Report - www.highlevelpcdefence.com/c/1996399444465844?click

Report Overview

Submitted URL
www.highlevelpcdefence.com/c/1996399444465844?click_id=PB02-0HMQ4Q2GUBMVVHQVL
IP
52.51.27.131
ASN
#16509 AMAZON-02
Submitted
2023-05-15 12:21:43
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
108

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.mydataanalisys.com	unknown	2022-11-03	2022-11-03	2023-05-14	1.7 kB	698 B	52.19.101.114
pushbrands.g2afse.com	unknown	2019-02-26	2022-06-29	2023-05-14	587 B	450 B	34.147.12.223
rewardwinners.com	477722	2021-12-21	2020-10-02	2023-05-14	22 kB	5.5 MB	167.172.111.121
www.highlevelpcdefence.com	unknown	2023-04-10	2023-04-19	2023-05-04	533 B	1.1 kB	52.51.27.131

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator
2023-05-15	medium	rewardwinners.com/js/chunk-vendors.be25b63f.js
2023-05-15	medium	rewardwinners.com/assets/fonts/font.fda9ef28.ttf
2023-05-15	medium	rewardwinners.com/assets/img/brands/paypal.svg
2023-05-15	medium	rewardwinners.com/js/app.ba1998d6.js
2023-05-15	medium	rewardwinners.com/assets/img/brands/zelle.svg
2023-05-15	medium	rewardwinners.com/assets/img/brands/walmart.svg
2023-05-15	medium	rewardwinners.com/assets/img/brands/cashapp.svg
2023-05-15	medium	rewardwinners.com/assets/img/brands/google-pay.svg
2023-05-15	medium	rewardwinners.com/assets/img/brands/exon.svg

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com
2023-05-15	medium	rewardwinners.com

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c	51 B	2023-03-08	2023-05-15
Pretty URL rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c IP 167.172.111.121 ASN #14061 DIGITALOCEAN-ASN Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 14:25:23 Last Seen2023-05-15 14:21:45 Times Seen76 Hash 0ddb67e24570b4d8238311d9fd67f8e6 29cf07bfc2ab66b89c1cf72cb5121cacf481f3b2 78fa1da705224370c3e56985f74db1c11724a107a89e7f7c0d64de8063e1ebad Loading...

	rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c	13 kB	2023-03-08	2023-05-15
Pretty URL rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c IP 167.172.111.121 ASN #14061 DIGITALOCEAN-ASN Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 14:25:23 Last Seen2023-05-15 14:21:45 Times Seen76 Hash 310c2d6c8d605407d6e9e19f583f19d1 054f176324e6e68aa33f83e727b99924634305c1 6003e7c8f6c20568bf5cf94d8481001b54820873ad5c22d69239d5504bce89fe Loading...

	rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c	1.8 kB	2023-03-08	2023-05-15
Pretty URL rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c IP 167.172.111.121 ASN #14061 DIGITALOCEAN-ASN Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 14:25:23 Last Seen2023-05-15 14:21:45 Times Seen76 Hash 934dfc6904c66cfbc5d83e6e001a1498 a2588f0eabc85736ede19806be246b90220d3b87 50a9356dce9f27fa5f71548819d329eb0bf0bd26ed99971fb7834268ae332430 Loading...

		Size	First Seen	Last Seen
	#1 Write - 5531a5834816222280f20d1ef9e95f69	4 B	2023-03-12	2024-01-28
Pretty Observations First Seen2023-03-12 12:17:15 Last Seen2024-01-28 13:22:54 Times Seen21116 Hash 5531a5834816222280f20d1ef9e95f69 445cd2fd3273962bdf09425109a2d09f7170e837 d398b29d3dbbb9bf201d4c7e1c19ff9d43c15fd45a0cec46fbe9885ec3f6e97f Loading...

HTTP Transactions (49)

URL IP Response Size

www.highlevelpcdefence.com/c/1996399444465844?click_id=PB02-0HMQ4Q2GUBMVVHQVL

52.51.27.131

292 B

URL
www.highlevelpcdefence.com/c/1996399444465844?click_id=PB02-0HMQ4Q2GUBMVVHQVL
IP
52.51.27.131:0
ASN
#16509 AMAZON-02

File type
HTML document, ASCII text
Size
292 B (292 bytes)
Hash
9d679592cf1250e01c218a198fe21f7c
5570a24dcda38631000a301994a566e68806ab3d
74d16e7262d752cd13ad05d231815ce380b83a35c1659163aff5d5cadbd26257

HTTP Headers

GET /c/1996399444465844?click_id=PB02-0HMQ4Q2GUBMVVHQVL HTTP/1.1
Host: www.highlevelpcdefence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: nginx
date: Mon, 15 May 2023 12:21:25 GMT
content-type: text/html; charset=utf-8
content-length: 292
location: https://www.mydataanalisys.com/redirect/index?type=script&to=aHR0cHM6Ly93d3cubXlkYXRhYW5hbGlzeXMuY29t&data=aHR0cHM6Ly9wdXNoYnJhbmRzLmcyYWZzZS5jb20vY2xpY2s/b2ZmZXJfaWQ9MjkmcGlkPTkmczE9JnMzPSZzND0mc3ViMT0mdGlkPWdodGt6NjQ2MjIzYzUwMDBmNjBlNg==&action=action_tmp
set-cookie: unique_id=646223c500090cfb; Path=/; Expires=Fri, 14 Jul 2023 12:21:25 GMT; Secure; SameSite=None
unique_id2=646223c500091815; Path=/; Expires=Sun, 13 Aug 2023 12:21:25 GMT; Secure; SameSite=None
impression=; Path=/; Expires=Mon, 15 May 2023 12:21:25 GMT; Secure; SameSite=None
tid=ghtkz646223c5000f60e6; Path=/; Expires=Tue, 18 Apr 2028 12:21:25 GMT; Secure; SameSite=None
X-Firefox-Spdy: h2

www.mydataanalisys.com/redirect/index?type=script&to=aHR0cHM6Ly93d3cubXlkYXRhYW5hbGlzeXMuY29t&data=aHR0cHM6Ly9wdXNoYnJhbmRzLmcyYWZzZS5jb20vY2xpY2s/b2ZmZXJfaWQ9MjkmcGlkPTkmczE9JnMzPSZzND0mc3ViMT0mdGlkPWdodGt6NjQ2MjIzYzUwMDBmNjBlNg==&action=action_tmp

52.19.101.114

267 B

URL
www.mydataanalisys.com/redirect/index?type=script&to=aHR0cHM6Ly93d3cubXlkYXRhYW5hbGlzeXMuY29t&data=aHR0cHM6Ly9wdXNoYnJhbmRzLmcyYWZzZS5jb20vY2xpY2s/b2ZmZXJfaWQ9MjkmcGlkPTkmczE9JnMzPSZzND0mc3ViMT0mdGlkPWdodGt6NjQ2MjIzYzUwMDBmNjBlNg==&action=action_tmp
IP
52.19.101.114:0
ASN
#16509 AMAZON-02

File type
HTML document, ASCII text, with no line terminators
Size
267 B (267 bytes)
Hash
79eeba9d4cc6ca42be29b3135fa1b5fc
6902120448f2e0c6914a76b5545a98db125a02d8
3ec75e301427d6d380111fe0d9a13374efcb42dc227819979e2e43aa9129702c

HTTP Headers

GET /redirect/index?type=script&to=aHR0cHM6Ly93d3cubXlkYXRhYW5hbGlzeXMuY29t&data=aHR0cHM6Ly9wdXNoYnJhbmRzLmcyYWZzZS5jb20vY2xpY2s/b2ZmZXJfaWQ9MjkmcGlkPTkmczE9JnMzPSZzND0mc3ViMT0mdGlkPWdodGt6NjQ2MjIzYzUwMDBmNjBlNg==&action=action_tmp HTTP/1.1
Host: www.mydataanalisys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Mon, 15 May 2023 12:21:25 GMT
content-type: text/html; charset=utf-8
content-length: 267
X-Firefox-Spdy: h2

52.19.101.114

135 B

URL
www.mydataanalisys.com/redirect/index?type=script&to=aHR0cHM6Ly93d3cubXlkYXRhYW5hbGlzeXMuY29t&data=aHR0cHM6Ly9wdXNoYnJhbmRzLmcyYWZzZS5jb20vY2xpY2s/b2ZmZXJfaWQ9MjkmcGlkPTkmczE9JnMzPSZzND0mc3ViMT0mdGlkPWdodGt6NjQ2MjIzYzUwMDBmNjBlNg==&action=action_final
IP
52.19.101.114:0
ASN
#16509 AMAZON-02

File type
HTML document, ASCII text, with no line terminators
Size
135 B (135 bytes)
Hash
f220d5b55dbc8af6da9aff1ae95dfd0a
65f1b1bc5356a75283f1b2ef7731757f319c1a52
e83eb04079d2522c61102d855657a1e7e54193d1ef6b66749f06dfc9ad1b14de

HTTP Headers

GET /redirect/index?type=script&to=aHR0cHM6Ly93d3cubXlkYXRhYW5hbGlzeXMuY29t&data=aHR0cHM6Ly9wdXNoYnJhbmRzLmcyYWZzZS5jb20vY2xpY2s/b2ZmZXJfaWQ9MjkmcGlkPTkmczE9JnMzPSZzND0mc3ViMT0mdGlkPWdodGt6NjQ2MjIzYzUwMDBmNjBlNg==&action=action_final HTTP/1.1
Host: www.mydataanalisys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mydataanalisys.com/redirect/index?type=script&to=aHR0cHM6Ly93d3cubXlkYXRhYW5hbGlzeXMuY29t&data=aHR0cHM6Ly9wdXNoYnJhbmRzLmcyYWZzZS5jb20vY2xpY2s/b2ZmZXJfaWQ9MjkmcGlkPTkmczE9JnMzPSZzND0mc3ViMT0mdGlkPWdodGt6NjQ2MjIzYzUwMDBmNjBlNg==&action=action_tmp
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Mon, 15 May 2023 12:21:25 GMT
content-type: text/html; charset=utf-8
content-length: 135
X-Firefox-Spdy: h2

pushbrands.g2afse.com/click?offer_id=29&pid=9&s1=&s3=&s4=&sub1=&tid=ghtkz646223c5000f60e6

34.147.12.223

302 Found

0 B

URL User Request GET HTTP/2
pushbrands.g2afse.com/click?offer_id=29&pid=9&s1=&s3=&s4=&sub1=&tid=ghtkz646223c5000f60e6
IP
34.147.12.223:443
ASN
#396982 GOOGLE-CLOUD-PLATFORM

Certificate
IssuerDigiCert Inc
Subject*.g2afse.com
Fingerprint05:E8:53:3D:EC:5A:B4:A2:96:51:8B:FA:36:78:78:2D:91:35:41:C3
ValidityThu, 04 Aug 2022 00:00:00 GMT - Mon, 04 Sep 2023 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /click?offer_id=29&pid=9&s1=&s3=&s4=&sub1=&tid=ghtkz646223c5000f60e6 HTTP/1.1
Host: pushbrands.g2afse.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mydataanalisys.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: nginx
date: Mon, 15 May 2023 12:21:26 GMT
content-length: 0
location: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
x-adjust-use-original-forwarded-for: 1
set-cookie: afclick=646223c61551be0001dccf6c; expires=Tue, 14 May 2024 12:21:26 GMT; secure; SameSite=None
afoffers={"29":1684153286}; expires=Tue, 14 May 2024 12:21:26 GMT; secure; SameSite=None
access-control-allow-origin: *
X-Firefox-Spdy: h2

rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c

167.172.111.121

200 OK

24 kB

URL User Request GET HTTP/1.1
rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text
Size
24 kB (24364 bytes)
Hash
6fa7359a6a7cf13382ed1c3521b4546d
0ef3a77e261d2fa592f362a24f43ce6faf5aba34
4f745b4419e555c5f7c50dd19d393248456e9e7de469362a426cf7c629fc01ac

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /?s1=9_&s2=646223c61551be0001dccf6c HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.mydataanalisys.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Content-Type: text/html; charset=utf-8
Content-Length: 24364
ETag: W/"5f2c-DvOnfiYdL6WS82KiT0POb69aujQ"
Date: Mon, 15 May 2023 12:21:26 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/css/app.88835c8e.css

167.172.111.121

200 OK

14 kB

URL GET HTTP/1.1
rewardwinners.com/assets/css/app.88835c8e.css
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
ASCII text
Size
14 kB (13498 bytes)
Hash
5c5529930309a4697770f210044ef38a
9e7c71b9150b11d7bcc8ca3e8d49e00fd97031ae
3f832b6bd74314b44cc7f22eecf1bb0c19b9936cfbe63f5b01bb1515336d6e4c

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /assets/css/app.88835c8e.css HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 31 Jul 2022 14:24:19 GMT
ETag: W/"34ba-18254a4bf4e"
Content-Type: text/css; charset=UTF-8
Content-Length: 13498
Date: Mon, 15 May 2023 12:21:26 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/js/chunk-vendors.be25b63f.js

167.172.111.121

404 Not Found

167 B

URL GET HTTP/1.1
rewardwinners.com/js/chunk-vendors.be25b63f.js
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
167 B (167 bytes)
Hash
3936d71f644fc8472b8a2a0956517f2a
24b085677a172e9f701b1c9bcab9143407738346
fae303bfedb7029eb9a13810e1355c871bbc3a875543a8ca43114097e24c476a

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET /js/chunk-vendors.be25b63f.js HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Content-Security-Policy: default-src 'none'
X-Content-Type-Options: nosniff
Content-Type: text/html; charset=utf-8
Content-Length: 167
Date: Mon, 15 May 2023 12:21:26 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/fonts/font.fda9ef28.ttf

167.172.111.121

404 Not Found

169 B

URL GET HTTP/1.1
rewardwinners.com/assets/fonts/font.fda9ef28.ttf
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
169 B (169 bytes)
Hash
d9a7aaa2284b8807e198a150c7ca7369
522acdd0c0b24e33898b007d1f41bbac193e5022
61df527d8d6fdc2fa8cb679da775b46b59521d73be952a07547d7a4b3d25fecf

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET /assets/fonts/font.fda9ef28.ttf HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/assets/css/app.88835c8e.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Content-Security-Policy: default-src 'none'
X-Content-Type-Options: nosniff
Content-Type: text/html; charset=utf-8
Content-Length: 169
Date: Mon, 15 May 2023 12:21:26 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/brands/paypal.svg

167.172.111.121

200 OK

28 kB

URL GET HTTP/1.1
rewardwinners.com/assets/img/brands/paypal.svg
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (28520), with no line terminators
Size
28 kB (28520 bytes)
Hash
92513e972892e2e05626ba86f842d238
4c54b375c5b0ad3a7a000b76d939f1503001bb65
d879ca7b08d8808c4299f37a4bbc74bdc33903509d7bac9530c653a429a1ba0e

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET /assets/img/brands/paypal.svg HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"6f68-181c32f858f"
Content-Type: image/svg+xml
Content-Length: 28520
Date: Mon, 15 May 2023 12:21:26 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/bg-rewardwinners.jpg

167.172.111.121

200 OK

65 kB

URL GET HTTP/1.1
rewardwinners.com/assets/img/bg-rewardwinners.jpg
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x1080, components 3\012- data
Size
65 kB (64865 bytes)
Hash
6c46063d2cd8aa82cee6ff6a1ab44221
defcc990bf283c8812a1886644cb0323e7c322f2
508a4d715504c6b7e0fa672d4bd13756d46dcc457bd4c14ad800c5302bb04a0a

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /assets/img/bg-rewardwinners.jpg HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Mon, 13 Jun 2022 12:25:02 GMT
ETag: W/"fd61-1815d064c98"
Content-Type: image/jpeg
Content-Length: 64865
Date: Mon, 15 May 2023 12:21:26 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/js/app.ba1998d6.js

167.172.111.121

404 Not Found

157 B

URL GET HTTP/1.1
rewardwinners.com/js/app.ba1998d6.js
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
157 B (157 bytes)
Hash
b0f8e6746eaab670bc200d88f2b074e1
5106ee70f95489e5b82e6dcbe44b15565ee3ed22
85ff68edc7b376f105557a2635ea26b966095c578ad514a2ccc0897b55fc5ca5

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET /js/app.ba1998d6.js HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Content-Security-Policy: default-src 'none'
X-Content-Type-Options: nosniff
Content-Type: text/html; charset=utf-8
Content-Length: 157
Date: Mon, 15 May 2023 12:21:26 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/boxes_paypal.png

167.172.111.121

404 Not Found

175 B

URL GET HTTP/1.1
rewardwinners.com/assets/img/showcase/boxes_paypal.png
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
175 B (175 bytes)
Hash
529c2531d32aefe8d90c9ef5dd7d1405
ccbc0dab025d4d281467d9a0bd6e0b86f95cae74
35909ac5cefd9631a47e7af343fbafc6fd7295285d3aade39ef388a86c92961d

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /assets/img/showcase/boxes_paypal.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Content-Security-Policy: default-src 'none'
X-Content-Type-Options: nosniff
Content-Type: text/html; charset=utf-8
Content-Length: 175
Date: Mon, 15 May 2023 12:21:26 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/brands/zelle.svg

167.172.111.121

200 OK

9.2 kB

URL GET HTTP/1.1
rewardwinners.com/assets/img/brands/zelle.svg
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (960)
Size
9.2 kB (9189 bytes)
Hash
e4982fabee8f85c9ab0094de5760bf97
45218a9160089cd0a75a12e61c307e16a0e82534
f237436d1fd78f8b3c57eac1a6324d3e77835a4043edb5252482e88c4e833571

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET /assets/img/brands/zelle.svg HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"23e5-181c32f8593"
Content-Type: image/svg+xml
Content-Length: 9189
Date: Mon, 15 May 2023 12:21:26 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/brands/walmart.svg

167.172.111.121

200 OK

1.3 kB

URL GET HTTP/1.1
rewardwinners.com/assets/img/brands/walmart.svg
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1281), with no line terminators
Size
1.3 kB (1281 bytes)
Hash
bc11f3678cf2ff707defa18ad9297635
fb755cd81fd836a85f8032183aab9d744c09bd48
51cc15d6c651f2ab5776cd18f2a28f5ed67d86d00edff12f5d43fd70a2aef971

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET /assets/img/brands/walmart.svg HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"501-181c32f858f"
Content-Type: image/svg+xml
Content-Length: 1281
Date: Mon, 15 May 2023 12:21:26 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/brands/cashapp.svg

167.172.111.121

200 OK

37 kB

URL GET HTTP/1.1
rewardwinners.com/assets/img/brands/cashapp.svg
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (37225), with no line terminators
Size
37 kB (37225 bytes)
Hash
ab3502c7564bc609d4cab583c29102a9
9af32ff287951c118f883f2025e0417ab4def863
eae5c7bd8c1170658211a0527ffc58f50eda598151c63f66afb7bda354ee5f74

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET /assets/img/brands/cashapp.svg HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"9169-181c32f858f"
Content-Type: image/svg+xml
Content-Length: 37225
Date: Mon, 15 May 2023 12:21:26 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/cashapp/queen.png

167.172.111.121

200 OK

115 kB

URL GET HTTP/1.1
rewardwinners.com/assets/img/showcase/cashapp/queen.png
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
PNG image data, 2880 x 1248, 8-bit colormap, non-interlaced\012- data
Size
115 kB (115320 bytes)
Hash
6fdc1ce56af238756a6de387ddcab6c6
e450ad983b5527f6723c04f80f3b8302b603dc14
661b30bc93a86048744baf895a8eb11246c0a784a0d2bdea27b4931ba8a3148e

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /assets/img/showcase/cashapp/queen.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"1c278-181c32f859f"
Content-Type: image/png
Content-Length: 115320
Date: Mon, 15 May 2023 12:21:26 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/zelle/boxes.png

167.172.111.121

200 OK

95 kB

URL GET HTTP/1.1
rewardwinners.com/assets/img/showcase/zelle/boxes.png
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
PNG image data, 2880 x 1578, 8-bit colormap, non-interlaced\012- data
Size
95 kB (95350 bytes)
Hash
10f7fa34801df7a2765a1437eb7ea329
e5201292701c5403c05e642e6fe6564d7638efb2
4bb876b757715ad99a7659cfa1ac37e3417ec67a21568fba92fce24477fea6c5

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /assets/img/showcase/zelle/boxes.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"17476-181c32f85e3"
Content-Type: image/png
Content-Length: 95350
Date: Mon, 15 May 2023 12:21:26 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/cashapp/boxes.png

167.172.111.121

200 OK

80 kB

URL GET HTTP/1.1
rewardwinners.com/assets/img/showcase/cashapp/boxes.png
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
PNG image data, 2878 x 1450, 8-bit colormap, non-interlaced\012- data
Size
80 kB (79819 bytes)
Hash
6c7b351fb75ccba45db0ebeabd247a6c
74a6c505db18700326f265e0e2f67b15da9bac74
36bfdfc7e54820b6b4b70bcdc2a8d7c023e65b013c9c6d7b095c4c01c1b84a4c

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /assets/img/showcase/cashapp/boxes.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"137cb-181c32f8593"
Content-Type: image/png
Content-Length: 79819
Date: Mon, 15 May 2023 12:21:26 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/walmart/cups.png

167.172.111.121

200 OK

103 kB

URL GET HTTP/1.1
rewardwinners.com/assets/img/showcase/walmart/cups.png
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
PNG image data, 2878 x 1518, 8-bit colormap, non-interlaced\012- data
Size
103 kB (102586 bytes)
Hash
a2914729d7d294ff272b954a8b1af554
2144b9b159a240deb42459fc090584867d4e9ce4
5f05c51f229a6a3270a5f86dff4a4c95257d4ffeefc781999e64f4272667cba6

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /assets/img/showcase/walmart/cups.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"190ba-181c32f85d7"
Content-Type: image/png
Content-Length: 102586
Date: Mon, 15 May 2023 12:21:26 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/google_pay/queen.png

167.172.111.121

200 OK

126 kB

URL GET HTTP/1.1
rewardwinners.com/assets/img/showcase/google_pay/queen.png
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
PNG image data, 2880 x 1388, 8-bit colormap, non-interlaced\012- data
Size
126 kB (125619 bytes)
Hash
72f1df22f8c836e268de313d54f886ce
fe21685235c1d47451988e0c6e440781ceab615b
47c44f776f14a077b8ac7652cc56ac72ba4304c8ca400a35d51e7c048b18417f

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /assets/img/showcase/google_pay/queen.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"1eab3-181c32f85bf"
Content-Type: image/png
Content-Length: 125619
Date: Mon, 15 May 2023 12:21:26 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/cashapp/cups.png

167.172.111.121

200 OK

89 kB

URL GET HTTP/1.1
rewardwinners.com/assets/img/showcase/cashapp/cups.png
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
PNG image data, 2880 x 1338, 8-bit colormap, non-interlaced\012- data
Size
89 kB (88905 bytes)
Hash
ebb7cf2f39bc595a9e635f813dd54ee2
8ab85b438262a8fe9e9a398c4b56428250b11ea1
84a5b9f2bc0da7f364d91c2ccc938a1088850e07e7b85b4ae90b1e4d2295eb4b

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /assets/img/showcase/cashapp/cups.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"15b49-181c32f8597"
Content-Type: image/png
Content-Length: 88905
Date: Mon, 15 May 2023 12:21:27 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/google_pay/boxes.png

167.172.111.121

200 OK

96 kB

URL GET HTTP/1.1
rewardwinners.com/assets/img/showcase/google_pay/boxes.png
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
PNG image data, 2878 x 1590, 8-bit colormap, non-interlaced\012- data
Size
96 kB (96525 bytes)
Hash
ccdf8e3da4ab9989e868974a67ba0420
a05f5b8bd2ae3428c769a67d9c937ab030d1e841
5056fa7494330255bb501b5221069e631ed6f220eee4619b61c312a8521c3da8

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /assets/img/showcase/google_pay/boxes.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"1790d-181c32f85b3"
Content-Type: image/png
Content-Length: 96525
Date: Mon, 15 May 2023 12:21:27 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/zelle/queen.png

167.172.111.121

200 OK

121 kB

URL GET HTTP/1.1
rewardwinners.com/assets/img/showcase/zelle/queen.png
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
PNG image data, 2878 x 1414, 8-bit colormap, non-interlaced\012- data
Size
121 kB (120658 bytes)
Hash
ba5956f070adf43322f086b6901cb1f3
2722d9ba11c8fd68fc8306c8b3b834c9d34669ce
f8c18a7932f4f78dc8ccf067b7e2c7692ab3fe8903eb3a83a704b198ba414792

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /assets/img/showcase/zelle/queen.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"1d752-181c32f85ef"
Content-Type: image/png
Content-Length: 120658
Date: Mon, 15 May 2023 12:21:26 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/gas/dress.png

167.172.111.121

200 OK

385 kB

URL GET HTTP/1.1
rewardwinners.com/assets/img/showcase/gas/dress.png
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
PNG image data, 2874 x 1574, 8-bit colormap, non-interlaced\012- data
Size
385 kB (385428 bytes)
Hash
a4e590e2901e4bf4075f38dd87f8024e
7ae231ced91451cf52552e094cdb28d0f0ddf323
a56352da8f0c9d099cd9ab400827d549136ae09060336dc7d11e47381999d6bc

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /assets/img/showcase/gas/dress.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"5e194-181c32f85ab"
Content-Type: image/png
Content-Length: 385428
Date: Mon, 15 May 2023 12:21:27 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/paypal/boxes.png

167.172.111.121

200 OK

89 kB

URL GET HTTP/1.1
rewardwinners.com/assets/img/showcase/paypal/boxes.png
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
PNG image data, 2878 x 1590, 8-bit colormap, non-interlaced\012- data
Size
89 kB (88908 bytes)
Hash
683db024cb30805e42501500bf10aef0
a340328944f478a520b51e6f07d041a4be1eb394
0a1a708f8ddd835aa9831dd4924e2a3a81e6716d2a70d836c73765addf0f2b1c

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /assets/img/showcase/paypal/boxes.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"15b4c-181c32f85c7"
Content-Type: image/png
Content-Length: 88908
Date: Mon, 15 May 2023 12:21:27 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/gas/spinner.png

167.172.111.121

200 OK

204 kB

URL GET HTTP/1.1
rewardwinners.com/assets/img/showcase/gas/spinner.png
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
PNG image data, 2878 x 1580, 8-bit colormap, non-interlaced\012- data
Size
204 kB (203506 bytes)
Hash
ee93fb1110cbd48fb025bce830a7a4fc
8f91ed3a83aa9be17e4ee07d857fcbc74a33cda2
ca216631854a0dec97c02229351e9a30b905943b16614da42dac4253fe1495ad

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /assets/img/showcase/gas/spinner.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"31af2-181c32f85b3"
Content-Type: image/png
Content-Length: 203506
Date: Mon, 15 May 2023 12:21:27 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/gas/queen.png

167.172.111.121

200 OK

124 kB

URL GET HTTP/1.1
rewardwinners.com/assets/img/showcase/gas/queen.png
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
PNG image data, 2878 x 1412, 8-bit colormap, non-interlaced\012- data
Size
124 kB (124520 bytes)
Hash
f19ae5105b207ed9202171e9b10c461a
78dd8c249dc2fdedf4b84381d78c5829cb959edb
1369dec5a6d5b2f747f697835d4c6a9613699cde083e836c070246e12c10b49b

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /assets/img/showcase/gas/queen.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"1e668-181c32f85af"
Content-Type: image/png
Content-Length: 124520
Date: Mon, 15 May 2023 12:21:27 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/cashapp/spinner.png

167.172.111.121

200 OK

139 kB

URL GET HTTP/1.1
rewardwinners.com/assets/img/showcase/cashapp/spinner.png
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
PNG image data, 2880 x 1518, 8-bit colormap, non-interlaced\012- data
Size
139 kB (139284 bytes)
Hash
379217d9772364a802bc09fbf644c41c
8589b281217b2e561d06d98270c3b24505a2c12f
edef162fdf00360271eb09171e510e3427c9bed5bd0c7fa183f70b7818716cf4

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /assets/img/showcase/cashapp/spinner.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"22014-181c32f85a3"
Content-Type: image/png
Content-Length: 139284
Date: Mon, 15 May 2023 12:21:27 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/gas/boxes.png

167.172.111.121

200 OK

94 kB

URL GET HTTP/1.1
rewardwinners.com/assets/img/showcase/gas/boxes.png
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
PNG image data, 2880 x 1578, 8-bit colormap, non-interlaced\012- data
Size
94 kB (93531 bytes)
Hash
87449bdc8ba33090b9d2299593ec34f3
37fd74b810a9a40b644f5bacc1c74aaf30cfc26d
09f306db9c341f938af10d3a5fbdc91cb8e85341cb7280cc5aab2d3afbff3f3a

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /assets/img/showcase/gas/boxes.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"16d5b-181c32f85a3"
Content-Type: image/png
Content-Length: 93531
Date: Mon, 15 May 2023 12:21:27 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/google_pay/dress.png

167.172.111.121

200 OK

430 kB

URL GET HTTP/1.1
rewardwinners.com/assets/img/showcase/google_pay/dress.png
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
PNG image data, 2880 x 1600, 8-bit colormap, non-interlaced\012- data
Size
430 kB (429556 bytes)
Hash
59559bb9475a7815b11bf8612172afcb
0129f47f809e5cdeecc8ebe7ef6b9a72fd9f2e25
975a04cda24b71f1dcfa3181781eed082bbf85e8407e6f2e83502be389cc3ebb

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /assets/img/showcase/google_pay/dress.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"68df4-181c32f85bf"
Content-Type: image/png
Content-Length: 429556
Date: Mon, 15 May 2023 12:21:27 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/walmart/spinner.png

167.172.111.121

200 OK

152 kB

URL GET HTTP/1.1
rewardwinners.com/assets/img/showcase/walmart/spinner.png
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
PNG image data, 2878 x 1574, 8-bit colormap, non-interlaced\012- data
Size
152 kB (151452 bytes)
Hash
bd41964392e2647a1efff2d91243d91d
e0c425a291133b6ef58ab260d2bedfaad9eda828
61ee158e3ba6582aaa6dbd410ba1d5f4364b2f1d5c62f09d2c59569508a23ff9

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /assets/img/showcase/walmart/spinner.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Wed, 13 Jul 2022 08:44:18 GMT
ETag: W/"24f9c-181f6bafb96"
Content-Type: image/png
Content-Length: 151452
Date: Mon, 15 May 2023 12:21:27 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/google_pay/cups.png

167.172.111.121

200 OK

100 kB

URL GET HTTP/1.1
rewardwinners.com/assets/img/showcase/google_pay/cups.png
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
PNG image data, 2880 x 1328, 8-bit colormap, non-interlaced\012- data
Size
100 kB (99940 bytes)
Hash
bfa35a22084a7a8026f3d36e8ace882a
90451d54413bc4de68529f7c7cdf6a6805b0abc5
0a332e82dffd4d7ed10950eb00601c311489d3df95ec242d72e6242c9ad9941a

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /assets/img/showcase/google_pay/cups.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"18664-181c32f85b7"
Content-Type: image/png
Content-Length: 99940
Date: Mon, 15 May 2023 12:21:27 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/paypal/queen.png

167.172.111.121

200 OK

122 kB

URL GET HTTP/1.1
rewardwinners.com/assets/img/showcase/paypal/queen.png
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
PNG image data, 2880 x 1410, 8-bit colormap, non-interlaced\012- data
Size
122 kB (122209 bytes)
Hash
9c54076b97fea2b5d9e431c28283327b
96e460534e09e5c429494fe45b789666f1ef6c41
1690299522876e5a161d003d4e7f6a4a1ee726ce8a03cae363b7fc09c121d6be

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /assets/img/showcase/paypal/queen.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"1dd61-181c32f85cf"
Content-Type: image/png
Content-Length: 122209
Date: Mon, 15 May 2023 12:21:27 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/zelle/cups.png

167.172.111.121

200 OK

100 kB

URL GET HTTP/1.1
rewardwinners.com/assets/img/showcase/zelle/cups.png
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
PNG image data, 2878 x 1470, 8-bit colormap, non-interlaced\012- data
Size
100 kB (99463 bytes)
Hash
5ae885804f17b3b979d7c497f3caad4a
7b4372666f19c5346ba8572a261019ee3600fb7a
c7b8c10d6dd5b434de2fc377327fbe5ed6b69a74552653ce9c48546e7a668631

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /assets/img/showcase/zelle/cups.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"18487-181c32f85e7"
Content-Type: image/png
Content-Length: 99463
Date: Mon, 15 May 2023 12:21:27 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/paypal/dress.png

167.172.111.121

200 OK

383 kB

URL GET HTTP/1.1
rewardwinners.com/assets/img/showcase/paypal/dress.png
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
PNG image data, 2880 x 1466, 8-bit colormap, non-interlaced\012- data
Size
383 kB (383189 bytes)
Hash
b3242e37555bb0c7a6dc00ffa6856f05
be2608f02621e73c9f99736e938afdbd74bc8a5b
9239556549514e4c2082cbba95f60d92778d3ebb132256226df332a47686ee04

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /assets/img/showcase/paypal/dress.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"5d8d5-181c32f85cf"
Content-Type: image/png
Content-Length: 383189
Date: Mon, 15 May 2023 12:21:27 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/cashapp/dress.png

167.172.111.121

200 OK

432 kB

URL GET HTTP/1.1
rewardwinners.com/assets/img/showcase/cashapp/dress.png
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
PNG image data, 2880 x 1590, 8-bit colormap, non-interlaced\012- data
Size
432 kB (431749 bytes)
Hash
eb35f535d8fbb534fffd42e6654978bf
1afb547b53e6508db5dd2debce5a1de81e921ac1
51790e496ffce870c298c72f6852855c7c7849f7df1d3253b04d25ea91609ce3

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /assets/img/showcase/cashapp/dress.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"69685-181c32f859b"
Content-Type: image/png
Content-Length: 431749
Date: Mon, 15 May 2023 12:21:27 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/google_pay/spinner.png

167.172.111.121

200 OK

173 kB

URL GET HTTP/1.1
rewardwinners.com/assets/img/showcase/google_pay/spinner.png
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
PNG image data, 2880 x 1592, 8-bit colormap, non-interlaced\012- data
Size
173 kB (173129 bytes)
Hash
d50db72acb5bbc248c13bc34895ec8e4
2160c6e91cb6d701b30b7743e905a10856fea0af
7adbd7594b1d1f21427e06c398ed63bdaa99571714a9cf4d34be9a077613360b

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /assets/img/showcase/google_pay/spinner.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"2a449-181c32f85c3"
Content-Type: image/png
Content-Length: 173129
Date: Mon, 15 May 2023 12:21:27 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/zelle/dress.png

167.172.111.121

200 OK

415 kB

URL GET HTTP/1.1
rewardwinners.com/assets/img/showcase/zelle/dress.png
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
PNG image data, 2880 x 1578, 8-bit colormap, non-interlaced\012- data
Size
415 kB (415057 bytes)
Hash
3d601e32b8c5be36d3d96a948346e44d
05fbe1e721305a761abc137ee5db467ac1225231
12321619fdc59e8ad0aba4f3be54ac260f906753255b5ae091cacf4a5b00484a

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /assets/img/showcase/zelle/dress.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"65551-181c32f85ef"
Content-Type: image/png
Content-Length: 415057
Date: Mon, 15 May 2023 12:21:27 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/zelle/spinner.png

167.172.111.121

200 OK

148 kB

URL GET HTTP/1.1
rewardwinners.com/assets/img/showcase/zelle/spinner.png
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
PNG image data, 2878 x 1584, 8-bit colormap, non-interlaced\012- data
Size
148 kB (148404 bytes)
Hash
b640b06650d374f0683e2f540466d5ec
8198afe78ef4ac6a791c66ad812471c51c384005
55c2db7b0c60b50a4d96ac213b80dde0d93cad41649e72183c4e34e995cef7f6

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /assets/img/showcase/zelle/spinner.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"243b4-181c32f85f3"
Content-Type: image/png
Content-Length: 148404
Date: Mon, 15 May 2023 12:21:27 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/paypal/spinner.png

167.172.111.121

200 OK

170 kB

URL GET HTTP/1.1
rewardwinners.com/assets/img/showcase/paypal/spinner.png
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
PNG image data, 2880 x 1582, 8-bit colormap, non-interlaced\012- data
Size
170 kB (169666 bytes)
Hash
84f40b4163cac49140edf8f47fec1b76
3e6e5f16bbf2f205d90ca7d96bca83063f641f5e
bbaae5bf63ddded780164e7ce4979327b9f8c7f2e63d6739b098571ad8b70a69

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /assets/img/showcase/paypal/spinner.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"296c2-181c32f85d3"
Content-Type: image/png
Content-Length: 169666
Date: Mon, 15 May 2023 12:21:27 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/walmart/queen.png

167.172.111.121

200 OK

124 kB

URL GET HTTP/1.1
rewardwinners.com/assets/img/showcase/walmart/queen.png
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
PNG image data, 2878 x 1414, 8-bit colormap, non-interlaced\012- data
Size
124 kB (123792 bytes)
Hash
fd6876f4ff74e248247a38dd1d179528
55c036b5133734cd81ae1795cc6c7f03cf014344
8e16bd1c9937ba7e75bcccdb477645b095dbf7a6362aff1f382799ef7c703ec1

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /assets/img/showcase/walmart/queen.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"1e390-181c32f85df"
Content-Type: image/png
Content-Length: 123792
Date: Mon, 15 May 2023 12:21:27 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/gas/cups.png

167.172.111.121

200 OK

108 kB

URL GET HTTP/1.1
rewardwinners.com/assets/img/showcase/gas/cups.png
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
PNG image data, 2880 x 1462, 8-bit colormap, non-interlaced\012- data
Size
108 kB (108273 bytes)
Hash
a203b399403b97d24f6338069437430b
132a300659a760f95274f8685bfdefc634e1bfdf
eb19bb5c513f7fe576145adade77e13b8ab5220a821ec45b0a5792f95eae2ec7

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /assets/img/showcase/gas/cups.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"1a6f1-181c32f85a7"
Content-Type: image/png
Content-Length: 108273
Date: Mon, 15 May 2023 12:21:27 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/brands/google-pay.svg

167.172.111.121

200 OK

2.0 kB

URL GET HTTP/1.1
rewardwinners.com/assets/img/brands/google-pay.svg
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2017), with no line terminators
Size
2.0 kB (2017 bytes)
Hash
06d5004e90de6dcbb31c0766edd8b4f7
94e12d0b7e7eb30155f9fba0423ef4fe409d1f29
149868ad0f7e6fb94d2bc647fef93f61265ac88b3c7e7450d68c4324a6902508

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET /assets/img/brands/google-pay.svg HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"7e1-181c32f858f"
Content-Type: image/svg+xml
Content-Length: 2017
Date: Mon, 15 May 2023 12:21:27 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/paypal/cups.png

167.172.111.121

200 OK

93 kB

URL GET HTTP/1.1
rewardwinners.com/assets/img/showcase/paypal/cups.png
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
PNG image data, 2878 x 1342, 8-bit colormap, non-interlaced\012- data
Size
93 kB (93224 bytes)
Hash
94ffd2bb908f5206c88237778c1d4267
54c657b1a6081d62f546c15bb3410b989c543367
1ee7ec1b85b74175ec3c8ac38df2c85587731a53388f07b2bfc867ee487b43fc

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /assets/img/showcase/paypal/cups.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"16c28-181c32f85c7"
Content-Type: image/png
Content-Length: 93224
Date: Mon, 15 May 2023 12:21:27 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/brands/exon.svg

167.172.111.121

200 OK

1.2 kB

URL GET HTTP/1.1
rewardwinners.com/assets/img/brands/exon.svg
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1151)
Size
1.2 kB (1152 bytes)
Hash
d0627b5aeec28a22ecb1a7085fc2894f
8e2778275f04f2de488c5e84bcd3904816ee52df
9ed1c51adf70b8626bec5d4739e870b95967c67169a9c8ed25a7e50554c18de9

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET /assets/img/brands/exon.svg HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"480-181c32f858f"
Content-Type: image/svg+xml
Content-Length: 1152
Date: Mon, 15 May 2023 12:21:27 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/walmart/boxes.png

167.172.111.121

200 OK

93 kB

URL GET HTTP/1.1
rewardwinners.com/assets/img/showcase/walmart/boxes.png
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
PNG image data, 2874 x 1584, 8-bit colormap, non-interlaced\012- data
Size
93 kB (93132 bytes)
Hash
961db9b4993b823251d6049019095ba6
c5e6c933d66839c1ecf58d4d030a7580e8b7aefe
1cddf42ace4b1cf4df2a38f07a51c643fa634b4cb944433cb80ad8628575d7ed

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /assets/img/showcase/walmart/boxes.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"16bcc-181c32f85d7"
Content-Type: image/png
Content-Length: 93132
Date: Mon, 15 May 2023 12:21:27 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/walmart/dress.png

167.172.111.121

200 OK

421 kB

URL GET HTTP/1.1
rewardwinners.com/assets/img/showcase/walmart/dress.png
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
PNG image data, 2880 x 1584, 8-bit colormap, non-interlaced\012- data
Size
421 kB (421221 bytes)
Hash
9b10d1a2e72b18ea995f746525a2b513
b918d46573b890eb5decf48408a49c42b636d263
2911767bb00169f62ae9ab50b72ffda4daa4d33ceebc16deec740e81940faeb6

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /assets/img/showcase/walmart/dress.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"66d65-181c32f85df"
Content-Type: image/png
Content-Length: 421221
Date: Mon, 15 May 2023 12:21:27 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/apple-touch-icon.png

167.172.111.121

400 Bad Request

11 B

URL GET HTTP/1.1
rewardwinners.com/apple-touch-icon.png
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
ASCII text, with no line terminators
Size
11 B (11 bytes)
Hash
825644f747baab2c00e420dbbc39e4b3
10588307553e766ab3c7d328d948dc6754893cef
7c41b898c5da0cfa4aa049b65ef50248bce9a72d24bef4c723786431921b75aa

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /apple-touch-icon.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 400 Bad Request
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Content-Type: text/html; charset=utf-8
Content-Length: 11
ETag: W/"b-EFiDB1U+dmqzx9Mo2UjcZ1SJPO8"
Date: Mon, 15 May 2023 12:21:27 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/favicon-16x16.png

167.172.111.121

400 Bad Request

11 B

URL GET HTTP/1.1
rewardwinners.com/favicon-16x16.png
IP
167.172.111.121:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Certificate
IssuerLet's Encrypt
Subjectrewardwinners.com
FingerprintB7:B3:B2:99:76:1A:BE:C6:57:C5:1B:04:AC:AE:F6:5C:D8:5C:2B:F1
ValiditySun, 19 Mar 2023 08:25:01 GMT - Sat, 17 Jun 2023 08:25:00 GMT

File type
ASCII text, with no line terminators
Size
11 B (11 bytes)
Hash
825644f747baab2c00e420dbbc39e4b3
10588307553e766ab3c7d328d948dc6754893cef
7c41b898c5da0cfa4aa049b65ef50248bce9a72d24bef4c723786431921b75aa

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /favicon-16x16.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=646223c61551be0001dccf6c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 400 Bad Request
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Content-Type: text/html; charset=utf-8
Content-Length: 11
ETag: W/"b-EFiDB1U+dmqzx9Mo2UjcZ1SJPO8"
Date: Mon, 15 May 2023 12:21:27 GMT
Connection: keep-alive
Keep-Alive: timeout=5

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (49)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1