{"report_id":"3153ce4f-96db-4c23-ba11-df482f26583c","version":6,"status":"done","tags":[],"date":"2026-03-06T20:11:30Z","url":{"schema":"https","addr":"rewards-nado.xyz/","fqdn":"rewards-nado.xyz","domain":"rewards-nado.xyz","tld":"xyz"},"ip":{"addr":"172.67.216.9","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rewards-nado.xyz/","fqdn":"rewards-nado.xyz","domain":"rewards-nado.xyz","tld":"xyz"},"title":"Nado Orderbook DEX | Unified Perps \u0026 Spot on Ink","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T11:45:02.864616Z","times_seen":17973103,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"rewards-nado.xyz/","fqdn":"rewards-nado.xyz","domain":"rewards-nado.xyz","tld":"xyz"},"ip":{"addr":"172.67.216.9","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-10T20:11:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"framerusercontent.com","ip":{"addr":"3.173.161.53","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2019-04-29","domain_rank":18507,"first_seen":"2019-05-01T19:48:10Z","last_seen":"2026-03-04T16:28:50.536831Z","alert_count":0,"request_count":1,"received_data":10839,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"rewards-nado.xyz","ip":{"addr":"104.21.61.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-06","domain_rank":0,"first_seen":"2026-03-06T20:11:31.411234Z","last_seen":"2026-03-06T20:11:31.411234Z","alert_count":0,"request_count":18,"received_data":9488277,"sent_data":8575,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rewards-nado.xyz/","fqdn":"rewards-nado.xyz","domain":"rewards-nado.xyz","tld":"xyz"},"ip":{"addr":"104.21.61.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad16dc842c3346ce9a32923bb212e4a0","sha1":"1fcfed2294495163ec9187bb4d2e7efdb7ac307a","sha256":"f1fd20cadc7d7f20ee15b4cdeab0de338dac9b80609302683f6508c2932e0bac","sha512":"02f98384bfc99c2e1bd9f47c7147a7007099a28f7928816a1496ee7a3496b3214812601f6e2aa57910197727ffebe4a6f3b2ae2db185828bb6246fc493a3ed95","ssdeep":"","tlshash":"b3215e1e3bea00313577372a97df52683a3ac0032004e81a392c99845fe08985b2eef8","size":1260,"data":"","first_seen":"2026-03-06T20:11:35.805852Z","last_seen":"2026-05-05T15:48:48.740342Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rewards-nado.xyz/cb60175420529d764765bc870c37c71fd7641336.svg","fqdn":"rewards-nado.xyz","domain":"rewards-nado.xyz","tld":"xyz"},"ip":{"addr":"104.21.61.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-nado.xyz/","date":"2026-03-06T20:11:06.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-nado.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 17:20:04 GMT","end":"Thu, 04 Jun 2026 17:20:03 GMT"},"fingerprint":{"sha1":"37:43:E8:4C:73:92:1D:E9:92:0B:04:64:05:40:A3:B7:49:A5:72:87","sha256":"82:89:EF:F2:56:81:68:F3:2E:91:65:B6:E5:35:07:9A:BB:33:22:89:9E:E1:9C:19:85:F5:CB:E5:DB:3E:18:B8"}}},"request":{"raw":"GET /cb60175420529d764765bc870c37c71fd7641336.svg HTTP/1.1\r\nHost: rewards-nado.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-nado.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 20:11:06 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BBy%2FNcLrxyt9dQ%2FT%2BwJmPkiPfKVoI%2FMxqYyh%2Fio9IRCkw8REnP%2BIydY9Yr%2BlXiRlmaHLV2zf0es6Nm2aZazuBOZq9TYDL2LBSGnBLW2x6UQ%3D\"}]}\r\nlast-modified: Sat, 28 Feb 2026 10:34:57 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69a2c4d1-bd\"\r\ncf-ray: 9d8401f48ba557e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":189,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ea05efe176257121b8c904ec2ed76305","sha1":"cb60175420529d764765bc870c37c71fd7641336","sha256":"86e36eb944d01171e24d41e374b9975c157bc8345899370776c4228182bad5e3","sha512":"5d6bda8993e6651c492a494aca714e1467c15152270e5cc8b7771fdb2254669a7beee13a08f407aace6a3dfec3c0e837deac2056af827e0dab02c444476cf020","ssdeep":"","tlshash":"1ac0226ec03888094828cb84e4f93404c32ec0d190c000edd89d3944a06a8f1e103224","first_seen":"2026-03-06T20:11:35.75719Z","last_seen":"2026-06-18T12:25:44.522286Z","times_seen":9,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-nado.xyz/aae6386b9d5a940c986da38a978e2bf73661d07f.svg","fqdn":"rewards-nado.xyz","domain":"rewards-nado.xyz","tld":"xyz"},"ip":{"addr":"104.21.61.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-nado.xyz/","date":"2026-03-06T20:11:06.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-nado.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 17:20:04 GMT","end":"Thu, 04 Jun 2026 17:20:03 GMT"},"fingerprint":{"sha1":"37:43:E8:4C:73:92:1D:E9:92:0B:04:64:05:40:A3:B7:49:A5:72:87","sha256":"82:89:EF:F2:56:81:68:F3:2E:91:65:B6:E5:35:07:9A:BB:33:22:89:9E:E1:9C:19:85:F5:CB:E5:DB:3E:18:B8"}}},"request":{"raw":"GET /aae6386b9d5a940c986da38a978e2bf73661d07f.svg HTTP/1.1\r\nHost: rewards-nado.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-nado.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 20:11:06 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5c4qF9Lm%2BHW%2BjfdXf8sZXTZtqRPDp%2BoWbXdqGBBMPot7cJdAr6MHghP7V1Og%2B%2F9akhF1setYZveFSplqKMFfYCFBWz33yrvcHMQNEjuNOsg%3D\"}]}\r\nlast-modified: Sat, 28 Feb 2026 10:34:57 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69a2c4d1-db\"\r\ncf-ray: 9d8401f48ba657e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":219,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"513ccbbc145fc381450ea6c00df1a953","sha1":"aae6386b9d5a940c986da38a978e2bf73661d07f","sha256":"b4a125c4b0e7b432e77d94bad123f1c7416d028e5c5860f648ef108d147f54e0","sha512":"204bd2aadd9561595fdadc4172f4ff9715364ea3faa1f4d4cb9191ef4f46ac0975bf60355aa8a8b85787d7f591ea424e0fe4ef5e809f612984de878c7d19325e","ssdeep":"","tlshash":"2ed0a72ec01d980c8c2bc704d4fb2404c31cc0e280c100fed44d3b45e01e4e1f143214","first_seen":"2026-03-06T20:11:35.762447Z","last_seen":"2026-06-18T12:25:44.51063Z","times_seen":9,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-nado.xyz/","fqdn":"rewards-nado.xyz","domain":"rewards-nado.xyz","tld":"xyz"},"ip":{"addr":"104.21.61.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-06T20:11:05.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-nado.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 17:20:04 GMT","end":"Thu, 04 Jun 2026 17:20:03 GMT"},"fingerprint":{"sha1":"37:43:E8:4C:73:92:1D:E9:92:0B:04:64:05:40:A3:B7:49:A5:72:87","sha256":"82:89:EF:F2:56:81:68:F3:2E:91:65:B6:E5:35:07:9A:BB:33:22:89:9E:E1:9C:19:85:F5:CB:E5:DB:3E:18:B8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rewards-nado.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 20:11:06 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 28 Feb 2026 10:42:41 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BgRoXodFRPi6Mvxa1nKV6Qb585mD5devNIeRMBs9p3cOwPapRXwz9xb%2FE9fujwRbO%2FTXkWnGu2mavwLiok0zYS5M9WJuYzPjuFwVlGtWic4%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d8401f26f34516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":391239,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (430)","md5":"00afa535aa9f9c8b33f4ce74107697a5","sha1":"043d1435619c0972bcda943b4ef7c275ac7f12a5","sha256":"c1f3398471823a1f879819223240ea989ff5f0a7797ad937df12f63c5f6989e0","sha512":"88882a519e96ab7ae0240152aaee058207bc12e7eeb329c8ecb22f8f7995c0c21b1fe3d5107e8937bf4efd7917531c805142886f1c7a4da7bb675b5130fdbec3","ssdeep":"768:fOdW3B+r55REu+8TKXeWEMFV2QcFV2QL8MfV2Q28MfV2QOt9fV2Q2t9fV2Qd8MP3:ovTkCIrJH3/Nen1/G","tlshash":"4084425363a6e0601cdb417def6952092e696103ff22c69532df02af4f9dfe865123ac","first_seen":"2026-03-06T20:11:35.765908Z","last_seen":"2026-03-06T20:14:33.326395Z","times_seen":2,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":78,"dns":52,"connect":8,"send":0,"wait":75,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-nado.xyz/MCTjpDaPC6iNCUs12hwMqjRS7w.png","fqdn":"rewards-nado.xyz","domain":"rewards-nado.xyz","tld":"xyz"},"ip":{"addr":"104.21.61.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-nado.xyz/","date":"2026-03-06T20:11:06.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-nado.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 17:20:04 GMT","end":"Thu, 04 Jun 2026 17:20:03 GMT"},"fingerprint":{"sha1":"37:43:E8:4C:73:92:1D:E9:92:0B:04:64:05:40:A3:B7:49:A5:72:87","sha256":"82:89:EF:F2:56:81:68:F3:2E:91:65:B6:E5:35:07:9A:BB:33:22:89:9E:E1:9C:19:85:F5:CB:E5:DB:3E:18:B8"}}},"request":{"raw":"GET /MCTjpDaPC6iNCUs12hwMqjRS7w.png HTTP/1.1\r\nHost: rewards-nado.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-nado.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 20:11:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 28 Feb 2026 10:34:57 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"69a2c4d1-4d5b9\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h3MbWfvWPSfNay%2B3HZjbgWGopeZipYMY%2Bo8ih%2BVTdYQiHD%2BO0Z9P2lf6wVEU8ReWKoSG0R5jPomzXYjiRuSmbr58sHB6BNaI9cU5l2mWe50%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8401f3db9157e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":316857,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1063 x 1062, 8-bit colormap, non-interlaced","md5":"763d9e9982c98fe8dbfeb984e0de174b","sha1":"3816454d9eef08d9fadef00b7860ced5a8c444ee","sha256":"04d626c96d7635c82525cf6e90dce6eebce73c76ccf9101a2e33bd4550727388","sha512":"05a7518f9de2611b80e9102e2673db4ceba604c08aea4ff0871f8681c9adc015890e0ad52fd49bfa2b84e7031bc51c51769d43eead8abd2ec735a6cb33165bef","ssdeep":"6144:dCLDoeF92WLZq53pDUv2TfCSQ7pcErhpfALgtfHJNO4Whjyq:dc8e2WLZqRMQaSQ7pcepoL6y4Mp","tlshash":"0264237ee259a4aae8e11e3d076e9c16d3e7a005bcbd48eb04369c5c764f45f60e3d02","first_seen":"2026-03-06T20:11:35.76892Z","last_seen":"2026-06-17T06:46:52.045933Z","times_seen":8,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-nado.xyz/be9a3e040d6c444750aed78f9465e92ca87a909e.svg","fqdn":"rewards-nado.xyz","domain":"rewards-nado.xyz","tld":"xyz"},"ip":{"addr":"104.21.61.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-nado.xyz/","date":"2026-03-06T20:11:06.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-nado.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 17:20:04 GMT","end":"Thu, 04 Jun 2026 17:20:03 GMT"},"fingerprint":{"sha1":"37:43:E8:4C:73:92:1D:E9:92:0B:04:64:05:40:A3:B7:49:A5:72:87","sha256":"82:89:EF:F2:56:81:68:F3:2E:91:65:B6:E5:35:07:9A:BB:33:22:89:9E:E1:9C:19:85:F5:CB:E5:DB:3E:18:B8"}}},"request":{"raw":"GET /be9a3e040d6c444750aed78f9465e92ca87a909e.svg HTTP/1.1\r\nHost: rewards-nado.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-nado.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 20:11:06 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nt4l%2BFuEQjpj0uDJpLIIdBBOqaNLzjDjwI5hDtDpPUQTiQ8CrkHjqefB92CU%2B5atbN4AinRXhTRYkM1tSvTjdo961UTXcd0nD0MPtW09pMw%3D\"}]}\r\nlast-modified: Sat, 28 Feb 2026 10:34:57 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69a2c4d1-db\"\r\ncf-ray: 9d8401f48ba457e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":219,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6b03f473a1f0afba52904b49d7c25728","sha1":"be9a3e040d6c444750aed78f9465e92ca87a909e","sha256":"6d35a759b08ec673000be131c1f72253d44db2e3c40acf240b71bc31de8bfece","sha512":"abd7664fa339d3878dd61f70ed06e88557c3f6a2bb77020ca4e031366ad8b073021a94134568b5bce0fedf874adde574dd5c9f0a58a47e9db6c50a4fb24eb33d","ssdeep":"","tlshash":"44d0a92dc02caa08882bc708e8fa28048b2cc0a280c001fee88e3b08e02e4e1f543210","first_seen":"2026-03-06T20:11:35.772316Z","last_seen":"2026-06-18T12:25:44.518133Z","times_seen":9,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-nado.xyz/e15becf81145f0358024772d21822c5c74d4c59c.svg","fqdn":"rewards-nado.xyz","domain":"rewards-nado.xyz","tld":"xyz"},"ip":{"addr":"104.21.61.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-nado.xyz/","date":"2026-03-06T20:11:06.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-nado.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 17:20:04 GMT","end":"Thu, 04 Jun 2026 17:20:03 GMT"},"fingerprint":{"sha1":"37:43:E8:4C:73:92:1D:E9:92:0B:04:64:05:40:A3:B7:49:A5:72:87","sha256":"82:89:EF:F2:56:81:68:F3:2E:91:65:B6:E5:35:07:9A:BB:33:22:89:9E:E1:9C:19:85:F5:CB:E5:DB:3E:18:B8"}}},"request":{"raw":"GET /e15becf81145f0358024772d21822c5c74d4c59c.svg HTTP/1.1\r\nHost: rewards-nado.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-nado.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 20:11:06 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M9N7AIeCW9KDEm0kL5nHRZ5HeOizIZpsOMT8lHPHgnAC9FPOCRHUU%2Frnx%2F0SYs14xHNE6G58XGJ3RQ6Hj8sHp0JwaxS6fYtVw7YQC0i5%2BIo%3D\"}]}\r\nlast-modified: Sat, 28 Feb 2026 10:34:57 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69a2c4d1-db\"\r\ncf-ray: 9d8401f48ba857e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":219,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"27777c9362702085f40175cd34c62834","sha1":"e15becf81145f0358024772d21822c5c74d4c59c","sha256":"bd0b456d2a0f13f3efdeaef099e6764b821196c77d1b111ed760e30cf5985926","sha512":"25cd369a30666523399b1ef7ea76484afa610480e44aec0c3d9634642dcc57867e7b1c1a1642816902daa0026837ed63071f4a02118c7ed140598df957523084","ssdeep":"","tlshash":"43d0a92ec028d808882bc708e4f82804c72cc0f280c008eee58e7f45e02e5e5f2a3618","first_seen":"2026-03-06T20:11:35.775325Z","last_seen":"2026-06-18T12:25:44.515255Z","times_seen":9,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-nado.xyz/arYBeahdUWxxAw4xCZKphQvSkk.woff2","fqdn":"rewards-nado.xyz","domain":"rewards-nado.xyz","tld":"xyz"},"ip":{"addr":"104.21.61.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rewards-nado.xyz/","date":"2026-03-06T20:11:06.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-nado.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 17:20:04 GMT","end":"Thu, 04 Jun 2026 17:20:03 GMT"},"fingerprint":{"sha1":"37:43:E8:4C:73:92:1D:E9:92:0B:04:64:05:40:A3:B7:49:A5:72:87","sha256":"82:89:EF:F2:56:81:68:F3:2E:91:65:B6:E5:35:07:9A:BB:33:22:89:9E:E1:9C:19:85:F5:CB:E5:DB:3E:18:B8"}}},"request":{"raw":"GET /arYBeahdUWxxAw4xCZKphQvSkk.woff2 HTTP/1.1\r\nHost: rewards-nado.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-nado.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 20:11:06 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25344\r\nlast-modified: Sat, 28 Feb 2026 10:34:57 GMT\r\npriority: u=4,i=?0\r\netag: \"69a2c4d1-6300\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cZSHtXCfpLxhECgPNEA3CuoBrSd2F6%2B3cohWTAwMC8aHxPaqM1Kse1sy4F69a3CgN%2BMZNCuqLDCJUufqq%2B9n8H6t9h%2BGgu9iiF%2FYlhaoiz0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8401f4bbb157e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25344,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 25344, version 1.0","md5":"83684c2eb47101222da285a858e49d6f","sha1":"6ab60179a85d516c71030e3fc4264aa6142f4a49","sha256":"a669a819bfb22dc0bce391922c4ce598b47696583a1ff241a3866c792f3c4171","sha512":"9e029bab1a1fbbf49d1257d4606cf110674b615ac78f69c2a7adb7b2d2b2612bf1596b291d65a62751baf61d6b8d447bdea5fe78e5205aac8c36cd1da554ced4","ssdeep":"768:V86s0ZErWYNmK+ULV85kp9gPcWK4ulzcTKqpzF:uUErcK+Mgq9CcWT5F","tlshash":"81b2e23a50e7813aea8f3632d3d584ac370759d9443407c2d2a365dec944ea2f70dd9e","first_seen":"2026-03-06T20:11:35.777429Z","last_seen":"2026-06-18T12:25:44.513765Z","times_seen":14,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-nado.xyz/l3VII6qSLYW8OducErPQZazEcO0.mp4","fqdn":"rewards-nado.xyz","domain":"rewards-nado.xyz","tld":"xyz"},"ip":{"addr":"104.21.61.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://rewards-nado.xyz/","date":"2026-03-06T20:11:06.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-nado.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 17:20:04 GMT","end":"Thu, 04 Jun 2026 17:20:03 GMT"},"fingerprint":{"sha1":"37:43:E8:4C:73:92:1D:E9:92:0B:04:64:05:40:A3:B7:49:A5:72:87","sha256":"82:89:EF:F2:56:81:68:F3:2E:91:65:B6:E5:35:07:9A:BB:33:22:89:9E:E1:9C:19:85:F5:CB:E5:DB:3E:18:B8"}}},"request":{"raw":"GET /l3VII6qSLYW8OducErPQZazEcO0.mp4 HTTP/1.1\r\nHost: rewards-nado.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-nado.xyz/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 20:11:06 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 6576484\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 28 Feb 2026 10:34:57 GMT\r\netag: \"645964-64bdfe7ae1640\"\r\ncontent-range: bytes 0-6576483/6576484\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=odoWJt2ZftN5pVEHt1xINiJ30BRoMrtPKVm1UToV2Wi7eWn7DCjIkNl5GH3%2BoOlQ6tXwZ30xAptspA4A8iQTHOEusavWajGDSlPqjmvoOJY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8401f51bc057e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":899579,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"39f1ee57ca3e8e77e613eac6793a7383","sha1":"4ad85aafebbc1a2c0ff6931e99ff508ef829f30c","sha256":"a7914aa174d88323ca561f1fb65d70c8f3fec20ea19df8c7998536364dd62e21","sha512":"e12b4f918eae6f9fbdcafadd1d27c7c1d222a884d021a018d7585d5430d2ecc8c0f56d042a1438a7882d1d97631bfff3e0b720292759dd3096490e4c664d79e0","ssdeep":"24576:REhlE3TewkrGhal796p07WLuYiR9427dwDfGoeS7zrTxazEVDP:C03TG6hax9FSKj4Ayf0S7zrVTRP","tlshash":"671533c40790bd5cd0aabdb46673e6043f25c6278badeb43e14fee862b5567109b803d","first_seen":"2026-03-06T20:11:35.780278Z","last_seen":"2026-03-06T20:11:35.780278Z","times_seen":1,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":176,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-nado.xyz/17dd5fbe041ce9980ee09f593a8bf0588ec0f084.svg","fqdn":"rewards-nado.xyz","domain":"rewards-nado.xyz","tld":"xyz"},"ip":{"addr":"104.21.61.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-nado.xyz/","date":"2026-03-06T20:11:06.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-nado.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 17:20:04 GMT","end":"Thu, 04 Jun 2026 17:20:03 GMT"},"fingerprint":{"sha1":"37:43:E8:4C:73:92:1D:E9:92:0B:04:64:05:40:A3:B7:49:A5:72:87","sha256":"82:89:EF:F2:56:81:68:F3:2E:91:65:B6:E5:35:07:9A:BB:33:22:89:9E:E1:9C:19:85:F5:CB:E5:DB:3E:18:B8"}}},"request":{"raw":"GET /17dd5fbe041ce9980ee09f593a8bf0588ec0f084.svg HTTP/1.1\r\nHost: rewards-nado.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-nado.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 20:11:06 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j%2BRauD%2BVJW7%2BtHX9W0VXiVHS3yVm0CpEWoLxCFTf3wLDf%2FPqvyCYcGXx%2BmFXlwQZ3%2FiCD3MKNjIBYgz0TqSddpYIzz0waIge6ielBY2Q69Y%3D\"}]}\r\nlast-modified: Sat, 28 Feb 2026 10:34:57 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69a2c4d1-d5\"\r\ncf-ray: 9d8401f55bcb57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":213,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f98e95e749e22d696a33ac456f6828e0","sha1":"17dd5fbe041ce9980ee09f593a8bf0588ec0f084","sha256":"9bd13c790ac07dbe0d1b7ddcce5ed5aa9ada2e90e9de23acb9f3a86506825468","sha512":"30ac0ecb7c23bad40a33d24c0e77eec29605ba465db0afb8ad70ddbb8ff3aca7e8d25f093c7b0c89a948321f7c68a0ebad0a63c37696853744b1e72c7e7c24e0","ssdeep":"","tlshash":"34d0a97dc12d84896418cb48f8fa6e48831ca0c0a4c000fee88a3a68a02a8f5f303224","first_seen":"2026-03-06T20:11:35.783959Z","last_seen":"2026-06-18T12:25:44.512936Z","times_seen":9,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-nado.xyz/wc8pqR5LBbEVWxp1osOZX7NNo.png","fqdn":"rewards-nado.xyz","domain":"rewards-nado.xyz","tld":"xyz"},"ip":{"addr":"104.21.61.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-nado.xyz/","date":"2026-03-06T20:11:07.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-nado.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 17:20:04 GMT","end":"Thu, 04 Jun 2026 17:20:03 GMT"},"fingerprint":{"sha1":"37:43:E8:4C:73:92:1D:E9:92:0B:04:64:05:40:A3:B7:49:A5:72:87","sha256":"82:89:EF:F2:56:81:68:F3:2E:91:65:B6:E5:35:07:9A:BB:33:22:89:9E:E1:9C:19:85:F5:CB:E5:DB:3E:18:B8"}}},"request":{"raw":"GET /wc8pqR5LBbEVWxp1osOZX7NNo.png HTTP/1.1\r\nHost: rewards-nado.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-nado.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 20:11:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 28 Feb 2026 10:34:57 GMT\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\netag: W/\"69a2c4d1-2b4f\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DhQwDPyyBgorAsJ6PAb68moHnMJVG9wzUrv4UsCzEZD9O0Oc29%2Fe1ypcXBs920QYTaPDfuJsCc7LXOmlT9Lg2XWtIEqcYp2GBjBFZ3Su7cY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8401fa8cab57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11087,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2012 x 2012, 8-bit colormap, non-interlaced","md5":"d3b8ea74733053ddb8d962824ae20b86","sha1":"3c92d16720024a8eef0d0c53e0252d09ac9b6fbe","sha256":"701bbd114ac88c95815cfc79a8ef763dfc9210dddec349410f1b445d1aa8c79a","sha512":"feb1a373311407d525d5a62a0373f09f7e869229b7937613be1cb4294f893c25f1440217ec1ddc72ce1c27a63673bff24079f5566e1012e36ee2311b4ca9b25a","ssdeep":"192:afC9U+O3nefnRqY7bq177L3s4C3oMofUgCMQ1werK85p3VTQOvzRV2U7Pk:afC9w3nefnR/q1zLC3oWgcRjp3VM+rk","tlshash":"dd325bcf13371940d50b53b2694baa0878bce6096d26a4fbbdbc545a3fc60181d772aa","first_seen":"2026-03-06T20:11:35.785827Z","last_seen":"2026-06-17T06:46:52.048187Z","times_seen":13,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-nado.xyz/assets/eleven.js","fqdn":"rewards-nado.xyz","domain":"rewards-nado.xyz","tld":"xyz"},"ip":{"addr":"104.21.61.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rewards-nado.xyz/","date":"2026-03-06T20:11:06.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-nado.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 17:20:04 GMT","end":"Thu, 04 Jun 2026 17:20:03 GMT"},"fingerprint":{"sha1":"37:43:E8:4C:73:92:1D:E9:92:0B:04:64:05:40:A3:B7:49:A5:72:87","sha256":"82:89:EF:F2:56:81:68:F3:2E:91:65:B6:E5:35:07:9A:BB:33:22:89:9E:E1:9C:19:85:F5:CB:E5:DB:3E:18:B8"}}},"request":{"raw":"GET /assets/eleven.js HTTP/1.1\r\nHost: rewards-nado.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-nado.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 20:11:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 28 Feb 2026 10:39:12 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"69a2c5d0-764325\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=njNbO04pl%2BZZXbXVTrLuzmAvVi725ZQRV8VUsCT7PccdfImLl2w9Amz1IB4y4CK6iMvalIeGI5uD1fG4yoWVcrazZe4T53qhZvA11KB1MZ4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8401f3db8e57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7750437,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3da65c187a23f1a6d8d51f23810b2ae0","sha1":"7061de0e6f09d4ed1a69c2a3209b6501c9904c8f","sha256":"8ee5c7ae26904c3aac81c5de792f3a8e3a6de0d3b9037d31e91c8a033338e6bd","sha512":"62c139e3938c8faed7c50044eab73b4297ea13cb408631533db5bdfd20a7b00235f2683cff5f766ce61e94131f7f8ff82a14baf45051b37e4a2c46b895d6d3e0","ssdeep":"24576:428tHPYfbu7W152TlNJvleNRlPpg+8r/QR2OFnniOflYTwrJfowV7HJ8X36r5lD6:42I9tkpPpg+8r/QR2OFnniOflYTwrJfW","tlshash":"0d25f8ce2d99e56e015239b73d27209be06edc08715ccae0fb99bc34f85831d58b7a58","first_seen":"2026-02-09T00:41:26.532086Z","last_seen":"2026-04-30T11:04:05.824262Z","times_seen":134,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":254,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-nado.xyz/69ac5af447017e80f4b1dbfa46f580934929b5de.svg","fqdn":"rewards-nado.xyz","domain":"rewards-nado.xyz","tld":"xyz"},"ip":{"addr":"104.21.61.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-nado.xyz/","date":"2026-03-06T20:11:06.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-nado.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 17:20:04 GMT","end":"Thu, 04 Jun 2026 17:20:03 GMT"},"fingerprint":{"sha1":"37:43:E8:4C:73:92:1D:E9:92:0B:04:64:05:40:A3:B7:49:A5:72:87","sha256":"82:89:EF:F2:56:81:68:F3:2E:91:65:B6:E5:35:07:9A:BB:33:22:89:9E:E1:9C:19:85:F5:CB:E5:DB:3E:18:B8"}}},"request":{"raw":"GET /69ac5af447017e80f4b1dbfa46f580934929b5de.svg HTTP/1.1\r\nHost: rewards-nado.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-nado.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 20:11:06 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OmtRsb9tndMhQBL676Aam0xjSHt%2BuHwbLLtp6KY3x7hgNNwDRDWZ6oZvAGv%2Bqz0Q%2FrMAn7nglktdhNvDG0c8tgkyyu3Odver3immecc5zMs%3D\"}]}\r\nlast-modified: Sat, 28 Feb 2026 10:34:57 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69a2c4d1-db\"\r\ncf-ray: 9d8401f47ba357e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":219,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a0f6ccbd725b9f2df94cd2ef6a85105a","sha1":"69ac5af447017e80f4b1dbfa46f580934929b5de","sha256":"6b70c5e4419b0dad7952cf444f93e3eec84f0d29da6345622952ca656106c5a0","sha512":"29947693bb1732bcafe3b9cadcb4b21e1b2967ae543796684ce37b4b73be68f7765e011b9cdaedd5ce1ed5ea774cbd982cf4d163f1773aef4c9aa58a551e7404","ssdeep":"","tlshash":"42d0a92dc02daa0ccc2acb08e4fb2804836cc09380c000fee98e3b18a02e4e1f183210","first_seen":"2026-03-06T20:11:35.789294Z","last_seen":"2026-06-18T12:25:44.514555Z","times_seen":9,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-nado.xyz/0667975e29a1df27f1aefdf7bc78826697977188.svg","fqdn":"rewards-nado.xyz","domain":"rewards-nado.xyz","tld":"xyz"},"ip":{"addr":"104.21.61.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-nado.xyz/","date":"2026-03-06T20:11:06.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-nado.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 17:20:04 GMT","end":"Thu, 04 Jun 2026 17:20:03 GMT"},"fingerprint":{"sha1":"37:43:E8:4C:73:92:1D:E9:92:0B:04:64:05:40:A3:B7:49:A5:72:87","sha256":"82:89:EF:F2:56:81:68:F3:2E:91:65:B6:E5:35:07:9A:BB:33:22:89:9E:E1:9C:19:85:F5:CB:E5:DB:3E:18:B8"}}},"request":{"raw":"GET /0667975e29a1df27f1aefdf7bc78826697977188.svg HTTP/1.1\r\nHost: rewards-nado.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-nado.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 20:11:06 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w%2BF4bN1%2FnvVwA3VEIVt54caHEbn64j0GgtWCgclihG%2Fc%2B2%2BGRAfPs2EW6b6oFrY4VstyjD%2FrZkr8XjBbUDZQC7fYIbfBw1JFjmOY9EXSMqk%3D\"}]}\r\nlast-modified: Sat, 28 Feb 2026 10:34:57 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69a2c4d1-d5\"\r\ncf-ray: 9d8401f55bcc57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":213,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"98ed5152ea496994c0a81bc603ea8897","sha1":"0667975e29a1df27f1aefdf7bc78826697977188","sha256":"2716f770681246e5eb3cd1aa82f6b756b49dcbdde19cedda01ca3480c77ea800","sha512":"7a4cceafb000dc58eb3b87ddfe14ed4bb8a73c0b3e15551f4d289b1d206f1fa9c5571e1abce8276860afce9acdb126d6a0eac2bab2b3e1c6edcc48c724e10f2c","ssdeep":"","tlshash":"30d0a77dc51d400c6419db44f4bb6d08831ca0c094c000fed84d265890294e5f203150","first_seen":"2026-03-06T20:11:35.791296Z","last_seen":"2026-06-18T12:25:44.516624Z","times_seen":9,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-nado.xyz/41fb1ecbfa6293849173217f83ecfd2632338e0e.svg","fqdn":"rewards-nado.xyz","domain":"rewards-nado.xyz","tld":"xyz"},"ip":{"addr":"104.21.61.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-nado.xyz/","date":"2026-03-06T20:11:06.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-nado.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 17:20:04 GMT","end":"Thu, 04 Jun 2026 17:20:03 GMT"},"fingerprint":{"sha1":"37:43:E8:4C:73:92:1D:E9:92:0B:04:64:05:40:A3:B7:49:A5:72:87","sha256":"82:89:EF:F2:56:81:68:F3:2E:91:65:B6:E5:35:07:9A:BB:33:22:89:9E:E1:9C:19:85:F5:CB:E5:DB:3E:18:B8"}}},"request":{"raw":"GET /41fb1ecbfa6293849173217f83ecfd2632338e0e.svg HTTP/1.1\r\nHost: rewards-nado.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-nado.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 20:11:06 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CSt5SdjRCJt8tMNcTQ0VhILx5oApvSDsImmCYSa0LvFzYQmasJkJor2%2FYD4ImkgjTfDS5iSbEz%2Fm0SCzKLTQqbxVlwUZCzqA43uQwp3zzVI%3D\"}]}\r\nlast-modified: Sat, 28 Feb 2026 10:34:57 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69a2c4d1-7ab\"\r\ncf-ray: 9d8401f3db8f57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1963,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"20a6ea6007d9bd1bcebc4f00e625b752","sha1":"41fb1ecbfa6293849173217f83ecfd2632338e0e","sha256":"0dad66b9d646728721af7c05c32eb080512afc2a1705e65d394d4f5cd1f7206a","sha512":"457d708fdf866b58708dab0fa8a4c9b17cb99d4629a651e11b07bc1738df84b243c20e28d70ef9aff56599c629050bedf50e8c6ee1ba42732616a4e3b253adf2","ssdeep":"","tlshash":"004100feff68223d6046455ec3a3145c322df0261bc208b5c79f5d0a69159ae9fb7889","first_seen":"2026-01-18T22:24:01.499498Z","last_seen":"2026-06-18T12:25:44.518803Z","times_seen":10,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-nado.xyz/f672e1003f4940291af2207471f68ffa2116faee.svg","fqdn":"rewards-nado.xyz","domain":"rewards-nado.xyz","tld":"xyz"},"ip":{"addr":"104.21.61.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-nado.xyz/","date":"2026-03-06T20:11:06.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-nado.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 17:20:04 GMT","end":"Thu, 04 Jun 2026 17:20:03 GMT"},"fingerprint":{"sha1":"37:43:E8:4C:73:92:1D:E9:92:0B:04:64:05:40:A3:B7:49:A5:72:87","sha256":"82:89:EF:F2:56:81:68:F3:2E:91:65:B6:E5:35:07:9A:BB:33:22:89:9E:E1:9C:19:85:F5:CB:E5:DB:3E:18:B8"}}},"request":{"raw":"GET /f672e1003f4940291af2207471f68ffa2116faee.svg HTTP/1.1\r\nHost: rewards-nado.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-nado.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 20:11:06 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ot3HZrKKEBBLet0%2BpPYKZ4TZq9BKK38%2FTZEByzyQK2NDcsY8tgUDYsbyCjN1k9pdv6UozQcnspaM6RRhjuSJY6Ue9NxF01kruZAWv2RFYq8%3D\"}]}\r\nlast-modified: Sat, 28 Feb 2026 10:34:57 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69a2c4d1-c2\"\r\ncf-ray: 9d8401f48ba957e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":194,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8559092e955c8908d9a9b44e278e4678","sha1":"f672e1003f4940291af2207471f68ffa2116faee","sha256":"2df5e25f2f6e37f210ae9c8114618401659b72b5779387e6632c7d599f471e6e","sha512":"7eb56d3b51e85049807b0350738cffc473a45925a4ea48764a50a20a9522bf64f5f33434e8d281f4dcec7e3e8dc67247a1df231e37f5b1c2b2a14b6122a7c359","ssdeep":"","tlshash":"25c0223ac038880a5918cb80e4fd3008c32e80e1c0c800ecd89c3e50a06a8f1b003628","first_seen":"2026-03-06T20:11:35.795375Z","last_seen":"2026-06-18T12:25:44.523084Z","times_seen":9,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-nado.xyz/8mfNQmmwQqovOIxWLI9wzlD77A.woff2","fqdn":"rewards-nado.xyz","domain":"rewards-nado.xyz","tld":"xyz"},"ip":{"addr":"104.21.61.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rewards-nado.xyz/","date":"2026-03-06T20:11:06.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-nado.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 17:20:04 GMT","end":"Thu, 04 Jun 2026 17:20:03 GMT"},"fingerprint":{"sha1":"37:43:E8:4C:73:92:1D:E9:92:0B:04:64:05:40:A3:B7:49:A5:72:87","sha256":"82:89:EF:F2:56:81:68:F3:2E:91:65:B6:E5:35:07:9A:BB:33:22:89:9E:E1:9C:19:85:F5:CB:E5:DB:3E:18:B8"}}},"request":{"raw":"GET /8mfNQmmwQqovOIxWLI9wzlD77A.woff2 HTTP/1.1\r\nHost: rewards-nado.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-nado.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 20:11:06 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 41540\r\nlast-modified: Sat, 28 Feb 2026 10:34:57 GMT\r\npriority: u=4,i=?0\r\netag: \"69a2c4d1-a244\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zJPh4LhIGF%2B6c6Ht0gQ4VhywnKryZjwxo0iTuyngxHaIdgHS1TKEzmNwekA4mzTYLJyHaitEbe15UzfuK8t7yL%2BVWM5bbjYPsoiK%2BArZIHY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8401f4abae57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41540,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 41540, version 1.0","md5":"595096d222ca6b81a3fbeb355d643b1f","sha1":"f267cd4269b042aa2f388c56f8b23dc33943efb0","sha256":"42d47f8ff0d777b8de8a4e473e65bbcc1fbf6852a44ab9c76314484584441b0a","sha512":"d966590e7f1e9e018ea5f291b4078bdde1659cb881fba1bb078724054c9411819a02ffa0dd488d6cf8b3b54bb3dd35cd05baf730241369a6b1c06c801963e61f","ssdeep":"768:WmsZmkiUxplMEV8CedxGcL9FlxGyTN6Ch1XuGcpLw7WIFFN+0oLBVXK13pW:WmsZUUxvMEiCeucL9JGyfXuGcq7JFML/","tlshash":"f913022cb84bf66767e8c130da463f57b06c91bf646e2189f80d6460e4a3110e50b77f","first_seen":"2025-10-23T09:28:01.682524Z","last_seen":"2026-06-18T12:25:44.51168Z","times_seen":16,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-nado.xyz/index_1.html","fqdn":"rewards-nado.xyz","domain":"rewards-nado.xyz","tld":"xyz"},"ip":{"addr":"104.21.61.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://rewards-nado.xyz/","date":"2026-03-06T20:11:06.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-nado.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 17:20:04 GMT","end":"Thu, 04 Jun 2026 17:20:03 GMT"},"fingerprint":{"sha1":"37:43:E8:4C:73:92:1D:E9:92:0B:04:64:05:40:A3:B7:49:A5:72:87","sha256":"82:89:EF:F2:56:81:68:F3:2E:91:65:B6:E5:35:07:9A:BB:33:22:89:9E:E1:9C:19:85:F5:CB:E5:DB:3E:18:B8"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: rewards-nado.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-nado.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 20:11:06 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 28 Feb 2026 10:34:57 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4seZt7nbmOgNdC32qMiWAMi82DdBsI27wgX9DKgT6wxGJtOtiQLNefLWyWBDD5TizNWUO6TO5u4rLxWLMb4ogZTTLmt8ZJaPvjyAE%2BM61yY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-ray: 9d8401f4cbb457e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":743,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (348)","md5":"e92801bdb7c6b79b5089f7655bf57935","sha1":"70e0b6999a08429f981d80a9538d5711ad5834db","sha256":"4c7a257628312aa8bd0bf0cc9548a56243d09ac575af5a5326db661e6e02a249","sha512":"edb8c66361a71076187862ec665d63c2e90f430fcae8d6e6b69d06fe5a1bbb2f4de301027a0ef760d2233914bc30514b66172edc9880e1c08eed6261dbb39efe","ssdeep":"","tlshash":"c5011573d0b0942d0843a576dc41b388065c8d15f5b1a4e1bdc5534ebc956a9ca7a2ac","first_seen":"2026-03-06T20:11:35.800453Z","last_seen":"2026-06-18T12:25:44.517426Z","times_seen":9,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/images/wc8pqR5LBbEVWxp1osOZX7NNo.png","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"3.173.161.53","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-nado.xyz/","date":"2026-03-06T20:11:07.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framerusercontent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:EF:AE:14:9A:1C:B7:8C:AB:DF:01:C0:39:9E:AE:49:90:E5:84:94","sha256":"B7:E9:B0:B0:73:ED:29:A4:09:64:FA:77:EF:60:53:32:51:10:08:95:FD:7B:4A:69:60:51:6D:9F:AF:31:9D:5E"}}},"request":{"raw":"GET /images/wc8pqR5LBbEVWxp1osOZX7NNo.png HTTP/1.1\r\nHost: framerusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-nado.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: image/avif\r\ndate: Mon, 17 Nov 2025 01:31:35 GMT\r\ncross-origin-resource-policy: cross-origin\r\nx-amzn-trace-id: Root=1-691a7af6-058567807a6dedcd213cd3ae;Parent=586e29bb021aa6fc;Sampled=0;Lineage=1:f456f256:0\r\nx-amzn-requestid: bcf947a2-4fb3-4c08-b96d-fafca36af14a\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: deny\r\ncontent-security-policy: default-src 'none'; script-src 'none'; img-src 'self'; media-src 'self'; report-uri https://framer.report-uri.com/r/t/csp/enforce;\r\ncache-control: public, max-age=31536000, stale-while-revalidate=31536000\r\nx-content-type-options: nosniff\r\netag: \"dc33be8c61d862e7088d3da1385eee1f\"\r\nvary: Accept\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e2b2960acb3b050648b3477a3e78810e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS56-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 4AGoFOJ4bTuCED8WngafUWEz4EW_Xn6a5NRmNJtezidpsDBdFM1Ltg==\r\nage: 9484772\r\ntiming-allow-origin: *\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"AMS56-P1\",cdn-rid;desc=\"4AGoFOJ4bTuCED8WngafUWEz4EW_Xn6a5NRmNJtezidpsDBdFM1Ltg==\",cdn-hit-layer;desc=\"EDGE\",cdn-downstream-fbl;dur=7\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9545,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"dc33be8c61d862e7088d3da1385eee1f","sha1":"6e613e1aca88deac4d23d0be25f0f1a9885e1fc7","sha256":"da30223bfa2422058bc89b506341eb1453441c8f7090c28552ba22f390a9d07a","sha512":"21b1baca3a192873589785373b8b28e0ba2935e31d4c28825edc1792c23ba8938543aa81bf1cc0aa94eca7e6f16d1789ff5bcabf20e078788ba4b8cda56a0445","ssdeep":"192:rGmvjQFTu0kaLEaH3a43CpAki5KYTFcMN2pa5B9mSXq2ErZiNdd1jYR61:rlEoKD3H31zX7wiX3jYR61","tlshash":"6e12af603d73298ac8ed97ba6e16c77e617687490ec19e3ca195ece903a0f57ca40e11","first_seen":"2026-03-06T20:11:35.802243Z","last_seen":"2026-06-17T06:46:52.044406Z","times_seen":8,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":15,"connect":16,"send":0,"wait":26,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-nado.xyz/6mcf62RlDfRfU61Yg5vb2pefpi4.png","fqdn":"rewards-nado.xyz","domain":"rewards-nado.xyz","tld":"xyz"},"ip":{"addr":"104.21.61.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-nado.xyz/","date":"2026-03-06T20:11:06.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-nado.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 17:20:04 GMT","end":"Thu, 04 Jun 2026 17:20:03 GMT"},"fingerprint":{"sha1":"37:43:E8:4C:73:92:1D:E9:92:0B:04:64:05:40:A3:B7:49:A5:72:87","sha256":"82:89:EF:F2:56:81:68:F3:2E:91:65:B6:E5:35:07:9A:BB:33:22:89:9E:E1:9C:19:85:F5:CB:E5:DB:3E:18:B8"}}},"request":{"raw":"GET /6mcf62RlDfRfU61Yg5vb2pefpi4.png HTTP/1.1\r\nHost: rewards-nado.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-nado.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 20:11:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 28 Feb 2026 10:34:57 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"69a2c4d1-8c43\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nkuuM3IMZNWrcp%2BgYPf6GbpBUW56A%2B%2BetVovrokaj6zd81SnfBpgpBKulMTPw%2FaE5GlTXmLAmOeJ8%2BdptciyK2kf2zk1nvAuoSCfI4YnKds%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8401f47ba257e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35907,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"db6a29faf5b73637ef4772fff25558ee","sha1":"e1c7b1af4d57aa94dda69b71107e727a0a356ea4","sha256":"f55dfc553c100e6da0ad95258a042b4100f0ff4bb03a5313d1f541984275e262","sha512":"55ce6d388d7c95957d79fa1d98ccc035c173239f239ca010d1d4019a49cac4a49c4bb669543dd9af7183659f3e8cff0cd50259e608635d3aa8339a4a3893d4d1","ssdeep":"768:0SHxyYCqIIzI64PxjRqAQcc9kAMCE/Dwv4GaUg:0SHiYN4pjRqSckAyu4Gah","tlshash":"95f2f2b01fac58ecc336ea2364a9e5c0871a565d9544c9487b0c8ef69f6c68bdc0f379","first_seen":"2025-11-04T11:03:10.775151Z","last_seen":"2026-07-26T13:49:14.029956Z","times_seen":19,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}