{"report_id":"31b7e150-0af2-426a-a851-d462ebf3c1ee","version":6,"status":"done","tags":[],"date":"2026-05-23T13:33:13Z","url":{"schema":"http","addr":"intuition-reward.xyz","fqdn":"intuition-reward.xyz","domain":"intuition-reward.xyz","tld":"xyz"},"ip":{"addr":"104.21.61.247","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"intuition-reward.xyz/","fqdn":"intuition-reward.xyz","domain":"intuition-reward.xyz","tld":"xyz"},"title":"Intuition Airdrop","dom":{"size":37552,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (17570)","md5":"ab9b7cac807c4da22186b8bfb5afe56c","sha1":"84e691fd49bccbdd377851ec06f9a61015cc77a0","sha256":"8cd4864c764291867ca2fc31261c04a67e87c12d77ae923acff4ecee800ceefe","sha512":"76036179808eacbdca3f9d83b1491e97ba6bf236f4ba708aaabbf298e7b27e42ac9b5c5b1713a38b3bc1e33863ad18af6424fdbb1e02e23b465faa0191e5896e","ssdeep":"384:PSCTQzbeIG5ucMZ2K5XHAU0jfhLittv+C2eBmbeNmyLCL4wXuzHYbpMkAozoCms:pQXUsUjhGvceBmaN/xq5p9vzoCx","tlshash":"e3f20990a5202fb16c03bfe58addea18e41760f659da5a5cbfce584c52817dc0fb9e80","dom_hash":"domhashc928d4d392d6131887b2c86e00af1d6c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"intuition-reward.xyz","fqdn":"intuition-reward.xyz","domain":"intuition-reward.xyz","tld":"xyz"},"ip":{"addr":"104.21.61.247","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-27T13:33:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"intuition-reward.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"intuition-reward.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"intuition-reward.xyz","ip":{"addr":"104.21.61.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-21","domain_rank":0,"first_seen":"2026-05-23T13:33:13.610563Z","last_seen":"2026-05-23T13:33:13.610563Z","alert_count":18,"request_count":9,"received_data":318365,"sent_data":4213,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"intuition-reward.xyz/","fqdn":"intuition-reward.xyz","domain":"intuition-reward.xyz","tld":"xyz"},"ip":{"addr":"104.21.61.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"785c77ca93ea45decde29226005223f4","sha1":"85081dd1c4057616dbd7a032d535c1220f4deb99","sha256":"874687f758a7fc291128d144eba122f52cdea9d91f6287d2277dd27cd5bf67d5","sha512":"7819a8b98be2c8e50c72c8d2ad6b68dc83f19bf3fbb4237d6281fc3286ba977a6a9a6931abfae8a853c986f67701d8c87a4d4237246f5d371f80cc6bb39850a2","ssdeep":"","tlshash":"6df0f47fb69724708e7392663f2fa7403c375613244ada85bc4f85b00f29d1d49b99c8","size":617,"data":"","first_seen":"2026-05-21T15:38:44.022391Z","last_seen":"2026-05-23T13:35:51.528738Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intuition-reward.xyz/","fqdn":"intuition-reward.xyz","domain":"intuition-reward.xyz","tld":"xyz"},"ip":{"addr":"104.21.61.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-05-23T13:35:51.531079Z","times_seen":3123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"intuition-reward.xyz/hero-loop_mlllaj.mp4","fqdn":"intuition-reward.xyz","domain":"intuition-reward.xyz","tld":"xyz"},"ip":{"addr":"104.21.61.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://intuition-reward.xyz/","date":"2026-05-23T13:32:52.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intuition-reward.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 May 2026 19:01:13 GMT","end":"Wed, 19 Aug 2026 20:01:04 GMT"},"fingerprint":{"sha1":"38:43:12:4C:54:58:D5:2A:B1:5F:87:59:0F:EA:22:F6:ED:7F:49:6E","sha256":"8B:DD:E1:F0:37:65:EA:19:C0:44:E0:71:66:9C:ED:D1:9C:AC:27:65:B7:BB:3E:DF:01:2F:80:BD:3A:73:79:6F"}}},"request":{"raw":"GET /hero-loop_mlllaj.mp4 HTTP/1.1\r\nHost: intuition-reward.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://intuition-reward.xyz/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 10000183\r\ncf-cache-status: MISS\r\ncontent-type: application/octet-stream\r\ncontent-range: bytes 0-10000182/10000183\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"88e891a4516c265bf0666b4ce8dcd5e2\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ql%2B3NjrkzkhProes4UFBgusJLFDCKrt20B2mdKwZ%2BB9h8COg6hZZlosK5ix%2FpLitrUsUHYN2PEDt0g2TcDioHbrfSSzUprSoE%2BIcxDruBvdyiH%2FQfOZOlTFASpQOmtT7%2FlytjioyaQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 23 May 2026 13:32:52 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: a0046ddbe9330883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151236,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"026d9fd8cbd0e4af7595b9ba16aae1b2","sha1":"33ffa30b7d66ca97eb433d3938c7226da31d4e6a","sha256":"5eb375ef370ef114148011f08abd8282493ffd5d81f48c41d6bd6ffea39907ad","sha512":"b5d6287c45cad4ef59162caae82a8481a9262da219c8641c33b04f879e4145ee39a887bfd6051003215a229546c7375ac175eab0b64334a7e0ea478f27105ba0","ssdeep":"3072:VNr7I2sHB71HsnVaLCcjyISbNW8eKfpfi9t7lenGguIoXdloVU8:VNojN1MVaLCcuIA88eGti9tBenGgEXdG","tlshash":"7ce3131f6cd67ec4cd7920ba4a2cadd3b902905866edbfc0f21735a154bbda52074cb4","first_seen":"2026-05-23T13:33:16.829235Z","last_seen":"2026-05-23T13:33:16.829235Z","times_seen":1,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":184,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"intuition-reward.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"intuition-reward.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intuition-reward.xyz/24b9d70a518bb58e.css","fqdn":"intuition-reward.xyz","domain":"intuition-reward.xyz","tld":"xyz"},"ip":{"addr":"104.21.61.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://intuition-reward.xyz/","date":"2026-05-23T13:32:52.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intuition-reward.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 May 2026 19:01:13 GMT","end":"Wed, 19 Aug 2026 20:01:04 GMT"},"fingerprint":{"sha1":"38:43:12:4C:54:58:D5:2A:B1:5F:87:59:0F:EA:22:F6:ED:7F:49:6E","sha256":"8B:DD:E1:F0:37:65:EA:19:C0:44:E0:71:66:9C:ED:D1:9C:AC:27:65:B7:BB:3E:DF:01:2F:80:BD:3A:73:79:6F"}}},"request":{"raw":"GET /24b9d70a518bb58e.css HTTP/1.1\r\nHost: intuition-reward.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://intuition-reward.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 23 May 2026 13:32:52 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RAqzEvmH56y%2F40lW%2BNfybukT3eVjsDigaLVTTzk3P5lDf6X0q0hhEVgMJRzj4ugAxhgF%2FsLF1pDD6%2F7RsHRFtCS1901RQf08fVxM1mi2SN6VaHYge4WYAYe4HilexPLt97%2FjPbgpww%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"5187cd0a93fb6daf09cad236fc10c76f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a0046ddbb92c0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":534,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (534), with no line terminators","md5":"5187cd0a93fb6daf09cad236fc10c76f","sha1":"3639d3384c737156280a82ae508c92f608d55ffe","sha256":"1d3162144a434a45889360f66f962a2cc2c30116c9ac4db345078a6f87f500bd","sha512":"6fee11fb9fdb1933898c2bcbba1ede39f8877f60344376f87e5ff4a3c2f6608837dc4e8ffa026f8a51062c61cc3b1f802879d6bf7713c49b0758f7237a484c92","ssdeep":"","tlshash":"8ff062a4e8219aba3d12e878136cdf59d003a09089ea469579cf526861c3b930d72155","first_seen":"2025-06-25T09:12:16.631378Z","last_seen":"2026-05-23T13:35:51.526659Z","times_seen":95,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"intuition-reward.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"intuition-reward.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intuition-reward.xyz/hero-loop_mlllaj.mp4","fqdn":"intuition-reward.xyz","domain":"intuition-reward.xyz","tld":"xyz"},"ip":{"addr":"104.21.61.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://intuition-reward.xyz/","date":"2026-05-23T13:32:52.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intuition-reward.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 May 2026 19:01:13 GMT","end":"Wed, 19 Aug 2026 20:01:04 GMT"},"fingerprint":{"sha1":"38:43:12:4C:54:58:D5:2A:B1:5F:87:59:0F:EA:22:F6:ED:7F:49:6E","sha256":"8B:DD:E1:F0:37:65:EA:19:C0:44:E0:71:66:9C:ED:D1:9C:AC:27:65:B7:BB:3E:DF:01:2F:80:BD:3A:73:79:6F"}}},"request":{"raw":"GET /hero-loop_mlllaj.mp4 HTTP/1.1\r\nHost: intuition-reward.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://intuition-reward.xyz/\r\nRange: bytes=9961472-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 38711\r\ncf-cache-status: REVALIDATED\r\ncontent-type: application/octet-stream\r\ncontent-range: bytes 9961472-10000182/10000183\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"88e891a4516c265bf0666b4ce8dcd5e2\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ql%2B3NjrkzkhProes4UFBgusJLFDCKrt20B2mdKwZ%2BB9h8COg6hZZlosK5ix%2FpLitrUsUHYN2PEDt0g2TcDioHbrfSSzUprSoE%2BIcxDruBvdyiH%2FQfOZOlTFASpQOmtT7%2FlytjioyaQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 23 May 2026 13:32:52 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: a0046ddd496c0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38711,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"91a0392a7b3787438b5e1fd1d4938620","sha1":"6636153ab00f644137b9c1e29d4fbc554f0db4fe","sha256":"a6c390fe187f6abaa5d96086bbacd7c69b0ac77e42c14c82d02b7ea7b49de5f5","sha512":"d5e0267cf7bbf2628ec2888eeb4314c370d7b2ad301935bbb500246f7d0e8ed482b5edc5fed266d7d71fa35897c0af9794a6cb4fd72cbb2823d161293187c9cb","ssdeep":"768:2tOOFAAbbMEqab1XDLHaKIEdh6ms2GArVxXUQ:kGsbCu1zLHa1Fw7r","tlshash":"3b03ae21c3319616c5729a30c6ea4314bb38ca39b667934f53c0e17dfe4b7889d639da","first_seen":"2026-05-23T13:33:16.834083Z","last_seen":"2026-05-23T13:35:51.50888Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"intuition-reward.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"intuition-reward.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intuition-reward.xyz/favicon.ico","fqdn":"intuition-reward.xyz","domain":"intuition-reward.xyz","tld":"xyz"},"ip":{"addr":"104.21.61.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intuition-reward.xyz/","date":"2026-05-23T13:32:52.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intuition-reward.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 May 2026 19:01:13 GMT","end":"Wed, 19 Aug 2026 20:01:04 GMT"},"fingerprint":{"sha1":"38:43:12:4C:54:58:D5:2A:B1:5F:87:59:0F:EA:22:F6:ED:7F:49:6E","sha256":"8B:DD:E1:F0:37:65:EA:19:C0:44:E0:71:66:9C:ED:D1:9C:AC:27:65:B7:BB:3E:DF:01:2F:80:BD:3A:73:79:6F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: intuition-reward.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://intuition-reward.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\ncontent-type: image/x-icon\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 23 May 2026 13:32:52 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xEbS4yTt5rrTfStrVMpP8nWxK8KYd%2BwnOicWaIbt6pnBnjf6u08g3uuf%2F9Xy8hrZzj2tzj0jpqNHazRQqRbJQJQ8aOG7pcDCWmWWsmo2nsIbUrjClEdSdu38uCkMLU2sU6TEEG5e9A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a4aa7be0556e92ebd2b01b58544207ac\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a0046ddd59740883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1175,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced","md5":"a4aa7be0556e92ebd2b01b58544207ac","sha1":"1beb1f03db3581d83d1470314f332dc1d98c82b8","sha256":"de69dc992ec08a969208203fd1e5c9dbffd40c15e4b4e9cb0cfa2a38c4755058","sha512":"f2e9090854d4b238e05015b66d22ffd6c011b1868125808e99d6db90c436b84ccee033e4ddce33d65f5a899c9ab43c73fcbf266c0db6cc1524b42a5a2b35841f","ssdeep":"","tlshash":"c421ca8727668f0de1a51937b6523730da20e95585389658ec2de4a7893e680e8c7058","first_seen":"2025-11-04T11:38:14.099596Z","last_seen":"2026-05-23T13:35:51.518415Z","times_seen":8,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"intuition-reward.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"intuition-reward.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intuition-reward.xyz/","fqdn":"intuition-reward.xyz","domain":"intuition-reward.xyz","tld":"xyz"},"ip":{"addr":"104.21.61.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-23T13:32:52.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intuition-reward.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 May 2026 19:01:13 GMT","end":"Wed, 19 Aug 2026 20:01:04 GMT"},"fingerprint":{"sha1":"38:43:12:4C:54:58:D5:2A:B1:5F:87:59:0F:EA:22:F6:ED:7F:49:6E","sha256":"8B:DD:E1:F0:37:65:EA:19:C0:44:E0:71:66:9C:ED:D1:9C:AC:27:65:B7:BB:3E:DF:01:2F:80:BD:3A:73:79:6F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: intuition-reward.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 May 2026 13:32:52 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zne3FnFPpjj4JuKY0xnWKT%2B57ao2orad%2FxzYowH%2FrKvfKyES86xs0Na8zHD9D616kASMyG74hfTgNZ7%2FMALBkWthD9dTBzzOQm5T0AOxkhZkNcg7Cy%2F%2FRg2avJL2vektZMCDmMcy4Q%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: a0046dd96f0a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37924,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (17905)","md5":"444cf5b03cc7bbbce515059ac8771237","sha1":"8234ef9508c8afcdaa50b66a3ef323e15f453e93","sha256":"e0b819f8310e9c1a7a48358cd168e2f9bf382a9481eac40bfea2d8422753eb0d","sha512":"d0f97dded537104cac6ed6a8f7c5f9a57c187d01ab39085d1e1aea0137b092d0f405455b672a5e95b0e905ae4dc6faaea09fe64aa82f1b01c95f68880c20d7b6","ssdeep":"384:OQCTQzbeIWhsucMZ2K5XHAU0jfhLittvWC2eBmbeNmyLCL4wruzHYbpMkAozoCms:iQXAssUjhGvkeBmaN/x65p9vzoCx","tlshash":"dc030890a5202fb16c03bfe58addea18e51760f659db5a5cbfce584842817dc0fb9e80","first_seen":"2026-05-23T13:33:16.838718Z","last_seen":"2026-05-23T13:35:51.514148Z","times_seen":2,"resource_available":true,"data":null}},"time_used":348,"timings":{"blocked":56,"dns":36,"connect":1,"send":0,"wait":236,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"intuition-reward.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"intuition-reward.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intuition-reward.xyz/9722456a4ad99fe0.css","fqdn":"intuition-reward.xyz","domain":"intuition-reward.xyz","tld":"xyz"},"ip":{"addr":"104.21.61.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://intuition-reward.xyz/","date":"2026-05-23T13:32:52.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intuition-reward.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 May 2026 19:01:13 GMT","end":"Wed, 19 Aug 2026 20:01:04 GMT"},"fingerprint":{"sha1":"38:43:12:4C:54:58:D5:2A:B1:5F:87:59:0F:EA:22:F6:ED:7F:49:6E","sha256":"8B:DD:E1:F0:37:65:EA:19:C0:44:E0:71:66:9C:ED:D1:9C:AC:27:65:B7:BB:3E:DF:01:2F:80:BD:3A:73:79:6F"}}},"request":{"raw":"GET /9722456a4ad99fe0.css HTTP/1.1\r\nHost: intuition-reward.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://intuition-reward.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 23 May 2026 13:32:52 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OH7dZZtXzhoy2g71wuRkC9%2FPZ0GY2EfzZVmu%2B12U8w8iT%2BHOqmSZEPdtLhk2LKCFY7f9OE4rPd%2BaUciAFp1v2F4PYJywoU1XwB8ch%2FacFOm4Vk9h64UvdrlObU4ioEhjZ47B15phnA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"b06c08500e32c56b15dab50d887b0311\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a0046ddbb9260883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28062,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (28062), with no line terminators","md5":"b06c08500e32c56b15dab50d887b0311","sha1":"e131304fec1b297c8e717e0c7928fe467ea45c45","sha256":"ac50ff87190bea4ef8fba0e895c90a5c177efedef0ceeca4ffaa898129fced01","sha512":"fe09764f0f31f55c043a9395f2c79d6cdfbdf35ada449f097433569aa8d7089139496a6317d0c4acd242bd50346926428f5f168d48b6a73eb6d94d29a3659aea","ssdeep":"384:TpSed283ZcW23qWF7O36AgzyAIfPo8PFEIN4:TpSUJoAgzyAco8PFEw4","tlshash":"bac2c9097e2d3f38ba13a32440c0849c620b775feebd8797acd1265d9d9d78431aca79","first_seen":"2025-06-18T00:26:14.391201Z","last_seen":"2026-05-23T13:35:51.522475Z","times_seen":136,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"intuition-reward.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"intuition-reward.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intuition-reward.xyz/2d38e79c0bbdf5e6.css","fqdn":"intuition-reward.xyz","domain":"intuition-reward.xyz","tld":"xyz"},"ip":{"addr":"104.21.61.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://intuition-reward.xyz/","date":"2026-05-23T13:32:52.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intuition-reward.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 May 2026 19:01:13 GMT","end":"Wed, 19 Aug 2026 20:01:04 GMT"},"fingerprint":{"sha1":"38:43:12:4C:54:58:D5:2A:B1:5F:87:59:0F:EA:22:F6:ED:7F:49:6E","sha256":"8B:DD:E1:F0:37:65:EA:19:C0:44:E0:71:66:9C:ED:D1:9C:AC:27:65:B7:BB:3E:DF:01:2F:80:BD:3A:73:79:6F"}}},"request":{"raw":"GET /2d38e79c0bbdf5e6.css HTTP/1.1\r\nHost: intuition-reward.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://intuition-reward.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 23 May 2026 13:32:52 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sGsduw5LQGyThUgJIg0LloZm4a1QORZERn97QO%2F5v1NrL96jXNFFKm1FHf1SntDylWGwfLDfYtPcs1L0CP1gJ3e%2BXhJ%2BVfm5tmbeCdIYes8UHfLKu5yUJt2PcHNefVlMWiDGr1J0hQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"2887108c01a3eb3fc59a493fcc30996a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a0046ddbb9250883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52368,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (50244)","md5":"2887108c01a3eb3fc59a493fcc30996a","sha1":"d1c69ef13e7a3013497c28e320d87c76f111750b","sha256":"0bb5585d2eb2211a153235bc47c43fa5a223e64489244a4482d32dca2f30b527","sha512":"190fa97d9910984dc3cd48a06be0fa1ddd308df1cfc177b37211dc9f6e5013422f229a47746bfc8814d76cbfd722f43267a8119a6dc2fbef8dd4a5c1a5937740","ssdeep":"384:ClZLkxJY5XvxZwxETN5vvJug5xB5zHAiGsAdlGfPGf1SFvrSUSuqFR1EkY/GJAR7:C/KY0qxB5zHAiGs416TZSuqFfoGw","tlshash":"ae33c924e335e57e7c37a56c66bcf41c320635a0e9f807e9ea2272119ec77f20d66624","first_seen":"2026-05-21T15:38:44.012702Z","last_seen":"2026-05-23T13:35:51.520476Z","times_seen":4,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"intuition-reward.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"intuition-reward.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intuition-reward.xyz/c84e87a66e797044.css","fqdn":"intuition-reward.xyz","domain":"intuition-reward.xyz","tld":"xyz"},"ip":{"addr":"104.21.61.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://intuition-reward.xyz/","date":"2026-05-23T13:32:52.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intuition-reward.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 May 2026 19:01:13 GMT","end":"Wed, 19 Aug 2026 20:01:04 GMT"},"fingerprint":{"sha1":"38:43:12:4C:54:58:D5:2A:B1:5F:87:59:0F:EA:22:F6:ED:7F:49:6E","sha256":"8B:DD:E1:F0:37:65:EA:19:C0:44:E0:71:66:9C:ED:D1:9C:AC:27:65:B7:BB:3E:DF:01:2F:80:BD:3A:73:79:6F"}}},"request":{"raw":"GET /c84e87a66e797044.css HTTP/1.1\r\nHost: intuition-reward.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://intuition-reward.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 23 May 2026 13:32:52 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7ygrgFlrbcIO8H%2B4IMczYvTWGN0vIEH0K0BiXkixd9LIsr0UBlzXhVTRTyHRg2xqaABTPeNVOwf3YCC2fPsSIdQjueb2o5m%2BpqxuTqmNmUzmepzYJIESNl7GD66YM3tsJYFuJPYY4w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"e926995bcb7137948b1eb2a01fbe5fa9\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a0046ddbb92b0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":833,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (833), with no line terminators","md5":"e926995bcb7137948b1eb2a01fbe5fa9","sha1":"e6a7dabfdf7fdf534b4637955e50a453853181f2","sha256":"5599c2e90d75655a374f11906b7226d87fba2fd93f153e819af5c5b9145c58d8","sha512":"f3b6a7248acbaf7fedeef2e0312cc9fd2075ded230468bd6333f1d3cc03b81f151749c33333acf67add5a7a484484a2d748350ef9e244c9cb442f988a92decdf","ssdeep":"","tlshash":"96012968d931f6ba7f17e1a896d81b3a3207f7b054da4384411fd4317ccbba60062d5a","first_seen":"2025-11-04T11:38:14.093829Z","last_seen":"2026-05-23T13:35:51.524524Z","times_seen":6,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"intuition-reward.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"intuition-reward.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intuition-reward.xyz/assets/wave-context-db.js","fqdn":"intuition-reward.xyz","domain":"intuition-reward.xyz","tld":"xyz"},"ip":{"addr":"104.21.61.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intuition-reward.xyz/","date":"2026-05-23T13:32:52.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intuition-reward.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 May 2026 19:01:13 GMT","end":"Wed, 19 Aug 2026 20:01:04 GMT"},"fingerprint":{"sha1":"38:43:12:4C:54:58:D5:2A:B1:5F:87:59:0F:EA:22:F6:ED:7F:49:6E","sha256":"8B:DD:E1:F0:37:65:EA:19:C0:44:E0:71:66:9C:ED:D1:9C:AC:27:65:B7:BB:3E:DF:01:2F:80:BD:3A:73:79:6F"}}},"request":{"raw":"GET /assets/wave-context-db.js HTTP/1.1\r\nHost: intuition-reward.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://intuition-reward.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 13:32:52 GMT\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nlast-modified: Sat, 23 May 2026 13:32:52 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cXebIU4nkULXPcRjtPUzaytnvKiXmQXz4cnKiSqPdGMyrr0LyNRa%2Bbw2ArZ%2BAw5Jt4k0Yhp7cxPqYLtO7jwTxHZOqLtGZVJ%2BxiVbDYsKbbnXWXODN9GVIpg6HCERgzRq6rLrnFlE2g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-ray: a0046ddbc92e0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-24T23:32:15.699972Z","times_seen":15677872,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"intuition-reward.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"intuition-reward.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}