{"report_id":"4d03ab1b-d9e5-43da-8afa-5398471d6ec9","version":6,"status":"done","tags":[],"date":"2026-04-25T07:20:38Z","url":{"schema":"http","addr":"rewards-sanctum.com","fqdn":"rewards-sanctum.com","domain":"rewards-sanctum.com","tld":"com"},"ip":{"addr":"104.21.40.90","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rewards-sanctum.com/","fqdn":"rewards-sanctum.com","domain":"rewards-sanctum.com","tld":"com"},"title":"Sanctum | Solana Liquid Staking Strategy \u0026 Transaction Delivery Services","dom":{"size":268270,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5231)","md5":"82f397766db33c53086674de2a737553","sha1":"31df3537153d8503fbbb280b3d8a99aa0f3fc2be","sha256":"f66890e5b76ee2a2385da513058738594948f0fc4b07b0c2a2c2db6b487aec03","sha512":"c94ae0d754171fcf8c961e1615df60ddf19b07396cd967a1c70fef81e245895fada35a6c7ed9a2c0a86e4b688db748d963df8b609dc3a1dce9dd4632c72fbe03","ssdeep":"1536:xe1J/eZrr4Hup1VikuK1K1uikuC71FikuAEZ1DikuaZ2Og/MsxU7qch6w/TtMZ//:4hSKhXjhi6pX9uX","tlshash":"aa441ae473e463f8e006e3e4db25a0747b1b24fbab22cd5cf3ad1d54ab5145d889a8c1","dom_hash":"domhash8108ff077d9fd6f5705fe07049755a4c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rewards-sanctum.com","fqdn":"rewards-sanctum.com","domain":"rewards-sanctum.com","tld":"com"},"ip":{"addr":"104.21.40.90","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-30T07:20:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"rewards-sanctum.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"rewards-sanctum.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":11,"request_count":11,"received_data":1313830,"sent_data":5156,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rewards-sanctum.com/","fqdn":"rewards-sanctum.com","domain":"rewards-sanctum.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"20651838f19e6b691e93ed84f3dad539","sha1":"6f6961f7794a57b892397db1023c6983f1a26492","sha256":"98084b954a3a850d8dc476d0e7c521cc47f789b6d5d2254ca0aa7193a308497f","sha512":"e32674fee4d2647d86a532abe4a1fa045cac81f1d01ab632e3ba4d0b0b8137168f91db5626041da0a18b482a097a880a9c861a9df6ddfdbcbe9a9f008f2f47fd","ssdeep":"","tlshash":"1cc0222482f089f0813c24c7107e22552070286a0022a08af2ae8ec7584cfc84608d10","size":191,"data":"","first_seen":"2026-03-20T18:39:27.977067Z","last_seen":"2026-04-25T07:20:44.077235Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-sanctum.com/A3sLm15Y.php?s=%2Fipfs%2F7Gc6p9UQ5JqaOMMS_fY_pg0702b396044cd339a8cd438d2bd10030%3Ft%3D1777101616427","fqdn":"rewards-sanctum.com","domain":"rewards-sanctum.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fca7312cea0dc8218db742b436857b0e","sha1":"ce2209a757005af434a3103dfa25ede5a9a144ae","sha256":"f9396ed5a3764b8992357343ebdb8782ec8a985baf98b60b9ac7453d9507cb28","sha512":"54595e152c0688787ffbd8c1560f01b192baf4124b71930e916ffbf9cf045e8151c62288de56aaa3031acb00bbf5d6096b5d8c9df5b80a7d990d3bab0a627498","ssdeep":"6144:Ih5gDOAOsstbFZFSXwRTMsS8chPcsdJs3wFYYH/3h8qcPOQA12Lcv0q:osOAnXwRTMP8chPc730WW","tlshash":"52d4eac2ab09157340ca2eb5047b42afdf882d4d078ba85077f9afd9d74578230eee59","size":622798,"data":"","first_seen":"2026-04-25T07:20:44.049777Z","last_seen":"2026-04-25T07:20:44.049777Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-sanctum.com/","fqdn":"rewards-sanctum.com","domain":"rewards-sanctum.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f5b767c078c6813816231552aca1d562","sha1":"34f99579b527c24b3a5af82abb42079a0d3e1a51","sha256":"c17d50bae5a02a35e0ae5d0005c694495952f093629bb5193c668070161b0f7a","sha512":"7b4aed1d33c4891894a556505047a8f7afd72efc1c30c064b5a428fac50a5475e895f3937869de6d047128910d762069084c41d12fbacecffd43cd98e84b2e48","ssdeep":"","tlshash":"70c0125d7010696614ce687d4ccf088ebe368812a20809c999dcd4547bb1e6c42e484c","size":185,"data":"","first_seen":"2024-04-08T19:47:46Z","last_seen":"2026-05-01T00:59:03.029379Z","times_seen":634,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-sanctum.com/","fqdn":"rewards-sanctum.com","domain":"rewards-sanctum.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"895f526ab37305311d1e998fa4d5a6e8","sha1":"06d0220830c81bf254c70552e908371c6dc1f18f","sha256":"90916b8b1fb2fbbd765a22eba866c30d8829f59aa2d7ee86869abd20207b2117","sha512":"6b087d2e2025f4d11073254448b124af8839ce24ff37eb45bf2fd1a2b66bee8fd4fdca2b4d23c08786d217dd71dbc660d1054b7876b37752dee3baaefdaeaa4e","ssdeep":"","tlshash":"2871bc3beb00173bdc8fa9fdced5b4c02e62497262496960691ce102a16cd7487bed88","size":3743,"data":"","first_seen":"2025-08-14T22:47:51.287187Z","last_seen":"2026-04-30T20:06:00.194328Z","times_seen":1269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rewards-sanctum.com/A3sLm15Y.php?s=%2Fjmpd%2F","fqdn":"rewards-sanctum.com","domain":"rewards-sanctum.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rewards-sanctum.com/","date":"2026-04-25T07:20:18.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-sanctum.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 23:32:34 GMT","end":"Tue, 21 Jul 2026 23:32:33 GMT"},"fingerprint":{"sha1":"BD:02:9C:8A:B5:69:E9:3F:52:99:E0:74:A3:45:23:3A:0E:24:70:AE","sha256":"C7:0C:D0:26:D8:53:30:BA:18:66:40:DC:77:E8:CD:78:1E:66:50:D4:D7:82:A9:34:98:B4:E9:1A:F5:2A:A7:82"}}},"request":{"raw":"POST /A3sLm15Y.php?s=%2Fjmpd%2F HTTP/1.1\r\nHost: rewards-sanctum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rewards-sanctum.com/\r\ncontent-type: application/json\r\nContent-Length: 1458\r\nOrigin: https://rewards-sanctum.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1458,"data":"{\"route\":\"n9POyFeFG1tUtiSU-z9JOx3n\",\"payload\":\"0hqM-6_N52QBswINAyoAFgAyAyMDMADjAhsAAAECTQMAAO8nhn2XtsKCATM2axKS_HY7E9MAe2oCAABt8fHZZPLSmZVO4v8bLLbgdevI9OWM0p7Z925olU73uOxDEWJ6k1g6dSlTbF9G9walVAFxvDrouNnMmFD6BALLNZou7U73lGtXUpUn9cs_DjBz8msaF6eoYNfGKvUV_iu9lSIo-IshvjgiNpUaWxWZsC4ult0KDKnFB90Xy8SL1QwL6SlZlY_maKUHEq1pN4484KbroOpE8ImaAOIGbgCJxSYrQWSQQoPWEF3cu187HNBaTq69br3XhqBoa93yx5hHPunScDym34ZiqSpELN8INJhaKwtBJvPXfbPl7-pu0EXdM6WBKdp59LVeBWrgn18uFqfw9JKFDbHg8-13oQOeOdjdZwk7LdG-YQMeDd4QYkEJHpfgvuHqDlNpr0Py0GFU5ELYkZsNeuYTo4CCq7x9D_vQdItVcvc0-BMBipSGb6SCh6goJGjkK5wOl5GfhKxOehraYOEXmcz49_94qGZfqJlF0LcKILFtCQ46KC_e-fkzpKTJ1i2NhWNcgb7w0XkazBmoS5v6QsQsPqu4TdmUNe4S8V6024qhQ3MQa-8XsK-skSq8Jrp5JmA0fzK63El9CnjC-AIwFNyR-rElby9W0MbuH6Ee9oRW1yto0VqGjbGJNActXmy9xzUOXOoIla8xjPhhVN4oCSyzm5mDWazAtBeNnexabyZOSIhqT8ppe0mijlaGv9pZVz8N3e57wNGdZ8oBYYFrjnBfGgmZeoCDMwPh2p7sLC4ZKpNjCHFlMqE5XujLW8cu1feJ-UP_nY_0EEd3K9pxqD7oAQc4To1s8afL8OqOJVNdabjN_NsbuANAwuiHSOUfaHbIQGLjOyObFHVcNsNNDBA8740V1_n2xaA-H5y79rPp4g6tVU7gRPteW0kmS6dlMwS78NxLgHRDsHJl6ghbTe8dghAm_mrQQ0UKsaw_S9V1fqCwRxRAdCnwaKm9H_5GpIRhYcPm_mKB8PGLKedObFh_XRi6Vi211Y1ZBAYdSzw5f_2JyOfSkATkzM34IUl39ojVlXAveN1VY50E0ylQVqvRyJNmQD2mBwjEVbYUV8rAWvnWIbAeyNrfJRTKhJetVe9UV16g2BZqhDmo2S7lmwdp6arq5JNmBuN0FNMHKKKyle667Wh0g2_iMDastzrfPdeOcf4xDV1tsIQhEA\",\"challenge\":\"eyJpZCI6InNfZ0ZxemRqVzZ3SENuSlZIXy1FV0EiLCJub25jZSI6NzIsImhhc2giOiIwMDJjNjEwMmY4NzU2NWViZTY0NzAwMTlmYmJmNTY3NjdhNTUzMmYzMjNmNTE2OTE4MzIzODEwNmVkZTBhYjQ3In0=\"}"}},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Sat, 25 Apr 2026 07:20:18 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EK017xreJTaAEFs3GoywmkCnzguPeQFtVjIHX%2BcERkbiYe3%2BZhfSwKJEKWp4mzZOt3%2Ft8fjJn%2FJxzOBeQ%2Bzzd4kLqHf1pofHLRCGDSr%2FVXcJlyJ7rcS1HNhSujboW4Oz5iTTnBxw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f1b959938605688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-01T04:39:36.515265Z","times_seen":14455484,"resource_available":true,"data":null}},"time_used":565,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":565,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"rewards-sanctum.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-sanctum.com/bb88a386c3cfceda.css","fqdn":"rewards-sanctum.com","domain":"rewards-sanctum.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rewards-sanctum.com/","date":"2026-04-25T07:20:16.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-sanctum.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 23:32:34 GMT","end":"Tue, 21 Jul 2026 23:32:33 GMT"},"fingerprint":{"sha1":"BD:02:9C:8A:B5:69:E9:3F:52:99:E0:74:A3:45:23:3A:0E:24:70:AE","sha256":"C7:0C:D0:26:D8:53:30:BA:18:66:40:DC:77:E8:CD:78:1E:66:50:D4:D7:82:A9:34:98:B4:E9:1A:F5:2A:A7:82"}}},"request":{"raw":"GET /bb88a386c3cfceda.css HTTP/1.1\r\nHost: rewards-sanctum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-sanctum.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 25 Apr 2026 07:20:16 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 26 Sep 2025 14:30:52 GMT\r\npriority: u=2,i=?0\r\netag: W/\"68d6a39c-35468\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KxHfFaJRaJDosgIuygAShenIVpSXoa%2Fo07lRy6wrPYdBw%2BmMFnvJhsO%2FaNFxmY%2Bm8ykm6lsDvx5XPoxOBaLSJGhdlcvYSdPCiT%2FQymn%2BcTIdOUminUJvEROGy18VrpVL25XA4J27\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f1b958e9ee15688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":218216,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (63241)","md5":"fa048e123786324b096192e27f271012","sha1":"96444d6747800256f75a35edd188e122d34e7983","sha256":"b543d6226135e9ae266e78f276e7130283b492248cbb10c652310d48e8961574","sha512":"8b890ddf0797f50b5fdb9f987839019bf7c11a43f05740281791f5e3165f0ccd885fcefd83f9240dc3863301cd4937a08bf470697b3a9b07ae47f254b155e555","ssdeep":"6144:GKrk9dh4+jh7MgA27LQS17PRyn2lCt4hl4hafg5pIR1Nmt9JEketxEGnBi/Wxm7t:vkdeBR","tlshash":"6424709cd681903f3d2751f5c36da9aca202f4c1ef3b5ae6f691a52097c1af22d53324","first_seen":"2026-03-30T20:39:12.164432Z","last_seen":"2026-04-25T07:20:44.047754Z","times_seen":3,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"rewards-sanctum.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-sanctum.com/A3sLm15Y.php?s=%2Fipfs%2F7Gc6p9UQ5JqaOMMS_fY_pg0702b396044cd339a8cd438d2bd10030%3Ft%3D1777101616427","fqdn":"rewards-sanctum.com","domain":"rewards-sanctum.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rewards-sanctum.com/","date":"2026-04-25T07:20:16.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-sanctum.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 23:32:34 GMT","end":"Tue, 21 Jul 2026 23:32:33 GMT"},"fingerprint":{"sha1":"BD:02:9C:8A:B5:69:E9:3F:52:99:E0:74:A3:45:23:3A:0E:24:70:AE","sha256":"C7:0C:D0:26:D8:53:30:BA:18:66:40:DC:77:E8:CD:78:1E:66:50:D4:D7:82:A9:34:98:B4:E9:1A:F5:2A:A7:82"}}},"request":{"raw":"GET /A3sLm15Y.php?s=%2Fipfs%2F7Gc6p9UQ5JqaOMMS_fY_pg0702b396044cd339a8cd438d2bd10030%3Ft%3D1777101616427 HTTP/1.1\r\nHost: rewards-sanctum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-sanctum.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 25 Apr 2026 07:20:17 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZlW1MLqdbeC2hW%2BPYyUaNQ77b1KY1UsLI6aV8GEg1VJbUf%2F8jJ2t9Gfmrlu7vk%2BWHbwclziV6AFNtKIH7ZsbVYjNKhjACt14RC7ezTy8ciOKwpxoS7KeAymc8hRVOA6r5yH6hdvc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f1b958ebf055688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":622798,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"fca7312cea0dc8218db742b436857b0e","sha1":"ce2209a757005af434a3103dfa25ede5a9a144ae","sha256":"f9396ed5a3764b8992357343ebdb8782ec8a985baf98b60b9ac7453d9507cb28","sha512":"54595e152c0688787ffbd8c1560f01b192baf4124b71930e916ffbf9cf045e8151c62288de56aaa3031acb00bbf5d6096b5d8c9df5b80a7d990d3bab0a627498","ssdeep":"6144:Ih5gDOAOsstbFZFSXwRTMsS8chPcsdJs3wFYYH/3h8qcPOQA12Lcv0q:osOAnXwRTMP8chPc730WW","tlshash":"52d4eac2ab09157340ca2eb5047b42afdf882d4d078ba85077f9afd9d74578230eee59","first_seen":"2026-04-25T07:20:44.049777Z","last_seen":"2026-04-25T07:20:44.049777Z","times_seen":1,"resource_available":true,"data":null}},"time_used":805,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":723,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"rewards-sanctum.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-sanctum.com/gateway-6.png","fqdn":"rewards-sanctum.com","domain":"rewards-sanctum.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rewards-sanctum.com/","date":"2026-04-25T07:20:16.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-sanctum.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 23:32:34 GMT","end":"Tue, 21 Jul 2026 23:32:33 GMT"},"fingerprint":{"sha1":"BD:02:9C:8A:B5:69:E9:3F:52:99:E0:74:A3:45:23:3A:0E:24:70:AE","sha256":"C7:0C:D0:26:D8:53:30:BA:18:66:40:DC:77:E8:CD:78:1E:66:50:D4:D7:82:A9:34:98:B4:E9:1A:F5:2A:A7:82"}}},"request":{"raw":"GET /gateway-6.png HTTP/1.1\r\nHost: rewards-sanctum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-sanctum.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 25 Apr 2026 07:20:16 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Fri, 26 Sep 2025 14:30:52 GMT\r\npriority: u=4,i=?0\r\netag: W/\"68d6a39c-3423\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AbQkqC8VHvd6UTzadngMGnK%2FO9P5A1h4uRAUhqKWLz1cbHif75%2FX4YWXOeXIXge2UJdoasxINVKoYK5AhgwYkB5VLvzhaWHYguJG%2B9%2FY5jx2h4aQrx7yMzNnAjE5%2B2vYOKegayEz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f1b9590788a5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13347,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 928 x 522, 8-bit colormap, non-interlaced","md5":"16e7e97753b84d6538b9a04f9dd1be24","sha1":"f7d83afcb7f05bb0881ba127779c977e96e7ef56","sha256":"f96bb646c2473c02f5352dcdda5836fd49893ad68e7c68e70d30e1d27d6a9621","sha512":"08c7d6a64bf6ec22bbb589eed42db69d9a832a8fee659a91c26a51b9b12638e58d0897633a7fff76f90ce15155e06b0b0e9151e5e0b8188677a99ea824f06266","ssdeep":"192:Xob5C9bnSpcD4E8xik3xLjN+sEjOB9sTsaYVGzWO+bO2SvWZ9ZSJr1Es70tpvF6B:85CkpzUsEjAMsJqWN6JSiyp96RO5iwJy","tlshash":"eb52bf223609e524efa51d3fac23126ad5ee54696f811ffc43b20daf5c4e63c8328756","first_seen":"2026-03-30T20:39:12.178318Z","last_seen":"2026-04-25T07:20:44.052752Z","times_seen":3,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"rewards-sanctum.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-sanctum.com/ironforge-6.png","fqdn":"rewards-sanctum.com","domain":"rewards-sanctum.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rewards-sanctum.com/","date":"2026-04-25T07:20:16.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-sanctum.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 23:32:34 GMT","end":"Tue, 21 Jul 2026 23:32:33 GMT"},"fingerprint":{"sha1":"BD:02:9C:8A:B5:69:E9:3F:52:99:E0:74:A3:45:23:3A:0E:24:70:AE","sha256":"C7:0C:D0:26:D8:53:30:BA:18:66:40:DC:77:E8:CD:78:1E:66:50:D4:D7:82:A9:34:98:B4:E9:1A:F5:2A:A7:82"}}},"request":{"raw":"GET /ironforge-6.png HTTP/1.1\r\nHost: rewards-sanctum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-sanctum.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 25 Apr 2026 07:20:16 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Fri, 26 Sep 2025 14:30:52 GMT\r\npriority: u=4,i=?0\r\netag: W/\"68d6a39c-4497\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0zjUQZj%2F%2FKBKEpV0AIkUEcjDDPTz%2F%2Fp30vin0VTCd%2BE274%2BudWooefphKgn6QlAjPdGDPcH3IqEOBKGB0fNV%2FarCPEFX4PTVc0ElJJmVcQCRdtGxcKhJC4bCU5KEnR3APEkaZZ%2F%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f1b959078905688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17559,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 928 x 522, 8-bit colormap, non-interlaced","md5":"78ab85be5e47ff0d693f22041a25a5bc","sha1":"c2f0d1df5180210a6582822290b1149776fa6213","sha256":"e9b341686aa95d41385f7b8f60f31366823256fced8b4fec923e630f64ef2b4d","sha512":"89e722b29ce6d8ec7818c88fcf31bd2a673a22a51b98613745e220cd2d56c13eac3ab5cc99569e67de889f08e46d2072a8d1022a89b4fb6767e6fe91deedce3b","ssdeep":"384:pldrDD6IhQdAe/RlaTrnkNpKRSb0QDDer8yuXyRyi5T1SnCGL:JD6IhQN3aXqpgQ/ehyi+nCGL","tlshash":"ea72cf8236e074e7d8d2d1308a2d819f09551c1228d0de16c7ca8db7f3ddba8d92deb5","first_seen":"2026-03-30T20:39:12.172443Z","last_seen":"2026-04-25T07:20:44.058299Z","times_seen":3,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"rewards-sanctum.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-sanctum.com/favicon.ico","fqdn":"rewards-sanctum.com","domain":"rewards-sanctum.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-sanctum.com/","date":"2026-04-25T07:20:16.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-sanctum.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 23:32:34 GMT","end":"Tue, 21 Jul 2026 23:32:33 GMT"},"fingerprint":{"sha1":"BD:02:9C:8A:B5:69:E9:3F:52:99:E0:74:A3:45:23:3A:0E:24:70:AE","sha256":"C7:0C:D0:26:D8:53:30:BA:18:66:40:DC:77:E8:CD:78:1E:66:50:D4:D7:82:A9:34:98:B4:E9:1A:F5:2A:A7:82"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: rewards-sanctum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-sanctum.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 25 Apr 2026 07:20:16 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Fri, 26 Sep 2025 14:30:52 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AQgAQiP26aL1jQy8p5Wtus025u0m8MckDScS0N5mjxNFj2TBQt9FNZ4JVXZxpBcRG8dUf1CYVhFspnkNoLxBABNglxEEgInIxE74TcuKFVB9rQpcMeU8VE94NZd7jttmW9Edb1d9\"}]}\r\netag: W/\"68d6a39c-3c2e\"\r\ncontent-encoding: br\r\ncf-ray: 9f1b9591d9df5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"3b4ee5b307b447bd47f511d625f410ba","sha1":"02c71735e89810d8c4e93d94f25a92dbe77583ff","sha256":"48b70c2016c1634562657f6a024d7836930e011f19b44c378811209190655986","sha512":"f254202cc099df81fdd311947e301ef51b385dc7b03c9ab84ab26e6e98ee5a486213767e007426971e42fbc312cb2f092fe6ac6712512bcf45a862ed4fa95fd9","ssdeep":"96:qyedYREa4H/R304CNyO03rbfLS9l/MZu/aOJwZ+HE5rb:Lejq43rbfqGZy3dk5r","tlshash":"c762ace2ed12049fdeb7507014a12d1b1a95e8ce4ffd12ac0366aa39e4db13b816671f","first_seen":"2024-05-07T00:26:36Z","last_seen":"2026-04-25T07:20:44.063248Z","times_seen":15,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"rewards-sanctum.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-sanctum.com/","fqdn":"rewards-sanctum.com","domain":"rewards-sanctum.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-25T07:20:15.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-sanctum.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 23:32:34 GMT","end":"Tue, 21 Jul 2026 23:32:33 GMT"},"fingerprint":{"sha1":"BD:02:9C:8A:B5:69:E9:3F:52:99:E0:74:A3:45:23:3A:0E:24:70:AE","sha256":"C7:0C:D0:26:D8:53:30:BA:18:66:40:DC:77:E8:CD:78:1E:66:50:D4:D7:82:A9:34:98:B4:E9:1A:F5:2A:A7:82"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rewards-sanctum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Apr 2026 07:20:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 12 Mar 2026 17:07:04 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HeN7aAoMzKZ46rZelw4r6Vv%2Fds4m471v5TfLuhL98pVEnr8bPWX0ApwkJmFbbhEiKxo6C8CvufOy34lU%2FkG0giDjTkoofQXoPEgXjF%2FPEW8IhhgZxe1P4Z2exfC7AVtjV%2BZwLOF3\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9f1b958c39305ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":285239,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5204)","md5":"cd86d3fe6746b5ffe7b34e82c375b105","sha1":"aa7e4395617cbc4c769242f470cada04b98a7426","sha256":"d0820b396eca1b80eaa0b0d03c88f712943803623fd0004209c699cd0dcd12dd","sha512":"0e1d5c895c27de4a0675f4c492c261afb9278b4625a37ecef6b421a66cf7e4ae63399548d24e1f8b663e69973e8c2cbefe5b1801e1a133c6d6b68b2725edc93d","ssdeep":"1536:zsDJ/TZ5L43se19ikuo5o1iiku0T19ikuqKH1Piku0HEsU/+MxUDCEhawTTpAR/a:CheATLPhignJfmFs","tlshash":"ce54e9e4b3e463f8f04ae7e4da26b0747b1724fb6b12c918f3ad1d54af1145d888a8c5","first_seen":"2026-03-30T20:39:12.182964Z","last_seen":"2026-04-25T07:20:44.065599Z","times_seen":3,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":34,"dns":12,"connect":1,"send":0,"wait":78,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"rewards-sanctum.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-sanctum.com/5627124b2451a3a0.css","fqdn":"rewards-sanctum.com","domain":"rewards-sanctum.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rewards-sanctum.com/","date":"2026-04-25T07:20:16.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-sanctum.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 23:32:34 GMT","end":"Tue, 21 Jul 2026 23:32:33 GMT"},"fingerprint":{"sha1":"BD:02:9C:8A:B5:69:E9:3F:52:99:E0:74:A3:45:23:3A:0E:24:70:AE","sha256":"C7:0C:D0:26:D8:53:30:BA:18:66:40:DC:77:E8:CD:78:1E:66:50:D4:D7:82:A9:34:98:B4:E9:1A:F5:2A:A7:82"}}},"request":{"raw":"GET /5627124b2451a3a0.css HTTP/1.1\r\nHost: rewards-sanctum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-sanctum.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 25 Apr 2026 07:20:16 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 26 Sep 2025 14:30:52 GMT\r\npriority: u=2,i=?0\r\netag: W/\"68d6a39c-7f6\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jwU1O12A2%2B97u5cHnHTWUtWoVXINIYU2VPHBNMN7ieh948PkC%2FiZ%2FyF6qB15Sk4glEB%2FIfKkVDZn9BHNk7ZzQ7vpoE5k0netPXtJRTKNrHh2eJLchmDFW5ggg72Jvf0Q0TQzE4bA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f1b958e9edd5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2038,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2038), with no line terminators","md5":"1200a025210fd16583ab6cf25aee51c4","sha1":"56fd8fdcf3537794aa9448a6f22b1de6b556b265","sha256":"6a1b038f603743f2991c351c9a1a23532d47c04d0e38439efddee2f44274bdef","sha512":"cb9fa8724a8181c01859bd8aae43e229c0fcb9685e5609b56530b22ea7e4f320a938c29d78aa96610beaceccb1715446cec3c16b7c3f0d41c06f3caa5c9cba16","ssdeep":"","tlshash":"d8416670501d816ad071ac93b6ce7b233d6df01485ac0922972945b98def97b23f0fa9","first_seen":"2026-03-30T20:39:12.174868Z","last_seen":"2026-04-25T07:20:44.070564Z","times_seen":3,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"rewards-sanctum.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-sanctum.com/26d0ba92e140f0dc.p.woff2","fqdn":"rewards-sanctum.com","domain":"rewards-sanctum.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rewards-sanctum.com/","date":"2026-04-25T07:20:16.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-sanctum.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 23:32:34 GMT","end":"Tue, 21 Jul 2026 23:32:33 GMT"},"fingerprint":{"sha1":"BD:02:9C:8A:B5:69:E9:3F:52:99:E0:74:A3:45:23:3A:0E:24:70:AE","sha256":"C7:0C:D0:26:D8:53:30:BA:18:66:40:DC:77:E8:CD:78:1E:66:50:D4:D7:82:A9:34:98:B4:E9:1A:F5:2A:A7:82"}}},"request":{"raw":"GET /26d0ba92e140f0dc.p.woff2 HTTP/1.1\r\nHost: rewards-sanctum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-sanctum.com/5627124b2451a3a0.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 25 Apr 2026 07:20:16 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 29904\r\nserver: cloudflare\r\nlast-modified: Fri, 26 Sep 2025 14:30:52 GMT\r\npriority: u=4,i=?0\r\netag: \"68d6a39c-74d0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gk%2FHWQGCT806dfA4kYlJVv99%2FVAAzqG5M%2FXRqxq%2Fh%2FAF7sxW75S7jRqKgdGfe%2FYE49WvSjHdbgKG0lzncbpVa53SI92SdfsHEfDPNyCWkbvwsT0ZMGdEa1QF9zYAE4tgKbCyc1Qm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f1b9590082e5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29904,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29904, version 1.0","md5":"e35fad09c70beb975a297c43c6af4e66","sha1":"561da8545041f3c8c081cdc50a159bb52da4d773","sha256":"6219bc4bfdfc5d9b2201dcdf046218b122a758f932e25ed5f168f929b7ca2311","sha512":"cf69d106148044b54879b3f78e3834a5662e046aac7b869e053b58fcfd67652ef5524517dd87acb6c001f1f0a75774b76de60360031527f4cb9778011127aef8","ssdeep":"384:J8cfYIYWMUey5Fn4NuqRsLoInf1wxULqz9enQFbxj2iD0EcjycmxpPozOYs9QJJ4:NfdL5Oc2m4Uecg1qbvdmnis9QJEoV5ZI","tlshash":"5cd2e1ce2ec2128b8ca07649cede8e7d560659b4cc7d06e9a07f9d02d346d93af50b25","first_seen":"2025-06-23T03:30:32.94797Z","last_seen":"2026-05-01T02:23:31.282314Z","times_seen":628,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"rewards-sanctum.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-sanctum.com/stake-4.png","fqdn":"rewards-sanctum.com","domain":"rewards-sanctum.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rewards-sanctum.com/","date":"2026-04-25T07:20:16.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-sanctum.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 23:32:34 GMT","end":"Tue, 21 Jul 2026 23:32:33 GMT"},"fingerprint":{"sha1":"BD:02:9C:8A:B5:69:E9:3F:52:99:E0:74:A3:45:23:3A:0E:24:70:AE","sha256":"C7:0C:D0:26:D8:53:30:BA:18:66:40:DC:77:E8:CD:78:1E:66:50:D4:D7:82:A9:34:98:B4:E9:1A:F5:2A:A7:82"}}},"request":{"raw":"GET /stake-4.png HTTP/1.1\r\nHost: rewards-sanctum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-sanctum.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 25 Apr 2026 07:20:16 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Fri, 26 Sep 2025 14:30:52 GMT\r\npriority: u=4,i=?0\r\netag: W/\"68d6a39c-105fc\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lNyRAVng3zfPOL9ExM7psLdK2BYuiOXJ7YGE7INsfaM5paqovvg3fE%2FXkO2Wr3mq5XED7MzCjH5I7ONA0gyvsX0BqJeRADchKOVoEf%2BivV%2Bt4xRKOjkWPn8Qn63B4mKpLGwZH6%2Bu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f1b959078875688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67068,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 929 x 522, 8-bit colormap, non-interlaced","md5":"9ce77df979135b69415e5bc81e01aebe","sha1":"34c4d58130cc8ca83cbdd7f0730cacdba0c8fca3","sha256":"16b252c06a4317038c98331cd0f8cc2583e19f90345515d00966c917a5ca8989","sha512":"518c7b33a94747175ea361416114b94556851f7354318041c42efc88d7009cb5fa4540bce69c2724a013b370ad736dbc4de87d4ba3b53dc4d69540ff963801ee","ssdeep":"1536:+lR4EiZSoa8rvQu4ydrItwU5f41HO6xgfvd1h0StlfsNi6:+D4xJa8rJ4QstwYfafxId17bc","tlshash":"d36301b8fca01a01532a10048d588af6bd57933d18ff421f1ba84bc2257576eb9ee0ac","first_seen":"2026-03-30T20:39:12.17643Z","last_seen":"2026-04-25T07:20:44.073211Z","times_seen":3,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"rewards-sanctum.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-sanctum.com/saas-6.png","fqdn":"rewards-sanctum.com","domain":"rewards-sanctum.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rewards-sanctum.com/","date":"2026-04-25T07:20:16.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-sanctum.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 23:32:34 GMT","end":"Tue, 21 Jul 2026 23:32:33 GMT"},"fingerprint":{"sha1":"BD:02:9C:8A:B5:69:E9:3F:52:99:E0:74:A3:45:23:3A:0E:24:70:AE","sha256":"C7:0C:D0:26:D8:53:30:BA:18:66:40:DC:77:E8:CD:78:1E:66:50:D4:D7:82:A9:34:98:B4:E9:1A:F5:2A:A7:82"}}},"request":{"raw":"GET /saas-6.png HTTP/1.1\r\nHost: rewards-sanctum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-sanctum.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 25 Apr 2026 07:20:16 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Fri, 26 Sep 2025 14:30:52 GMT\r\npriority: u=4,i=?0\r\netag: W/\"68d6a39c-86ea\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gYH%2BRawWbo%2FtIaEN2jBSlRwO4YpRnb2ETYkgriCyZCAkLquCtuRw8RXQhID80q%2FX9UtKKhoDCDBbB%2FUhAfrQ9nZMecHF9pbs%2BEI%2FD7sOco3hA4ll2oTA2IgbNDna%2FiI48im34%2BQL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f1b959078885688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34538,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 929 x 522, 8-bit colormap, non-interlaced","md5":"ea6917f5ec711ff4de9bdbd72fdfe30c","sha1":"d16477c524aa4a91441a38a877baf0eba78c4a7f","sha256":"e20b3ce6c201b488d2a5e3fe4f990d76ff90be4cab760c70f54422a8e1b63d4d","sha512":"0d71e5f3bbb120ea75905364181506179bfa5e39da068f96a765ce627d23389770d902cb417e1bac9b58bc4f441a7c79d0df87eee640cebec3be8166bb05249e","ssdeep":"768:ZrLMLdpnjepzeOsQRDInHtIGkbZsB/wDT86XCZUBxGLxc:ZrILdpnYzjJCqZsN6XCZUH0C","tlshash":"cbf2e07fc437d7de06e7a06053152245cc1771ae3e2b6a90ce1326bc7a8b4eaa512427","first_seen":"2026-03-30T20:39:12.170595Z","last_seen":"2026-04-25T07:20:44.076147Z","times_seen":3,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"rewards-sanctum.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}