{"report_id":"2222c720-937c-435a-a3e9-a63b0c36e380","version":6,"status":"done","tags":[],"date":"2025-08-14T14:35:09Z","url":{"schema":"https","addr":"claim-retikrewards.vercel.app/","fqdn":"claim-retikrewards.vercel.app","domain":"claim-retikrewards.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"claim-retikrewards.vercel.app/","fqdn":"claim-retikrewards.vercel.app","domain":"claim-retikrewards.vercel.app","tld":"vercel.app"},"title":"Retik on Ethereum - The Retik is here"},"submit":{"url":{"schema":"https","addr":"claim-retikrewards.vercel.app/","fqdn":"claim-retikrewards.vercel.app","domain":"claim-retikrewards.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-18T14:35:09Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-14T14:34:48Z","timestamp":1755182088,"ip_dst":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.3","port":51016,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-08-14T14:34:48.024519+0000\",\"flow_id\":1215256500651445,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.3\",\"src_port\":51016,\"dest_ip\":\"104.26.12.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":3514,\"start\":\"2025-08-14T14:34:48.017845+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-08-13T15:14:14.224423Z","alert_count":0,"request_count":1,"received_data":25198,"sent_data":499,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.ipify.org","ip":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":8166,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2025-08-13T23:19:33.708908Z","alert_count":0,"request_count":1,"received_data":485,"sent_data":410,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"claim-retikrewards.vercel.app","ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2025-08-05T23:24:13.471177Z","last_seen":"2025-08-05T23:24:13.471177Z","alert_count":0,"request_count":5,"received_data":2562977,"sent_data":2201,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Webflow","description":"Webflow is Software-as-a-Service (SaaS) for website building and hosting.","website":"https://webflow.com","common_platform_enumeration":"","icon":"webflow.svg","categories":["Page builders","CMS"]}]},{"fqdn":"cdn.utmify.com.br","ip":{"addr":"104.26.10.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-11-07","domain_rank":1350186,"first_seen":"2024-02-12T18:06:21Z","last_seen":"2025-08-07T10:28:52.29803Z","alert_count":0,"request_count":2,"received_data":53027,"sent_data":762,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"cdn.matomo.cloud","ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2017-09-08","domain_rank":124973,"first_seen":"2019-09-27T14:00:38Z","last_seen":"2025-08-11T14:50:26.893313Z","alert_count":0,"request_count":1,"received_data":686,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"api6.ipify.org","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":226847,"first_seen":"2019-05-13T11:53:14Z","last_seen":"2025-08-13T07:22:39.030648Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":411,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-14T14:34:48Z","timestamp":1755182088,"ip_dst":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.3","port":51016,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-08-14T14:34:48.024519+0000\",\"flow_id\":1215256500651445,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.3\",\"src_port\":51016,\"dest_ip\":\"104.26.12.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":3514,\"start\":\"2025-08-14T14:34:48.017845+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"claim-retikrewards.vercel.app/","fqdn":"claim-retikrewards.vercel.app","domain":"claim-retikrewards.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d3738cd05e71b4294535a4e56d7b8464","sha1":"073878d10cc6a4b801f9482a9e8f28241142c809","sha256":"f68b77d66954411f6986b7544f23a445fb9cb3d0e6ef5f11b15986a06b02ea8b","sha512":"30b45741e96931400471529942e6219569435c436d6afa53da400e80eedb76f2a22f0c9ad3d6dacd7b6fdc5565ba4c86b1793c22db3a77b2216ae2081c0b99ec","ssdeep":"","tlshash":"16e0680538a1526277ab203d627a9705b642902e6441c406b99a9d8cbe65be78b152c8","size":371,"data":"","first_seen":"2025-08-05T23:24:16.365997Z","last_seen":"2025-08-14T14:35:11.734443Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-retikrewards.vercel.app/","fqdn":"claim-retikrewards.vercel.app","domain":"claim-retikrewards.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"67c4382e4e35672cac7addb60ad92283","sha1":"83e2ba673295e8cf8e0916189b45bcdf64893126","sha256":"ee183d093047b560bd0701d17787106f082de4a0b107a8b4dbee69ac96765d77","sha512":"29cf10ddfef451e7f5a3fb7d852e64d53b646b383550c1a1ab6a1e4007b5c6977938aa5a405c416fdb6cc2247286b166544a982ad32708dd9589bdbcdac417ec","ssdeep":"","tlshash":"82d0a714dca182f82817255e4317ef8b09e192c77408d988f11f8f07cf5050c4a417ee","size":269,"data":"","first_seen":"2025-07-12T22:39:29.569052Z","last_seen":"2026-03-09T20:46:51.162392Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-retikrewards.vercel.app/","fqdn":"claim-retikrewards.vercel.app","domain":"claim-retikrewards.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"032a64a6cc4e2bc238a05c4d91753b25","sha1":"5826a73d56cedf2d458b158163b6ab0b09831959","sha256":"c9a8d3ae5aa75ad2a50a7421f84800b2ff21dbf178385c4fd9104de1470c241a","sha512":"948202a0ceac77bd59c581fb67fd2a6531579498803ecdae793b544e955feddf894306e6353db18ce7f4ec34e4b22979d020fe066c56aa15628330f8eb13dbf9","ssdeep":"","tlshash":"e5d0a73e2a7cab73d97600caa87b7b893cc1643e5482d157828ecd4e3e1ed4619fc011","size":263,"data":"","first_seen":"2024-12-20T08:09:59.288727Z","last_seen":"2025-08-14T14:35:11.737753Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.utmify.com.br/scripts/pixel/pixel.js","fqdn":"cdn.utmify.com.br","domain":"utmify.com.br","tld":"com.br"},"ip":{"addr":"104.26.10.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b740511b73245b5409b808f13a6f215","sha1":"0dd46026a7e56fb9b6423d7f699017c09a70058d","sha256":"21d4c9dd6fda98201e00902d2603d9dfc99f0e16705cad2d4f5553d893445683","sha512":"7564f87659fe36af106151245d312e6304f4313b112478dfec6ed15a5520d272e321afa1d4ea809953128a216b12511e0d67471be85f65e04f1d7c6fc3846d2c","ssdeep":"","tlshash":"2b111254ba2de84007d214e14c2f2526d3753470712e5481a27ffe857924bde6323c7d","size":1000,"data":"","first_seen":"2025-08-14T14:35:11.738992Z","last_seen":"2025-08-14T16:59:01.923739Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.utmify.com.br/scripts/utms/latest.js","fqdn":"cdn.utmify.com.br","domain":"utmify.com.br","tld":"com.br"},"ip":{"addr":"104.26.10.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f205e4a11a1554abc7f9a653029f7808","sha1":"f268843f4850ea535e4bfac33a46431da080b45b","sha256":"ef0ee022dfe06077615b92a896c2691b8bebb829181a8342e723f8e13b4e5b67","sha512":"eb3a29cfe44b3d8890ee933660289628946a4e4d1251c16adea416b85ef7c7e91ec660e85d8e2caafe8593e78d83a590a3143f261f77f61e288e85cce7236129","ssdeep":"","tlshash":"751132f17002e8f58791ddc7056c2135f63e7a31a170d282f7553eaf2c658861931936","size":1020,"data":"","first_seen":"2025-08-14T14:35:11.741711Z","last_seen":"2025-08-14T14:35:11.741711Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"claim-retikrewards.vercel.app/Pepe%20on%20Ethereum%20-%20The%20Pepe%20is%20here_files/2.png","fqdn":"claim-retikrewards.vercel.app","domain":"claim-retikrewards.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-retikrewards.vercel.app/","date":"2025-08-14T14:34:47.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /Pepe%20on%20Ethereum%20-%20The%20Pepe%20is%20here_files/2.png HTTP/1.1\r\nHost: claim-retikrewards.vercel.app\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"2.png\"\r\ncontent-type: image/png\r\ndate: Thu, 14 Aug 2025 14:34:47 GMT\r\netag: \"29add5cd20bad94283f88eb403bcba10\"\r\nlast-modified: Thu, 14 Aug 2025 14:34:47 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::g7vfw-1755182087691-a50ca5a5362b\r\ncontent-length: 242990\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":242990,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1600 x 1600, 8-bit/color RGBA, non-interlaced","md5":"29add5cd20bad94283f88eb403bcba10","sha1":"aeb1b8f5829c5d4717f5f0607659228b1d0a698a","sha256":"36f66f8f0146079bb48a4c58926af1c1e57cff54b09b3837375427a998c5d9d2","sha512":"a13608526cf162eab26ce9e3b41885d4f673566daa51ae85063700d4f3c968d27236b21d4923b42063cb10cd66aba9be5aba640bfc4e7c917ae4676e0ba86551","ssdeep":"6144:5bWUzYH8YcHAYebg8jIyJGN8K/dJeHOVSQkx3lMy:5bHeUVIm8oJcuiV9","tlshash":"033412edea510919fbd8a779829e075437788e8c4a3b607c07cc9b4c5653cf8ec4879a","first_seen":"2025-08-05T23:24:16.350396Z","last_seen":"2025-08-14T14:35:11.71697Z","times_seen":5,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.utmify.com.br/scripts/utms/latest.js","fqdn":"cdn.utmify.com.br","domain":"utmify.com.br","tld":"com.br"},"ip":{"addr":"104.26.10.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-retikrewards.vercel.app/","date":"2025-08-14T14:34:47.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"utmify.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Jul 2025 02:08:55 GMT","end":"Thu, 09 Oct 2025 03:08:41 GMT"},"fingerprint":{"sha1":"1A:81:66:F3:28:17:80:AB:54:74:6A:03:C0:CA:AA:1E:F0:9F:ED:D0","sha256":"D6:62:61:9C:32:D6:1A:02:13:23:8C:E3:69:DB:16:B9:96:A5:C4:19:0C:DD:5B:5A:CD:73:0D:45:4F:94:EE:F7"}}},"request":{"raw":"GET /scripts/utms/latest.js HTTP/1.1\r\nHost: cdn.utmify.com.br\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 14 Aug 2025 14:34:47 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: br\r\nlast-modified: Fri, 08 Aug 2025 13:35:58 GMT\r\nx-amz-server-side-encryption: AES256\r\netag: W/\"3597da8fec71b3250f509ca225474aaa\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 5QVCEqYv7jeve69lm9G1FTNV6O-mM3xpTKOLKrs24vEzxr2M8oe8Sg==\r\nage: 5977\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=PsOeiLGRr0xxh85O3Ae5kdS0UlqbAXYcSRSuu7fDMiffOAERAM64ypDVwJFfl6gEmiO2s5QogP6dexIhsp1TXyK9fddcEM4RLiGzoolyr5rIV4PcNxyup%2FuRGi%2FQDDww4GSu\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 96f12cd08940568e-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=561\u0026min_rtt=442\u0026rtt_var=153\u0026sent=7\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3276\u0026recv_bytes=1178\u0026delivery_rate=7898181\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=c1d148cbab0ff9d6\u0026ts=82\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":14028,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13985), with no line terminators","md5":"c9722c079a3646cae7c61afd8119a740","sha1":"5a638d078018ced05bbfd1db730c9520a7a8b051","sha256":"8856b15e1da30dbac9c28fd1bcccff5ad37db52c2fb8285b81a6834faa9abf35","sha512":"0e5bb78352034b04b69fc6dcdc78f18415823620369219ce13e2dfae5704e7f218b93130ce7e28c47fd84ca8b4c4e193a3edc6562ecfc4aa8643e24e1b560935","ssdeep":"384:4iyEEbM5EFo1vTCbJeY9pR+dOG9OFYvGmQ9JwQ+MQa+ssRN+7/Ig:5yEEbM5EFo1vTCbJeY9pR+dOG9OFYvGD","tlshash":"715295a4f179e0d412b24dba90b79172f23dbb397004c5a1a00f9d45756dfeb22d3e2a","first_seen":"2025-08-08T17:22:57.938717Z","last_seen":"2026-08-14T13:56:49.057957Z","times_seen":63,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":68,"dns":23,"connect":1,"send":0,"wait":32,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.matomo.cloud/zkairdropstore.matomo.cloud/container_hZxT6CIS.js","fqdn":"cdn.matomo.cloud","domain":"matomo.cloud","tld":"cloud"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-retikrewards.vercel.app/","date":"2025-08-14T14:34:47.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.matomo.cloud","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Wed, 25 Sep 2024 00:00:00 GMT","end":"Thu, 23 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D8:AD:3D:2D:1E:3E:0C:10:B1:C8:0C:BF:87:27:C4:2F:0B:E3:00:50","sha256":"6A:F5:5C:8B:09:02:CA:D2:35:BC:69:CA:CA:04:4F:6F:2F:23:52:C5:68:C1:24:10:63:41:58:DF:EA:C7:DD:81"}}},"request":{"raw":"GET /zkairdropstore.matomo.cloud/container_hZxT6CIS.js HTTP/1.1\r\nHost: cdn.matomo.cloud\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-retikrewards.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: CloudFront\r\ncontent-type: text/html\r\ncontent-length: 0\r\ndate: Thu, 14 Aug 2025 12:00:41 GMT\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Thu, 02 Nov 2023 02:17:11 GMT\r\netag: \"d41d8cd98f00b204e9800998ecf8427e\"\r\nx-amz-version-id: x8CUW72Cdy4wRBv1lXTNc2XlWFvGGyiM\r\naccept-ranges: bytes\r\nx-cache: Error from cloudfront\r\nvia: 1.1 42b1b4c2d68cc43ab5019609cede1d92.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: iRvUBiJWmSKzxmWO_OJJ3nDpNWa4eiDBPXFjfhp0oTagrexw34fprw==\r\nage: 9247\r\nstrict-transport-security: max-age=31536000\r\ncross-origin-resource-policy: cross-origin\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T12:37:27.35363Z","times_seen":17954974,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":65,"dns":23,"connect":22,"send":0,"wait":81,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-retikrewards.vercel.app/ta.png","fqdn":"claim-retikrewards.vercel.app","domain":"claim-retikrewards.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-retikrewards.vercel.app/","date":"2025-08-14T14:34:48.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /ta.png HTTP/1.1\r\nHost: claim-retikrewards.vercel.app\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 83301\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"ta.png\"\r\ncontent-type: image/png\r\ndate: Thu, 14 Aug 2025 14:34:48 GMT\r\netag: \"29add5cd20bad94283f88eb403bcba10\"\r\nlast-modified: Wed, 13 Aug 2025 15:26:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::k5zts-1755182088011-e76e6ee2b10e\r\ncontent-length: 242990\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":242990,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1600 x 1600, 8-bit/color RGBA, non-interlaced","md5":"29add5cd20bad94283f88eb403bcba10","sha1":"aeb1b8f5829c5d4717f5f0607659228b1d0a698a","sha256":"36f66f8f0146079bb48a4c58926af1c1e57cff54b09b3837375427a998c5d9d2","sha512":"a13608526cf162eab26ce9e3b41885d4f673566daa51ae85063700d4f3c968d27236b21d4923b42063cb10cd66aba9be5aba640bfc4e7c917ae4676e0ba86551","ssdeep":"6144:5bWUzYH8YcHAYebg8jIyJGN8K/dJeHOVSQkx3lMy:5bHeUVIm8oJcuiV9","tlshash":"033412edea510919fbd8a779829e075437788e8c4a3b607c07cc9b4c5653cf8ec4879a","first_seen":"2025-08-05T23:24:16.350396Z","last_seen":"2025-08-14T14:35:11.71697Z","times_seen":5,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api6.ipify.org/?format=json","fqdn":"api6.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-retikrewards.vercel.app/","date":"2025-08-14T14:34:48.019Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api6.ipify.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://claim-retikrewards.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T12:37:27.35363Z","times_seen":17954974,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-retikrewards.vercel.app/stylesheet_0.css","fqdn":"claim-retikrewards.vercel.app","domain":"claim-retikrewards.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-retikrewards.vercel.app/","date":"2025-08-14T14:34:47.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /stylesheet_0.css HTTP/1.1\r\nHost: claim-retikrewards.vercel.app\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-retikrewards.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Thu, 14 Aug 2025 14:34:47 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::n2gsb-1755182087689-61c6ea065124\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"36354fe390f61cb4fcaed02d44a3da75","sha1":"9dd00281ae84ef04113d4b8b7d35bbd56b32921c","sha256":"731d90312662c5eb98577ada26481f79cd55bbd481e69eddce55c010f082d196","sha512":"4cb9c2425930f82318ada3246834334b2026d9f54538db218e3d99c9796c798ab56d2e52261005b98d3ade349995e4475483def9b5c300f260d74c0d7a185d64","ssdeep":"","tlshash":"daa0122e084108cd3382009010030235500425119bd0a511118e61403904b8d6b00082","first_seen":"2025-08-14T14:35:11.722456Z","last_seen":"2025-08-14T14:35:11.722456Z","times_seen":1,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026family=Nunito:ital,wght@0,400;0,500;0,600;0,700;1,400;1,500;1,600;1,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-retikrewards.vercel.app/","date":"2025-08-14T14:34:47.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026family=Nunito:ital,wght@0,400;0,500;0,600;0,700;1,400;1,500;1,600;1,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 14 Aug 2025 14:34:47 GMT\r\ndate: Thu, 14 Aug 2025 14:34:47 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24512,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"61d2671500cfe1579751827e2c4137e4","sha1":"2e6c78ad6168f2e16591d0728b89d44b04523904","sha256":"125469dae5eb9ade402b974b4e9d0c73c777f8a76155301d9e10d38a517ab67b","sha512":"a3bf4bae2d5d1d25cd92b4437c2ad9feec0918c1c5ad2495bc84fcbf7125b20be980c62fb8efafad89d8a56b293398169098afad6fee79df2bd272b8a42197e9","ssdeep":"384:bnZsv5puaK2sbip9D2nbHgko2mbgrvh2hblKdYr9pif//:z","tlshash":"19b2d992002bd400aa472cc227cf7f36ee8e61543495c5b9abfd58d89cebd671364b0e","first_seen":"2025-07-06T13:17:42.377577Z","last_seen":"2025-08-14T14:35:11.726026Z","times_seen":12,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":153,"dns":0,"connect":14,"send":0,"wait":36,"receive":0,"ssl":143},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-retikrewards.vercel.app/2d4812a7-6745-4fec-82a1-ef972e6f8503.js","fqdn":"claim-retikrewards.vercel.app","domain":"claim-retikrewards.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-retikrewards.vercel.app/","date":"2025-08-14T14:34:47.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /2d4812a7-6745-4fec-82a1-ef972e6f8503.js HTTP/1.1\r\nHost: claim-retikrewards.vercel.app\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 83311\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"2d4812a7-6745-4fec-82a1-ef972e6f8503.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 14 Aug 2025 14:34:47 GMT\r\netag: \"f57bcb5ae992dbb6a3ede744251cb9de\"\r\nlast-modified: Wed, 13 Aug 2025 15:26:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qkdrf-1755182087694-6334e9d9aa49\r\ncontent-length: 717846\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1862268,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5b1b0731154510c4f7d36b5b3c673dad","sha1":"2d95e4946fdf01507dde53f76ec3f0b67dbe7d1d","sha256":"0a509f5d7849ce759161d3f117d05787c27308ac413dfe44a0489cd1588176ef","sha512":"6848a63c7a6075ae4203ffa2f4da00573839ca519aa216be31002fa377ea54f63dcfafc3eec42f8f02bfdc4418c3c77b070e1b6ac46c4e67b093dc57b8e80bef","ssdeep":"24576:nB2MUozK4MXogAFlvbicvRjkXys9stzVugaYL3LKVslkRd/:0M08NRbicvRYXys9stzk0L3LKVsQ/","tlshash":"9625f95227d0bc5125078fb2bb1af6e0da1eaf5d728484dff5057c54f2a9802ead43b2","first_seen":"2025-08-05T23:24:16.332147Z","last_seen":"2025-08-14T14:35:11.727868Z","times_seen":5,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.utmify.com.br/scripts/pixel/pixel.js","fqdn":"cdn.utmify.com.br","domain":"utmify.com.br","tld":"com.br"},"ip":{"addr":"104.26.10.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-retikrewards.vercel.app/","date":"2025-08-14T14:34:47.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"utmify.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Jul 2025 02:08:55 GMT","end":"Thu, 09 Oct 2025 03:08:41 GMT"},"fingerprint":{"sha1":"1A:81:66:F3:28:17:80:AB:54:74:6A:03:C0:CA:AA:1E:F0:9F:ED:D0","sha256":"D6:62:61:9C:32:D6:1A:02:13:23:8C:E3:69:DB:16:B9:96:A5:C4:19:0C:DD:5B:5A:CD:73:0D:45:4F:94:EE:F7"}}},"request":{"raw":"GET /scripts/pixel/pixel.js HTTP/1.1\r\nHost: cdn.utmify.com.br\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 14 Aug 2025 14:34:47 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: br\r\nlast-modified: Fri, 08 Aug 2025 13:35:58 GMT\r\nx-amz-server-side-encryption: AES256\r\netag: W/\"1dbf4a5692b4833e577ccd806f8c9ad6\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 9ahUfozYvu15o_Hwbzzry-2gKiimHqQjw6-wQzV-M3geQqlQSLarmA==\r\nage: 497\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5dC5dY7JQdSm1fwDymnQlf9rl3kl54QwIobjo12fy0Rdssdw6s1mTtROtaU%2F7h3Vh53IS51OJjLA5alSWfdtHDd%2FM5nlYfCYJ7g99Pt4WAbEcD5jSdPiVeDlUzGTtsmpup%2Bk\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 96f12cd1caca568e-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=648\u0026min_rtt=442\u0026rtt_var=256\u0026sent=14\u0026recv=14\u0026lost=0\u0026retrans=0\u0026sent_bytes=8998\u0026recv_bytes=1260\u0026delivery_rate=7898181\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=c1d148cbab0ff9d6\u0026ts=283\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36756,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (36749), with no line terminators","md5":"1dbf4a5692b4833e577ccd806f8c9ad6","sha1":"7bc9e45ab42df2bc0c92435c8edf7998f24ba854","sha256":"b9261154ce6eaa4cc44c5dc2083a412d0cd7613202a5e762ce8a29799b9e1792","sha512":"b6e7475cc28e67a89e1fd79992bb42fb605d958846c74cfa659bd66cd994b39011ac4adb0ba45d95a2865b9c8339e1524a8a95c0d65e9beb253410c0c8cf5f26","ssdeep":"768:Kcs8TAlfI1b8tWHv7fCqH5TtalmZZAqukM5Ub9zKqDvrWpFcZkHWpe2wCz6RIQFp:1tcIfX40NnmosWN1z6OiltII0A4+D","tlshash":"e9f28785fa97d4540be384e5c8772132f32c3a3e616a8450e23badd6bc187da7263d35","first_seen":"2025-08-08T17:22:57.983903Z","last_seen":"2026-05-27T14:40:34.098417Z","times_seen":267,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/?format=json","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-retikrewards.vercel.app/","date":"2025-08-14T14:34:48.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 23:06:13 GMT","end":"Mon, 06 Oct 2025 00:05:56 GMT"},"fingerprint":{"sha1":"8A:D4:06:E3:DF:41:70:FA:F8:24:61:06:C6:AD:47:97:37:2F:30:94","sha256":"B1:0C:6E:35:A4:D2:D3:A9:97:48:58:62:89:5F:87:76:31:39:A9:9E:3E:0D:7B:F7:56:58:A6:CB:D8:05:1C:19"}}},"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://claim-retikrewards.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 14 Aug 2025 14:34:48 GMT\r\ncontent-type: application/json\r\ncontent-length: 21\r\ncf-ray: 96f12cd24ac456c4-OSL\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=6413\u0026min_rtt=475\u0026rtt_var=11883\u0026sent=8\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3269\u0026recv_bytes=1198\u0026delivery_rate=6571860\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=92fd4b5989e01d71\u0026ts=191\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d69c71af0f191e9a72db6153f8018d1","sha1":"f67c5f2887bc05654b47f76e9621e53a4091aed1","sha256":"5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65","sha512":"fdf43a8f3d843fe9008949d6709c8e2a5cd640f6101522319745f0a829f21dc8f4bd4d70ff3e2f6e1fd53ca0d2dd872bf3588c593a403071102ab28763cbdba5","ssdeep":"","tlshash":"b8700022000000208c80800eca0a032223a0000ac20a00088e800b2288a0b380282032","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-07T07:51:18.251001Z","times_seen":93313,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":30,"dns":1,"connect":1,"send":0,"wait":166,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-retikrewards.vercel.app/","fqdn":"claim-retikrewards.vercel.app","domain":"claim-retikrewards.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-14T14:34:47.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claim-retikrewards.vercel.app\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 83312\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Thu, 14 Aug 2025 14:34:47 GMT\r\netag: \"34f13eaf21da7f517300a49c0a8bad96\"\r\nlast-modified: Wed, 13 Aug 2025 15:26:15 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::g7vfw-1755182087303-32edd9ef1d15\r\ncontent-length: 76117\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Webflow","description":"Webflow is Software-as-a-Service (SaaS) for website building and hosting.","website":"https://webflow.com","common_platform_enumeration":"","icon":"webflow.svg","categories":["Page builders","CMS"]}],"data":{"size":212037,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48532)","md5":"34f13eaf21da7f517300a49c0a8bad96","sha1":"05b6ab44e7ece3e5235d4416a75e8c8c62a7da13","sha256":"03e3475d6a7485d4f0140c39c827b5442335d4a748e3ca1eaab1ff65aaa72031","sha512":"3ab5c9cdf1ac42a0cbd1d0dc459704ad9ce69ea53651e22fabdd1318c8af922f13b433724addb590c1c7f89d3db7a3c6a27bb970614ce1725981cd90f24559be","ssdeep":"3072:uM+EaVoxwWXjGGaJ7g+wzEZl8xd4ZYA1L3GF+zFvjeGj6B61ihVRup2vrmmQRMYZ:tba7ocDBreo6BHhVgp2vrmmQRMkH","tlshash":"c1246c7199916dba3a37268157c13d006d946007da35e948fefcc1b2cf8bb6d9f381a8","first_seen":"2025-08-05T23:24:16.301548Z","last_seen":"2025-08-14T14:35:11.732901Z","times_seen":5,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":83,"dns":62,"connect":1,"send":0,"wait":10,"receive":173,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}