{"report_id":"0b1cbf44-fc12-440b-8f7a-02637fbb173e","version":6,"status":"done","tags":[],"date":"2026-04-02T16:04:14Z","url":{"schema":"http","addr":"rewards-usdai.org","fqdn":"rewards-usdai.org","domain":"rewards-usdai.org","tld":"org"},"ip":{"addr":"172.67.192.233","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rewards-usdai.org/","fqdn":"rewards-usdai.org","domain":"rewards-usdai.org","tld":"org"},"title":"USD AI","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T00:51:56.928895Z","times_seen":17878665,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rewards-usdai.org","fqdn":"rewards-usdai.org","domain":"rewards-usdai.org","tld":"org"},"ip":{"addr":"172.67.192.233","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-07T16:04:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"rewards-usdai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"rewards-usdai.org","ip":{"addr":"172.67.192.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-26","domain_rank":0,"first_seen":"2026-04-02T16:04:14.996207Z","last_seen":"2026-04-02T16:04:14.996207Z","alert_count":10,"request_count":10,"received_data":12390188,"sent_data":4764,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rewards-usdai.org/fonts/2d69bb84375270e9.ttf","fqdn":"rewards-usdai.org","domain":"rewards-usdai.org","tld":"org"},"ip":{"addr":"172.67.192.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rewards-usdai.org/","date":"2026-04-02T16:03:50.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-usdai.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 22:49:10 GMT","end":"Wed, 24 Jun 2026 22:49:09 GMT"},"fingerprint":{"sha1":"1B:C1:58:E2:DF:E1:91:32:FB:84:4F:BC:49:4A:D9:25:3D:3D:95:30","sha256":"D4:9A:A4:49:3E:9F:5E:62:9A:8E:98:4B:C0:87:0D:3F:5E:94:E2:C5:F5:9D:4E:F5:3D:AA:F0:67:A9:38:E8:F3"}}},"request":{"raw":"GET /fonts/2d69bb84375270e9.ttf HTTP/1.1\r\nHost: rewards-usdai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-usdai.org/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 16:03:50 GMT\r\ncontent-type: font/ttf\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZzqQg4a8FPfwWnleQJ311xtjxfwZ6GAR10Pq%2B2O5z%2BFy9LfuJ0ho0qL0R8QzqiNJZKwRVhbITxT7SmxqO0gDmTD%2Bb%2Bug0gWn9pwfeOmWok72VFrj0eIoZpZ93sMV19iPW9dm%2BQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 29 Mar 2026 10:33:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"4c9ec-64e27430ed300\"\r\ncf-ray: 9e6110dfae0256a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":313836,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, digitally signed, 20 tables, 1st \"DSIG\", 31 names, Macintosh, Copyright � 2021 by Pangram Pangram. All rights reserved.PP EikoRegular2.000;UKWN;PPEiko-Regular","md5":"200b0d54e52f54b353f8094a962fe341","sha1":"3052b39aa4bee06d43f078f91d464fce1851c697","sha256":"d9bad5bfc894bbdce792808c2899794a29ea26bea9c3d2ae05283e9019a5913a","sha512":"6dcba3f5b4c353a69b01a4b5f2e5c94930af5ba0d11cabf96baae08b404ed178e2b27625b1c13bd5af10d0587ec863c2f49fc5868c57e555dd54dbf45b7a74e1","ssdeep":"6144:2PsrlAtd85dS/823xYdJuXdBFf35TARenkn1C1iCtFyUDq:2P6aO5g3xIEdrpTARenk1zCtFyUq","tlshash":"a7649e07f743a70eee161f356172832286def4269b77c6faa44b7aa5f8ca0d00e451c1","first_seen":"2025-08-21T06:37:24.160641Z","last_seen":"2026-07-26T09:24:31.142933Z","times_seen":28,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":74,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"rewards-usdai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-usdai.org/fonts/2084dacdb48f225d.woff2","fqdn":"rewards-usdai.org","domain":"rewards-usdai.org","tld":"org"},"ip":{"addr":"172.67.192.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rewards-usdai.org/","date":"2026-04-02T16:03:50.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-usdai.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 22:49:10 GMT","end":"Wed, 24 Jun 2026 22:49:09 GMT"},"fingerprint":{"sha1":"1B:C1:58:E2:DF:E1:91:32:FB:84:4F:BC:49:4A:D9:25:3D:3D:95:30","sha256":"D4:9A:A4:49:3E:9F:5E:62:9A:8E:98:4B:C0:87:0D:3F:5E:94:E2:C5:F5:9D:4E:F5:3D:AA:F0:67:A9:38:E8:F3"}}},"request":{"raw":"GET /fonts/2084dacdb48f225d.woff2 HTTP/1.1\r\nHost: rewards-usdai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-usdai.org/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 16:03:50 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35356\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 29 Mar 2026 10:33:16 GMT\r\netag: \"8a1c-64e27430ed300\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Weu39DxxCongFYmuTE05%2FVWngwsHSQaQydw0Ubd28lHHqklXuFFfBXn%2BOOkJGe1KkcxPPMYQZk3VLtIWq6ZxI8XYS7RG0RHU4IS%2BiIbtMQTnQBEshxj4Iu9T9yBgwqZt3fZ9IA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6110dfae0356a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35356,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 35356, version 1.0","md5":"c38e88a280b5cb35933878a9bfbd355f","sha1":"e9b9e6e18b6a62266435b7a0714e823067833802","sha256":"4f897cb42839066c9439967462b9f8e7cc21a32cf0a3277f576c9f5529e17637","sha512":"3dbc933d3afbf6eee1e84a69b070c2cb8d66b1573c6e1bebdd28dfaf8b6bd8723a82b9eba733bed19dff1803396b7942828705f249aeb76a7ffb2bc33d4dae62","ssdeep":"768:Y0UYyk6i+yx/+TpDRkVo3jflJjHy6TUGrc6GhG5XVbLG0zyRM:Y0FWtiVyflJjHy+5rc6dmeMM","tlshash":"90f2f28a5b721890d8c2883bb94926d61fc040d938c26f382f63d5dbf705517b577b91","first_seen":"2025-08-21T06:37:24.140303Z","last_seen":"2026-07-07T07:20:36.246974Z","times_seen":26,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"rewards-usdai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-usdai.org/fonts/d0778b759c9d1db6.woff2","fqdn":"rewards-usdai.org","domain":"rewards-usdai.org","tld":"org"},"ip":{"addr":"172.67.192.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rewards-usdai.org/","date":"2026-04-02T16:03:50.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-usdai.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 22:49:10 GMT","end":"Wed, 24 Jun 2026 22:49:09 GMT"},"fingerprint":{"sha1":"1B:C1:58:E2:DF:E1:91:32:FB:84:4F:BC:49:4A:D9:25:3D:3D:95:30","sha256":"D4:9A:A4:49:3E:9F:5E:62:9A:8E:98:4B:C0:87:0D:3F:5E:94:E2:C5:F5:9D:4E:F5:3D:AA:F0:67:A9:38:E8:F3"}}},"request":{"raw":"GET /fonts/d0778b759c9d1db6.woff2 HTTP/1.1\r\nHost: rewards-usdai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-usdai.org/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 16:03:50 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 34728\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 29 Mar 2026 10:33:18 GMT\r\netag: \"87a8-64e27432d5780\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DcvK0gZqZb50BQdxlsgH0o9q0VZCfTMs9Y9SVNeNxjxylVaB8avM4CVfCDb0iJppJ1%2F1LfrvlGuUcFJILg34tEK8VBHPmMtY72asPMhTAbqQFH2WeiflJGCEsNn6FIlLUrLFwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6110dfae0456a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34728,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 34728, version 1.0","md5":"9764f4ffa49cefbda5c37334f7620afe","sha1":"59a0bc923e961a52944eaa1bf468fb57af3bc8bc","sha256":"2d7ba0869183039d5e50e88f21669648036f793373c4ee8430b5a6f024ea378a","sha512":"a6ddbc638a4a5f75a1ec7a88fdaf316a72c24d794bf640be2d08127a0d7369e4b16d0048d83a13d4e71a95b4a3698b2cddfe4db74bf013daf14e0c71f182cbbf","ssdeep":"768:sHpWFw2udcVpWVUR3qAbKj91o4iCuwwI8snT6ikwNboBQ0nwbGyCAZ:OoF4dciVetbe1o4iEp8c/kCboKZCdAZ","tlshash":"7cf2e14a49ec9c7d26f886f5024f6b2162a5cd6a7d2ef57940ea0f328f4a9c50e44c36","first_seen":"2025-08-21T06:37:24.177877Z","last_seen":"2026-07-07T07:20:36.283675Z","times_seen":26,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"rewards-usdai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-usdai.org/favicon.ico","fqdn":"rewards-usdai.org","domain":"rewards-usdai.org","tld":"org"},"ip":{"addr":"172.67.192.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-usdai.org/","date":"2026-04-02T16:03:51.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-usdai.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 22:49:10 GMT","end":"Wed, 24 Jun 2026 22:49:09 GMT"},"fingerprint":{"sha1":"1B:C1:58:E2:DF:E1:91:32:FB:84:4F:BC:49:4A:D9:25:3D:3D:95:30","sha256":"D4:9A:A4:49:3E:9F:5E:62:9A:8E:98:4B:C0:87:0D:3F:5E:94:E2:C5:F5:9D:4E:F5:3D:AA:F0:67:A9:38:E8:F3"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: rewards-usdai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-usdai.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 16:03:51 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qv3qEI5VMVHPacK3396rrsKmqAoxhihdjv4ENBR8gyawfLfDyu04WOEUfGMLIfhs%2Bq%2BUyFeafpemVd5F0FhizOTu2%2F4NP01JAryKeoaWNNdmf1izF0dD6Ed15xgymZjssMSUTg%3D%3D\"}]}\r\npriority: u=6,i=?0\r\nlast-modified: Sun, 29 Mar 2026 10:33:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"34b-64e27430ed300\"\r\ncf-ray: 9e6110e59e4856a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":843,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"0c38ccc76d7fd1e5ec76c6f0852253a0","sha1":"ce1236a2286380bd6f3c85dbcf0d5581a03c82f8","sha256":"f39fe0064837c0d6fbf77c5d8f963a149fc3942563ed3894ca1faf217ab12fd9","sha512":"a098f252d2c888d0a5c24c31f604327b83b19599eedaa24ce0f7a4d85468729a66e6b87318439c008e6c22d54a4a17d67376594f4262f22edc86a801fe5f100a","ssdeep":"","tlshash":"02019663b8103465fd2d431bf434e43e89178205d68ea5c66f0112c50154b5425d7e6b","first_seen":"2026-02-22T16:41:53.240599Z","last_seen":"2026-08-04T03:43:58.02047Z","times_seen":57,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"rewards-usdai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-usdai.org/assets/eleven.js","fqdn":"rewards-usdai.org","domain":"rewards-usdai.org","tld":"org"},"ip":{"addr":"172.67.192.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rewards-usdai.org/","date":"2026-04-02T16:03:50.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-usdai.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 22:49:10 GMT","end":"Wed, 24 Jun 2026 22:49:09 GMT"},"fingerprint":{"sha1":"1B:C1:58:E2:DF:E1:91:32:FB:84:4F:BC:49:4A:D9:25:3D:3D:95:30","sha256":"D4:9A:A4:49:3E:9F:5E:62:9A:8E:98:4B:C0:87:0D:3F:5E:94:E2:C5:F5:9D:4E:F5:3D:AA:F0:67:A9:38:E8:F3"}}},"request":{"raw":"GET /assets/eleven.js HTTP/1.1\r\nHost: rewards-usdai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-usdai.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 16:03:50 GMT\r\ncontent-type: text/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 29 Mar 2026 10:33:18 GMT\r\netag: \"a3420d-64e27432d5780-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1M95QmTsCOa9wd6fIdsXqwbWn2gKQj0z1234gwgKIsBk0JS%2Fzyrg3tOMA8q3X1g%2BY6qlv5mY%2FbLLUFkOE2pRD1IECd2q8e27arWhHI88lvysX13rMHIyZdd3eLx8XQWvdtbYrA%3D%3D\"}]}\r\ncf-ray: 9e6110deddf756a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10699277,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"53f92c1cf235620551dd060e051883ba","sha1":"e8106d25bfda478018fc3d4fc112099085156344","sha256":"ed0b6ee2d757f6cfc8d2ca415685cc8eb8bf919bad05affcab0c0221d78e1083","sha512":"8cfa49a26869522b4c57123a0e04efe43f8df80c376a9fce3106cbdd468ed1cc1753061da3edce9a445e576ca081d2ff7f507795ff6231dcb127b1c560bfd697","ssdeep":"12288:olbhI+TUpiabpaTKzwiSnuHsF2BjC1WpvivVb7jV41FbypyHDy9F7erWRWrEXLXe:o9hBgpSNzDejitb7ju","tlshash":"6e25b4893de6b07103676570355b6016f66f6d84350c88aaf67cb978be68308bd7bc38","first_seen":"2026-03-29T12:30:57.095413Z","last_seen":"2026-07-09T09:44:25.149115Z","times_seen":118,"resource_available":false,"data":null}},"time_used":471,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":356,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"rewards-usdai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-usdai.org/fonts/b7cd203648c95da1.woff2","fqdn":"rewards-usdai.org","domain":"rewards-usdai.org","tld":"org"},"ip":{"addr":"172.67.192.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rewards-usdai.org/","date":"2026-04-02T16:03:50.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-usdai.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 22:49:10 GMT","end":"Wed, 24 Jun 2026 22:49:09 GMT"},"fingerprint":{"sha1":"1B:C1:58:E2:DF:E1:91:32:FB:84:4F:BC:49:4A:D9:25:3D:3D:95:30","sha256":"D4:9A:A4:49:3E:9F:5E:62:9A:8E:98:4B:C0:87:0D:3F:5E:94:E2:C5:F5:9D:4E:F5:3D:AA:F0:67:A9:38:E8:F3"}}},"request":{"raw":"GET /fonts/b7cd203648c95da1.woff2 HTTP/1.1\r\nHost: rewards-usdai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-usdai.org/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 16:03:50 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 36140\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 29 Mar 2026 10:33:18 GMT\r\netag: \"8d2c-64e27432d5780\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MHwYPv9ofGrheLWUUScXvxlj93JtUmbw3oufYsLOaLbBc1d9YHvayyckks8wwi6qxgu01hdV8Edmj4jXXqkBnSPAooeoZwj82YZOhLOva0oqNzF8XFybyXqJ15j8BzVJHrtz3g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6110df9e0156a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36140,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 36140, version 1.0","md5":"cef6e791bfc58a86e56f323b2fe8f55e","sha1":"6a6e6359d8b7921cd5c6a0def09a52e926a3fe10","sha256":"5fa9a33b94881addd2f5703f2b8492f10ceff28870c4477825db606907ccddf1","sha512":"dd717d1db2801384e8c11d3cdc65c51900a4d667600cbfe94602e5d577925a2ab0f482a4dd45419b353cfd7a66ef3f79944c01fc39c5784842817a0ca4e6b9a2","ssdeep":"768:paToDLCIyx5VdP3NT7ZMsr7F5MJ1ZMERE5naCRoboRlAqQUDgGgoL3Xa0nN:p3LCDx5VdP3Nffr7F5SLREMC/MUEG7a6","tlshash":"e3f2f1e72a3ef27cd2678750ca80209e33ed989b31dcd462126b0741bf91592d8b4728","first_seen":"2025-08-21T06:37:24.130679Z","last_seen":"2026-07-07T07:20:36.259708Z","times_seen":28,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"rewards-usdai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-usdai.org/","fqdn":"rewards-usdai.org","domain":"rewards-usdai.org","tld":"org"},"ip":{"addr":"172.67.192.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-02T16:03:49.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-usdai.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 22:49:10 GMT","end":"Wed, 24 Jun 2026 22:49:09 GMT"},"fingerprint":{"sha1":"1B:C1:58:E2:DF:E1:91:32:FB:84:4F:BC:49:4A:D9:25:3D:3D:95:30","sha256":"D4:9A:A4:49:3E:9F:5E:62:9A:8E:98:4B:C0:87:0D:3F:5E:94:E2:C5:F5:9D:4E:F5:3D:AA:F0:67:A9:38:E8:F3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rewards-usdai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Apr 2026 16:03:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 29 Mar 2026 10:33:16 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eieglXtA0X77UpvGAGrXj6k98NvLdHgduZxObgOIAEDweMp927q90pkc5uozSycoQNGC6pGyHkPJx%2B8stuqhQpUrztB5U8fsGjtDSXtOipzrJvJ4CPaG%2FoP%2FUs8eokhFVdX4CA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e6110dd6cf57130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120663,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (3816)","md5":"7f0f903efbceadf32e86199dea028f9e","sha1":"ed02e59c3c9b1babe5b59b05cae2eb790973b541","sha256":"43762501f386583d077796871219707764dbd579a42a9577ba4192503dd428b0","sha512":"ef3a14fca13160ad040ac7001b6a6c89d8263efe48a40d294f2123cea3035efa7cfd3bd4a4cc5a931b40e0780802c667e56e0b9842370b854396c2e4d25931ce","ssdeep":"768:TxtbcGqpKyim05du8fnSJHlyF8w/oGYYUwto1sF26ZTf7liqisUOjiJHlyF8w/oK:Tfbpm0vj8LOTj8LOD5d","tlshash":"e1c3e6e423b892f8a449c7ec9f2a746a7e0960ff9945c014f3dd4e51bf124ed8d864ca","first_seen":"2026-03-05T18:00:37.731098Z","last_seen":"2026-04-17T17:43:49.176228Z","times_seen":22,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":45,"dns":29,"connect":1,"send":0,"wait":86,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"rewards-usdai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-usdai.org/css/style.css","fqdn":"rewards-usdai.org","domain":"rewards-usdai.org","tld":"org"},"ip":{"addr":"172.67.192.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rewards-usdai.org/","date":"2026-04-02T16:03:50.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-usdai.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 22:49:10 GMT","end":"Wed, 24 Jun 2026 22:49:09 GMT"},"fingerprint":{"sha1":"1B:C1:58:E2:DF:E1:91:32:FB:84:4F:BC:49:4A:D9:25:3D:3D:95:30","sha256":"D4:9A:A4:49:3E:9F:5E:62:9A:8E:98:4B:C0:87:0D:3F:5E:94:E2:C5:F5:9D:4E:F5:3D:AA:F0:67:A9:38:E8:F3"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: rewards-usdai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-usdai.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 16:03:50 GMT\r\ncontent-type: text/css\r\ncontent-length: 8745\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 29 Mar 2026 10:33:16 GMT\r\netag: \"bdfe-64e27430ed300-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HqlscMHc3m033llPcU2Lxwr52VoXKZtzocbJSO3u83ZeRk%2FmsbCo52GlUSNgCiLgQzRnq5YsTztP%2FQkQfXKTAH1%2BNKxl5djbjUv2gUyHAjah3tiLo5Sj%2FSbk5h%2BugM2a9BcRPw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6110deddf656a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48638,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"dd579d5e180c8486f08994c85384be33","sha1":"b54b7e2ed9d43d46af24c452598d3c02c56d82ad","sha256":"8e6a1872b9f3723e29391e3d8bacf8d3714301ef97a4cb89292604640e496534","sha512":"98ec3ac0f05114eb1c6b18409f08564c46cf603788bff96b952d9ef61f6c76d041069725f6cc928c4b6d25be59122e2a05c663382f6ad0dceeffa34271213bfa","ssdeep":"768:7SRYSd6tp97WJVAlHOJHPhMWYYrxwJO10RqqQDdXafcr:3pJWJVAlHOJHPhMHlz6","tlshash":"4d23841461b99500696f08faf28b6f54ba2e50c6de0fcea9ffd120249fc43b15995f8c","first_seen":"2026-03-05T18:00:37.740547Z","last_seen":"2026-07-07T07:20:36.237842Z","times_seen":25,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"rewards-usdai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-usdai.org/images/a67d599e2b6b7c7a.png","fqdn":"rewards-usdai.org","domain":"rewards-usdai.org","tld":"org"},"ip":{"addr":"172.67.192.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-usdai.org/","date":"2026-04-02T16:03:50.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-usdai.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 22:49:10 GMT","end":"Wed, 24 Jun 2026 22:49:09 GMT"},"fingerprint":{"sha1":"1B:C1:58:E2:DF:E1:91:32:FB:84:4F:BC:49:4A:D9:25:3D:3D:95:30","sha256":"D4:9A:A4:49:3E:9F:5E:62:9A:8E:98:4B:C0:87:0D:3F:5E:94:E2:C5:F5:9D:4E:F5:3D:AA:F0:67:A9:38:E8:F3"}}},"request":{"raw":"GET /images/a67d599e2b6b7c7a.png HTTP/1.1\r\nHost: rewards-usdai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-usdai.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 16:03:50 GMT\r\ncontent-type: image/png\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 29 Mar 2026 10:33:18 GMT\r\netag: W/\"a7565-64e27432d5780\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2nCtexUag76giNw4PqsJsXHEcvjTLr8yD79ueHeqlzPP2S5rZtfgrlcZIJ%2FzWMiUREQWPGX%2BwnW%2B85cJa4CIGkKxDLYxFUtn7X4soYlL7pcYUj31pJ2XRfRQv2dPZebpswIIoA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6110deddf956a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":685413,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 720, 8-bit/color RGBA, non-interlaced","md5":"2300ff34d5db4dab7e3fe103713c8092","sha1":"5236ffc3ffe98f039a1025eb7a1ab1e3976d3b76","sha256":"70cd0133134d88bd6aabe05b4b2499d0023223fe132ab06ea2de52e88f5584b2","sha512":"383332507381e057decda69575072c4d1399e209ed5536344c38a8172299a6505887cd2ee77fb66daf3e1e619f0af5cee97acc3dd774a592593a29f8576bb472","ssdeep":"12288:iLZf2H8M/fhxPiHzMBGSICiPof8iMu5BlndG+lQOp1KuMJTsORJMHw:iLZ2/fAMBJhwof8iMKBdd4TIw","tlshash":"a7e43333b9ce963075135a266a74359953c7310426a3fb5b438ac533a9db8337ad8b8c","first_seen":"2025-08-21T06:37:24.164628Z","last_seen":"2026-07-07T07:20:36.275127Z","times_seen":26,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":155,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"rewards-usdai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-usdai.org/media/fd520d4575efee17.mp4","fqdn":"rewards-usdai.org","domain":"rewards-usdai.org","tld":"org"},"ip":{"addr":"172.67.192.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://rewards-usdai.org/","date":"2026-04-02T16:03:50.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-usdai.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 22:49:10 GMT","end":"Wed, 24 Jun 2026 22:49:09 GMT"},"fingerprint":{"sha1":"1B:C1:58:E2:DF:E1:91:32:FB:84:4F:BC:49:4A:D9:25:3D:3D:95:30","sha256":"D4:9A:A4:49:3E:9F:5E:62:9A:8E:98:4B:C0:87:0D:3F:5E:94:E2:C5:F5:9D:4E:F5:3D:AA:F0:67:A9:38:E8:F3"}}},"request":{"raw":"GET /media/fd520d4575efee17.mp4 HTTP/1.1\r\nHost: rewards-usdai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-usdai.org/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 16:03:50 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 5049335\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 29 Mar 2026 10:33:16 GMT\r\netag: \"4d0bf7-64e27430ed300\"\r\ncontent-range: bytes 0-5049334/5049335\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8H0MZJG3XK3loUc1zRt6MfgCOevBy4Lr9kyQsdtAOC%2BZ3EbRtm2gvzCduqP5zi5tf8fR2fms2OZMedzRTgfSaAuBoPKY1T8GMHwjkIcu%2BPyzdfhjoI8VvWiy%2B6lqyxdgH5yPVw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6110defdfa56a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":408209,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"36fe7670622ab50f9f1b5412321ed090","sha1":"9af6df2ad62cbd6ec48ce8b30d496554574ad946","sha256":"5e9b4eef5a8f05731064c93b23fad9f99b6f63b55ed7ec9535d7cfff84317cb3","sha512":"be9fa6f6fc000a7fc42098fb08c7bce17cb2315c7b6062e1b6a78d156b62f63a274b96f858f24fe0979d9f1b36735321d46d1fd9405edeaf425b48cc04dda6f6","ssdeep":"12288:psBtAOmgYSxPGeXvH8KE0MmQrkCr0kcpH730:ktDxOe/H8KpTMkkcm","tlshash":"2e94127e53817429c3566efdb6c01f5f11f2f41ae496e29f8d01a2c1593dc0281abbea","first_seen":"2026-04-02T16:04:18.71321Z","last_seen":"2026-04-02T16:04:18.71321Z","times_seen":1,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"rewards-usdai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}