{"report_id":"1dc48daf-d6a8-4223-8782-22ccec1caf84","version":6,"status":"done","tags":[],"date":"2026-02-14T11:44:38Z","url":{"schema":"https","addr":"rewards-kaiko.com/","fqdn":"rewards-kaiko.com","domain":"rewards-kaiko.com","tld":"com"},"ip":{"addr":"172.67.192.141","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rewards-kaiko.com/","fqdn":"rewards-kaiko.com","domain":"rewards-kaiko.com","tld":"com"},"title":"The ARC Terminal - Powered by Kaiko","dom":{"size":15210,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (5917)","md5":"0e95a172b057b868e6afd56fe44d0af6","sha1":"9ea2ad98835aab42ee37220db080a619662a4851","sha256":"d826307376b62bdefb2165927ae9cdf0c96d3e584b2037c0efd7b11931fd6a61","sha512":"6281bc33c6e1b890fd438edfccdfe0fdd99ebc02482e603f66d46870b149e6702d96ef2a2beda6261b23052d84792e20ea4c6961c20005e72765a13c56737d32","ssdeep":"192:t7OrHPQl4jNsjufopR5Q7QwQJ9+ZNoauu2aS+IQDhaolaDLguKSHsFz4Vds4:t706SrIN4IMFUHX","tlshash":"536209f68534111a51030e0bb18bbbc612cd9643ea13c998fbcd71a54fc594dedb2f65","dom_hash":"domhash54496b03fefcc31b544900eb998067a0","first_seen":"2026-02-14T11:44:40.924102Z","last_seen":"2026-02-14T11:44:40.924102Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"rewards-kaiko.com/","fqdn":"rewards-kaiko.com","domain":"rewards-kaiko.com","tld":"com"},"ip":{"addr":"172.67.192.141","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T11:44:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"rewards-kaiko.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rewards-kaiko.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"arcterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"rewards-kaiko.com","ip":{"addr":"104.21.44.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-24","domain_rank":0,"first_seen":"2026-02-13T06:17:35.291067Z","last_seen":"2026-02-13T06:17:35.291067Z","alert_count":28,"request_count":14,"received_data":1422243,"sent_data":6478,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"arcterminal.xyz","ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-06-18","domain_rank":2294810,"first_seen":"2025-07-12T23:58:54.911195Z","last_seen":"2026-02-13T06:17:35.792254Z","alert_count":1,"request_count":1,"received_data":600,"sent_data":441,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rewards-kaiko.com/archiver.umd.js","fqdn":"rewards-kaiko.com","domain":"rewards-kaiko.com","tld":"com"},"ip":{"addr":"104.21.44.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aed666ccd628b1a17abd4345521f7b67","sha1":"22ec2755fbe961fa25160a8f4b69d9ddbe6c916c","sha256":"2f4d8d6a4101e86456baa283cebb805a5dd7cdd204fec543017a1ebd4864aa46","sha512":"7a00792c9b80517ca358cb87f72e3cd0622a734768740fe0acd0d584a3d3da1957ed9943cdb904c608ce3d14a84b547e9ecff7c4f9b4879d741c54556b6b139b","ssdeep":"3072:ys5p5oR7MFucSDscCnS1LFc4LLhu48MiNYsu+TP+Ia2:yMoTDKSlLLhRCu+ZR","tlshash":"3d8453457dc4f4bc83a15642b311a5f8d4909f21b2c7cb9f6b96bdc3a4d2390b0e27a6","size":400671,"data":"","first_seen":"2026-02-13T06:17:40.00966Z","last_seen":"2026-02-14T11:44:40.931085Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-kaiko.com/","fqdn":"rewards-kaiko.com","domain":"rewards-kaiko.com","tld":"com"},"ip":{"addr":"104.21.44.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1f2dab741de9c8703db0b7b71e90aa96","sha1":"7589906640eb50621a670bd2844b3bd5657a2f55","sha256":"ceac5065e2938c8ab35c01d0d24c7743c72155441b2634e9806d606cd190dac0","sha512":"b1995ef42942fd3afe82566c6c4aa412fd329f60cb18fa140deab808cbaac0e5e103d74c7462cfda03e0005f965fef7c9f75d308824f1467bdeb4e57814f13bf","ssdeep":"3072:7a5N5KXIKjKIUuO48qYPy35LMgLLhkO8YpaLe8ocDDGOi3:7HKBX4GPyDLLhVpGocl2","tlshash":"ce8465447dc9f8bc83b166467311e5f4d4909f21b28bcb9f6b96bd82a4c13d0b0e27a5","size":393921,"data":"","first_seen":"2026-02-13T06:17:40.032982Z","last_seen":"2026-02-14T11:44:40.941978Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-kaiko.com/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fbrain-js.dark.umd.js%3Ft%3D29517824%26u%3Db3e94643589897b64acdfd303803000013d5eb177893b0b08be8427d","fqdn":"rewards-kaiko.com","domain":"rewards-kaiko.com","tld":"com"},"ip":{"addr":"104.21.44.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","size":656642,"data":"","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-08-04T05:59:25.953933Z","times_seen":2650,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rewards-kaiko.com/css2.css","fqdn":"rewards-kaiko.com","domain":"rewards-kaiko.com","tld":"com"},"ip":{"addr":"104.21.44.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rewards-kaiko.com/","date":"2026-02-14T11:44:16.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-kaiko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 03:40:08 GMT","end":"Wed, 22 Apr 2026 04:38:54 GMT"},"fingerprint":{"sha1":"DD:13:16:03:AE:72:34:6A:A4:00:CE:14:44:81:50:FB:0E:36:67:A9","sha256":"85:22:44:71:EF:7B:F4:DC:C1:1E:14:43:C2:24:2E:48:9B:91:02:EE:C5:AA:7C:13:A5:FD:CC:C6:4C:74:58:15"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: rewards-kaiko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-kaiko.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 11:44:16 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 24 Nov 2025 01:32:43 GMT\r\netag: W/\"6923b5bb-8c6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QE1w2kM8isk7A%2F0EoFynxPGJ053qyIQotwIFeNW4GWRMb39Vd45vNKW7MVz3o4iBAQlvsHjN0sXVulC%2BglzRb3mfdRVnObYMBYpsU4HhB3gG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cdc5006fd435864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2246,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"6ea3c324e319d2bcf3179ab316f049be","sha1":"a710d1dee46a0bdae0dc75ad6fe68ef9de039ea4","sha256":"c3544ae52b0898280b7087b975b6e487768c5a832c9d3e9953ef450f2f3eb8fc","sha512":"14a3651667389a4ea8450e59d0b50b1bd32a8b5b64b04f500e8560529c2cdd53b15fcbd43f977935043554845511523f98b9ae7c5ffa82ea0319c3c52144568c","ssdeep":"","tlshash":"0841ab50097b2500eb970cc12bce7e33a99d7192b454ca397ffe0449ac6fd646366b0d","first_seen":"2025-07-12T23:58:59.970805Z","last_seen":"2026-02-14T11:44:40.92531Z","times_seen":8,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"rewards-kaiko.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rewards-kaiko.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-kaiko.com/css2-1.css","fqdn":"rewards-kaiko.com","domain":"rewards-kaiko.com","tld":"com"},"ip":{"addr":"104.21.44.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rewards-kaiko.com/","date":"2026-02-14T11:44:16.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-kaiko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 03:40:08 GMT","end":"Wed, 22 Apr 2026 04:38:54 GMT"},"fingerprint":{"sha1":"DD:13:16:03:AE:72:34:6A:A4:00:CE:14:44:81:50:FB:0E:36:67:A9","sha256":"85:22:44:71:EF:7B:F4:DC:C1:1E:14:43:C2:24:2E:48:9B:91:02:EE:C5:AA:7C:13:A5:FD:CC:C6:4C:74:58:15"}}},"request":{"raw":"GET /css2-1.css HTTP/1.1\r\nHost: rewards-kaiko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-kaiko.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 11:44:16 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 24 Nov 2025 01:32:43 GMT\r\netag: W/\"6923b5bb-13b6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BZFIf9Qadk7WZXG7OtVVEZ%2FwKszB2rDfljOUmheKS7KMkUy9UFJ8sn%2BMRHi79P%2BuUk5hNAqmrdhv4RPtHqPOrj8qrzxv0r76HZLi4fQsudIW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cdc5006fd445864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5046,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ea8cd4cda12010e6cbc06311a18362d5","sha1":"99bad671f5548a38a76e82817610318b8931a629","sha256":"d7a033e735a8188ec28b407a563559ec333dca5013e1297fede8be5f30199071","sha512":"c8230534b172ce48bef547d97256de7d5e7b60700c5e9b81ab21568be6f33b76b115465c7149da347153f0b70629a4d8ab048f5a71202f1f9fc6ac8c02f5ed9b","ssdeep":"96:AOO1axwOO1a4FZOhOO1aZOO1aiJc+udOO1aH3NtOOEaxwOOEa4FZOhOOEaZOOEae:FxVlyqqfH9xolTLqmH+xvlMkqFH+","tlshash":"aca1ac8014576200e6972cc927cf3f269d4da252b495c9383ffe1868bdeec651362b2d","first_seen":"2025-07-12T23:58:59.965082Z","last_seen":"2026-02-14T11:44:40.927347Z","times_seen":8,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"rewards-kaiko.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rewards-kaiko.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-kaiko.com/pe0rMIWbN4JFplR2FI5XEtCaBg.woff2","fqdn":"rewards-kaiko.com","domain":"rewards-kaiko.com","tld":"com"},"ip":{"addr":"104.21.44.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rewards-kaiko.com/","date":"2026-02-14T11:44:17.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-kaiko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 03:40:08 GMT","end":"Wed, 22 Apr 2026 04:38:54 GMT"},"fingerprint":{"sha1":"DD:13:16:03:AE:72:34:6A:A4:00:CE:14:44:81:50:FB:0E:36:67:A9","sha256":"85:22:44:71:EF:7B:F4:DC:C1:1E:14:43:C2:24:2E:48:9B:91:02:EE:C5:AA:7C:13:A5:FD:CC:C6:4C:74:58:15"}}},"request":{"raw":"GET /pe0rMIWbN4JFplR2FI5XEtCaBg.woff2 HTTP/1.1\r\nHost: rewards-kaiko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-kaiko.com/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 11:44:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 17592\r\ncast-mode: default\r\nlast-modified: Mon, 24 Nov 2025 01:32:43 GMT\r\netag: \"6923b5bb-44b8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=29fmV9Qo5WbqOK%2F5RjmiDpgYb3NLxerpvJ5tLfHz%2FSJDGdzwwEPazWE0e%2BB9ZieYP4Tt7r9clunOQfGmrXdDrpAKvdOIdjKIybJRaFVJNEl9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdc500a8dde5864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17592,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17592, version 1.0","md5":"b4854f78fe5ed91f549d42e491910d25","sha1":"c3637b62132b1f35bbcb5d21f847211bd1965037","sha256":"5ec42bf10dabbf847b2a6f2e4de0ea237c23bc810ca2b0870f575db7db67fc34","sha512":"cc597c3b44307d412da93a18ca2e0f9759c906376d3fe47d64d6489cf8c5a6bd75dd0fdab1b391e66b34368cb8641e9461419bb4459a6f6a703775cdc66e1f29","ssdeep":"384:+2/hsJ3u5kVLp7fRQOlECxXYaIf2XqnIqGPjl5u2:+seld5QO/xXmTgl5u2","tlshash":"1d82e1c9cd929581ee9ce33f34d598f84a3fdb995620914645bb34c94b8b89e0f12f23","first_seen":"2025-06-12T06:08:27.321239Z","last_seen":"2026-02-14T11:44:40.928451Z","times_seen":13,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":153,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"rewards-kaiko.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rewards-kaiko.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-kaiko.com/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fbrain-js.dark.umd.js%3Ft%3D29517824%26u%3Db3e94643589897b64acdfd303803000013d5eb177893b0b08be8427d","fqdn":"rewards-kaiko.com","domain":"rewards-kaiko.com","tld":"com"},"ip":{"addr":"104.21.44.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rewards-kaiko.com/","date":"2026-02-14T11:44:17.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-kaiko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 03:40:08 GMT","end":"Wed, 22 Apr 2026 04:38:54 GMT"},"fingerprint":{"sha1":"DD:13:16:03:AE:72:34:6A:A4:00:CE:14:44:81:50:FB:0E:36:67:A9","sha256":"85:22:44:71:EF:7B:F4:DC:C1:1E:14:43:C2:24:2E:48:9B:91:02:EE:C5:AA:7C:13:A5:FD:CC:C6:4C:74:58:15"}}},"request":{"raw":"GET /secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fbrain-js.dark.umd.js%3Ft%3D29517824%26u%3Db3e94643589897b64acdfd303803000013d5eb177893b0b08be8427d HTTP/1.1\r\nHost: rewards-kaiko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-kaiko.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 11:44:17 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\nvary: Accept-Encoding\r\ncache-control: max-age=2592000, must-revalidate\r\netag: W/\"a0502-14+i6Bt7XM8ofHk8WpmFyqoPYWI\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=brain-js.dark.umd.js\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/14/2026 11:44:17\r\ncdn-edgestorageid: 879\r\ncdn-requestid: 589d360ef83e46c355459dd90e71e149\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tj6Yl0pI8AcClGETgyXc%2F32I6o22YG1YEL26Pmwhrl4%2FA4DjTnNX6iTcnbbfdpu7afaNQF6iieH4cmFC%2B6u8IvovlhaYIkwz%2B%2BvuTNAjGXUG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdc500bee165864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":656642,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-08-04T05:59:25.953933Z","times_seen":2650,"resource_available":true,"data":null}},"time_used":444,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":345,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rewards-kaiko.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"rewards-kaiko.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arcterminal.xyz/Kaiko-Logo.png","fqdn":"arcterminal.xyz","domain":"arcterminal.xyz","tld":"xyz"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-kaiko.com/","date":"2026-02-14T11:44:17.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arcterminal.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 20:31:15 GMT","end":"Mon, 30 Mar 2026 20:31:14 GMT"},"fingerprint":{"sha1":"4C:AA:C4:38:AD:F2:12:4D:D4:9D:81:E0:5C:AE:24:17:B3:92:71:97","sha256":"00:3D:E8:0F:28:19:37:4B:2F:37:9A:ED:BF:74:EF:11:94:9C:92:04:36:A7:F7:F0:3E:51:4B:DE:3C:1A:8A:D7"}}},"request":{"raw":"GET /Kaiko-Logo.png HTTP/1.1\r\nHost: arcterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-kaiko.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 106023\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"404\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 14 Feb 2026 11:44:17 GMT\r\netag: \"82fa216a16afbd462b77a9f4eff3fdec\"\r\nlast-modified: Fri, 13 Feb 2026 06:17:14 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /404\r\nx-next-error-status: 404\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vgjqn-1771069457534-874ee1fab8c0\r\ncontent-length: 4017\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T19:53:58.870428Z","times_seen":17859978,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":75,"connect":1,"send":0,"wait":21,"receive":1,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"arcterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-kaiko.com/archiver.umd.js","fqdn":"rewards-kaiko.com","domain":"rewards-kaiko.com","tld":"com"},"ip":{"addr":"104.21.44.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rewards-kaiko.com/","date":"2026-02-14T11:44:16.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-kaiko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 03:40:08 GMT","end":"Wed, 22 Apr 2026 04:38:54 GMT"},"fingerprint":{"sha1":"DD:13:16:03:AE:72:34:6A:A4:00:CE:14:44:81:50:FB:0E:36:67:A9","sha256":"85:22:44:71:EF:7B:F4:DC:C1:1E:14:43:C2:24:2E:48:9B:91:02:EE:C5:AA:7C:13:A5:FD:CC:C6:4C:74:58:15"}}},"request":{"raw":"GET /archiver.umd.js HTTP/1.1\r\nHost: rewards-kaiko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-kaiko.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 11:44:16 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Mon, 24 Nov 2025 01:32:43 GMT\r\netag: W/\"6923b5bb-61d1f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UVOLFzMxA2kwow903%2F3t9IQpotzmxdIraTL1WtB7bg3w3dlA%2FsHwoA4BzjgSdATTRlgTorx0USZ9vV0LNmLnljpxTMT9aHhtnA5r8Dwpb0lZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cdc5006fd465864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":400671,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65286)","md5":"aed666ccd628b1a17abd4345521f7b67","sha1":"22ec2755fbe961fa25160a8f4b69d9ddbe6c916c","sha256":"2f4d8d6a4101e86456baa283cebb805a5dd7cdd204fec543017a1ebd4864aa46","sha512":"7a00792c9b80517ca358cb87f72e3cd0622a734768740fe0acd0d584a3d3da1957ed9943cdb904c608ce3d14a84b547e9ecff7c4f9b4879d741c54556b6b139b","ssdeep":"3072:ys5p5oR7MFucSDscCnS1LFc4LLhu48MiNYsu+TP+Ia2:yMoTDKSlLLhRCu+ZR","tlshash":"3d8453457dc4f4bc83a15642b311a5f8d4909f21b2c7cb9f6b96bdc3a4d2390b0e27a6","first_seen":"2026-02-13T06:17:40.00966Z","last_seen":"2026-02-14T11:44:40.931085Z","times_seen":2,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"rewards-kaiko.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rewards-kaiko.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-kaiko.com/Kaiko-Logo.png","fqdn":"rewards-kaiko.com","domain":"rewards-kaiko.com","tld":"com"},"ip":{"addr":"104.21.44.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-kaiko.com/","date":"2026-02-14T11:44:16.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-kaiko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 03:40:08 GMT","end":"Wed, 22 Apr 2026 04:38:54 GMT"},"fingerprint":{"sha1":"DD:13:16:03:AE:72:34:6A:A4:00:CE:14:44:81:50:FB:0E:36:67:A9","sha256":"85:22:44:71:EF:7B:F4:DC:C1:1E:14:43:C2:24:2E:48:9B:91:02:EE:C5:AA:7C:13:A5:FD:CC:C6:4C:74:58:15"}}},"request":{"raw":"GET /Kaiko-Logo.png HTTP/1.1\r\nHost: rewards-kaiko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-kaiko.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 11:44:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 65035\r\ncast-mode: default\r\nlast-modified: Mon, 24 Nov 2025 01:32:43 GMT\r\netag: \"6923b5bb-fe0b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MEY4IZYwo7GBH%2Fu%2FIGF9pK9VsqDyOFt3VFOTTAspqjjVr%2Fnon3KSw%2FKQJAv9a1BwAlGZ0AmcKPMXyWe05cmb4D2ZBDDLxuyhycCcN0XLUIqo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdc5006fd475864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65035,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1370 x 1370, 8-bit/color RGBA, non-interlaced","md5":"c713fbcfb68854aa4184a05c2b2b4cbc","sha1":"f18d2008048afcc9d3b8bbc37c04f31c2f393fc1","sha256":"afc0948e3895bdb8468ae9f173288ebef3aee305640c1d0e6de8604131d3372a","sha512":"2f31c478e91d7faa71c205208adf48f4f07405a6936b7771b2e9ec3cee96b5500c1c8cdbde046f89d5a7618d6d5f6b72824dae1322731626591bce073c8bd73b","ssdeep":"1536:pRDI06s2KNk7ZeoDA/wYRmnv8MMs6IoU9RG:fV6s7Nk1eoDOAnvSsToUXG","tlshash":"b95302572d7b262bb5e858fcdb70184fa856c94fdc42a401773ea7848f4b21c449972a","first_seen":"2025-07-12T23:58:59.971771Z","last_seen":"2026-02-14T11:44:40.932256Z","times_seen":8,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"rewards-kaiko.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rewards-kaiko.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-kaiko.com/css2-2.css","fqdn":"rewards-kaiko.com","domain":"rewards-kaiko.com","tld":"com"},"ip":{"addr":"104.21.44.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rewards-kaiko.com/","date":"2026-02-14T11:44:16.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-kaiko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 03:40:08 GMT","end":"Wed, 22 Apr 2026 04:38:54 GMT"},"fingerprint":{"sha1":"DD:13:16:03:AE:72:34:6A:A4:00:CE:14:44:81:50:FB:0E:36:67:A9","sha256":"85:22:44:71:EF:7B:F4:DC:C1:1E:14:43:C2:24:2E:48:9B:91:02:EE:C5:AA:7C:13:A5:FD:CC:C6:4C:74:58:15"}}},"request":{"raw":"GET /css2-2.css HTTP/1.1\r\nHost: rewards-kaiko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-kaiko.com/index-CU8NLXiK.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 11:44:16 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 24 Nov 2025 01:32:43 GMT\r\netag: W/\"6923b5bb-d24\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s8s%2Bf8%2Bx%2FiIcfXqQL6%2BRymKloy7q1MMMatYJUWv6iDxDUbtK9dn85PkyDUvGH0gys%2B62l6bRAnpSdoTGs3Nx0AHiBSh4ZerYVHnW2Z6GlqCs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cdc50084d675864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3364,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e9f5d55937a2fc647fefb53c6febb6f1","sha1":"99ad7a1b5101cc76c4f26a10fb118a3bd8e2c08c","sha256":"74b9a390737057efda87eaf2066013cffce0d710b08363b101e622a4d226a5fd","sha512":"5061ca71788096e0fd2a544e333f742b99731dc83a2b5e5f774cb5b8faa3369126249027f330dc85fd36f2115ea9e1343717c2ba97f80ada4ee10c2223851fa3","ssdeep":"","tlshash":"cc61ac80145b6200e6572cc927cf3f269d4da252b495c9383ffe1868bdeac655362f2d","first_seen":"2025-07-12T23:58:59.975542Z","last_seen":"2026-02-14T11:44:40.934508Z","times_seen":8,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"rewards-kaiko.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rewards-kaiko.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-kaiko.com/secureproxy?e=ping_proxy","fqdn":"rewards-kaiko.com","domain":"rewards-kaiko.com","tld":"com"},"ip":{"addr":"104.21.44.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rewards-kaiko.com/","date":"2026-02-14T11:44:17.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-kaiko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 03:40:08 GMT","end":"Wed, 22 Apr 2026 04:38:54 GMT"},"fingerprint":{"sha1":"DD:13:16:03:AE:72:34:6A:A4:00:CE:14:44:81:50:FB:0E:36:67:A9","sha256":"85:22:44:71:EF:7B:F4:DC:C1:1E:14:43:C2:24:2E:48:9B:91:02:EE:C5:AA:7C:13:A5:FD:CC:C6:4C:74:58:15"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: rewards-kaiko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rewards-kaiko.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 11:44:17 GMT\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=4,i=?0\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 14 Feb 2026 11:44:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NNIGD%2B%2FEvWZN75mR%2FLAtxayd9uXGMJPeJQaQJxsytnagXLMvwOrh1ppPkfwMtHsMCXdzhtOgFg5WZqoLSHiTWKYy6sTiUs6bZa46JEbn6eiP\"}]}\r\ncf-ray: 9cdc500a5dc55864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-08-12T19:42:23.525599Z","times_seen":9038,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":165,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rewards-kaiko.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"rewards-kaiko.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-kaiko.com/bgg.jpg","fqdn":"rewards-kaiko.com","domain":"rewards-kaiko.com","tld":"com"},"ip":{"addr":"104.21.44.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-kaiko.com/","date":"2026-02-14T11:44:17.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-kaiko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 03:40:08 GMT","end":"Wed, 22 Apr 2026 04:38:54 GMT"},"fingerprint":{"sha1":"DD:13:16:03:AE:72:34:6A:A4:00:CE:14:44:81:50:FB:0E:36:67:A9","sha256":"85:22:44:71:EF:7B:F4:DC:C1:1E:14:43:C2:24:2E:48:9B:91:02:EE:C5:AA:7C:13:A5:FD:CC:C6:4C:74:58:15"}}},"request":{"raw":"GET /bgg.jpg HTTP/1.1\r\nHost: rewards-kaiko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-kaiko.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 11:44:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 100982\r\ncast-mode: default\r\nlast-modified: Mon, 24 Nov 2025 01:32:43 GMT\r\netag: \"6923b5bb-18a76\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rk0hiQmWy62PUAp1hUC46uY5pjc8adNfj38eyTjzYmcsR11HA1IY0DWtWzf%2Fpoki3qgOfuU7QlJBiPRw0Am0jWULQXpdWPMzyMH7gI4OMYJk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdc500a8dd75864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":100982,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 1390x763, components 3","md5":"4b2d2d89bd799804eae76f01ac7e445d","sha1":"474f01940f70098e9119fee506999cfaf406e44c","sha256":"b1477f552d1698b544a30839302c7bffb24eae785cdecd33d4cca426dcc8096b","sha512":"03e5e3a6cd19d7652f98978571d9a792089b685759994917d8d4f475638e25b35b26afa60cca76ebda8f41439b09d2688d4b847c5b01194928c2e8187246a1f8","ssdeep":"3072:3iGL8L9QKcx76HTWjv5DgEZaSf6toz2tI:3iq8Rcx6HTWjRWtoz2G","tlshash":"a1a3d0134d1097d2f56982e8bf538e9c2b573f1cb4827a9f64aa4edfba506045c8c42e","first_seen":"2025-07-12T23:58:59.966473Z","last_seen":"2026-02-14T11:44:40.936469Z","times_seen":7,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":186,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"rewards-kaiko.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rewards-kaiko.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-kaiko.com/","fqdn":"rewards-kaiko.com","domain":"rewards-kaiko.com","tld":"com"},"ip":{"addr":"104.21.44.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T11:44:16.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-kaiko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 03:40:08 GMT","end":"Wed, 22 Apr 2026 04:38:54 GMT"},"fingerprint":{"sha1":"DD:13:16:03:AE:72:34:6A:A4:00:CE:14:44:81:50:FB:0E:36:67:A9","sha256":"85:22:44:71:EF:7B:F4:DC:C1:1E:14:43:C2:24:2E:48:9B:91:02:EE:C5:AA:7C:13:A5:FD:CC:C6:4C:74:58:15"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rewards-kaiko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 11:44:16 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 24 Nov 2025 01:32:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qzV3LZ%2Fex9L2PIffvz4dvWKRq%2B43kS%2BcgntiTiOS65RDjq3i%2B4FIpM%2FI00GZXJdYFOjfaAvh8KJmmhaWP6W6VP1ZF5u5tgxTt%2BriX3xIsWIw\"}]}\r\nage: 105757\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cdc50058c294453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14899,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (5917)","md5":"ed9be2035c241fe1cac05743a7c963e2","sha1":"c867269ee464a79bdf9b264dfe6e42d41853c48f","sha256":"098b60cd56aef535663dc0b664a03cbcfe06f1ef9d98d0023f7904e4e003cd1d","sha512":"d948d64226f21d59e36121df27ab8b98a04858ad8d5325bbea65a2c88240dc9545eb57dc2c86757c40e89a469fe37fc10bbf887d95f626756b25da0cceebd6ee","ssdeep":"192:+HPQl4jNsjufopR5Q7QwQJ9+ZNoauu2aS+IQDhaolpDLgugS3sFz41:+6SrIs4E8FU1","tlshash":"e56219e68934110b51030e0bb18bbbc622cd9a43fa13c998facd71a54fc594dedb2f65","first_seen":"2026-02-13T06:17:40.004755Z","last_seen":"2026-02-14T11:44:40.937628Z","times_seen":2,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":60,"dns":25,"connect":8,"send":0,"wait":22,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rewards-kaiko.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"rewards-kaiko.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-kaiko.com/index-CU8NLXiK.css","fqdn":"rewards-kaiko.com","domain":"rewards-kaiko.com","tld":"com"},"ip":{"addr":"104.21.44.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rewards-kaiko.com/","date":"2026-02-14T11:44:16.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-kaiko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 03:40:08 GMT","end":"Wed, 22 Apr 2026 04:38:54 GMT"},"fingerprint":{"sha1":"DD:13:16:03:AE:72:34:6A:A4:00:CE:14:44:81:50:FB:0E:36:67:A9","sha256":"85:22:44:71:EF:7B:F4:DC:C1:1E:14:43:C2:24:2E:48:9B:91:02:EE:C5:AA:7C:13:A5:FD:CC:C6:4C:74:58:15"}}},"request":{"raw":"GET /index-CU8NLXiK.css HTTP/1.1\r\nHost: rewards-kaiko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-kaiko.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 11:44:16 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 24 Nov 2025 01:32:43 GMT\r\netag: W/\"6923b5bb-15af6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cceS5euqtfALdqjpWzcq%2BZcIHHno4yqj07TAJV8tvblVxx3lv4%2FguPPZSAWwGFSUKt10iwUgxWhWPX3%2FChOk0xL2OzlUakQeLXdktI%2Bb8y%2Bg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cdc5006fd455864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88822,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f07f9c8356caca3eab02a217e50de84d","sha1":"b2586dbd1debbfac07cffc1f2401f41519e433d3","sha256":"4933d4f85973920aa17c97597361bf82a0225399422fe8cbcb57cfd81ede24ec","sha512":"e15365c8b8e229a7862e488cf78dc7e9daf0da9fad2cc393f99afe97654016a6be4a6e4a0b3f99a5fb65537ade8595bba264e2d6444ca14b9c315089154c4632","ssdeep":"1536:xqhQZq74LqnCABT02SUyowfGmeG2K+CRk:xqhQZq74LqnC4KUCGmeG2K+CRk","tlshash":"2e9351296a50403fbc67a0f9d6d8fa5df61fb0c1de3a5ae9bc82511067e23f64c97600","first_seen":"2025-07-12T23:58:59.973806Z","last_seen":"2026-02-14T11:44:40.938602Z","times_seen":8,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"rewards-kaiko.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rewards-kaiko.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-kaiko.com/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2","fqdn":"rewards-kaiko.com","domain":"rewards-kaiko.com","tld":"com"},"ip":{"addr":"104.21.44.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rewards-kaiko.com/","date":"2026-02-14T11:44:17.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-kaiko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 03:40:08 GMT","end":"Wed, 22 Apr 2026 04:38:54 GMT"},"fingerprint":{"sha1":"DD:13:16:03:AE:72:34:6A:A4:00:CE:14:44:81:50:FB:0E:36:67:A9","sha256":"85:22:44:71:EF:7B:F4:DC:C1:1E:14:43:C2:24:2E:48:9B:91:02:EE:C5:AA:7C:13:A5:FD:CC:C6:4C:74:58:15"}}},"request":{"raw":"GET /JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1\r\nHost: rewards-kaiko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-kaiko.com/css2-2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 11:44:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 37828\r\ncast-mode: default\r\nlast-modified: Mon, 24 Nov 2025 01:32:43 GMT\r\netag: \"6923b5bb-93c4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DJtOU7PUn%2FYZTlWJoxyrAranescy%2FwjmlrN4YksgmixRGgcDCuN%2BXGJcTKUlxx0Ww4lyJ7uGFL8BxKklYmiCuYDCFAiweQJHkrdBOVbWA65m\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdc500a9de15864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37828,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37828, version 1.0","md5":"50b140b1e97d859d6d0603414f4298ee","sha1":"500e4872ee1ba9cf89f1ba626d64987b0f9ab5c9","sha256":"fdc9964050bfa24c27a3c76c6791b3674292a5f352cbc83d7a4dc49595bc3fb1","sha512":"55ef84e956a7943e3fc61a8a349e64e9f35b7dfc63402ab52b995f43a7cd4b1d2acd300126dcdd610d0b106af426848f998ccf154f712034422d242d6ad9130d","ssdeep":"768:TLreREud92B1C5buEpioxWe6O1ESHFnLQkbknuF1dcjI5djeBX:Tu68248oxWe6O19H1zwnubdk","tlshash":"a103e0d50dd6198aa53b3f7f467f0a3e1b12c429a57180f44a135fd32e169a7e910f84","first_seen":"2024-11-07T01:11:00.992427Z","last_seen":"2026-08-12T19:49:25.124883Z","times_seen":41233,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"rewards-kaiko.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rewards-kaiko.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-kaiko.com/favicon.ico","fqdn":"rewards-kaiko.com","domain":"rewards-kaiko.com","tld":"com"},"ip":{"addr":"104.21.44.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-kaiko.com/","date":"2026-02-14T11:44:17.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-kaiko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 03:40:08 GMT","end":"Wed, 22 Apr 2026 04:38:54 GMT"},"fingerprint":{"sha1":"DD:13:16:03:AE:72:34:6A:A4:00:CE:14:44:81:50:FB:0E:36:67:A9","sha256":"85:22:44:71:EF:7B:F4:DC:C1:1E:14:43:C2:24:2E:48:9B:91:02:EE:C5:AA:7C:13:A5:FD:CC:C6:4C:74:58:15"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: rewards-kaiko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-kaiko.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 11:44:17 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\ncast-mode: default\r\nlast-modified: Mon, 24 Nov 2025 01:32:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"6923b5bb-3aee\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iAjvVsQxuLEtEsYXFq61YD0oRBWKS3YMVRVNazHlryxl5qlMf2omWVMn%2BQOn4c8B7XK6EZr4pxVSzbDtIE3pJiYH0cZWQwNHcQdE%2BTS5bnAP\"}]}\r\ncf-ray: 9cdc500cee465864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"e0d271cb2104b4a4ba7d4bf7b1995389","sha1":"a62fd143cdd897cc30a0336565eb94b95a8e8a4a","sha256":"742e40dec82ef84d9d7036fce69a2217e36a6c29ccc90d846c9f2947cc8432e2","sha512":"7b2910c2174bcf2b1573faee6bd2b4eff4ab02e3d5029ae3f824d1f4cfc864233733b9f819b030115f6c7eb6426f74950f9e17fc02b9ceda03cf8a11fa13ccf0","ssdeep":"96:hsArnvbzRY7NcO+S2wJwdJMwGXYpbhjiAa2lVzKxS2TAGdK:hs6zRY7KpSrJwd2GjiAzx2zK","tlshash":"a862fcd2b104ea54f95a8bb0ce42e6f54ab97e16de062d1730d47f8b7972087e70880a","first_seen":"2025-07-12T23:58:59.97806Z","last_seen":"2026-02-14T11:44:40.94005Z","times_seen":8,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"rewards-kaiko.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rewards-kaiko.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-kaiko.com//secureproxy?s=%2Fjmpd%2F","fqdn":"rewards-kaiko.com","domain":"rewards-kaiko.com","tld":"com"},"ip":{"addr":"104.21.44.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rewards-kaiko.com/","date":"2026-02-14T11:44:17.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-kaiko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 03:40:08 GMT","end":"Wed, 22 Apr 2026 04:38:54 GMT"},"fingerprint":{"sha1":"DD:13:16:03:AE:72:34:6A:A4:00:CE:14:44:81:50:FB:0E:36:67:A9","sha256":"85:22:44:71:EF:7B:F4:DC:C1:1E:14:43:C2:24:2E:48:9B:91:02:EE:C5:AA:7C:13:A5:FD:CC:C6:4C:74:58:15"}}},"request":{"raw":"POST //secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: rewards-kaiko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rewards-kaiko.com/\r\ncontent-type: application/json\r\nContent-Length: 1737\r\nOrigin: https://rewards-kaiko.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1737,"data":"{\"route\":\"8XUwkBv9vhPYfVpD1fxb7EC65sUXJdqr\",\"payload\":\"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\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 11:44:18 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"db-BQlUJxz8Qf9xLxc12k2JVQUhuco\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1771069517977\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/14/2026 11:44:18\r\ncdn-edgestorageid: 1056\r\ncdn-requestid: d00937629e0ed2e63b219f3f31e7ad4c\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rc9H2C0JnkChLVfByW3Skn8TBw3j9HDLsXXj2JzX8BExKgQNd8Ryn0iWs20rXcQyOf3V3Eoqp%2BPiVLdmo1zj1dXvdTYc1nEQcIMECDdDOWER\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cdc500f8e885864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":219,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"745ceaa2787df273b9bb69b8f2095fd5","sha1":"050954271cfc41ff712f1735da4d89550521b9ca","sha256":"8fc27c3a74a0b36f81a8b6e87d0d198a01777d2dfa7a3537e037a9e2b808a525","sha512":"e14a6727e688da69f69d74aa31126af463e1e5c3cd0c84ca0bdfe7fe15d7746ee18242c9a226ae2487704b562205499dc87465a01941e00f9f13f3a7b20874c4","ssdeep":"","tlshash":"cbd023c14131d310b1809267435473737d38a81008551dc030010ed2b038e020818f39","first_seen":"2026-02-14T11:44:40.941129Z","last_seen":"2026-02-14T11:44:40.941129Z","times_seen":1,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rewards-kaiko.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"rewards-kaiko.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}