51:5D:0D:07:A1:13:74:69:32:09:30:7F:F4:1F:60:15:EA:27:C3","sha256":"77:AA:91:72:A0:34:DF:E2:CC:F8:C1:1D:E5:79:8D:BC:44:2A:99:DF:A2:30:AE:6D:FB:54:6D:2A:2F:A1:E3:E8"}}},"request":{"raw":"GET /bitgo.7183118b.svg HTTP/1.1\r\nHost: claimworldlibertyfinancial.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimworldlibertyfinancial.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 17:17:31 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 22 Mar 2026 07:23:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 42\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rJDhSIw6%2BT4HPKUOoFcHITeHSQyfgh048dcmTieDCq%2BUOpFD5fUybzvD5mQsz4o9Zy4KmaaWtGWVYNsmoK22%2BD21BHKT%2BcJnbngOC5dBEvOQJ%2Fb%2BmDgS72GV3oQFbghN6HyBIEVxG0x2ymKhCxatfZ8%3D\"}]}\r\netag: W/\"69bf9909-c79\"\r\ncontent-encoding: br\r\ncf-ray: 9e1f91ccfd8b97c6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3193,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1c7ffe4cc806f363025b87cc0f78cc1f","sha1":"5a25aaddcbe610759c4fe46016bdaf2a14c34b05","sha256":"53a9c0b92196c5c44379d0b31db641021f799b699807b7781753649ef4286c92","sha512":"db22b1b19f53bf43a2f3f60403485323d9bda0dafddb2740db9e6d76746a029c0e35164945f063d369f4b9630c451af8a9efc26b4125372936355e60888fcb6c","ssdeep":"","tlshash":"8961a7c66264b3d8ac84abf1c63661707c2724fe6f56cb8482e47fb1691569e4c4ccc4","first_seen":"2025-09-03T12:43:25.564Z","last_seen":"2026-08-05T18:41:23.645557Z","times_seen":183,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"claimworldlibertyfinancial.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimworldlibertyfinancial.app/bybit.0664c032.svg","fqdn":"claimworldlibertyfinancial.app","domain":"claimworldlibertyfinancial.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claimworldlibertyfinancial.app/","date":"2026-03-25T17:17:31.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimworldlibertyfinancial.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 06:27:35 GMT","end":"Sat, 20 Jun 2026 06:27:34 GMT"},"fingerprint":{"sha1":"DD:51:5D:0D:07:A1:13:74:69:32:09:30:7F:F4:1F:60:15:EA:27:C3","sha256":"77:AA:91:72:A0:34:DF:E2:CC:F8:C1:1D:E5:79:8D:BC:44:2A:99:DF:A2:30:AE:6D:FB:54:6D:2A:2F:A1:E3:E8"}}},"request":{"raw":"GET /bybit.0664c032.svg HTTP/1.1\r\nHost: claimworldlibertyfinancial.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimworldlibertyfinancial.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 17:17:31 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 22 Mar 2026 07:23:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 40\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p56cmBevYCzIezABM7zHRTqyohHfa8fWWjVCczjf5l0nzwKCqhuWBcBOjbijo8pDMp4zuXEy6TshKuAOtZtqsVCmlFVglrKQ1uWxmY6gfVdIlf8%2FXJWWrQyvnixzur9UDmhMxDzuNMDs8TsEgZW1l6k%3D\"}]}\r\netag: W/\"69bf9909-689\"\r\ncontent-encoding: br\r\ncf-ray: 9e1f91ccfd9197c6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1673,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"80fcb8f535acb123f888323b86d5c65c","sha1":"5cbfd6bc7d545fbf5485fce63ea64381d7d56454","sha256":"d6536a91b85d96e3f89e6baebb2775201b88918bd75fbc28117c629d462b06ca","sha512":"6ea806787ba039f53e52f9617409ca32b50cb27f63a1a24daf9aaf9250deb1da415aac25e3b917ee79c36dab0b074d3f1f168c151b1e61c65952889c298ce161","ssdeep":"","tlshash":"2f3176d5a18d4090ac0057e8066af122323a64fee7ba85ac8784bfe5f4955a598cdcfc","first_seen":"2025-09-03T12:43:25.626753Z","last_seen":"2026-08-05T18:41:23.636938Z","times_seen":183,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"claimworldlibertyfinancial.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimworldlibertyfinancial.app/index_1.html","fqdn":"claimworldlibertyfinancial.app","domain":"claimworldlibertyfinancial.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://claimworldlibertyfinancial.app/","date":"2026-03-25T17:17:31.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimworldlibertyfinancial.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 06:27:35 GMT","end":"Sat, 20 Jun 2026 06:27:34 GMT"},"fingerprint":{"sha1":"DD:51:5D:0D:07:A1:13:74:69:32:09:30:7F:F4:1F:60:15:EA:27:C3","sha256":"77:AA:91:72:A0:34:DF:E2:CC:F8:C1:1D:E5:79:8D:BC:44:2A:99:DF:A2:30:AE:6D:FB:54:6D:2A:2F:A1:E3:E8"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: claimworldlibertyfinancial.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimworldlibertyfinancial.app/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 17:17:31 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sun, 22 Mar 2026 07:23:53 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WE5oX2U1PmNwKNytpumr5JyBKogHqZxO8gY1KeUd0606cKTTdwBKMUhKXZyF6a3smmxebkyRx9NDIQrEfy54ho27tKTdYx9nqC2FvJ82hTIgxGb43smmgzAr7WaGL4BcoBnYRiAnHIZcwLTRgtXh0yo%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9e1f91cf097197c6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"292f74c92c97c686c723a291030cfa93","sha1":"ff7ce2a278d64bb71b8a15797fd10276ea6f0df2","sha256":"baf0572ea402de47c8c0c44f67fe0b4af40bd7bc06f5733bac13f51bb4ac4d08","sha512":"4f34b0d47baba42b1c93958d291540f76e16fb3f67405fec9d87d0d8d57bf4ae454b63e8462a3b238ff1f6306323f7af84e182781658961d0acac1e55b70d953","ssdeep":"","tlshash":"54c02b22dc04480f3d009fd1cb8af1c4c003dc3ce8315c00b867b544e9ac131c012548","first_seen":"2024-08-19T15:34:07.77924Z","last_seen":"2026-08-17T19:34:24.12758Z","times_seen":499,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"claimworldlibertyfinancial.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimworldlibertyfinancial.app/3dc379dc9b5dec12-s.p.woff2","fqdn":"claimworldlibertyfinancial.app","domain":"claimworldlibertyfinancial.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claimworldlibertyfinancial.app/","date":"2026-03-25T17:17:31.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimworldlibertyfinancial.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 06:27:35 GMT","end":"Sat, 20 Jun 2026 06:27:34 GMT"},"fingerprint":{"sha1":"DD:51:5D:0D:07:A1:13:74:69:32:09:30:7F:F4:1F:60:15:EA:27:C3","sha256":"77:AA:91:72:A0:34:DF:E2:CC:F8:C1:1D:E5:79:8D:BC:44:2A:99:DF:A2:30:AE:6D:FB:54:6D:2A:2F:A1:E3:E8"}}},"request":{"raw":"GET /3dc379dc9b5dec12-s.p.woff2 HTTP/1.1\r\nHost: claimworldlibertyfinancial.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimworldlibertyfinancial.app/cab639640b991f62.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 17:17:31 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25240\r\nserver: cloudflare\r\nlast-modified: Sun, 22 Mar 2026 07:23:53 GMT\r\netag: \"69bf9909-6298\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2iTnoscoKwxjwMpCFxhUHorLvZv%2BEU5Xisyxab9MuBAvCA1Ps65BTi%2B%2FU2mh2dAwjszCnyechhwWMbYpsF%2FgMEtFXjCSjVL2Rl13NaG4nd3WOuYNIRwCE4BeEbfs86KTqamIPK%2BL4ORTTQEBQV6jkWI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1f91cf7a4d97c6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25240,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25240, version 1.0","md5":"f544d77b0e9b284f5c9f06c0905d9f41","sha1":"9067cf8d0729f9ddcf4cdf90649050594e793525","sha256":"3902474d3ece89c8580d5ef3325cf58753e6e45a86f9957b4dacc4fce2e7fde1","sha512":"69cc3131509240320065de23ea923fba0c9ffde8f108ffea894303458f44bfadcc0b172f2d936732470cf004a46cf65e02428c83f7fa34889fb8626cb1b4c89e","ssdeep":"384:OCvS/6gw97YTo7qbVbUdFqTn1XV2FDoDTShGjXHU9B64BwXaRVKzb:OD/6gw97YTo6ZSqTn5VQEcGjXYWXAQb","tlshash":"e6b2e16b37387de5db05c766e4d23ab34dc3655aa6a01977682fd418880808327bf3bd","first_seen":"2025-09-23T01:14:50.250739Z","last_seen":"2026-08-17T11:18:24.661727Z","times_seen":866,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"claimworldlibertyfinancial.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimworldlibertyfinancial.app/binance.svg","fqdn":"claimworldlibertyfinancial.app","domain":"claimworldlibertyfinancial.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://claimworldlibertyfinancial.app/","date":"2026-03-25T17:17:31.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimworldlibertyfinancial.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 06:27:35 GMT","end":"Sat, 20 Jun 2026 06:27:34 GMT"},"fingerprint":{"sha1":"DD:51:5D:0D:07:A1:13:74:69:32:09:30:7F:F4:1F:60:15:EA:27:C3","sha256":"77:AA:91:72:A0:34:DF:E2:CC:F8:C1:1D:E5:79:8D:BC:44:2A:99:DF:A2:30:AE:6D:FB:54:6D:2A:2F:A1:E3:E8"}}},"request":{"raw":"GET /binance.svg HTTP/1.1\r\nHost: claimworldlibertyfinancial.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimworldlibertyfinancial.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 17:17:31 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 22 Mar 2026 07:23:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 41\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Za8Kz3Fkodws5WqKd5z2NncuGAcDTV70%2BSuaR8KGgW66W%2FvrIomuw2wai1dIWozKPLIvSHIgKl06ExYvCS%2F9BM9XdydIZmtil85ejhgaOvOIMKgc46xgcqvctnLDd%2Fmb99U1ibjQ9MDz2T2VszDx%2BpI%3D\"}]}\r\netag: W/\"69bf9909-4ae\"\r\ncontent-encoding: br\r\ncf-ray: 9e1f91d02b9897c6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1198,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9fd1aaa2b250517768a951ac0730c40a","sha1":"618bf467689211810b800c7a2a4aa9dbcfe538c1","sha256":"19da930abec49610bc5dd52c4ccd1cfa5c3c932eb78a37e0572983fcebe7e026","sha512":"02f7e84c8107b733c241e5912352c57ff3d03492b291949230b68a1b15c30399fecf6ea1e0c5371ab96d33b1a9f5b5ff478da2dc6825278b1660a9419d326cee","ssdeep":"","tlshash":"b321cee67e8440c6810c9bbdc511d86a666b34f5fecad9608bc631d2f9c70574d6edc0","first_seen":"2025-09-03T12:43:25.589785Z","last_seen":"2026-08-05T18:41:23.634941Z","times_seen":175,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"claimworldlibertyfinancial.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimworldlibertyfinancial.app/favicon-512x512.png","fqdn":"claimworldlibertyfinancial.app","domain":"claimworldlibertyfinancial.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claimworldlibertyfinancial.app/","date":"2026-03-25T17:17:31.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimworldlibertyfinancial.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 06:27:35 GMT","end":"Sat, 20 Jun 2026 06:27:34 GMT"},"fingerprint":{"sha1":"DD:51:5D:0D:07:A1:13:74:69:32:09:30:7F:F4:1F:60:15:EA:27:C3","sha256":"77:AA:91:72:A0:34:DF:E2:CC:F8:C1:1D:E5:79:8D:BC:44:2A:99:DF:A2:30:AE:6D:FB:54:6D:2A:2F:A1:E3:E8"}}},"request":{"raw":"GET /favicon-512x512.png HTTP/1.1\r\nHost: claimworldlibertyfinancial.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimworldlibertyfinancial.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 17:17:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 2969\r\nserver: cloudflare\r\nlast-modified: Sun, 22 Mar 2026 07:23:53 GMT\r\netag: \"69bf9909-b99\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r7bDtt4fVjicVGEN33YaLzkqL3gqn9I6mAvieZGdoY2b4EXm9XAGoQz4eGjKBeydacUZ07tERVLWbbSHPQH%2F%2FK50F%2BRHN%2BBtQCK3lMJUkFeKEga1wACnTQiKB8YKK%2FRLXdPXVj4zuWE17wQLAYna5%2Fs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1f91d10d7297c6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2969,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit colormap, non-interlaced","md5":"61ff6ae4786bb7752de214a1ab966146","sha1":"fa7067eb52664db04883142655dc90c9af306732","sha256":"a0c5d04125b3dfdaddd0e13e0ffd3efc837a3af3d0d27275fd67e7f41314a699","sha512":"506c906cf9c5c906db8703f3963df7217f2df8c8b0043adec8b346523a11478fd80014a015111031aeabc6d9ef2cbc09f5718efaf06b455459205d1dbcb3495f","ssdeep":"","tlshash":"505149cb538c34b2d6ec0cb154f6bcd771a02bd6aa6b04389f2019253a3423d0b3ae25","first_seen":"2025-07-13T00:29:56.564474Z","last_seen":"2026-03-26T00:42:49.829278Z","times_seen":237,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"claimworldlibertyfinancial.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimworldlibertyfinancial.app/","fqdn":"claimworldlibertyfinancial.app","domain":"claimworldlibertyfinancial.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-25T17:17:30.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimworldlibertyfinancial.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 06:27:35 GMT","end":"Sat, 20 Jun 2026 06:27:34 GMT"},"fingerprint":{"sha1":"DD:51:5D:0D:07:A1:13:74:69:32:09:30:7F:F4:1F:60:15:EA:27:C3","sha256":"77:AA:91:72:A0:34:DF:E2:CC:F8:C1:1D:E5:79:8D:BC:44:2A:99:DF:A2:30:AE:6D:FB:54:6D:2A:2F:A1:E3:E8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claimworldlibertyfinancial.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 17:17:30 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sun, 22 Mar 2026 07:23:53 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jMe0RjD%2FfcR7%2Bh%2BGRlNo%2FkysAbzudXg6Ag5ZkpXPzunPDfSnRoQTk6lzLJPIHp%2BPNHpHsQfNrnEDWARnv2l9%2BGE5Omya0b5J6CyqlwVdQr2IQCxoBrWDgByIrYr8uw%3D%3D\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e1f91cb19b7acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":360857,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (16275)","md5":"08cfed213c94b657b663acdeaa87c048","sha1":"c8704f4dfa77b095e26b497da361e4cc0650e034","sha256":"9ae94e92c7be161523c19e223f591f203792cbb349745ccd44bb389a46228764","sha512":"8e97c71a426a7d02a70fb04a7aca78fd0a4e052a958ac7cc448240c440047d2b98d5b58e3a8fbb2275a3f800867cb0ae55c29f2d4a353bb8ddbcfcec0e0b06da","ssdeep":"6144:LUkapmv6PP+XKSsi46A7WFYGAOJbt4J78UdAO6WZcA0QxZV+oU:LVapm3KSpwWCq54LDy9kO","tlshash":"d0748e34784a163d2fa344acbba9942bf502f0cbd71e59ce339e21d59f8369149b3b44","first_seen":"2026-03-25T17:18:05.651692Z","last_seen":"2026-03-26T00:42:49.829959Z","times_seen":2,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":70,"dns":39,"connect":8,"send":0,"wait":70,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"claimworldlibertyfinancial.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimworldlibertyfinancial.app/chainlink.91d10047.svg","fqdn":"claimworldlibertyfinancial.app","domain":"claimworldlibertyfinancial.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claimworldlibertyfinancial.app/","date":"2026-03-25T17:17:31.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimworldlibertyfinancial.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 06:27:35 GMT","end":"Sat, 20 Jun 2026 06:27:34 GMT"},"fingerprint":{"sha1":"DD:51:5D:0D:07:A1:13:74:69:32:09:30:7F:F4:1F:60:15:EA:27:C3","sha256":"77:AA:91:72:A0:34:DF:E2:CC:F8:C1:1D:E5:79:8D:BC:44:2A:99:DF:A2:30:AE:6D:FB:54:6D:2A:2F:A1:E3:E8"}}},"request":{"raw":"GET /chainlink.91d10047.svg HTTP/1.1\r\nHost: claimworldlibertyfinancial.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimworldlibertyfinancial.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 17:17:31 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 22 Mar 2026 07:23:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 41\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=POrwvnKvzPbEA6aZTfWacCutMimhikATcnd6zoPSIKLSwtv9aNRO02ck2xxoTIYS%2Bq4IR46YDfw3ugHIA4%2FZ7HbD5nn49Wx2BeYrGInmJmkEMnJHYc5fvAzgCqMuXbb3GE7Z43ZRjTDCmfVtJbqTl9o%3D\"}]}\r\netag: W/\"69bf9909-18d0\"\r\ncontent-encoding: br\r\ncf-ray: 9e1f91ccfd8e97c6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6352,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ccaa102c0f5e774d0010dd7e148f26bd","sha1":"0065f5899876080f29c90e5a422611e47b193874","sha256":"da0f58e326576f16b97db586435c23e5aa7360c70494a1e87b4e8a8699483094","sha512":"53f188053b1d0191ba66e57c7ed2b970ea8e57e308fc791bc33e756ed8b0d9abd97a8ae349e88bf932f4fd10e64546e0fc1da9247d4ba74b3c99fa83c60b2331","ssdeep":"192:O3J7AijCx9OJJ/Kr0gDHL+96f2aeJmzb20rVY:unusJJhg7L+96uaeJmz6H","tlshash":"f2d1b6c973f8a3e4ec02b7f49615b636781b20f92353ca80c7546f85b982669cad9cc5","first_seen":"2025-09-03T12:43:25.663955Z","last_seen":"2026-08-05T18:41:23.636306Z","times_seen":183,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"claimworldlibertyfinancial.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimworldlibertyfinancial.app/3dc379dc9b5dec12-s.p.woff2","fqdn":"claimworldlibertyfinancial.app","domain":"claimworldlibertyfinancial.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claimworldlibertyfinancial.app/","date":"2026-03-25T17:17:31.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimworldlibertyfinancial.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 06:27:35 GMT","end":"Sat, 20 Jun 2026 06:27:34 GMT"},"fingerprint":{"sha1":"DD:51:5D:0D:07:A1:13:74:69:32:09:30:7F:F4:1F:60:15:EA:27:C3","sha256":"77:AA:91:72:A0:34:DF:E2:CC:F8:C1:1D:E5:79:8D:BC:44:2A:99:DF:A2:30:AE:6D:FB:54:6D:2A:2F:A1:E3:E8"}}},"request":{"raw":"GET /3dc379dc9b5dec12-s.p.woff2 HTTP/1.1\r\nHost: claimworldlibertyfinancial.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimworldlibertyfinancial.app/cab639640b991f62.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 17:17:31 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25240\r\nserver: cloudflare\r\nlast-modified: Sun, 22 Mar 2026 07:23:53 GMT\r\netag: \"69bf9909-6298\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wF2cXbdQmJXrLqTeObFk3sL4aZgR8u7mPVQ2W%2FPEkeV1NMcJej40Zyj52Vh636x3Zdx%2Fnu3A%2BpYoUYvNx2maweiBajhAVm4Z2l0%2F48ecXZe7mGmY7YlQN4i327REpMULL1ysujLzLOhCshaGwFYGhuQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1f91cf7a5f97c6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25240,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25240, version 1.0","md5":"f544d77b0e9b284f5c9f06c0905d9f41","sha1":"9067cf8d0729f9ddcf4cdf90649050594e793525","sha256":"3902474d3ece89c8580d5ef3325cf58753e6e45a86f9957b4dacc4fce2e7fde1","sha512":"69cc3131509240320065de23ea923fba0c9ffde8f108ffea894303458f44bfadcc0b172f2d936732470cf004a46cf65e02428c83f7fa34889fb8626cb1b4c89e","ssdeep":"384:OCvS/6gw97YTo7qbVbUdFqTn1XV2FDoDTShGjXHU9B64BwXaRVKzb:OD/6gw97YTo6ZSqTn5VQEcGjXYWXAQb","tlshash":"e6b2e16b37387de5db05c766e4d23ab34dc3655aa6a01977682fd418880808327bf3bd","first_seen":"2025-09-23T01:14:50.250739Z","last_seen":"2026-08-17T11:18:24.661727Z","times_seen":866,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"claimworldlibertyfinancial.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimworldlibertyfinancial.app/solana.svg","fqdn":"claimworldlibertyfinancial.app","domain":"claimworldlibertyfinancial.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://claimworldlibertyfinancial.app/","date":"2026-03-25T17:17:31.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimworldlibertyfinancial.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 06:27:35 GMT","end":"Sat, 20 Jun 2026 06:27:34 GMT"},"fingerprint":{"sha1":"DD:51:5D:0D:07:A1:13:74:69:32:09:30:7F:F4:1F:60:15:EA:27:C3","sha256":"77:AA:91:72:A0:34:DF:E2:CC:F8:C1:1D:E5:79:8D:BC:44:2A:99:DF:A2:30:AE:6D:FB:54:6D:2A:2F:A1:E3:E8"}}},"request":{"raw":"GET /solana.svg HTTP/1.1\r\nHost: claimworldlibertyfinancial.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimworldlibertyfinancial.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 17:17:31 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 22 Mar 2026 07:23:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 41\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rNpyPWM6MO0oQNb%2FfFkrRZ4hR6NEz7cY5dQdVqOfuKr5Z9ZTnGQadFbVTxHAUaP8QD7DlsMXoIs3L0jMBlSC4k0jkKRMWJLrg7N0hXB1gLF0w8chZhTLEO1dKfs4TxYPynQqRNgB15Hc6uIuzArv%2BCY%3D\"}]}\r\netag: W/\"69bf9909-45a\"\r\ncontent-encoding: br\r\ncf-ray: 9e1f91d02ba297c6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1114,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8183123f9f2d60a6a01626dc8a64b900","sha1":"a495fcced4226d21f16bc6e8f5b8b60a153653f8","sha256":"94e00264fa2c3276ed7da59ed996689a062751aca740255ecae18fb69aeea088","sha512":"d4013c2f0adeb83730c8cbf739596bc2d8f5054a9040ab5b532daee256d8633d6f176c0bddad3354dfc27d099558ea76d3d8752409364373113a05f6db73d408","ssdeep":"","tlshash":"ac2133e3310c76d8db062fa8c30d70314124b2f6dd81a49043d51da7f89b05e5d0dee5","first_seen":"2025-09-03T12:43:25.665377Z","last_seen":"2026-08-05T18:41:23.627087Z","times_seen":175,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"claimworldlibertyfinancial.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimworldlibertyfinancial.app/favicon-16x16.png","fqdn":"claimworldlibertyfinancial.app","domain":"claimworldlibertyfinancial.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claimworldlibertyfinancial.app/","date":"2026-03-25T17:17:31.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimworldlibertyfinancial.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 06:27:35 GMT","end":"Sat, 20 Jun 2026 06:27:34 GMT"},"fingerprint":{"sha1":"DD:51:5D:0D:07:A1:13:74:69:32:09:30:7F:F4:1F:60:15:EA:27:C3","sha256":"77:AA:91:72:A0:34:DF:E2:CC:F8:C1:1D:E5:79:8D:BC:44:2A:99:DF:A2:30:AE:6D:FB:54:6D:2A:2F:A1:E3:E8"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: claimworldlibertyfinancial.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimworldlibertyfinancial.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 17:17:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 282\r\nserver: cloudflare\r\nlast-modified: Sun, 22 Mar 2026 07:23:53 GMT\r\netag: \"69bf9909-11a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1njUDGqDodE05MFaEBcoSSXr8yiNrywY5AkGcSRylvOqIz9kNPohKjTmxc6KkppgMi8v0lLu72ibZZGNmFO%2FQJg8%2FvY8n%2B4PWW7B5qbe9NGvO8MU3dnPR43bISS1V4HYha4J2KCjLN0KZvIWLvdFXWY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1f91d10d8697c6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":282,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"ed0e616eaf489d0c2b38e0327f0047a5","sha1":"6166ef8879e9fb0cb3f1942167d8117888a76f5a","sha256":"4a252f72b1ce6a40c9b2a3972746cbda7e28c92a286fcf65fe8a0cb1b1e45937","sha512":"eb8bbfbd6002a17b3c22b6fcaa3c9e3c2f24dbdd5e0963c4d316bf92432aae186cbcfa3407f17237f4b9e1b254bf3bba3cf07b91138b750780a676d075bafe7c","ssdeep":"","tlshash":"f6d0ebc2721c1c34844d84b290b32882ba3a04057bde220e2b0298f41760d2c3cdab03","first_seen":"2025-07-13T00:29:56.555707Z","last_seen":"2026-03-26T00:42:49.838032Z","times_seen":234,"resource_available":false,"data":null}},"time_used":1134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1133,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"claimworldlibertyfinancial.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimworldlibertyfinancial.app/82228464070503fb.css","fqdn":"claimworldlibertyfinancial.app","domain":"claimworldlibertyfinancial.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claimworldlibertyfinancial.app/","date":"2026-03-25T17:17:31.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimworldlibertyfinancial.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 06:27:35 GMT","end":"Sat, 20 Jun 2026 06:27:34 GMT"},"fingerprint":{"sha1":"DD:51:5D:0D:07:A1:13:74:69:32:09:30:7F:F4:1F:60:15:EA:27:C3","sha256":"77:AA:91:72:A0:34:DF:E2:CC:F8:C1:1D:E5:79:8D:BC:44:2A:99:DF:A2:30:AE:6D:FB:54:6D:2A:2F:A1:E3:E8"}}},"request":{"raw":"GET /82228464070503fb.css HTTP/1.1\r\nHost: claimworldlibertyfinancial.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimworldlibertyfinancial.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 17:17:31 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 22 Mar 2026 07:23:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 42\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OFv%2FEWsDCx2%2Bkg7mLSwb9Cs%2B%2F2QGBcd%2FXirTnIdopkbsavHT1EhY%2BfiIip9OH46KfCkBTBd%2BMdwY9RN88RfSxqJm1MZEmMdRXV5NGuc0w5HJQ1BF9eDLvjsMeYBWvQbZoHpZGqWztK3E5Etb%2BSEaSE8%3D\"}]}\r\netag: W/\"69bf9909-22f5b\"\r\ncontent-encoding: br\r\ncf-ray: 9e1f91ccfd8297c6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":143195,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (63243)","md5":"f0440d956ab4deeec276f88311e0c5b7","sha1":"a3aa23fab93279bb39c54042cdf624a34375e136","sha256":"48c453ca87b682dc90d76de12a873e17e41cc81a62a0ea689777f20eb5f18871","sha512":"8a15ecccef806699644a5dd17577f8dc6eaabda6f528067fea894b9badbd47c9b5bc6637e0ee26b97dfa42a290592b218e24e9692aca339b5d115ef154e52d5b","ssdeep":"3072:GnxAQ+4xzAQsi/2VTSSadKwCUEqonV43FVPQErzBWV7CMSY:GnCQ+4xEQsi/2VTSSDwCUEqonV43FVPm","tlshash":"43e3a61df65190be7d27819e939c36bd3502f081ef561bacb366d6203ed27f2492a720","first_seen":"2025-09-23T01:14:50.448615Z","last_seen":"2026-03-26T00:42:49.84208Z","times_seen":154,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"claimworldlibertyfinancial.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimworldlibertyfinancial.app/cab639640b991f62.css","fqdn":"claimworldlibertyfinancial.app","domain":"claimworldlibertyfinancial.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claimworldlibertyfinancial.app/","date":"2026-03-25T17:17:31.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimworldlibertyfinancial.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 06:27:35 GMT","end":"Sat, 20 Jun 2026 06:27:34 GMT"},"fingerprint":{"sha1":"DD:51:5D:0D:07:A1:13:74:69:32:09:30:7F:F4:1F:60:15:EA:27:C3","sha256":"77:AA:91:72:A0:34:DF:E2:CC:F8:C1:1D:E5:79:8D:BC:44:2A:99:DF:A2:30:AE:6D:FB:54:6D:2A:2F:A1:E3:E8"}}},"request":{"raw":"GET /cab639640b991f62.css HTTP/1.1\r\nHost: claimworldlibertyfinancial.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimworldlibertyfinancial.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 17:17:31 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 22 Mar 2026 07:23:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 43\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ToMKf%2FCyU0KPDjz5%2B22mVOI4KnLdtXMI0p9T1YtKKK1mj8w8D0RNZ6Xz2C5aC6%2F9aKtMGNIun0CGoCjJcFTBsntGsdhMvKr3Pm9zUkJnFy5c3Adj4P7ZKlGRmbXUFzTa%2FYI8zWVZNVrhJQTnaZfwtpE%3D\"}]}\r\netag: W/\"69bf9909-ac2\"\r\ncontent-encoding: br\r\ncf-ray: 9e1f91ccfd8497c6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2754,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2754), with no line terminators","md5":"abb0b9e77cb154500a89be888978ef75","sha1":"a19648e1d875417d3064965167dac288cb7d76d2","sha256":"b341dd8e8d75e54107ea01dfc8d0d1eacb36b694665f88668339c79d5d500c4c","sha512":"00f5ccb1406fdee7d32e99c0276147960b72f1d4788c65ad8da266d2d500b5996325e2d8d3902bd565373a05c8c6f116c00c5b1e7b66cd0b0b791fff81506713","ssdeep":"","tlshash":"23519b30401da45eda35fcc231ca7f236d7d105956c85a22da6c15b98fafcaa73a0b6c","first_seen":"2025-09-23T01:14:50.31444Z","last_seen":"2026-03-26T00:42:49.842654Z","times_seen":155,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"claimworldlibertyfinancial.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimworldlibertyfinancial.app/gateio.94b3731b.svg","fqdn":"claimworldlibertyfinancial.app","domain":"claimworldlibertyfinancial.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claimworldlibertyfinancial.app/","date":"2026-03-25T17:17:31.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimworldlibertyfinancial.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 06:27:35 GMT","end":"Sat, 20 Jun 2026 06:27:34 GMT"},"fingerprint":{"sha1":"DD:51:5D:0D:07:A1:13:74:69:32:09:30:7F:F4:1F:60:15:EA:27:C3","sha256":"77:AA:91:72:A0:34:DF:E2:CC:F8:C1:1D:E5:79:8D:BC:44:2A:99:DF:A2:30:AE:6D:FB:54:6D:2A:2F:A1:E3:E8"}}},"request":{"raw":"GET /gateio.94b3731b.svg HTTP/1.1\r\nHost: claimworldlibertyfinancial.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimworldlibertyfinancial.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 17:17:31 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 22 Mar 2026 07:23:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 42\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O7A2kJxKRugeIdy%2BzWWwn8A1IYPW97ISll3XRaw6YVkX%2B9Py1nsPjwYjsdRxmT3ciudh3hEBCKl%2BsHRU%2B%2FO0ioxSu%2BmB%2BYKi9kGXL5UBSeRSuXuN5yTpWutUF8eDpI7GDWR5cYgfoNr%2BsizEN8bCekc%3D\"}]}\r\netag: W/\"69bf9909-da4\"\r\ncontent-encoding: br\r\ncf-ray: 9e1f91ccfd9397c6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3492,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7f27f8419056c12791e66292dfd54a9c","sha1":"4199d5f9fc13c973739abbe41733fa2778d06efc","sha256":"3f1854279127aae9e75fac2bc3c9bcc82b7e216947af7aeb5a00e93d2ee3a8ea","sha512":"d346b74da3cb938e80a7f5fc1a2c9daf816cdb20469db7e5166a663ece7ac0214d1e5cbbb58efae5e0670e138b0d1cc7b38cabd363d8768b597a0b08ee0f6ed2","ssdeep":"","tlshash":"5c7145e631edf3b8e003bbf4881794923d6a34f973440de4c3b62f4599550a98d99dc6","first_seen":"2025-09-03T12:43:25.641303Z","last_seen":"2026-07-27T03:00:36.529084Z","times_seen":166,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"claimworldlibertyfinancial.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimworldlibertyfinancial.app/secureproxy?e=jscdn/getFile","fqdn":"claimworldlibertyfinancial.app","domain":"claimworldlibertyfinancial.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claimworldlibertyfinancial.app/","date":"2026-03-25T17:17:31.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimworldlibertyfinancial.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 06:27:35 GMT","end":"Sat, 20 Jun 2026 06:27:34 GMT"},"fingerprint":{"sha1":"DD:51:5D:0D:07:A1:13:74:69:32:09:30:7F:F4:1F:60:15:EA:27:C3","sha256":"77:AA:91:72:A0:34:DF:E2:CC:F8:C1:1D:E5:79:8D:BC:44:2A:99:DF:A2:30:AE:6D:FB:54:6D:2A:2F:A1:E3:E8"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: claimworldlibertyfinancial.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claimworldlibertyfinancial.app/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://claimworldlibertyfinancial.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"gj7vh757pa76qdomu901\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 17:17:32 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R0kPPl0pzNFsbC79MWkClWuKfBWFf8%2BvHhQ3zftdHu86tsJF%2BsxdK7i7mqFY6m2CeMfMSb5y7u%2BhflCaDcJqDSDqRh%2FoHj9ttBtXgkXCPXpXXQ%3D%3D\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-ray: 9e1f91d2b88c97c6-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3683867,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"44be64376ac87a15921c5e0f87bb684e","sha1":"054e87613742db382bdc220e48e4271a15221e5b","sha256":"5affd502cbc68ce9676a6c1cb566ab5e4e471824525e597e966529926c55eac3","sha512":"b6629f0cde2bcb034dbf00623b6f9be74aa7a43c4e1fff38d9fb6e5d64fb0e7b4594c9bb80bc0c6ca6e3d7b0e40aa7ba03c6f15c6d7950012c068e50fb838e44","ssdeep":"24576:O0Y8RKM7TF1VmjQ0BWyTwq/8XSSjAgt+dAUBIB69OnMrUzQg6pHDLP:vwM7TVyJTj0XBdt+dPY1MIzQg4H","tlshash":"042523e7d842d0e3ba985160bbee1acc6d9284cd9a900e7f1e4cdd1920e761dc6987d3","first_seen":"2026-03-25T17:18:05.667891Z","last_seen":"2026-03-25T17:22:20.135947Z","times_seen":2,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":344,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"claimworldlibertyfinancial.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"claimworldlibertyfinancial.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}