{"report_id":"49aa9b21-9d23-41f6-9317-e7fb837f9ef5","version":6,"status":"done","tags":[],"date":"2026-01-28T05:56:29Z","url":{"schema":"https","addr":"rewards-somnianetwork.com/","fqdn":"rewards-somnianetwork.com","domain":"rewards-somnianetwork.com","tld":"com"},"ip":{"addr":"104.21.48.236","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rewards-somnianetwork.com/","fqdn":"rewards-somnianetwork.com","domain":"rewards-somnianetwork.com","tld":"com"},"title":"Somnia Testnet","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"rewards-somnianetwork.com/","fqdn":"rewards-somnianetwork.com","domain":"rewards-somnianetwork.com","tld":"com"},"ip":{"addr":"104.21.48.236","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-04T05:56:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-01-28","alert":"PHP webshell using some kind of eval with encoded blob to decode","trigger":"rewards-somnianetwork.com/orion.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/02/07","description":"PHP webshell using some kind of eval with encoded blob to decode","hash":"1d4b374d284c12db881ba42ee63ebce2759e0b14","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_encoded_big","score":"50"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-01-28","alert":"PHP webshell using some kind of eval with encoded blob to decode","trigger":"rewards-somnianetwork.com/","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/02/07","description":"PHP webshell using some kind of eval with encoded blob to decode","hash":"1d4b374d284c12db881ba42ee63ebce2759e0b14","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_encoded_big","score":"50"}}],"urlquery":null},"summary":[{"fqdn":"rewards-somnianetwork.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-26","domain_rank":0,"first_seen":"2026-01-28T05:20:01.129945Z","last_seen":"2026-01-28T05:20:01.129945Z","alert_count":1,"request_count":19,"received_data":4674886,"sent_data":8986,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rewards-somnianetwork.com/orion.js","fqdn":"rewards-somnianetwork.com","domain":"rewards-somnianetwork.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8256cac1bd4bdcddf5d245ee81fcc52e","sha1":"9a6dedf90a6703f3b2f4cdaecff3226bf689d201","sha256":"ab8c63dd12dd03136ccd032e5b3884c3d6fe72a9a36d8bca6bf99434332dd3bc","sha512":"2a46c67ddb2cb0c7680f68bd4d0e622ead7cc38a0c8034cade6f7bbde1a5c7c4bdce17e489646a28af1126b87c1f525d723f2592bacb4fff47001ab15727965c","ssdeep":"1536:9kaRasaz1dd527mjiIs113usHqBYLsVFX5saB:9kaRcz732aiIsVqBMs5saB","tlshash":"37b340d6594bd0d58e1a10edd077ec09e0681aa3cdacf183ba2cded2755df22884763b","size":107989,"data":"","first_seen":"2026-01-07T13:23:26.426463Z","last_seen":"2026-02-14T09:07:38.758383Z","times_seen":45,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-01-28","alert":"PHP webshell using some kind of eval with encoded blob to decode","trigger":"rewards-somnianetwork.com/orion.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/02/07","description":"PHP webshell using some kind of eval with encoded blob to decode","hash":"1d4b374d284c12db881ba42ee63ebce2759e0b14","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_encoded_big","score":"50"}}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-somnianetwork.com/","fqdn":"rewards-somnianetwork.com","domain":"rewards-somnianetwork.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e7cedee5f4aabfe0f0a25596641b0073","sha1":"9e90df4076abbd3350295826c5ad3ec1856ffd56","sha256":"c2e60dc68f09c70895f8cb98a4a88e16cf3c691d5a96b9c93c3aab931eafc258","sha512":"17dc0e86fcd7af709d5ffb50d255169d2300566d30c2da4345505703e6a6ebf303df263db9561688753bc03af86b134ccfa9f763966f8612ef554be796d6c025","ssdeep":"1536:jQe6pw4biVcuVXdWAgB1PusH2DY7sX3lX56oH:Me6KBVcuVtWAgR2Do2X6oH","tlshash":"7fa340d59a4bd0e08e5a11edd077ed0ae0281aa3cdacf193b92cded1355df22c84753a","size":104467,"data":"","first_seen":"2026-01-07T13:23:26.460119Z","last_seen":"2026-02-14T09:07:38.76649Z","times_seen":45,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-01-28","alert":"PHP webshell using some kind of eval with encoded blob to decode","trigger":"rewards-somnianetwork.com/","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/02/07","description":"PHP webshell using some kind of eval with encoded blob to decode","hash":"1d4b374d284c12db881ba42ee63ebce2759e0b14","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_encoded_big","score":"50"}}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-somnianetwork.com/59730fc6-3a2d-473b-b129-1d421dcdbae0","fqdn":"rewards-somnianetwork.com","domain":"rewards-somnianetwork.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f11bcdc7b7757c117a8de0db3a4c25b8","sha1":"962e4d08a960106c829d0f9d492d7b891927adab","sha256":"b60b89c0c92cf57329c8590a2c5540cece4def64e4e7bf04f2d39b8ffa3b2748","sha512":"7461553dadb09db423bda8c47a58f8cdade82aa710a0f4415cde912e7a88cd4471ea86aa58a2e5097c90e2cb45ac410104019c56a04c35955e827f0bb0796040","ssdeep":"6144:vkWGL6BSn5NGCk3zi0mCw8wLPNU2HZjGfty3:cjkSnv1k20mCwFnHRGfty3","tlshash":"1044810609ac4f7986ec22e015f72cc401794e0ad9dc3cbfb9ada1579e25bd6e0c279d","size":259964,"data":"","first_seen":"2025-07-13T03:04:16.940864Z","last_seen":"2026-06-04T05:28:11.313644Z","times_seen":5038,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rewards-somnianetwork.com/favicon.ico","fqdn":"rewards-somnianetwork.com","domain":"rewards-somnianetwork.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-somnianetwork.com/","date":"2026-01-28T05:56:06.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-somnianetwork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 12:15:42 GMT","end":"Sun, 26 Apr 2026 13:14:08 GMT"},"fingerprint":{"sha1":"12:85:E1:5E:BD:53:9F:46:C2:7F:8C:58:B2:84:FB:75:8D:9B:85:3E","sha256":"63:1C:9B:27:F4:EA:2F:BA:07:BE:65:CD:46:AB:49:56:27:23:00:26:13:E2:8C:CD:80:DF:F4:AA:2B:15:49:D7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: rewards-somnianetwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-somnianetwork.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 05:56:06 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 26 Jan 2026 13:13:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 2191\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kG29JZJvufIYn1PetjQ%2B2FiMhZ9vuk3QCF9T%2BWhZV2vdyEOpAPHAIa04K3QPwFVhLUZ6zyqSK6glB40biIp8fT7u2ZfBLEsJxLQWuwb3aDiH%2FkZ0cdzhEbA%3D\"}]}\r\netag: W/\"69776870-572\"\r\ncontent-encoding: br\r\ncf-ray: 9c4e3ea65d3ac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1394,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"4fe86cbac7de3c4671b52c5107652f72","sha1":"aeb931660838c2b90b07c734c18409e8b61ec357","sha256":"a005797594a5311977de0a694c1e5c8553bf907ffce931193f03e53b723e9b73","sha512":"ae8fa773d4069ce7a5d654e678b24a2e6ffb258b5051b47840e3f279e33c17dce916ff07c694c3cb409b27d719cf3d7c590342e08ea88470aa23bb5a10d70649","ssdeep":"","tlshash":"7b21d89a9e9ddc3bca2a62859f038551b909dedf0e317c0624c628490f81f409a873fe","first_seen":"2025-06-29T22:28:52.472361Z","last_seen":"2026-04-14T13:14:32.515764Z","times_seen":8,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-somnianetwork.com/robot.svg","fqdn":"rewards-somnianetwork.com","domain":"rewards-somnianetwork.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rewards-somnianetwork.com/","date":"2026-01-28T05:56:06.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-somnianetwork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 12:15:42 GMT","end":"Sun, 26 Apr 2026 13:14:08 GMT"},"fingerprint":{"sha1":"12:85:E1:5E:BD:53:9F:46:C2:7F:8C:58:B2:84:FB:75:8D:9B:85:3E","sha256":"63:1C:9B:27:F4:EA:2F:BA:07:BE:65:CD:46:AB:49:56:27:23:00:26:13:E2:8C:CD:80:DF:F4:AA:2B:15:49:D7"}}},"request":{"raw":"GET /robot.svg HTTP/1.1\r\nHost: rewards-somnianetwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-somnianetwork.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 05:56:06 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 26 Jan 2026 13:13:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 2191\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vke5BG6ilxx7KEtnIeHO9ZlttrcB16YS0CrAx%2BQJ6rYX4R2LXAtRu%2BwoSMMrpUc8I4Jme%2FqBRvtIF20AJipS%2BPjrSsInTjrEYHXnKgCygIlVN0sLtVH7tHc%3D\"}]}\r\netag: W/\"69776870-7bd\"\r\ncontent-encoding: br\r\ncf-ray: 9c4e3ea66d64c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1981,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"35addc8f1ad5eb924fad928c3bd44afd","sha1":"f0684238171243869d648088a28b2c7bdf95ebca","sha256":"ca023110fd7be17bd221af45e9f421555e22c73c1383c7fb249ea7dc213684a7","sha512":"b0dbc9f5a00bb79e97111f9c36f29796fc43aacb68d38746f01bbe8ffce62fcd687152fc2a1a1ee710e55324ba071ade4ed185d9f654e23f572c97a3e0b35951","ssdeep":"","tlshash":"8e41cf183758483cfc5aa310fb9a3138c0ae54823ac5add8c5623c721477a0e6dbbdc7","first_seen":"2025-08-05T21:16:42.593049Z","last_seen":"2026-02-08T18:01:02.751072Z","times_seen":4,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-somnianetwork.com/index_4.html","fqdn":"rewards-somnianetwork.com","domain":"rewards-somnianetwork.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://rewards-somnianetwork.com/index_1.html","date":"2026-01-28T05:56:06.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-somnianetwork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 12:15:42 GMT","end":"Sun, 26 Apr 2026 13:14:08 GMT"},"fingerprint":{"sha1":"12:85:E1:5E:BD:53:9F:46:C2:7F:8C:58:B2:84:FB:75:8D:9B:85:3E","sha256":"63:1C:9B:27:F4:EA:2F:BA:07:BE:65:CD:46:AB:49:56:27:23:00:26:13:E2:8C:CD:80:DF:F4:AA:2B:15:49:D7"}}},"request":{"raw":"GET /index_4.html HTTP/1.1\r\nHost: rewards-somnianetwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-somnianetwork.com/index_1.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 05:56:06 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 26 Jan 2026 13:13:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 2191\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JZ4ahUqGgYKEY0G19zFWnIsHDs%2B5hCutkQKEqYM7yDpICCTbz8%2BvsndLCgZkvHfdGSyeEY6fvSNZcRaK3fwX6kgv%2BJPmCZILfqmTVdRk5tNvkWukAYt9SGo%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c4e3ea6adc3c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":327,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"e18de1a4d5bce216eb21cd1b3b7ccc93","sha1":"f37a9a87dfdec7f1ad7f7d967454e29ea31c8e39","sha256":"9a0a12acea36b4740f6524ce9b05a7db1c8eb75851d11e688f827dbc0da82803","sha512":"c86425824581b33fd18921c37bbf07f9ee0adcf60d333745473caab6df683763dc50bc4f27214c3ef77b205537f9e04a5041eb42caa21d1e271b8f92d3de2cde","ssdeep":"","tlshash":"ace02d23a211800609b087e10fe2f2084007ec1e6022dee8bef2ac9c24d52377423288","first_seen":"2025-08-05T21:16:42.598997Z","last_seen":"2026-02-08T18:01:02.771911Z","times_seen":4,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-somnianetwork.com/","fqdn":"rewards-somnianetwork.com","domain":"rewards-somnianetwork.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-28T05:56:06.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-somnianetwork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 12:15:42 GMT","end":"Sun, 26 Apr 2026 13:14:08 GMT"},"fingerprint":{"sha1":"12:85:E1:5E:BD:53:9F:46:C2:7F:8C:58:B2:84:FB:75:8D:9B:85:3E","sha256":"63:1C:9B:27:F4:EA:2F:BA:07:BE:65:CD:46:AB:49:56:27:23:00:26:13:E2:8C:CD:80:DF:F4:AA:2B:15:49:D7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rewards-somnianetwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 05:56:06 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 26 Jan 2026 13:13:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iL%2BVwv2CvpCA7GH%2BuA3vMxmNIRWFpQdobi7fM5WSlptQXz%2FdB1gr8e%2F0s6bkQr4w9wmQ7qBoiLclGDtA9aw%2F6wwdBB7%2BHCL3daAEJB43SFVwHdSpxP17\"}]}\r\nage: 2191\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c4e3ea40e820b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79213,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (59606)","md5":"54618a1eb0cee73b00845d2739e4460d","sha1":"e7392009bb71b31e51bc569628f1a2e195146c3b","sha256":"66e47ca55ea087d46db1423661b68eef45b5e96a3d89f6297372ea6c68e2c777","sha512":"0478ffafd07d7a3c74236f6f581f127e36e972e0019c2f6a4b9f0fed14d0b335d5d2899822a55ff17fbc37b2fd0dda736099c8656a05446003123317deb39088","ssdeep":"768:9CQjzYLgz4glGO8+WiY8YaYkYmYvYLYJ1TwCeQGO6hFA+8KSfoczeNwl8Yi7P8Na:9CiSgzy4cXDu9aZEOaJ5","tlshash":"ab7375743101673e792784b5f934ffd9a58ae20cdd279a4af2ec21833bd7de64921218","first_seen":"2026-01-28T05:20:04.898783Z","last_seen":"2026-01-28T05:56:31.159018Z","times_seen":2,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":45,"dns":27,"connect":2,"send":0,"wait":16,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-somnianetwork.com/028d2092bdb359c9.css","fqdn":"rewards-somnianetwork.com","domain":"rewards-somnianetwork.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rewards-somnianetwork.com/","date":"2026-01-28T05:56:06.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-somnianetwork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 12:15:42 GMT","end":"Sun, 26 Apr 2026 13:14:08 GMT"},"fingerprint":{"sha1":"12:85:E1:5E:BD:53:9F:46:C2:7F:8C:58:B2:84:FB:75:8D:9B:85:3E","sha256":"63:1C:9B:27:F4:EA:2F:BA:07:BE:65:CD:46:AB:49:56:27:23:00:26:13:E2:8C:CD:80:DF:F4:AA:2B:15:49:D7"}}},"request":{"raw":"GET /028d2092bdb359c9.css HTTP/1.1\r\nHost: rewards-somnianetwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-somnianetwork.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 05:56:06 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 26 Jan 2026 13:13:19 GMT\r\netag: W/\"6977686f-f654\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2191\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cWpPSMqUO4HQ6HrC1mBUP5pETXBafQKhxbV3%2B0TKFhL%2Fs22J87dVDx%2BkXdfMG%2FaJWPMcCdNDx0th1%2FUOri5jSlYM%2BKhIxsnQEWHr%2F11HQwggyZBjCHeopgc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c4e3ea4fb8dc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63060,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (60767)","md5":"ed041b47196e7323e070319c5e7d967f","sha1":"006da838a1ac5fdf42d4cefcaf613cfa89219c25","sha256":"15f5e20f9d23e3e95cdc353bc63d70a010be4b1e4275e3ae8ef76d01280e8c08","sha512":"71a6b3b324e52396dc5ba5b85bc6d706629b29c19a6cd042150811146df319a891c37b7032319acc4847c9137b2526794a92e374bee2ac199e6cc1e355a2eb4e","ssdeep":"1536:GHsMfO7eJsrNlPW+wefck/tBOYU60/GBIFnG/Wxm7hbLaWabfdU2diTjTIBor:GHsMfO7eJsrNlPW+we0kZU60/GBIFnGR","tlshash":"1a53a51d7615513f7c2380f5d2a8bddca016f1c4de3a0afbbe921121abd2af709a6614","first_seen":"2025-08-05T21:16:42.621453Z","last_seen":"2026-02-08T21:59:12.281028Z","times_seen":5,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-somnianetwork.com/orion.js","fqdn":"rewards-somnianetwork.com","domain":"rewards-somnianetwork.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rewards-somnianetwork.com/","date":"2026-01-28T05:56:06.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-somnianetwork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 12:15:42 GMT","end":"Sun, 26 Apr 2026 13:14:08 GMT"},"fingerprint":{"sha1":"12:85:E1:5E:BD:53:9F:46:C2:7F:8C:58:B2:84:FB:75:8D:9B:85:3E","sha256":"63:1C:9B:27:F4:EA:2F:BA:07:BE:65:CD:46:AB:49:56:27:23:00:26:13:E2:8C:CD:80:DF:F4:AA:2B:15:49:D7"}}},"request":{"raw":"GET /orion.js HTTP/1.1\r\nHost: rewards-somnianetwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-somnianetwork.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 05:56:06 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 26 Jan 2026 13:13:20 GMT\r\netag: W/\"69776870-1a5d5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2191\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hPCWns69FFB9o3zjxWj%2BaewBc4pzxpiNWCr0bjxm9hqjXp5lGVHtEpIYjt1g5qp4AKOmM%2BHjK%2BYQknO21Z7e2LZMImRQWzgNj2SaMe1KxplchcEodSPBAQs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c4e3ea4fb92c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":107989,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8256cac1bd4bdcddf5d245ee81fcc52e","sha1":"9a6dedf90a6703f3b2f4cdaecff3226bf689d201","sha256":"ab8c63dd12dd03136ccd032e5b3884c3d6fe72a9a36d8bca6bf99434332dd3bc","sha512":"2a46c67ddb2cb0c7680f68bd4d0e622ead7cc38a0c8034cade6f7bbde1a5c7c4bdce17e489646a28af1126b87c1f525d723f2592bacb4fff47001ab15727965c","ssdeep":"1536:9kaRasaz1dd527mjiIs113usHqBYLsVFX5saB:9kaRcz732aiIsVqBMs5saB","tlshash":"37b340d6594bd0d58e1a10edd077ec09e0681aa3cdacf183ba2cded2755df22884763b","first_seen":"2026-01-07T13:23:26.426463Z","last_seen":"2026-02-14T09:07:38.758383Z","times_seen":45,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-01-28","alert":"PHP webshell using some kind of eval with encoded blob to decode","trigger":"rewards-somnianetwork.com/orion.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/02/07","description":"PHP webshell using some kind of eval with encoded blob to decode","hash":"1d4b374d284c12db881ba42ee63ebce2759e0b14","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_encoded_big","score":"50"}}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-somnianetwork.com/somnia-logo-light.svg","fqdn":"rewards-somnianetwork.com","domain":"rewards-somnianetwork.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-somnianetwork.com/","date":"2026-01-28T05:56:06.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-somnianetwork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 12:15:42 GMT","end":"Sun, 26 Apr 2026 13:14:08 GMT"},"fingerprint":{"sha1":"12:85:E1:5E:BD:53:9F:46:C2:7F:8C:58:B2:84:FB:75:8D:9B:85:3E","sha256":"63:1C:9B:27:F4:EA:2F:BA:07:BE:65:CD:46:AB:49:56:27:23:00:26:13:E2:8C:CD:80:DF:F4:AA:2B:15:49:D7"}}},"request":{"raw":"GET /somnia-logo-light.svg HTTP/1.1\r\nHost: rewards-somnianetwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-somnianetwork.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 05:56:06 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 26 Jan 2026 13:13:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 2191\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OGMjYA7FErhTg%2Bi21fQe8kv10%2BYK%2FYxe6PQ%2FIZ5gKsI9QG04BqrREXPJbDHqBrDucAfEOcVUkDJxTD2lISWy0T4YL23c0waYyBg1x5Rnm0mEGTatyF6aLjs%3D\"}]}\r\netag: W/\"6977686f-3236\"\r\ncontent-encoding: br\r\ncf-ray: 9c4e3ea4fb94c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12854,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e9404f1340dd2a4b81b0889177deb206","sha1":"bf12b5bc4c0cb5de8f9bb7b5262fead8e09236fb","sha256":"ed1c2796cba7fc5a5de4142beb85926c7e0940ae619cb82bb712ecd34b574663","sha512":"060d59666ace37d1e5dff9e7108d1a39b22c07e41198ce25527d0ad7a4dedd6c92c80ce299767759012e3535db3e077a87b2e80f892dd8566ec0a80e16b0e698","ssdeep":"192:2BQKE3Ax4QKE3vIAlLsPcYBGNJmpYcOiBbpqtzNF4gGko7sMNjnpPs6i/J/14eL2:U+fNtpYxidAtJPG17XbpPs6ihNnLyTJ","tlshash":"7742d6fb3a8472cce4068bf0e7a248b5376fa2f6b740c7690e5e5e51754209dc89b8c4","first_seen":"2025-08-05T21:16:42.673964Z","last_seen":"2026-02-08T21:59:12.277496Z","times_seen":5,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-somnianetwork.com/paper-plane.svg","fqdn":"rewards-somnianetwork.com","domain":"rewards-somnianetwork.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rewards-somnianetwork.com/","date":"2026-01-28T05:56:06.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-somnianetwork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 12:15:42 GMT","end":"Sun, 26 Apr 2026 13:14:08 GMT"},"fingerprint":{"sha1":"12:85:E1:5E:BD:53:9F:46:C2:7F:8C:58:B2:84:FB:75:8D:9B:85:3E","sha256":"63:1C:9B:27:F4:EA:2F:BA:07:BE:65:CD:46:AB:49:56:27:23:00:26:13:E2:8C:CD:80:DF:F4:AA:2B:15:49:D7"}}},"request":{"raw":"GET /paper-plane.svg HTTP/1.1\r\nHost: rewards-somnianetwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-somnianetwork.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 05:56:06 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 26 Jan 2026 13:13:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 2191\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BOOPw7WJ%2B9bkZn5YeHVpD0mjSTVoR%2Be3CTYiLgq8UhPM%2FGdN1npBNNPGtSIAxs9bw8gPCCCTqVH%2FNyOL55X68clMpQoA5cm8J2rl6ov598R1X5MC9Y%2FMe48%3D\"}]}\r\netag: W/\"69776870-118\"\r\ncontent-encoding: br\r\ncf-ray: 9c4e3ea65d4bc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":280,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5781c3d5b0c768438e71cee99e8a7b20","sha1":"df35bafe914bbfec2fbf7161b8b5a6b75b5324d6","sha256":"2f0f233705f0d232ebd1c43c1db64d445ac4a736b6dc12739cf851a1369a1bc3","sha512":"c077784b430d79eb5d9ff7792a754aef4d3e1ed36b993233012e4da666dd853f275638beb9733218cab6d7dee73d0cb5871e21cb2dd49e52793cc24405038687","ssdeep":"","tlshash":"d9d0126521247968a118c221f7a8703a90aa25d247f900b4deb15769d5874ee2cbf9f8","first_seen":"2025-08-05T21:16:42.665403Z","last_seen":"2026-02-08T18:01:02.755707Z","times_seen":4,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-somnianetwork.com/swap.svg","fqdn":"rewards-somnianetwork.com","domain":"rewards-somnianetwork.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rewards-somnianetwork.com/","date":"2026-01-28T05:56:06.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-somnianetwork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 12:15:42 GMT","end":"Sun, 26 Apr 2026 13:14:08 GMT"},"fingerprint":{"sha1":"12:85:E1:5E:BD:53:9F:46:C2:7F:8C:58:B2:84:FB:75:8D:9B:85:3E","sha256":"63:1C:9B:27:F4:EA:2F:BA:07:BE:65:CD:46:AB:49:56:27:23:00:26:13:E2:8C:CD:80:DF:F4:AA:2B:15:49:D7"}}},"request":{"raw":"GET /swap.svg HTTP/1.1\r\nHost: rewards-somnianetwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-somnianetwork.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 05:56:06 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 26 Jan 2026 13:13:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 2191\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2Bu%2FmI2AsGpkIvOLzdUOZkIFuLhPFksKaGVWl8avY2r5KjfFVCIZb2g5nVy7B9o4nMUIbsIhMVX0Za7SjMYBYHSphvLDCuMGlTj8ZRPzU3MlelnUHj%2BUMRo%3D\"}]}\r\netag: W/\"69776870-6b4\"\r\ncontent-encoding: br\r\ncf-ray: 9c4e3ea66d53c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1716,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"45fe06a1b48e6b5636a95602f995410f","sha1":"edab5882f8b436dab2ae2259363c02712746ebef","sha256":"d4ec95589a1326257ab93886430d0f23d3d52b93415020f16f4d69d9f1d8f1ae","sha512":"49b207d0c2e87cef8c98edf0e19e16a6660b1be3fa087c648a1011525f42a3dac5d14212d10a93ce006857b1ad148f13df84b1db8095ec66871a414a13a4b8cc","ssdeep":"","tlshash":"8031f0ed638ba3c0e157ebe0990a785e3d2a3cfb6f7f9aa944438c95625109c044dce4","first_seen":"2025-08-05T21:16:42.614174Z","last_seen":"2026-02-08T18:01:02.768478Z","times_seen":4,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-somnianetwork.com/testnet-hero-1.png","fqdn":"rewards-somnianetwork.com","domain":"rewards-somnianetwork.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rewards-somnianetwork.com/","date":"2026-01-28T05:56:06.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-somnianetwork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 12:15:42 GMT","end":"Sun, 26 Apr 2026 13:14:08 GMT"},"fingerprint":{"sha1":"12:85:E1:5E:BD:53:9F:46:C2:7F:8C:58:B2:84:FB:75:8D:9B:85:3E","sha256":"63:1C:9B:27:F4:EA:2F:BA:07:BE:65:CD:46:AB:49:56:27:23:00:26:13:E2:8C:CD:80:DF:F4:AA:2B:15:49:D7"}}},"request":{"raw":"GET /testnet-hero-1.png HTTP/1.1\r\nHost: rewards-somnianetwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-somnianetwork.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 05:56:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 82312\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 26 Jan 2026 13:13:19 GMT\r\netag: \"6977686f-14188\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 2191\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GHAo%2F3r4Ujzi8sNLJQ4e56n3dvWn6G0G9lN1efgLqoXbSc1wP2DB99eGigYpvlYp2w1qx%2BmBOO1L8dNd81VZFEOHC8DWrMrXN%2BpFymWSdVhE0ovwCtfAro4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c4e3ea67d70c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82312,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 640 x 640, 8-bit colormap, non-interlaced","md5":"36a6fbd63616236f3ee8e5d854c7b37b","sha1":"aefa375ea05ebc424abe0a7d4df9918f1286e366","sha256":"b6844b060cd795ae855805c9153120adf462ab957f7ee32926e22e0024b01ee9","sha512":"2ccd05aa1e41e657620a10b13abc06f905b8f057fd5fb8695af8de66209309f9a7bb27c8a8c39810578918c305189e8266286ffcf0e1cdbf9200924165dad15d","ssdeep":"1536:dxTA1tMLLHhB3bkxzkvqflIEcdQHk4+xg+BkkbUyi4u4bL+hA0X7dn9/luY:s1tMPBB3Wkai6HklxguIy1+h1Xpn9/lv","tlshash":"308312e4e54c1a65c0e0f268b7139eaee9e77f953e289e15c4134ecc01eced7c061a96","first_seen":"2025-08-05T21:16:42.643594Z","last_seen":"2026-02-08T18:01:02.717824Z","times_seen":4,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-somnianetwork.com/X.svg","fqdn":"rewards-somnianetwork.com","domain":"rewards-somnianetwork.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-somnianetwork.com/","date":"2026-01-28T05:56:06.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-somnianetwork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 12:15:42 GMT","end":"Sun, 26 Apr 2026 13:14:08 GMT"},"fingerprint":{"sha1":"12:85:E1:5E:BD:53:9F:46:C2:7F:8C:58:B2:84:FB:75:8D:9B:85:3E","sha256":"63:1C:9B:27:F4:EA:2F:BA:07:BE:65:CD:46:AB:49:56:27:23:00:26:13:E2:8C:CD:80:DF:F4:AA:2B:15:49:D7"}}},"request":{"raw":"GET /X.svg HTTP/1.1\r\nHost: rewards-somnianetwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-somnianetwork.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 05:56:06 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 26 Jan 2026 13:13:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 2191\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gX1kjl4Ms3k4igNw3J1jAndaZboOOcVKm04TIMyZBoiwmukyjF9%2BmZNprQENs2FE5I4yNdJzQEexzzqjv0hR0OcqLtvNfWG%2Fb2emxampQi4XiaWFRC2h1o8%3D\"}]}\r\netag: W/\"69776870-146\"\r\ncontent-encoding: br\r\ncf-ray: 9c4e3ea4fb95c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":326,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d86e2f68622ef12233e9011fbd4c3fea","sha1":"7b374d186071d22ac1e69c9310d268727de2f3d5","sha256":"2ece83fd59b3762011acaacb5ad2b6db6df68c51eb1ec9df147dc855a76023aa","sha512":"08b2a216a3153a4ab6e9df803a6035ed35abf0486be31912d14710592f5441989ff1f20a02ad76ead699f78be3023bbf1017ce56990b7d314e75dfddfe9420c8","ssdeep":"","tlshash":"4ee026b70228c51408198718e1baa81d50f194f2fbc8429ad1419132f5964db4bee6e4","first_seen":"2025-08-05T21:16:42.677886Z","last_seen":"2026-02-08T21:59:12.281903Z","times_seen":5,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-somnianetwork.com/discord.svg","fqdn":"rewards-somnianetwork.com","domain":"rewards-somnianetwork.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-somnianetwork.com/","date":"2026-01-28T05:56:06.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-somnianetwork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 12:15:42 GMT","end":"Sun, 26 Apr 2026 13:14:08 GMT"},"fingerprint":{"sha1":"12:85:E1:5E:BD:53:9F:46:C2:7F:8C:58:B2:84:FB:75:8D:9B:85:3E","sha256":"63:1C:9B:27:F4:EA:2F:BA:07:BE:65:CD:46:AB:49:56:27:23:00:26:13:E2:8C:CD:80:DF:F4:AA:2B:15:49:D7"}}},"request":{"raw":"GET /discord.svg HTTP/1.1\r\nHost: rewards-somnianetwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-somnianetwork.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 05:56:06 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 26 Jan 2026 13:13:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 2191\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2BSjT6yjKJqNH0iRRkrc59pnYX5uOduUO25P0gNBm1Z1gIFwlFAwfKuDBT0YztzN5SO3fuZ%2FpDIeDz8No3R9cNECumyrpy3LV%2BRKkYQ7LRp89DWrLHqxIww%3D\"}]}\r\netag: W/\"69776870-510\"\r\ncontent-encoding: br\r\ncf-ray: 9c4e3ea4fb98c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1296,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a6ce46d1a78dc7403840c2a14ff56747","sha1":"73c17e017f624b8615c924b36568dc0304b09111","sha256":"6fe65e3bcaaf05e48fdb060e005b1c5427d5ad601fdb1e897be1bc0fc23727fc","sha512":"8e1ba6a272fcbfd81e957e7f04ffe437e1365dde461a1319a5a650389d76d1cdfbcfb3fbdb324a74457ef986478653ddfb0eff0e24ccbc1a450ae881426c11ca","ssdeep":"","tlshash":"8c2154f4e6dc13e5a8148bead8305c34fc98747f3bd1c055c780a945b6127dac8c58c4","first_seen":"2025-08-05T21:16:42.626304Z","last_seen":"2026-02-08T21:59:12.278926Z","times_seen":5,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-somnianetwork.com/adsct.gif","fqdn":"rewards-somnianetwork.com","domain":"rewards-somnianetwork.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-somnianetwork.com/","date":"2026-01-28T05:56:06.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-somnianetwork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 12:15:42 GMT","end":"Sun, 26 Apr 2026 13:14:08 GMT"},"fingerprint":{"sha1":"12:85:E1:5E:BD:53:9F:46:C2:7F:8C:58:B2:84:FB:75:8D:9B:85:3E","sha256":"63:1C:9B:27:F4:EA:2F:BA:07:BE:65:CD:46:AB:49:56:27:23:00:26:13:E2:8C:CD:80:DF:F4:AA:2B:15:49:D7"}}},"request":{"raw":"GET /adsct.gif HTTP/1.1\r\nHost: rewards-somnianetwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-somnianetwork.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 05:56:06 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 26 Jan 2026 13:13:20 GMT\r\netag: \"69776870-2b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 2191\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0C2KH5L84Rs8mzZqerdhWk6uz3MMVwBPs1mJelxhzG%2FMcFv58rHeUu6ylbEPBYpDoPgQKK88iTx7zxR4282vvXUuZMqmF3icTUVJ%2BYZefEvy2A%2FJRd%2BUH2Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c4e3ea4fb9bc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"377d257f2d2e294916143c069141c1c5","sha1":"b7cae69682cf31dd670b65088db8395acda6ed3e","sha256":"ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957","sha512":"01211111688dc2007519ff56603fbe345d057337b911c829aaee97b8d02e7d885e7a2c2d51730f54a04aebc1821897c8041f15e216f1c973ed313087fa91a3fb","ssdeep":"","tlshash":"4e900403d3c0c001c151d0300d0cc7441344f0305554030f70fc575ddc3d1550c170c0","first_seen":"2023-04-05T06:54:04Z","last_seen":"2026-06-09T00:34:30.272461Z","times_seen":1109,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-somnianetwork.com/planet.svg","fqdn":"rewards-somnianetwork.com","domain":"rewards-somnianetwork.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rewards-somnianetwork.com/","date":"2026-01-28T05:56:06.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-somnianetwork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 12:15:42 GMT","end":"Sun, 26 Apr 2026 13:14:08 GMT"},"fingerprint":{"sha1":"12:85:E1:5E:BD:53:9F:46:C2:7F:8C:58:B2:84:FB:75:8D:9B:85:3E","sha256":"63:1C:9B:27:F4:EA:2F:BA:07:BE:65:CD:46:AB:49:56:27:23:00:26:13:E2:8C:CD:80:DF:F4:AA:2B:15:49:D7"}}},"request":{"raw":"GET /planet.svg HTTP/1.1\r\nHost: rewards-somnianetwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-somnianetwork.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 05:56:06 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 26 Jan 2026 13:13:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 2191\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OpaAMLxE%2FZcEBST%2BBx3eDu7HReH371qe8tK5oa5%2B2GZQSd3gFlKwoGm1iIPvmmX84eThahX3HC8Wper83sIwzhrvXGlDXYJ%2Fqh%2FSQxc7DbMI2nBQcLtYVr8%3D\"}]}\r\netag: W/\"69776870-2f8\"\r\ncontent-encoding: br\r\ncf-ray: 9c4e3ea65d43c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":760,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fab78721dec254b1b16c995af1b557f2","sha1":"7792b9223519c6f1dfdd4780f1603fa366e8bddb","sha256":"b40a0ba6e9b4fafa1b217a8e15e88e8db0eed3fc978c47e7d28b2c9531c49f5b","sha512":"30714de8656739d76c4c694e2422ecf25709c902052e77e5e1b11a7f92498221a321b7ddf77c8598652fafb6f4d3e9c9a5041477bcc999bb1416027e80213041","ssdeep":"","tlshash":"d00124dc13a99c2cb491a204ffd77079e4a940d21bb76aa4c4631c31242560e3dbb5ea","first_seen":"2025-08-05T21:16:42.581664Z","last_seen":"2026-02-08T18:01:02.765918Z","times_seen":4,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-somnianetwork.com/tokens.svg","fqdn":"rewards-somnianetwork.com","domain":"rewards-somnianetwork.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rewards-somnianetwork.com/","date":"2026-01-28T05:56:06.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-somnianetwork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 12:15:42 GMT","end":"Sun, 26 Apr 2026 13:14:08 GMT"},"fingerprint":{"sha1":"12:85:E1:5E:BD:53:9F:46:C2:7F:8C:58:B2:84:FB:75:8D:9B:85:3E","sha256":"63:1C:9B:27:F4:EA:2F:BA:07:BE:65:CD:46:AB:49:56:27:23:00:26:13:E2:8C:CD:80:DF:F4:AA:2B:15:49:D7"}}},"request":{"raw":"GET /tokens.svg HTTP/1.1\r\nHost: rewards-somnianetwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-somnianetwork.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 05:56:06 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 26 Jan 2026 13:13:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 2191\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6hQYcAXiQLU4nJQsdZBBtS7tpkMJebFjdQoHo2bpMYZJEngYNcIf3emZHxtZnvoHgTsYnjNcKiKPZMFPK4UUepLfHVAgkbReV9M6viEE4hERU5I05PdZbeY%3D\"}]}\r\netag: W/\"69776870-489\"\r\ncontent-encoding: br\r\ncf-ray: 9c4e3ea65d49c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1161,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b1a025c217ef0ef327364fc8b03243a7","sha1":"a53250a879330762a17f1398f451389af4c73169","sha256":"8b0d970d4e60637bcd8e33bb0b9dad443043dc109c805e94fb1e830b6d32957e","sha512":"1c1bd819b3dc0781abc02f55ef0a119189b3cb60b7ec0ac3a52d1a0c01b4a110903a0e8799df0a314a5b8ac2d761238aafeb835c250d2351ddf59caa97b0855e","ssdeep":"","tlshash":"da21ce682b5c942cb0419358f76738d4c5bf004156a99ecd415224b64d2ad4d3ef70ff","first_seen":"2025-08-05T21:16:42.661692Z","last_seen":"2026-02-08T18:01:02.728826Z","times_seen":4,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-somnianetwork.com/moon.svg","fqdn":"rewards-somnianetwork.com","domain":"rewards-somnianetwork.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rewards-somnianetwork.com/","date":"2026-01-28T05:56:06.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-somnianetwork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 12:15:42 GMT","end":"Sun, 26 Apr 2026 13:14:08 GMT"},"fingerprint":{"sha1":"12:85:E1:5E:BD:53:9F:46:C2:7F:8C:58:B2:84:FB:75:8D:9B:85:3E","sha256":"63:1C:9B:27:F4:EA:2F:BA:07:BE:65:CD:46:AB:49:56:27:23:00:26:13:E2:8C:CD:80:DF:F4:AA:2B:15:49:D7"}}},"request":{"raw":"GET /moon.svg HTTP/1.1\r\nHost: rewards-somnianetwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-somnianetwork.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 05:56:06 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 26 Jan 2026 13:13:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 2191\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w%2Baxlw9AhnFoHY4MM%2F7jkE7bpCezdnNpN5Ojgki%2BpqmAAmNVY4BCkaBEWLzSgHiyv%2FAZEqAXKVMl6tL6UmlckAKx6mCUg10cazAKi10jOQlFQuImDZRd654%3D\"}]}\r\netag: W/\"69776870-214\"\r\ncontent-encoding: br\r\ncf-ray: 9c4e3ea66d5bc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":532,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"948ee32cb547040e1e3329cc602c4613","sha1":"916f914bd76e43e9cbb8be68e0d1b58e76b28dcb","sha256":"92f0b251790c7ebfcc7d130d4e4998c79db64fd93f7bc017cb09b8c8ef90f223","sha512":"08e6e387cfa8f3949f51f3b8971491009efe1370394a0b94e39edd2fb46f74fa329bd1c7684c5f5f27fb3bfa0bc354f7d1f2ff1266005e09e2d661dc131fbc3b","ssdeep":"","tlshash":"67f0c0d422988e2c70505631f795b03daaa7103f11489aa0d3b09c38591508ded338df","first_seen":"2025-08-05T21:16:42.653954Z","last_seen":"2026-02-08T18:01:02.747416Z","times_seen":4,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-somnianetwork.com/secureproxy?e=jscdn/getFile","fqdn":"rewards-somnianetwork.com","domain":"rewards-somnianetwork.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rewards-somnianetwork.com/","date":"2026-01-28T05:56:06.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-somnianetwork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 12:15:42 GMT","end":"Sun, 26 Apr 2026 13:14:08 GMT"},"fingerprint":{"sha1":"12:85:E1:5E:BD:53:9F:46:C2:7F:8C:58:B2:84:FB:75:8D:9B:85:3E","sha256":"63:1C:9B:27:F4:EA:2F:BA:07:BE:65:CD:46:AB:49:56:27:23:00:26:13:E2:8C:CD:80:DF:F4:AA:2B:15:49:D7"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: rewards-somnianetwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rewards-somnianetwork.com/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://rewards-somnianetwork.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"eo2upuit3j1bi7kc0oxl\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 05:56:07 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VG4zfbjQh2Zk6Snc%2BpWFoSc1qEZ5rcyDFmQPUsmxLX78zMZg4QEd7pwQz8Ou%2FqLv0GgjaBE7fiLJeCpta5BGOxDfT4KlYQsMHD9xfXeTDE9ijw%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9c4e3ea6bde8c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4301405,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2bf248f12789e8f85f35d83e6f076994","sha1":"78fff88dad03ee313ef9ea172b92a87df3ed38d4","sha256":"cbdcdd4d10df508b7d2a442c2339ba7892ba8f073e4f0066cbbc5f22be00eadf","sha512":"b59578f46d440b536dc609e50ae7dc68d90dc26676447b3406ee7f57ea7197c253a6e066d5684ed9bd718ebd717a4896c35e373470728fbdee6097267686438c","ssdeep":"24576:RJ3OYnGGmWyDKKJonvbEE9JnXwaoZ9YKFcS13HqzWM9:7GGcHqvvrgakiKiSCL","tlshash":"192523c7f0cbe04135944132e2f1bdaf2a99507aa9e50ab76318dc44a44b5b6c7fcad3","first_seen":"2026-01-28T05:50:40.974856Z","last_seen":"2026-01-28T05:56:31.166516Z","times_seen":3,"resource_available":false,"data":null}},"time_used":762,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":436,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-somnianetwork.com/adsct-1.gif","fqdn":"rewards-somnianetwork.com","domain":"rewards-somnianetwork.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-somnianetwork.com/","date":"2026-01-28T05:56:06.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-somnianetwork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 12:15:42 GMT","end":"Sun, 26 Apr 2026 13:14:08 GMT"},"fingerprint":{"sha1":"12:85:E1:5E:BD:53:9F:46:C2:7F:8C:58:B2:84:FB:75:8D:9B:85:3E","sha256":"63:1C:9B:27:F4:EA:2F:BA:07:BE:65:CD:46:AB:49:56:27:23:00:26:13:E2:8C:CD:80:DF:F4:AA:2B:15:49:D7"}}},"request":{"raw":"GET /adsct-1.gif HTTP/1.1\r\nHost: rewards-somnianetwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-somnianetwork.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 05:56:06 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 26 Jan 2026 13:13:20 GMT\r\netag: \"69776870-2b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 2191\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p6rhklmAf7%2BTliQGjxkGoTNIuhuM8vGO4mHF2NS%2F7PVGHKFWeGmdWIai%2F9ENckVA0wab1tF%2FZS%2BT2XsEyP00UTnrWZnTtE0AuXERCgfIrInRUxFV%2BEwNSCU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c4e3ea4fb9cc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"377d257f2d2e294916143c069141c1c5","sha1":"b7cae69682cf31dd670b65088db8395acda6ed3e","sha256":"ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957","sha512":"01211111688dc2007519ff56603fbe345d057337b911c829aaee97b8d02e7d885e7a2c2d51730f54a04aebc1821897c8041f15e216f1c973ed313087fa91a3fb","ssdeep":"","tlshash":"4e900403d3c0c001c151d0300d0cc7441344f0305554030f70fc575ddc3d1550c170c0","first_seen":"2023-04-05T06:54:04Z","last_seen":"2026-06-09T00:34:30.272461Z","times_seen":1109,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-somnianetwork.com/index_1.html","fqdn":"rewards-somnianetwork.com","domain":"rewards-somnianetwork.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://rewards-somnianetwork.com/","date":"2026-01-28T05:56:06.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-somnianetwork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 12:15:42 GMT","end":"Sun, 26 Apr 2026 13:14:08 GMT"},"fingerprint":{"sha1":"12:85:E1:5E:BD:53:9F:46:C2:7F:8C:58:B2:84:FB:75:8D:9B:85:3E","sha256":"63:1C:9B:27:F4:EA:2F:BA:07:BE:65:CD:46:AB:49:56:27:23:00:26:13:E2:8C:CD:80:DF:F4:AA:2B:15:49:D7"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: rewards-somnianetwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-somnianetwork.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 05:56:06 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 26 Jan 2026 13:13:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 2191\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AS8vO%2BCmJEyRwN3CwunOwIWsC2ZJqRgFdmMkwyxrhZ0BCq4nYJYBhu2%2Faah1UI89tZg3mTewYUvDj4aapPrfx92BWGqtBAwv7YaqEwjF%2BR64pH0L%2F%2ByZzs4%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c4e3ea5fcc1c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":242,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"466e4b8130c1e72207c80a1cdf3ec8bd","sha1":"14c6d6afb237fab9d2ce6863042f815cbacbea75","sha256":"e6cea5e8a3b1b74ac7ebb0496d0f77699a134a4717c226751077606a8e592db4","sha512":"97509a33f9fc08db2a73685a5eb7eb049f5b7698252cbc60e70f1f0291ba67b857ed2d8c862ad1c8d1052f9515206b88ea155351d6d2813edf37dc7b8921524d","ssdeep":"","tlshash":"bad09722d508440e9c018a92cadae2ccc043da2cfb20ad287cf63620a66c233843162d","first_seen":"2025-08-05T21:16:42.609661Z","last_seen":"2026-06-09T02:18:12.498189Z","times_seen":9,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}