{"report_id":"0ccab2c2-043b-47bc-a1db-4cf194cc89d6","version":6,"status":"done","tags":[],"date":"2026-02-14T16:55:24Z","url":{"schema":"http","addr":"inverserewards.live","fqdn":"inverserewards.live","domain":"inverserewards.live","tld":"live"},"ip":{"addr":"102.218.215.117","port":0,"asn":329184,"as":"Host-Africa-AS2","country":"South Africa","country_code":"ZA"},"final":{"url":{"schema":"https","addr":"inverserewards.live/","fqdn":"inverserewards.live","domain":"inverserewards.live","tld":"live"},"title":"Inverse Finance - sDOLA","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"inverserewards.live","fqdn":"inverserewards.live","domain":"inverserewards.live","tld":"live"},"ip":{"addr":"102.218.215.117","port":0,"asn":329184,"as":"Host-Africa-AS2","country":"South Africa","country_code":"ZA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T16:55:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inverserewards.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"inverserewards.live","ip":{"addr":"102.218.215.117","port":443,"asn":329184,"as":"Host-Africa-AS2","country":"South Africa","country_code":"ZA"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-14T16:48:56.215347Z","last_seen":"2026-02-14T16:48:56.215347Z","alert_count":11,"request_count":11,"received_data":6490422,"sent_data":4932,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":1,"received_data":10874,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-08T22:14:51.234086Z","alert_count":0,"request_count":4,"received_data":116984,"sent_data":2164,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"inverserewards.live/","fqdn":"inverserewards.live","domain":"inverserewards.live","tld":"live"},"ip":{"addr":"102.218.215.117","port":443,"asn":329184,"as":"Host-Africa-AS2","country":"South Africa","country_code":"ZA"},"introduction_type":"eval","is_inline":false,"md5":"ef77889745e2a7ab4f8cec3a5db3f093","sha1":"629302afb3cd7f15f96552974818dfa1fd5c7fb2","sha256":"c31223b466b09fca53a6d6497c4e6e2ed81d4b970c62089b180f6c0c89bfc854","sha512":"541886aa61265b73efcec828dee15baf74bfa07b9fa331ea236da0efd972b18773a28c36a37131c8e38245817116eb5cda9dfdecf419e9970215383f5493fc55","ssdeep":"768:Fp/qryrjNHYaacnuEcTcU3c6c9vCc6HcLcTFcKTbxYAZJnQsoceWnR:FZWyrjNb5qDQb+","tlshash":"a7230dd1a95be4e59e0611dee037ec01e02859a7ceacf183b92cdec2741df26854b53b","size":49867,"data":"","first_seen":"2026-02-14T16:49:00.86457Z","last_seen":"2026-02-14T16:55:26.936925Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"inverserewards.live/","fqdn":"inverserewards.live","domain":"inverserewards.live","tld":"live"},"ip":{"addr":"102.218.215.117","port":443,"asn":329184,"as":"Host-Africa-AS2","country":"South Africa","country_code":"ZA"},"introduction_type":"Function","is_inline":false,"md5":"a1145f23af45625503b232997a866aba","sha1":"652652a01b827103d9b310179fee03cacb371395","sha256":"4197d1e9463f3c5b3806d4d6610738fd1bcd670f16246b0d9c4db688cd0e7938","sha512":"975f17081f7fbb103e678cae7ca6d1ef17d912aef4bf7cb1022a93914df4d8a5df763a3e766b5d8603e5ae71222356a3d552a8c14a7474a10580ec0d7caf8547","ssdeep":"6144:1QyyTr6wUYyvim5UjkBfEdu4RyO5lf0wpfb2br51lN2Jxqo1vbDwnZ4Mjo8jXa1Z:Gyy36rJviyUjkBfyLRyO510wpfb2br5S","tlshash":"ec741f1d2dc2a148ad6193fb9732120c86d0b48847889b87a23ff7c5f4d65ec7dd1b9a","size":361944,"data":"","first_seen":"2026-02-14T16:49:00.862457Z","last_seen":"2026-02-14T16:55:26.938241Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"inverserewards.live/css-loader.pro.js","fqdn":"inverserewards.live","domain":"inverserewards.live","tld":"live"},"ip":{"addr":"102.218.215.117","port":443,"asn":329184,"as":"Host-Africa-AS2","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"f96070914bd25022ab1ab13a696208bf","sha1":"02639e2db5b6f8c275c0ba38dd8ed1960b80a12f","sha256":"39753e5db1342293c1eb114d72e7f76b9adcf298676bf71e36ad1afbc0d0b936","sha512":"d59c2492668b0a6891d2ced258afda317ef3be231aeecf1a0b7539c7600a23bdd80d6c31d0ca28cbb2035750202d7e692f2591919c983b092241f52168ffcf51","ssdeep":"6144:NYaEh7AOyrggdU1kJP0n02RqktJf6oJ3D2FD51DjAxxqo1vbDQBZa8/o4zXGN6xl:ma+cLrgUU1kJPgRRqktR6oJ3D2FD51DR","tlshash":"6474211d2dc2a148bd6193fb9732124c96d0b08847889b87a23bf7c5f4d64ec7dd1b9a","size":368836,"data":"","first_seen":"2026-02-14T16:49:00.853595Z","last_seen":"2026-02-14T16:55:26.922012Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"inverserewards.live/","fqdn":"inverserewards.live","domain":"inverserewards.live","tld":"live"},"ip":{"addr":"102.218.215.117","port":443,"asn":329184,"as":"Host-Africa-AS2","country":"South Africa","country_code":"ZA"},"introduction_type":"Function","is_inline":false,"md5":"151f9b235cb6d84e9a8ecf1c84c5a1fe","sha1":"ccde8519a68d8b35dff048ac20cd02900c45a974","sha256":"c0cf82372df9a843faf27149f6fb3be5fe83766b48601538d644e417e03a68f0","sha512":"8e81b17d011906ecb3a49c02f2c2bd3a16d0fdb94e06b39c6732a51f2cfd45dc76f55bc4d3152d101fe5e7dacc2fc404d263dd58fe20b85fd869f720b10037d9","ssdeep":"3072:/bHm8Quh6T7imp5TuJYVr7deMZTRwTBUL0lpF:LQukT7imp5TCYVndYmOF","tlshash":"a5346289eb4780cc8d19119ee4b7f949d4151c178e6cb8a3ee1ecdc23529ba684cb17f","size":250221,"data":"","first_seen":"2026-02-14T16:49:00.866701Z","last_seen":"2026-02-14T16:55:26.938986Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"inverserewards.live/l2lrdjfg.php","fqdn":"inverserewards.live","domain":"inverserewards.live","tld":"live"},"ip":{"addr":"102.218.215.117","port":443,"asn":329184,"as":"Host-Africa-AS2","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a0b76470765092f3ca2625c9f6e7790","sha1":"8da67deeb5236b5bc479a3dbc4b482caaf5bf66b","sha256":"b5b0e36fee04e9277c5d9c5d6b335327e19919f2e9ac572a2781184ef9849181","sha512":"914701dfc99afa3b2b9193b1a67aa377224f929922c196976b77bd7ff8a043e244eace5d01f4181055def97a8209ddcbad57c53838310195ac56d3800da3088e","ssdeep":"3072:x9UbGS9DG56jbiep5zSxJ4NLcyD+8nwVWKVxQ:JcDGsjbiep5zST4NwyDGw0Q","tlshash":"3b6450c5299641e87e06029edcf7ad05d4094c13be5ce4a3ebddfdc1342ab65809b3ae","size":327507,"data":"","first_seen":"2026-02-14T16:49:00.844553Z","last_seen":"2026-02-14T16:55:26.933996Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"inverserewards.live/","fqdn":"inverserewards.live","domain":"inverserewards.live","tld":"live"},"ip":{"addr":"102.218.215.117","port":443,"asn":329184,"as":"Host-Africa-AS2","country":"South Africa","country_code":"ZA"},"introduction_type":"Function","is_inline":false,"md5":"a1145f23af45625503b232997a866aba","sha1":"652652a01b827103d9b310179fee03cacb371395","sha256":"4197d1e9463f3c5b3806d4d6610738fd1bcd670f16246b0d9c4db688cd0e7938","sha512":"975f17081f7fbb103e678cae7ca6d1ef17d912aef4bf7cb1022a93914df4d8a5df763a3e766b5d8603e5ae71222356a3d552a8c14a7474a10580ec0d7caf8547","ssdeep":"6144:1QyyTr6wUYyvim5UjkBfEdu4RyO5lf0wpfb2br51lN2Jxqo1vbDwnZ4Mjo8jXa1Z:Gyy36rJviyUjkBfyLRyO510wpfb2br5S","tlshash":"ec741f1d2dc2a148ad6193fb9732120c86d0b48847889b87a23ff7c5f4d65ec7dd1b9a","size":361944,"data":"","first_seen":"2026-02-14T16:49:00.862457Z","last_seen":"2026-02-14T16:55:26.938241Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"inverserewards.live/script.js","fqdn":"inverserewards.live","domain":"inverserewards.live","tld":"live"},"ip":{"addr":"102.218.215.117","port":443,"asn":329184,"as":"Host-Africa-AS2","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5540a2608b9ff8a52de10a255537815","sha1":"b67e71656b52bd442429eb9f6c894f8eb48a6492","sha256":"ec47f64ff87e4ca43a7bb716cb26baa872c31c51bc6b5d20242dd6f43ab83c32","sha512":"f6a071444b1ff6b0fa1d252ffd86718814c42a8071f225574d856649ad7ab471de6221e3d931cb3827a70a944fcd23c5c80be9a8d7048b130880f92fac7eeb78","ssdeep":"48:o899KNFyjOnS6hr5cVVdHfNoVTgLeBzKi8Ah9Zfl2odW6ZI8ZhCq9xQOfVOKFLkD:oGgAUgVdyp829lcWRK8ZQ2xZSGEt","tlshash":"fc91ed1eb22510358177b372975b9708fa3a016b354185493f2d83840ff28a896e3efd","size":4343,"data":"","first_seen":"2026-02-14T16:49:00.85153Z","last_seen":"2026-02-14T16:55:26.934843Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"inverserewards.live/css-loader.pro.js","fqdn":"inverserewards.live","domain":"inverserewards.live","tld":"live"},"ip":{"addr":"102.218.215.117","port":443,"asn":329184,"as":"Host-Africa-AS2","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"f96070914bd25022ab1ab13a696208bf","sha1":"02639e2db5b6f8c275c0ba38dd8ed1960b80a12f","sha256":"39753e5db1342293c1eb114d72e7f76b9adcf298676bf71e36ad1afbc0d0b936","sha512":"d59c2492668b0a6891d2ced258afda317ef3be231aeecf1a0b7539c7600a23bdd80d6c31d0ca28cbb2035750202d7e692f2591919c983b092241f52168ffcf51","ssdeep":"6144:NYaEh7AOyrggdU1kJP0n02RqktJf6oJ3D2FD51DjAxxqo1vbDQBZa8/o4zXGN6xl:ma+cLrgUU1kJPgRRqktR6oJ3D2FD51DR","tlshash":"6474211d2dc2a148bd6193fb9732124c96d0b08847889b87a23bf7c5f4d64ec7dd1b9a","size":368836,"data":"","first_seen":"2026-02-14T16:49:00.853595Z","last_seen":"2026-02-14T16:55:26.922012Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"inverserewards.live/","fqdn":"inverserewards.live","domain":"inverserewards.live","tld":"live"},"ip":{"addr":"102.218.215.117","port":443,"asn":329184,"as":"Host-Africa-AS2","country":"South Africa","country_code":"ZA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T16:55:00.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.inverserewards.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 06:01:47 GMT","end":"Thu, 07 May 2026 06:01:46 GMT"},"fingerprint":{"sha1":"09:F8:58:C9:39:8E:F5:74:9A:A6:CB:F3:93:11:67:97:DB:0D:23:20","sha256":"29:B3:20:94:D5:F0:67:F3:AD:A6:DA:CC:53:F0:57:8E:7F:F5:05:54:95:8D:81:08:F1:5C:B0:08:2D:CE:C9:3B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: inverserewards.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Fri, 06 Feb 2026 23:58:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2419\r\ndate: Sat, 14 Feb 2026 16:54:56 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15509,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"bef8ffc5f7635116e8b9cf72014abccd","sha1":"acbdac1f18a7981d425030c5693a71f6c67e5d9f","sha256":"9845ba2146dfabb666921a4036a87b1e985b6b33956156a416f6574d1041a921","sha512":"7016e5963685e174fad048c56aeba5e2673b7c0d4c1e622d47152f3c0c5c781ba2572a48b7c0006a8d2a8017a47ba1c5714cc2e42e056ea4fd377977083d0c3f","ssdeep":"96:s4gvu+MujlbV801eacnjixPw8phjDsqh+Wahi9LCo5Ab5xk5Pu2cL:rgmc4NaJPnDsqh+Xi9uoybXkNuN","tlshash":"a762a63114c6a43a52b3c1c286256f6afeca9143d64b824475fe2bd71ffbe41ed27114","first_seen":"2026-02-14T16:49:00.847628Z","last_seen":"2026-02-14T16:55:26.918174Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2169,"timings":{"blocked":620,"dns":1,"connect":433,"send":0,"wait":928,"receive":0,"ssl":182},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inverserewards.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inverserewards.live/styles.css","fqdn":"inverserewards.live","domain":"inverserewards.live","tld":"live"},"ip":{"addr":"102.218.215.117","port":443,"asn":329184,"as":"Host-Africa-AS2","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://inverserewards.live/","date":"2026-02-14T16:55:02.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.inverserewards.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 06:01:47 GMT","end":"Thu, 07 May 2026 06:01:46 GMT"},"fingerprint":{"sha1":"09:F8:58:C9:39:8E:F5:74:9A:A6:CB:F3:93:11:67:97:DB:0D:23:20","sha256":"29:B3:20:94:D5:F0:67:F3:AD:A6:DA:CC:53:F0:57:8E:7F:F5:05:54:95:8D:81:08:F1:5C:B0:08:2D:CE:C9:3B"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: inverserewards.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inverserewards.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 16:54:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 06 Feb 2026 00:14:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2509\r\ndate: Sat, 14 Feb 2026 16:54:57 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15493,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"5d722c554773cf6f828f952107f88ad5","sha1":"dd19be36cf6e40e754fd4f3e4da4b4f5c6563e28","sha256":"3c01e37c1a3c8bca1dab9884921ac9b2d3e26d803b0cbc92d745f3e1508a6f7c","sha512":"220cf43ed2ab4e9643e8d17334f4dce98894fc932e726affdef3362a81d1f0e46ffe33ce995147d91f836f1241f0fd94a2dc90621018e143a22136d68516b81e","ssdeep":"192:stcKa58wlo9N9nM4W+SHlJmbRnfeEu4lKBDAWkU9ST89UIfr7mY1yThqv2CWNYNQ:5UeFYFV","tlshash":"9c62ce59e70a2403b2379f78ab724742f6589053da4a51bc7fc863488ff91699a31fcc","first_seen":"2026-02-14T16:49:00.859881Z","last_seen":"2026-02-14T16:55:26.919745Z","times_seen":2,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":181,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inverserewards.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Geist:wght@100;200;300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://inverserewards.live/","date":"2026-02-14T16:55:02.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Geist:wght@100;200;300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inverserewards.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 16:55:02 GMT\r\ndate: Sat, 14 Feb 2026 16:55:02 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10188,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a773d906e9742d9112ce182aca6b599f","sha1":"685b38a709522629deb80fe509b6425fb33666f6","sha256":"a94e940b4fe2b1863e0f9b2db380478e930790921be08fa8d131a487d3d58fff","sha512":"7260942edf3a1e48a8ecd45c4bbf2fd5e61467b55e6dbc38ed39d7ec4126015c0b10aa16ea970994ae2d8e818e290eda9af6893c4d8b03cb185971f154a8c9fe","ssdeep":"192:JgpnpuSpq5wuLqKXukqr+uZqE9uqqN0uHqObugqfyulqYhuGm:JgdDcchanglO9","tlshash":"9322ae81086bd404eb931cc127ce7f73af4e60112444957abbfe08ecbcaac6653a675d","first_seen":"2025-09-22T11:46:30.362894Z","last_seen":"2026-05-13T10:29:51.005767Z","times_seen":74,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":146,"dns":0,"connect":21,"send":0,"wait":32,"receive":0,"ssl":127},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"inverserewards.live/css-loader.pro.js","fqdn":"inverserewards.live","domain":"inverserewards.live","tld":"live"},"ip":{"addr":"102.218.215.117","port":443,"asn":329184,"as":"Host-Africa-AS2","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://inverserewards.live/","date":"2026-02-14T16:55:09.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.inverserewards.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 06:01:47 GMT","end":"Thu, 07 May 2026 06:01:46 GMT"},"fingerprint":{"sha1":"09:F8:58:C9:39:8E:F5:74:9A:A6:CB:F3:93:11:67:97:DB:0D:23:20","sha256":"29:B3:20:94:D5:F0:67:F3:AD:A6:DA:CC:53:F0:57:8E:7F:F5:05:54:95:8D:81:08:F1:5C:B0:08:2D:CE:C9:3B"}}},"request":{"raw":"GET /css-loader.pro.js HTTP/1.1\r\nHost: inverserewards.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inverserewards.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 16:55:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 05 Feb 2026 01:48:01 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 75654\r\ndate: Sat, 14 Feb 2026 16:55:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":368836,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65159)","md5":"f96070914bd25022ab1ab13a696208bf","sha1":"02639e2db5b6f8c275c0ba38dd8ed1960b80a12f","sha256":"39753e5db1342293c1eb114d72e7f76b9adcf298676bf71e36ad1afbc0d0b936","sha512":"d59c2492668b0a6891d2ced258afda317ef3be231aeecf1a0b7539c7600a23bdd80d6c31d0ca28cbb2035750202d7e692f2591919c983b092241f52168ffcf51","ssdeep":"6144:NYaEh7AOyrggdU1kJP0n02RqktJf6oJ3D2FD51DjAxxqo1vbDQBZa8/o4zXGN6xl:ma+cLrgUU1kJPgRRqktR6oJ3D2FD51DR","tlshash":"6474211d2dc2a148bd6193fb9732124c96d0b08847889b87a23bf7c5f4d64ec7dd1b9a","first_seen":"2026-02-14T16:49:00.853595Z","last_seen":"2026-02-14T16:55:26.922012Z","times_seen":2,"resource_available":true,"data":null}},"time_used":579,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":178,"receive":401,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inverserewards.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inverserewards.live/l2lrdjfg.php?m=2951813","fqdn":"inverserewards.live","domain":"inverserewards.live","tld":"live"},"ip":{"addr":"102.218.215.117","port":443,"asn":329184,"as":"Host-Africa-AS2","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://inverserewards.live/","date":"2026-02-14T16:55:09.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.inverserewards.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 06:01:47 GMT","end":"Thu, 07 May 2026 06:01:46 GMT"},"fingerprint":{"sha1":"09:F8:58:C9:39:8E:F5:74:9A:A6:CB:F3:93:11:67:97:DB:0D:23:20","sha256":"29:B3:20:94:D5:F0:67:F3:AD:A6:DA:CC:53:F0:57:8E:7F:F5:05:54:95:8D:81:08:F1:5C:B0:08:2D:CE:C9:3B"}}},"request":{"raw":"GET /l2lrdjfg.php?m=2951813 HTTP/1.1\r\nHost: inverserewards.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://inverserewards.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/7.4.33\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=300\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 14 Feb 2026 16:55:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4725842,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5f823e3402ee520b89b3d135f9865663","sha1":"76d20907bc409f9e3c159004ba26c96b2cb5a9e6","sha256":"d04532cc064fc79f31b52269376363738cba7e79beca57619343b7acdef51b4d","sha512":"4bb0450b4eb837cc5edc21f8da98b47ac1d8d6b17ad689a7e0a6d9d13e20a535c5f9da2eb565301c26723ea422b7eb9dfa5bf06562fad4ad2d7d41bcf15e1b38","ssdeep":"24576:fb/YWmLkwsOukzMSPbg+lsVo5/Cr0OSzcfUjeQ6SI51X:TGkwdNZngkvGN","tlshash":"f52523d2bf1b547ccf2c09e8816f1e0e2c494c225488d6fee665dc8732d5b6052eb97a","first_seen":"2026-02-14T16:49:00.855662Z","last_seen":"2026-02-14T16:55:26.924219Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":399,"receive":2750,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inverserewards.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/geist/v4/gyByhwUxId8gMEwcGFWNPoTcZY4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://inverserewards.live/","date":"2026-02-14T16:55:10.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/geist/v4/gyByhwUxId8gMEwcGFWNPoTcZY4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://inverserewards.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28412\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 14 Feb 2026 00:47:00 GMT\r\nexpires: Sun, 14 Feb 2027 00:47:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 58090\r\nlast-modified: Wed, 10 Sep 2025 16:49:32 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28412,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28412, version 1.0","md5":"a0f13f916a5805019879dd56b29bc098","sha1":"90af3a05ac9d34850f01f503e1a2582306d9245b","sha256":"04f13c87d9e172ebee6a520fe0d8cb187d1ed1f1eef505d47dd041467e36c6ec","sha512":"15993875861a0b439c76848f3bd7200a8296f917af470a53c0c058880090eb6ce325b2c12295d504b2b6fabe7a5647bfa4804c103b4c41bff4b1741bb27924db","ssdeep":"384:vOg2tlly1HTH0ZTk9hbQe3O4KGVTtRgKJMgJnynWeWkBuNyg3Bv0I5Y4hf/CGYEY:vLQlwH05kbQ+Ttvi+yskBuNFxRPHC2+","tlshash":"30d2e1a67a98b5976d61a4bb6150b00881cf7cb6230d03f21a24d561fd69fe603d373b","first_seen":"2025-09-11T19:57:45.123641Z","last_seen":"2026-06-05T16:17:46.219817Z","times_seen":1396,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":101,"dns":4,"connect":8,"send":0,"wait":19,"receive":2,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"inverserewards.live/css-loader.pro.js","fqdn":"inverserewards.live","domain":"inverserewards.live","tld":"live"},"ip":{"addr":"102.218.215.117","port":443,"asn":329184,"as":"Host-Africa-AS2","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://inverserewards.live/","date":"2026-02-14T16:55:02.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.inverserewards.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 06:01:47 GMT","end":"Thu, 07 May 2026 06:01:46 GMT"},"fingerprint":{"sha1":"09:F8:58:C9:39:8E:F5:74:9A:A6:CB:F3:93:11:67:97:DB:0D:23:20","sha256":"29:B3:20:94:D5:F0:67:F3:AD:A6:DA:CC:53:F0:57:8E:7F:F5:05:54:95:8D:81:08:F1:5C:B0:08:2D:CE:C9:3B"}}},"request":{"raw":"GET /css-loader.pro.js HTTP/1.1\r\nHost: inverserewards.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inverserewards.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 16:54:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 05 Feb 2026 01:48:01 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 75654\r\ndate: Sat, 14 Feb 2026 16:54:57 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":368836,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65159)","md5":"f96070914bd25022ab1ab13a696208bf","sha1":"02639e2db5b6f8c275c0ba38dd8ed1960b80a12f","sha256":"39753e5db1342293c1eb114d72e7f76b9adcf298676bf71e36ad1afbc0d0b936","sha512":"d59c2492668b0a6891d2ced258afda317ef3be231aeecf1a0b7539c7600a23bdd80d6c31d0ca28cbb2035750202d7e692f2591919c983b092241f52168ffcf51","ssdeep":"6144:NYaEh7AOyrggdU1kJP0n02RqktJf6oJ3D2FD51DjAxxqo1vbDQBZa8/o4zXGN6xl:ma+cLrgUU1kJPgRRqktR6oJ3D2FD51DR","tlshash":"6474211d2dc2a148bd6193fb9732124c96d0b08847889b87a23bf7c5f4d64ec7dd1b9a","first_seen":"2026-02-14T16:49:00.853595Z","last_seen":"2026-02-14T16:55:26.922012Z","times_seen":2,"resource_available":true,"data":null}},"time_used":4309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":718,"receive":3591,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inverserewards.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inverserewards.live/secureproxy?e=ping_proxy","fqdn":"inverserewards.live","domain":"inverserewards.live","tld":"live"},"ip":{"addr":"102.218.215.117","port":443,"asn":329184,"as":"Host-Africa-AS2","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://inverserewards.live/","date":"2026-02-14T16:55:10.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.inverserewards.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 06:01:47 GMT","end":"Thu, 07 May 2026 06:01:46 GMT"},"fingerprint":{"sha1":"09:F8:58:C9:39:8E:F5:74:9A:A6:CB:F3:93:11:67:97:DB:0D:23:20","sha256":"29:B3:20:94:D5:F0:67:F3:AD:A6:DA:CC:53:F0:57:8E:7F:F5:05:54:95:8D:81:08:F1:5C:B0:08:2D:CE:C9:3B"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: inverserewards.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://inverserewards.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sat, 14 Feb 2026 16:55:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-07-27T09:00:40.599773Z","times_seen":144017,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inverserewards.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inverserewards.live/8DsGZwhW.php?s=%2F%40v1%2Fcdn%2Fjs%2Fexpress-flash.esm.js%3Ft%3D29518135%26u%3DvsicbuS1QMkI_ZVPGDY5N2QzNjQ4MWZjYjk4YzY3NDRjNDVhOPtYmS_N4On9uwJ4ig","fqdn":"inverserewards.live","domain":"inverserewards.live","tld":"live"},"ip":{"addr":"102.218.215.117","port":443,"asn":329184,"as":"Host-Africa-AS2","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://inverserewards.live/","date":"2026-02-14T16:55:10.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.inverserewards.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 06:01:47 GMT","end":"Thu, 07 May 2026 06:01:46 GMT"},"fingerprint":{"sha1":"09:F8:58:C9:39:8E:F5:74:9A:A6:CB:F3:93:11:67:97:DB:0D:23:20","sha256":"29:B3:20:94:D5:F0:67:F3:AD:A6:DA:CC:53:F0:57:8E:7F:F5:05:54:95:8D:81:08:F1:5C:B0:08:2D:CE:C9:3B"}}},"request":{"raw":"GET /8DsGZwhW.php?s=%2F%40v1%2Fcdn%2Fjs%2Fexpress-flash.esm.js%3Ft%3D29518135%26u%3DvsicbuS1QMkI_ZVPGDY5N2QzNjQ4MWZjYjk4YzY3NDRjNDVhOPtYmS_N4On9uwJ4ig HTTP/1.1\r\nHost: inverserewards.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inverserewards.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/7.4.33\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 14 Feb 2026 16:55:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":656642,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-07-27T08:03:09.368764Z","times_seen":2644,"resource_available":true,"data":null}},"time_used":6607,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6406,"receive":201,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inverserewards.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inverserewards.live/favicon.ico","fqdn":"inverserewards.live","domain":"inverserewards.live","tld":"live"},"ip":{"addr":"102.218.215.117","port":443,"asn":329184,"as":"Host-Africa-AS2","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://inverserewards.live/","date":"2026-02-14T16:55:11.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.inverserewards.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 06:01:47 GMT","end":"Thu, 07 May 2026 06:01:46 GMT"},"fingerprint":{"sha1":"09:F8:58:C9:39:8E:F5:74:9A:A6:CB:F3:93:11:67:97:DB:0D:23:20","sha256":"29:B3:20:94:D5:F0:67:F3:AD:A6:DA:CC:53:F0:57:8E:7F:F5:05:54:95:8D:81:08:F1:5C:B0:08:2D:CE:C9:3B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: inverserewards.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inverserewards.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sat, 14 Feb 2026 16:55:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-07-27T09:00:40.599773Z","times_seen":144017,"resource_available":true,"data":null}},"time_used":460,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":460,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inverserewards.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/geist/v4/gyByhwUxId8gMEwcGFWNPoTcZY4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://inverserewards.live/","date":"2026-02-14T16:55:10.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/geist/v4/gyByhwUxId8gMEwcGFWNPoTcZY4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://inverserewards.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28412\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 14 Feb 2026 00:47:00 GMT\r\nexpires: Sun, 14 Feb 2027 00:47:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 58090\r\nlast-modified: Wed, 10 Sep 2025 16:49:32 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28412,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28412, version 1.0","md5":"a0f13f916a5805019879dd56b29bc098","sha1":"90af3a05ac9d34850f01f503e1a2582306d9245b","sha256":"04f13c87d9e172ebee6a520fe0d8cb187d1ed1f1eef505d47dd041467e36c6ec","sha512":"15993875861a0b439c76848f3bd7200a8296f917af470a53c0c058880090eb6ce325b2c12295d504b2b6fabe7a5647bfa4804c103b4c41bff4b1741bb27924db","ssdeep":"384:vOg2tlly1HTH0ZTk9hbQe3O4KGVTtRgKJMgJnynWeWkBuNyg3Bv0I5Y4hf/CGYEY:vLQlwH05kbQ+Ttvi+yskBuNFxRPHC2+","tlshash":"30d2e1a67a98b5976d61a4bb6150b00881cf7cb6230d03f21a24d561fd69fe603d373b","first_seen":"2025-09-11T19:57:45.123641Z","last_seen":"2026-06-05T16:17:46.219817Z","times_seen":1396,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":177,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":162},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"inverserewards.live/l2lrdjfg.php","fqdn":"inverserewards.live","domain":"inverserewards.live","tld":"live"},"ip":{"addr":"102.218.215.117","port":443,"asn":329184,"as":"Host-Africa-AS2","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://inverserewards.live/","date":"2026-02-14T16:55:02.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.inverserewards.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 06:01:47 GMT","end":"Thu, 07 May 2026 06:01:46 GMT"},"fingerprint":{"sha1":"09:F8:58:C9:39:8E:F5:74:9A:A6:CB:F3:93:11:67:97:DB:0D:23:20","sha256":"29:B3:20:94:D5:F0:67:F3:AD:A6:DA:CC:53:F0:57:8E:7F:F5:05:54:95:8D:81:08:F1:5C:B0:08:2D:CE:C9:3B"}}},"request":{"raw":"GET /l2lrdjfg.php HTTP/1.1\r\nHost: inverserewards.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inverserewards.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/7.4.33\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=3600\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 14 Feb 2026 16:54:57 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":327507,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1a0b76470765092f3ca2625c9f6e7790","sha1":"8da67deeb5236b5bc479a3dbc4b482caaf5bf66b","sha256":"b5b0e36fee04e9277c5d9c5d6b335327e19919f2e9ac572a2781184ef9849181","sha512":"914701dfc99afa3b2b9193b1a67aa377224f929922c196976b77bd7ff8a043e244eace5d01f4181055def97a8209ddcbad57c53838310195ac56d3800da3088e","ssdeep":"3072:x9UbGS9DG56jbiep5zSxJ4NLcyD+8nwVWKVxQ:JcDGsjbiep5zST4NwyDGw0Q","tlshash":"3b6450c5299641e87e06029edcf7ad05d4094c13be5ce4a3ebddfdc1342ab65809b3ae","first_seen":"2026-02-14T16:49:00.844553Z","last_seen":"2026-02-14T16:55:26.933996Z","times_seen":2,"resource_available":true,"data":null}},"time_used":4964,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4964,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inverserewards.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inverserewards.live/secureproxy?e=ping_proxy","fqdn":"inverserewards.live","domain":"inverserewards.live","tld":"live"},"ip":{"addr":"102.218.215.117","port":443,"asn":329184,"as":"Host-Africa-AS2","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://inverserewards.live/","date":"2026-02-14T16:55:06.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.inverserewards.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 06:01:47 GMT","end":"Thu, 07 May 2026 06:01:46 GMT"},"fingerprint":{"sha1":"09:F8:58:C9:39:8E:F5:74:9A:A6:CB:F3:93:11:67:97:DB:0D:23:20","sha256":"29:B3:20:94:D5:F0:67:F3:AD:A6:DA:CC:53:F0:57:8E:7F:F5:05:54:95:8D:81:08:F1:5C:B0:08:2D:CE:C9:3B"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: inverserewards.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://inverserewards.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sat, 14 Feb 2026 16:55:01 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-07-27T09:00:40.599773Z","times_seen":144017,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inverserewards.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inverserewards.live/script.js","fqdn":"inverserewards.live","domain":"inverserewards.live","tld":"live"},"ip":{"addr":"102.218.215.117","port":443,"asn":329184,"as":"Host-Africa-AS2","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://inverserewards.live/","date":"2026-02-14T16:55:02.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.inverserewards.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 06:01:47 GMT","end":"Thu, 07 May 2026 06:01:46 GMT"},"fingerprint":{"sha1":"09:F8:58:C9:39:8E:F5:74:9A:A6:CB:F3:93:11:67:97:DB:0D:23:20","sha256":"29:B3:20:94:D5:F0:67:F3:AD:A6:DA:CC:53:F0:57:8E:7F:F5:05:54:95:8D:81:08:F1:5C:B0:08:2D:CE:C9:3B"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: inverserewards.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inverserewards.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 16:54:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 05 Feb 2026 22:59:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1225\r\ndate: Sat, 14 Feb 2026 16:54:57 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4343,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"f5540a2608b9ff8a52de10a255537815","sha1":"b67e71656b52bd442429eb9f6c894f8eb48a6492","sha256":"ec47f64ff87e4ca43a7bb716cb26baa872c31c51bc6b5d20242dd6f43ab83c32","sha512":"f6a071444b1ff6b0fa1d252ffd86718814c42a8071f225574d856649ad7ab471de6221e3d931cb3827a70a944fcd23c5c80be9a8d7048b130880f92fac7eeb78","ssdeep":"48:o899KNFyjOnS6hr5cVVdHfNoVTgLeBzKi8Ah9Zfl2odW6ZI8ZhCq9xQOfVOKFLkD:oGgAUgVdyp829lcWRK8ZQ2xZSGEt","tlshash":"fc91ed1eb22510358177b372975b9708fa3a016b354185493f2d83840ff28a896e3efd","first_seen":"2026-02-14T16:49:00.85153Z","last_seen":"2026-02-14T16:55:26.934843Z","times_seen":2,"resource_available":true,"data":null}},"time_used":4308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inverserewards.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/geist/v4/gyByhwUxId8gMEwcGFWNPoTcZY4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://inverserewards.live/","date":"2026-02-14T16:55:10.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/geist/v4/gyByhwUxId8gMEwcGFWNPoTcZY4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://inverserewards.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28412\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 14 Feb 2026 00:47:00 GMT\r\nexpires: Sun, 14 Feb 2027 00:47:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 58090\r\nlast-modified: Wed, 10 Sep 2025 16:49:32 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28412,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28412, version 1.0","md5":"a0f13f916a5805019879dd56b29bc098","sha1":"90af3a05ac9d34850f01f503e1a2582306d9245b","sha256":"04f13c87d9e172ebee6a520fe0d8cb187d1ed1f1eef505d47dd041467e36c6ec","sha512":"15993875861a0b439c76848f3bd7200a8296f917af470a53c0c058880090eb6ce325b2c12295d504b2b6fabe7a5647bfa4804c103b4c41bff4b1741bb27924db","ssdeep":"384:vOg2tlly1HTH0ZTk9hbQe3O4KGVTtRgKJMgJnynWeWkBuNyg3Bv0I5Y4hf/CGYEY:vLQlwH05kbQ+Ttvi+yskBuNFxRPHC2+","tlshash":"30d2e1a67a98b5976d61a4bb6150b00881cf7cb6230d03f21a24d561fd69fe603d373b","first_seen":"2025-09-11T19:57:45.123641Z","last_seen":"2026-06-05T16:17:46.219817Z","times_seen":1396,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":90,"dns":1,"connect":9,"send":0,"wait":10,"receive":10,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/geist/v4/gyByhwUxId8gMEwcGFWNPoTcZY4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://inverserewards.live/","date":"2026-02-14T16:55:10.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/geist/v4/gyByhwUxId8gMEwcGFWNPoTcZY4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://inverserewards.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28412\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 14 Feb 2026 00:47:00 GMT\r\nexpires: Sun, 14 Feb 2027 00:47:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 58090\r\nlast-modified: Wed, 10 Sep 2025 16:49:32 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28412,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28412, version 1.0","md5":"a0f13f916a5805019879dd56b29bc098","sha1":"90af3a05ac9d34850f01f503e1a2582306d9245b","sha256":"04f13c87d9e172ebee6a520fe0d8cb187d1ed1f1eef505d47dd041467e36c6ec","sha512":"15993875861a0b439c76848f3bd7200a8296f917af470a53c0c058880090eb6ce325b2c12295d504b2b6fabe7a5647bfa4804c103b4c41bff4b1741bb27924db","ssdeep":"384:vOg2tlly1HTH0ZTk9hbQe3O4KGVTtRgKJMgJnynWeWkBuNyg3Bv0I5Y4hf/CGYEY:vLQlwH05kbQ+Ttvi+yskBuNFxRPHC2+","tlshash":"30d2e1a67a98b5976d61a4bb6150b00881cf7cb6230d03f21a24d561fd69fe603d373b","first_seen":"2025-09-11T19:57:45.123641Z","last_seen":"2026-06-05T16:17:46.219817Z","times_seen":1396,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":54,"dns":1,"connect":21,"send":0,"wait":8,"receive":3,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}